NVD公開月 2026-08
12,719 件。全詳細JSONは data/nvd/、個別Markdownは重点対象のみ（全件生成も可能）。
| CVE | 状態 | KEV | CWE | 概要（先頭180文字） |
|---|---|---|---|---|
| CVE-2016-20097 | Deferred | 未確認 | CWE-89 | Weaver (Fanwei) E-cology 8.0 contains a SQL injection vulnerability in the SignatureDownLoad servlet that allows unauthenticated remote attackers to read arbitrary files by injecti |
| CVE-2017-20232 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2017-20241 | Awaiting Analysis | 未確認 | CWE-122 | Keysight IxChariot Endpoint before 9.5.102 contains a heap-based buffer overflow. An unauthenticated remote attacker can send a specially crafted packet to crash the endpoint or po |
| CVE-2017-20242 | Awaiting Analysis | 未確認 | CWE-121 | Keysight IxChariot Endpoint before 9.5.102 contains a stack-based buffer overflow. An unauthenticated remote attacker can send a specially crafted packet to crash the endpoint or p |
| CVE-2019-25715 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2019-25725 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2019-25765 | Deferred | 未確認 | CWE-89 | ASP-CMS contains a SQL injection vulnerability in the commentList.asp endpoint that allows unauthenticated remote attackers to inject arbitrary SQL by manipulating the id parameter |
| CVE-2019-25766 | Awaiting Analysis | 未確認 | CWE-532 | Renovate versions >= 13.87.0 and <= 19.38.6 leak temporary repository tokens into pull request comments during certain Go Modules update failure scenarios. The issue is fixed in ve |
| CVE-2020-15874 | Deferred | 未確認 | CWE-77 | An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can execute arbitrary shell commands through a command injection in the /graph.php |
| CVE-2020-15876 | Deferred | 未確認 | CWE-89 | An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the LibreNMS database via a SQL injection in t |
| CVE-2020-15878 | Deferred | 未確認 | CWE-89 | An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the LibreNMS database via a SQL injection in t |
| CVE-2020-37257 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2020-37258 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2020-37259 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2020-37260 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2020-37261 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2020-37262 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2020-37263 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2020-37264 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2020-37265 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2020-37267 | Awaiting Analysis | 未確認 | CWE-532 | Renovate versions >=19.180.0 and <23.25.1, when used with Azure DevOps, may expose the bot's authorization token in server or pipeline logs because the git http.extraheader=AUTHORI |
| CVE-2020-37268 | Deferred | 未確認 | CWE-778 | Print Assumptions does not report that a definition was produced while universe checking was disabled when that definition reaches the caller through Parameter Inline in a module t |
| CVE-2021-43716 | Deferred | 未確認 | CWE-347 | Verification Bypass vulnerability exists in EPSON 150075647YWWV110 EasyMP Network Updater Ver.1.20. The Epson projector can be updated by encrypted firmware through USB. |
| CVE-2021-43717 | Deferred | 未確認 | CWE-798 | An issue exists in pson EH-TW5350 Epson iProjection.apk v3.2.6. If you identify a projector equipped with an iProjection function, you can access the projector using hard-coded aut |
| CVE-2021-43718 | Deferred | 未確認 | CWE-288 | An Authentication Bypass vulnerability exists in EPSON EH-TW5350 EPSON 150075647YWWV110, which could let a remote malicious user cause a Denial of Service via specially crafted ser |
| CVE-2021-4475 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2021-4476 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2021-4482 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2021-47988 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2021-47989 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2021-47990 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2021-47991 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2021-47992 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2021-47993 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2021-47994 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2021-47995 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2021-47996 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected as a duplicate. | |
| CVE-2021-47997 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2021-47998 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2021-47999 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2021-48000 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2021-48001 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2021-48002 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2021-48003 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2021-48004 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2021-48005 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2022-30983 | Deferred | 未確認 | CWE-79 | A cross-site scripting (XSS) vulnerability in Support chatbot in Nopaperforms Niaa-Chatbot through 2022-05-17 allows remote attackers to inject arbitrary web script or HTML via the |
| CVE-2022-4993 | Deferred | 未確認 | CWE-1336, CWE-470 | HTML::FormHandler versions before 0.410000 for Perl allow attacker selected method dispatch and resource exhaustion because _apply_actions and add_error use error message text buil |
| CVE-2022-4995 | Deferred | 未確認 | CWE-434 | Weaver (Fanwei) E-cology 9.0 versions prior to 10.52 contain a file upload vulnerability that allows a remote, unauthenticated attacker to upload arbitrary files, including JSP web |
| CVE-2022-4996 | Deferred | 未確認 | CWE-1077 | A flaw has been found in mruby 3.1.0. Affected is the function udiv of the file bigint.c. Executing a manipulation can lead to floating point comparison with incorrect operator. It |
| CVE-2022-50974 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2022-50997 | Deferred | 未確認 | CWE-89 | Weaver (Fanwei) E-cology 8.0 and 9.0 contains a SQL injection vulnerability in the HrmCareerApplyPerView.jsp endpoint that allows unauthenticated remote attackers to extract arbitr |
| CVE-2022-50998 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected as a duplicate. | |
| CVE-2022-50999 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected as a duplicate. | |
| CVE-2022-51000 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected as a duplicate. | |
| CVE-2022-51001 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2022-51002 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2022-51003 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2022-51004 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2022-51005 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2022-51006 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2022-51007 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2023-20511 | Awaiting Analysis | 未確認 | CWE-763 | Release of an invalid pointer in the AMD kernel mode driver (KMD) could allow a privileged attacker to create a double free condition potentially leading to arbitrary code executio |
| CVE-2023-22289 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-22328 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-22343 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-22352 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-22364 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-22420 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-22423 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-22426 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-22430 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-22431 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-22433 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-22434 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-22437 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-22445 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-22446 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-22658 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-23544 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-23905 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-24013 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-24017 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-24462 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-24541 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-24543 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-24596 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-25079 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-25778 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-26594 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-27299 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-27302 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-27381 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-27393 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-27503 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-27508 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-27511 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-27528 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-27880 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-27883 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-27884 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-27885 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-27924 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-28403 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-28717 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-28719 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-28721 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-28822 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-28825 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-29496 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-30761 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-31201 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-31202 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-31243 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-31249 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-31270 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-31308 | Awaiting Analysis | 未確認 | CWE-129 | A malicious virtual function can invoke the certain command handlers in the SMU, causing a denial of service due to out-of-bounds memory read. |
| CVE-2023-32286 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-32287 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-32630 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-32631 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-32640 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-32648 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-32733 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-34084 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-34313 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-34393 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-34428 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-34996 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-35000 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-35058 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-35059 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-35063 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-35122 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-35125 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-35135 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-35190 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-35761 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-35766 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-35768 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-35770 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-35771 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-35988 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-36491 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-36852 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-36855 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-36856 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-36863 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-38134 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-38260 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-38539 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-38540 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-38567 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-38577 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-38578 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-38656 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-39225 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-39229 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-39232 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-39426 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-39430 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-39449 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-39931 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-39940 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-39942 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-40147 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-40149 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-40157 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-40538 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-40746 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-41083 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-41087 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-41370 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-41371 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-41959 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-42179 | Deferred | 未確認 | CWE-284 | Bird Home Automation GmbH D1101V-F 000140 is vulnerable to Incorrect Access Control via the Key derivation process, password validation process. |
| CVE-2023-42430 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-42432 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-42434 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-42767 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-42777 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-42778 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-42779 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-43483 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-43486 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-43607 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-43613 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-43759 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-45211 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-45214 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-45216 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-45313 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-45739 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-45848 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-46101 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-46684 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-46702 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-46703 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-46709 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-46710 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-47176 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-47205 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-47206 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-47208 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-47214 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-48337 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-48370 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-49116 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-49592 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-49601 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-49605 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-49720 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2023-54354 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected as a duplicate. | |
| CVE-2023-54367 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2023-54368 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2023-54369 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2023-54370 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2023-54371 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2023-54372 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2023-54373 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2023-54374 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected. | |
| CVE-2023-54375 | Rejected | 未確認 | Rejected reason: Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE. | |
| CVE-2023-54376 | Rejected | 未確認 | Rejected reason: Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE. | |
| CVE-2023-54377 | Rejected | 未確認 | Rejected reason: Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE. | |
| CVE-2023-54378 | Rejected | 未確認 | Rejected reason: Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE. | |
| CVE-2023-54379 | Rejected | 未確認 | Rejected reason: Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE. | |
| CVE-2023-54380 | Rejected | 未確認 | Rejected reason: Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE. | |
| CVE-2023-54381 | Rejected | 未確認 | Rejected reason: Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE. | |
| CVE-2023-54382 | Rejected | 未確認 | Rejected reason: Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE. | |
| CVE-2023-54383 | Rejected | 未確認 | Rejected reason: Erroneously reserved under wrong year by automation defect; never assigned. | |
| CVE-2023-54384 | Rejected | 未確認 | Rejected reason: Erroneously reserved under wrong year by automation defect; never assigned. | |
| CVE-2023-54385 | Rejected | 未確認 | Rejected reason: Erroneously reserved under wrong year by automation defect; never assigned. | |
| CVE-2023-54386 | Rejected | 未確認 | Rejected reason: Erroneously reserved under wrong year by automation defect; never assigned. | |
| CVE-2023-54387 | Rejected | 未確認 | Rejected reason: Erroneously reserved under wrong year by automation defect; never assigned. | |
| CVE-2023-54388 | Rejected | 未確認 | Rejected reason: Erroneously reserved under wrong year by automation defect; never assigned. | |
| CVE-2023-54389 | Rejected | 未確認 | Rejected reason: Erroneously reserved under wrong year by automation defect; never assigned. | |
| CVE-2023-7310 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2023-7336 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2023-7344 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2023-7347 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2023-7353 | Rejected | 未確認 | Rejected reason: Erroneously reserved under wrong year by automation defect; never assigned. | |
| CVE-2023-7354 | Rejected | 未確認 | Rejected reason: Erroneously reserved under wrong year by automation defect; never assigned. | |
| CVE-2023-7355 | Rejected | 未確認 | Rejected reason: Erroneously reserved under wrong year by automation defect; never assigned. | |
| CVE-2024-10302 | Undergoing Analysis | 未確認 | CWE-20 | The user self-signup flow in multiple WSO2 products fails to adequately validate user-supplied input. This weakness allows arbitrary unvalidated data to be included within user cla |
| CVE-2024-13784 | Deferred | 未確認 | CWE-502 | The Contact Form, Survey, Quiz & Popup Form Builder – ARForms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.8.5 via deserializa |
| CVE-2024-13942 | Deferred | 未確認 | CWE-367 | Secure BootROM of RK3588s SoC is vulnerable to a time-of-check to time-of-use attack in case of booting from external media (SPI NOR or NAND, EMMC or SD). The code reads the he |
| CVE-2024-14042 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was found in Open5GS up to 2.7.1. This affects the function hss_ogs_diam_s6a_air_cb/hss_ogs_diam_s6a_ulr_cb of the file src/hss/hss-s6a-path.c of the component Diam |
| CVE-2024-14043 | Deferred | 未確認 | CWE-119, CWE-122 | A vulnerability was determined in Open5GS up to 2.7.1. This vulnerability affects the function mme_s6a_subscription_data_from_avp of the file src/mme/mme-fd-path.c of the component |
| CVE-2024-14044 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was identified in Open5GS up to 2.7.1. This issue affects the function pcrf_rx_aar_cb of the file src/pcrf/pcrf-rx-path.c of the component Diameter Rx Handler. The |
| CVE-2024-14045 | Deferred | 未確認 | CWE-266, CWE-285 | A weakness has been identified in OpenBoxes up to 0.9.2. This vulnerability affects unknown code of the file grails-app/controllers/org/pih/warehouse/RoleInterceptor.groovy of the |
| CVE-2024-14046 | Deferred | 未確認 | CWE-284, CWE-434 | A security vulnerability has been detected in OpenBoxes up to 0.9.1. This issue affects the function DocumentController of the file grails-app/controllers/org/pih/warehouse/core/Do |
| CVE-2024-27253 | Awaiting Analysis | 未確認 | CWE-287 | IBM DOORS Next 7.0.3 through 7.0.3 Interim Fix 018 could allow an authenticated user to bypass security logic to perform unauthorized activities. |
| CVE-2024-39024 | Deferred | 未確認 | CWE-79 | In Packetfence 13.2.0, the WebGui interface setting allows authenticated remote code execution. |
| CVE-2024-58374 | Deferred | 未確認 | CWE-89 | Hongjing e-HR contains an unauthenticated SQL injection vulnerability in the getSdutyTree servlet endpoint that allows remote unauthenticated attackers to access protected resource |
| CVE-2024-58375 | Awaiting Analysis | 未確認 | CWE-497 | OpenTofu versions 1.8.0 through 1.8.2 do not properly restrict sensitive variables and locals when users have opted into static evaluation of module sources, versions, and backend |
| CVE-2024-58376 | Awaiting Analysis | 未確認 | CWE-78 | Renovate versions 37.158.0 before 37.199.0 contain a command injection vulnerability in the helmv3 manager's registryAliases handling that allows attackers with commit access to ex |
| CVE-2024-58377 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected as a duplicate. | |
| CVE-2024-58378 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected as a duplicate. | |
| CVE-2024-58379 | Awaiting Analysis | 未確認 | CWE-1333 | nodemailer before 6.9.9 contains a regular expression denial of service vulnerability in email parsing when attachDataUrls parameter is set or processing embedded file attachments. |
| CVE-2024-6541 | Deferred | 未確認 | CWE-20 | The Class Mediator fails to correctly validate or sanitize `messageContext` properties when they are used to populate dynamic values. This allows authenticated users to potentially |
| CVE-2024-6832 | Analyzed | 未確認 | CWE-693 | The account locking mechanism fails to trigger when secondary user stores are inaccessible. The software does not maintain a consistent state for account locking if it cannot reach |
| CVE-2024-8995 | Analyzed | 未確認 | CWE-613 | Unused authorization codes issued to deleted users are not being properly invalidated or removed from the system. This allows for the persistence of these codes, enabling them to b |
| CVE-2025-0041 | Awaiting Analysis | 未確認 | CWE-427 | Uncontrolled search paths in the Vitis™ Embedded Single File Download (SFD) for local Windows installation could allow a low-privileged user to create arbitrary code execution. |
| CVE-2025-0046 | Awaiting Analysis | 未確認 | CWE-732 | Incorrect directory permissions could allow a local user to escalate their privileges, potentially resulting in arbitrary code execution. |
| CVE-2025-10005 | Deferred | 未確認 | CWE-639 | The PPWP – Password Protect WordPress | #1 Most-Reviewed Password Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including |
| CVE-2025-10308 | Deferred | 未確認 | CWE-352 | The Astro Booking Engine plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.0. This is due to missing nonce validation on th |
| CVE-2025-10903 | Analyzed | 未確認 | CWE-835 | GitLab has remediated an issue in GitLab EE affecting all versions from 11.10 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authentic |
| CVE-2025-11729 | Deferred | 未確認 | CWE-285 | The PPWP: Password Protect Pages, Posts & Full or Partial Content plugin for WordPress is vulnerable to unauthorized access of data due to a improper capability check on the can_ac |
| CVE-2025-11850 | Analyzed | 未確認 | CWE-639 | When secondary user stores are configured, the implicit-association resolver incorrectly initializes from a secondary user store and bypasses the primary user store during search a |
| CVE-2025-12317 | Deferred | 未確認 | CWE-613 | When internal roles are removed from a user within the WSO2 product, the system fails to invalidate any previously issued authentication tokens associated with that user. This vul |
| CVE-2025-12627 | Analyzed | 未確認 | CWE-613 | The user impersonation flow in WSO2 Identity Server fails to properly manage refresh tokens associated with impersonated sessions. This allows an attacker who has obtained an acces |
| CVE-2025-13293 | Deferred | 未確認 | CWE-798 | A hard-coded or default root account credential in TBEA TLogger V2.1.0.0B0.0.0.0 allows an unauthenticated remote attacker to obtain root-level access to the device via the exposed |
| CVE-2025-13294 | Deferred | 未確認 | CWE-89 | An unauthenticated SQL injection vulnerability exists in the web server of TBEA TLogger V2.1.0.0B0.0.0.0. Multiple HTTP endpoints incorporate attacker-controlled parameters directl |
| CVE-2025-13394 | Analyzed | 未確認 | CWE-352 | The Ajax processor within the Carbon console fails to adequately protect state-changing operations from Cross-Site Request Forgery (CSRF) attacks. Specifically, it utilizes the HTT |
| CVE-2025-13736 | Analyzed | 未確認 | CWE-203 | When Multi-Attribute Login is enabled, the login interface fails to consistently mask the existence of user accounts. For valid users, the server resolves and displays their canoni |
| CVE-2025-13909 | Analyzed | 未確認 | CWE-20, CWE-200 | The system accepts authentication requests without sufficient validation to enforce tenant isolation when using Email OTP, SMS OTP, or Magic Link as first-factor authenticators. Th |
| CVE-2025-14073 | Deferred | 未確認 | CWE-639 | The WooCommerce PayPal Payments plugin for WordPress is vulnerable to Sensitive Information Disclosure due to an Insecure Direct Object Reference in all versions up to, and includi |
| CVE-2025-14469 | Deferred | 未確認 | CWE-352 | The Theme Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1. This is due to missing nonce validation on the ms_updat |
| CVE-2025-14561 | Deferred | 未確認 | CWE-284 | In multi-tenant deployments, the Publisher REST APIs fail to enforce tenant isolation correctly. This allows a user in one tenant, possessing sufficient privileges to invoke these |
| CVE-2025-14600 | Deferred | 未確認 | CWE-305 | An insecure deserialization vulnerability in vsDesk allows a remote attacker to gain unauthorized administrative access. By manipulating application configuration data, an attacker |
| CVE-2025-14601 | Deferred | 未確認 | CWE-676 | An OS command injection vulnerability in vsDesk allows an authenticated attacker with administrative privileges to execute arbitrary operating system commands due to insufficient i |
| CVE-2025-14602 | Deferred | 未確認 | CWE-340, CWE-377 | The application generates uploaded file names using a weak and predictable method based on the request timestamp. This allows a remote attacker to accurately guess or brute-force t |
| CVE-2025-14603 | Deferred | 未確認 | The application component processes user-supplied parameters insecurely, passing them into SQL queries. This can enable blind SQL injection, potentially exposing database contents | |
| CVE-2025-14779 | Analyzed | 未確認 | CWE-281 | The Secret Type Management REST API does not correctly isolate access controls when deleting a secret type. The on-delete cascade logic, when triggered, fails to enforce organizati |
| CVE-2025-15028 | Deferred | 未確認 | CWE-79 | The FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form submissio |
| CVE-2025-15039 | Analyzed | 未確認 | CWE-693 | The Conditional Authentication (Adaptive Authentication) script does not correctly enforce the completion of all required authentication steps when a specific multi-step pattern in |
| CVE-2025-15544 | Analyzed | 未確認 | CWE-759 | A cryptographic weakness exists in the Omada device adoption process. During adoption, authentication credentials associated with site management are transmitted using a weak hash |
| CVE-2025-15627 | Analyzed | 未確認 | CWE-321 | A cryptographic weakness exists in the Omada adoption protocol. The protocol relies on hard-coded cryptographic keys to establish trust and protect authentication exchanges betwee |
| CVE-2025-15628 | Analyzed | 未確認 | CWE-798 | Affected Omada devices rely on embedded certificates that are shared across deployments to establish trust between controllers and managed devices. An attacker who obtains |
| CVE-2025-15629 | Analyzed | 未確認 | CWE-331 | A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed devices may be predictab |
| CVE-2025-15630 | Analyzed | 未確認 | CWE-362 | A race condition exists in the cloud-based Omada device adoption process when an attacker may be able to interact with the adoption workflow before a legitimate device completes re |
| CVE-2025-15631 | Analyzed | 未確認 | CWE-759 | A cryptographic weakness exists in affected Omada devices where site credentials are protected using a legacy hashing algorithm that does not provide sufficient protection. |
| CVE-2025-15637 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Shuffle <= 1.8 versions. |
| CVE-2025-15669 | Deferred | 未確認 | CWE-79 | The Bit Form WordPress plugin before 3.1.4 does not sanitise one of its conversational-form display settings before rendering it on the public-facing form, allowing high-privilege |
| CVE-2025-15671 | Deferred | 未確認 | CWE-287 | The Welcart e-Commerce WordPress plugin before 2.12.1 does not regenerate the session identifier on authentication and sets the session identifier from a user-supplied request para |
| CVE-2025-15672 | Deferred | 未確認 | CWE-502 | The ChamaWP WordPress plugin before 1.0.13 does not properly validate user input before passing it to a PHP deserialization function, allowing unauthenticated attackers to inject |
| CVE-2025-15673 | Deferred | 未確認 | CWE-22 | The Import and export users and customers WordPress plugin before 2.4.3 does not restrict the path of a file it reads and displays during a CSV import, allowing high-privileged use |
| CVE-2025-15674 | Deferred | 未確認 | CWE-863 | The Passster WordPress plugin before 4.3.7 does not restrict low-privilege users holding the edit_posts capability from reading globally password-protected content through the Word |
| CVE-2025-15675 | Deferred | 未確認 | CWE-79 | The Charitable WordPress plugin before 1.8.5.3 does not sanitise and escape one of its campaign image text fields before outputting it in an HTML attribute, allowing users with a |
| CVE-2025-15677 | Deferred | 未確認 | CWE-79 | The GeoDirectory WordPress plugin before 2.8.110 does not sanitise and escape a place-category setting before outputting it back in an admin page, allowing high-privilege users su |
| CVE-2025-15678 | Deferred | 未確認 | CWE-79 | The Nexter Blocks WordPress plugin before 5.0.2 does not sanitize uploaded SVG files and allows SVG uploads for any user able to upload files (Author by default), allowing them to |
| CVE-2025-15680 | Deferred | 未確認 | CWE-497 | TBEA TLogger V2.1.0.0B0.0.0.0 exposes a UART interface on the device's circuit board without sufficient protection. A physically proximate attacker can connect to the UART interfac |
| CVE-2025-15681 | Deferred | 未確認 | CWE-306 | TBEA TLogger V2.1.0.0B0.0.0.0 contains an authentication bypass in its web server. After a user has previously authenticated to the device, an unauthenticated attacker can directly |
| CVE-2025-15682 | Deferred | 未確認 | CWE-770 | TBEA TLogger V2.1.0.0B0.0.0.0 contains an unauthenticated resource exhaustion vulnerability in its web server. An unauthenticated remote attacker can send PUT requests to the /tmp/ |
| CVE-2025-15683 | Deferred | 未確認 | CWE-121, CWE-306 | TBEA TLogger V2.1.0.0B0.0.0.0 contains multiple unauthenticated denial-of-service vulnerabilities in its web server. An unauthenticated remote attacker can invoke specific HTTP end |
| CVE-2025-15684 | Deferred | 未確認 | CWE-617 | A vulnerability was detected in Open5GS up to 2.7.6. Affected is the function diam_log_func of the file lib/diameter/common/init.c of the component CER Handler. The manipulation re |
| CVE-2025-15685 | Deferred | 未確認 | CWE-119 | A flaw has been found in Open5GS up to 2.7.1. Affected by this vulnerability is an unknown functionality of the component freeDiameter. This manipulation causes memory corruption. |
| CVE-2025-15686 | Deferred | 未確認 | CWE-404 | A vulnerability has been found in Open5GS up to 2.7.6. Affected by this issue is the function fd_msg_sess_get of the component HSS Service. Such manipulation of the argument Sessio |
| CVE-2025-15687 | Deferred | 未確認 | CWE-404 | A security flaw has been discovered in Open5GS up to 2.7.6. Impacted is the function smf_gx_cca_cb of the component SMF Diameter Gx Credit-Control-Answer Handler. The manipulation |
| CVE-2025-15688 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Capella <= 2.5.5 versions. |
| CVE-2025-15689 | Deferred | 未確認 | CWE-266 | Unauthenticated Privilege Escalation in Capella <= 2.5.5 versions. |
| CVE-2025-20020 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-24488 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-24837 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-25275 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-26237 | Deferred | 未確認 | CWE-77 | D-Link DI-7001 MINI_5G 19.10.31A1 contains a code execution vulnerability in the flag parameter of msp_info, which can be exploited to run arbitrary commands. |
| CVE-2025-26238 | Deferred | 未確認 | CWE-94 | In D-Link DI-8100G 17.12.20A1, the flag parameter in msp_info can be exploited to execute arbitrary code. |
| CVE-2025-27245 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-27570 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-27621 | Deferred | 未確認 | CWE-287 | UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the UpTrain backend creates a new default user with a static user |
| CVE-2025-27770 | Deferred | 未確認 | CWE-74 | UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the `/create_project` endpoint is vulnerable to remote code execu |
| CVE-2025-27771 | Deferred | 未確認 | CWE-74 | UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the `/add_prompts` endpoint is vulnerable to remote code executio |
| CVE-2025-27772 | Deferred | 未確認 | CWE-74 | UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the `/new_run` endpoint is vulnerable to remote code execution vi |
| CVE-2025-2795 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2025-29296 | Deferred | 未確認 | CWE-77 | H3C Magic BE18000 V200R007, H3C NX400 V100R015, H3C Magic NX30 Pro V100R0011, H3C Magic R3010 V100R009, H3C Magic NX15 V100R017, H3C Magic R1510 V100R016, H3C NE36 Pro V100R002 and |
| CVE-2025-29419 | Deferred | 未確認 | CWE-300 | CTFd v3.7.6 was discovered to be vulnerable to a man-in-the-middle attack. |
| CVE-2025-30156 | Awaiting Analysis | 未確認 | CWE-327 | Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the CephX authentication protocol encrypts ti |
| CVE-2025-30178 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-30237 | Awaiting Analysis | 未確認 | CWE-862 | The affected TP-Link Aginet devices contain a flaw in the web management interface where authentication checks are not consistently enforced on certain endpoints. An attacker can s |
| CVE-2025-30238 | Awaiting Analysis | 未確認 | CWE-863 | In affected TP-Link Aginet devices, insufficient authorization validation allows authenticated low-privileged users to execute higher-privileged operations. An attacker may pe |
| CVE-2025-30239 | Awaiting Analysis | 未確認 | CWE-321 | In affected TP-Link Aginet devices, use of hardcoded cryptographic keys embedded in the firmware to protect sensitive configuration data may allow an attacker who has access to dev |
| CVE-2025-30240 | Awaiting Analysis | 未確認 | CWE-59 | The affected TP-Link Aginet devices do not properly validate symbolic links created on external USB storage devices. By placing a crafted symbolic link on supported storage media, |
| CVE-2025-30241 | Awaiting Analysis | 未確認 | CWE-78 | Certain web interface components in affected TP-Link Aginet devices do not validate and sanitize user-supplied input properly before passing it to system-level command execution fu |
| CVE-2025-31114 | Deferred | 未確認 | CWE-95 | Fooocus is an image generating software. In versions 2.5.5 and prior, the Fooocus web UI is vulnerable to remote code execution due to the unsafe use of eval when processing metada |
| CVE-2025-3127 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2025-31356 | Awaiting Analysis | 未確認 | CWE-345 | Insufficient verification of data authenticity for some Intel(R) Trust Domain Extensions (Intel(R) TDX) within Ring 0: Hypervisor may allow an information disclosure. A system soft |
| CVE-2025-31936 | Analyzed | 未確認 | CWE-1260 | Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processors when using Intel(R) TDX within SMM may allow an escalation of privilege. SMM adv |
| CVE-2025-31938 | Awaiting Analysis | 未確認 | CWE-1220 | Insufficient granularity of access control in some subsystem for some Intel(R) Xeon(R) 6 Scalable processors with Intel(R) TDX may allow an information disclosure. Authorized adver |
| CVE-2025-31943 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-32084 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-32087 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-32736 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery weaknesses in the Administrative Console of PingFederate versions before version 13.1 may allow actors to perform unauthorized actions via specially-craf |
| CVE-2025-32737 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-35973 | Awaiting Analysis | 未確認 | CWE-229 | Improper handling of values for some Intel(R) Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a privi |
| CVE-2025-35977 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-35987 | Undergoing Analysis | 未確認 | CWE-223 | Omission of security-relevant information for some Intel(R) Software Guard Extensions Data Center Attestation Primitives within Ring 0: Kernel may allow a denial of service. Author |
| CVE-2025-35988 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | |
| CVE-2025-36254 | Analyzed | 未確認 | CWE-116 | IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an attacker to bypass security authentication due to improperly enco |
| CVE-2025-36255 | Analyzed | 未確認 | CWE-267 | IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to create a user with privileged user roles du |
| CVE-2025-36271 | Analyzed | 未確認 | CWE-759 | IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. |
| CVE-2025-36290 | Analyzed | 未確認 | CWE-295 | IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive inf |
| CVE-2025-36398 | Analyzed | 未確認 | CWE-73 | IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to read or modify another user's command histo |
| CVE-2025-36939 | Analyzed | 未確認 | CWE-121 | Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send specially crafted packets to cause a denial |
| CVE-2025-36940 | Awaiting Analysis | 未確認 | CWE-416 | Use-After-Free vulnerability in a zircon kernel pager proxy (Fuchsia), which could lead to a Privilege Escalation from Userspace to Kernel (AP) |
| CVE-2025-41741 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2025-41769 | Deferred | 未確認 | CWE-120 | The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. An unauthenticated remote attacker could exploit this vulnera |
| CVE-2025-41770 | Deferred | 未確認 | CWE-770 | An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an remote attacker to interrupt access via the client application. |
| CVE-2025-41771 | Awaiting Analysis | 未確認 | CWE-89 | An authenticated attacker with low privileges can access an endpoint in the controller’s web interface that is vulnerable to SQL injection. The vulnerability affects a SQLite datab |
| CVE-2025-4438 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2025-48505 | Awaiting Analysis | 未確認 | CWE-276 | Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to achieve privileged escalation, potentially resulting in arbi |
| CVE-2025-48506 | Awaiting Analysis | 未確認 | CWE-427 | Uncontrolled search paths in Vitis™ Unified installation path on local Windows machines could allow DLL injection into these install paths, potentially resulting in arbitrary code |
| CVE-2025-49506 | Analyzed | 未確認 | CWE-208 | APR-util versions 1.6.3 (and earlier) function apr_password_validate() was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via |
| CVE-2025-51675 | Deferred | 未確認 | CWE-691 | An issue was discovered in openRISC OR1200 commit 83ac6b. An inaccurate update of program counter (PC) values when SPR changes can lead to a Denial of Service (DoS). |
| CVE-2025-51679 | Deferred | 未確認 | CWE-1281 | An issue was discovered in openRISC OR1200 commit 83ac6b. A mismatch between the RTL and netlist can lead to unexpected behavior. |
| CVE-2025-52182 | Deferred | 未確認 | CWE-306 | The Library Corporation LS2 Admin v5.7 to v5.8.0 was discovered to contain an information disclosure vulnerability. |
| CVE-2025-52640 | Deferred | 未確認 | CWE-276 | HCL AION is affected by a vulnerability where the shared storage used by product components is architected without sufficient access separation. Processes sharing the storage may b |
| CVE-2025-53999 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Altair <= 5.2.2 versions. |
| CVE-2025-54512 | Awaiting Analysis | 未確認 | CWE-427 | A DLL hijacking vulnerability within the AMD Ryzen Master installation could allow a local user-privileged attacker to escalate privileges, potentially resulting in arbitrary code |
| CVE-2025-56798 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Lime Technology, Inc.'s Unraid OS version 6.12.14 and earlier allows remote attackers to escalate privileges via the Unraid authe |
| CVE-2025-59319 | Deferred | 未確認 | CWE-290 | CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to certify the integrity of the intended boot partition and selects the first partition index matching a hardcoded type |
| CVE-2025-59320 | Deferred | 未確認 | CWE-922 | CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 stores TPM2.0 secrets in a serialized format within unused disk sectors. An unauthenticated attacker with physical access to |
| CVE-2025-59321 | Deferred | 未確認 | CWE-1188 | CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 contains a default TPM PCR policy that fails to consider the system boot state. This allows the TPM to be unsealed via an uni |
| CVE-2025-59322 | Deferred | 未確認 | CWE-329, CWE-703 | CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly handle decryption errors and allows encrypted volumes to be mounted as plaintext. |
| CVE-2025-59323 | Deferred | 未確認 | CWE-345 | CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to validate the integrity of the DataStore, a non-partitioned filesystem, responsible for storing configuration and cry |
| CVE-2025-59324 | Deferred | 未確認 | CWE-347 | CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly validate LUKS encryption and, if encryption is present, all CryptoPro file integrity checks are skipped. |
| CVE-2025-59325 | Deferred | 未確認 | CWE-311 | CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to encrypt the initramfs contents, allowing for the offline recovery of secrets and cryptographic details. |
| CVE-2025-59326 | Deferred | 未確認 | CWE-693 | CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to enforce IMA policy protections across temporary file systems, allowing for unsigned code to be executed from these l |
| CVE-2025-59327 | Deferred | 未確認 | CWE-347 | In CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4, bootxsa.efi fails to properly validate LUKS encryption and, if encryption is present, all CryptoPro file integrity checks |
| CVE-2025-61162 | Deferred | 未確認 | CWE-284 | Incorrect access control in Cohere North AI v1.1.5 allows attackers to arbitrarily overwrite user info via a crafted request to the /api/internal/v1/users/{{USER_ID}} endpoint |
| CVE-2025-61163 | Deferred | 未確認 | CWE-942 | Cohere North AI v1.1.5 was discovered to contain excessively permissive cross-domain policy with untrusted domains. This occurs via the server failing to validate the Origin header |
| CVE-2025-61164 | Deferred | 未確認 | CWE-200 | Cohere North AI v1.1.5 was discovered to contain an information leak via the WebSocket Endpoint. |
| CVE-2025-61165 | Deferred | 未確認 | CWE-434 | An arbitrary file upload vulnerability in the /v1/my_drive/batch_upload component of cohere North AI v1.1.5 allows attackers to exeute arbitrary code via uploading a crafted file. |
| CVE-2025-61478 | Awaiting Analysis | 未確認 | CWE-400, CWE-830 | An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via Spoofed SYN packets. |
| CVE-2025-61479 | Awaiting Analysis | 未確認 | CWE-294 | An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via the SPC Connect Pro softwar |
| CVE-2025-61480 | Awaiting Analysis | 未確認 | CWE-294, CWE-354, CWE-362, CWE-400 | An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via spoofed TCP FIN packets wit |
| CVE-2025-61970 | Awaiting Analysis | 未確認 | CWE-276, CWE-732 | Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in binary hijac |
| CVE-2025-62299 | Deferred | 未確認 | CWE-272 | HCL IntelliOps Event Management (IEM) is affected by a least privileges violation which could allow an attacker to access the resource with the elevated privilege that could not be |
| CVE-2025-62300 | Deferred | 未確認 | CWE-362 | HCL IntelliOps Event Management (IEM) is affected by a race condition. A "timing window" can occur where an attacker can modify the resource causing unpredictable behavior. |
| CVE-2025-62306 | Deferred | 未確認 | CWE-221 | HCL IntelliOps Event Management (IEM) is affected by information omission. The lack of information breaks auditability and observability of a workflow. if an attacker were to gain |
| CVE-2025-62307 | Deferred | 未確認 | CWE-778 | HCL IntelliOps Event Management (IEM) is affected by insufficient logging. Insufficient logging weakens accountability, obscures attack detection, and enables privilege probing. |
| CVE-2025-62314 | Deferred | 未確認 | CWE-307 | HCL AION is affected by a vulnerability where certain endpoints lack sufficient anti-automation controls. Automated or scripted requests may be submitted without adequate rate limi |
| CVE-2025-62315 | Deferred | 未確認 | CWE-116 | HCL AION is affected by a vulnerability where certain input fields do not enforce sufficient server-side input validation. Unexpected or crafted input may be accepted by the applic |
| CVE-2025-62318 | Deferred | 未確認 | CWE-352 | HCL AION is affected by a vulnerability where JavaScript responses containing data could be referenced by external pages, potentially allowing sensitive information to be captured |
| CVE-2025-62341 | Deferred | 未確認 | CWE-918 | HCL Connections is vulnerable to server-side request forgery (SSRF) when an internal server is compromised possibly allowing an attacker to send unauthorized requests in certain sc |
| CVE-2025-62342 | Deferred | 未確認 | CWE-613 | HCL IntelliOps Event Management (IEM) is affected by a Session Deletion Vulnerability. It may allow improper handling of user sessions, resulting in sessions not being fully termin |
| CVE-2025-62343 | Deferred | 未確認 | CWE-557 | HCL IntelliOps Event Management (IEM) is affected by an Admin Session Concurrency Vulnerability. it may allows user sessions to remain active after logout or session deletion. |
| CVE-2025-63080 | Deferred | 未確認 | CWE-863 | Firmware in KAON PG5298A and PG5298B routers allow an authenticated user to send crafted JSON-RPC requests and perform operations not possible via GUI, e.g. system file read or com |
| CVE-2025-63235 | Deferred | 未確認 | CWE-400 | In sol commit 373d848 (2024-12-12), the broker does not fully release resources when handling malformed or duplicate CONNECT packets. When clients send invalid CONNECT packets - ei |
| CVE-2025-63607 | Deferred | 未確認 | CWE-79 | TechStore 1.0 is vulnerable to Cross Site Scripting (XSS). In contact_display, the application echoes the id parameter verbatim into the rendered page, permitting execution of atta |
| CVE-2025-63822 | Deferred | 未確認 | CWE-284 | SirenGPS Android Application 2.19.44 is vulnerable to Incorrect Access Control. An authenticated attacker can manipulate user identifier parameters to bypass authorization controls |
| CVE-2025-63823 | Deferred | 未確認 | CWE-798 | My Safetipin Android Application 5.2.1 contains Hardcoded credentials in the authentication module, which allows remote attackers to bypass authentication and gain unauthorized acc |
| CVE-2025-64649 | Analyzed | 未確認 | CWE-295 | IBM Concert 1.0.0 through 2.3.1 could allow a remote attacker to perform unauthorized actions using man in the middle techniques due to improper certificate validation. |
| CVE-2025-6508 | Deferred | 未確認 | CWE-79 | The Swagger UI Try-out console within the API Publisher documentation allows an external Swagger API definition URL to be loaded, overriding the existing API definitions within the |
| CVE-2025-68825 | Deferred | 未確認 | CWE-276 | HCL Hive is affected by incorrect default permissions which could allow an attacker unauthorized lateral movement, container breakout, and interception of sensitive internal commun |
| CVE-2025-68833 | Deferred | 未確認 | CWE-1240 | HCL Hive Keycloak IAM Instance is affected by insufficient granularity of access control which could allow an attacker unauthorized access to resources. |
| CVE-2025-70290 | Deferred | 未確認 | CWE-190, CWE-787 | An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk metadata. The issue may |
| CVE-2025-70293 | Deferred | 未確認 | CWE-122, CWE-190 | An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fs_get_bgdtable, the size calculation can lead to under allocation a |
| CVE-2025-70340 | Deferred | 未確認 | CWE-284 | A Broken Access Control vulnerability exists in ThingsBoard Professional Edition (PE) 4.21 and below, within the Alarms comments functionality. An authenticated customer user can m |
| CVE-2025-70962 | Deferred | 未確認 | CWE-284 | Zosi C519M V4.2.8.823C01450BA is vulnerable to Incorrect Access Control. The application contains hardcoded credentials in the RTSP authentication mechanism. An attacker with netwo |
| CVE-2025-71346 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected as a duplicate. | |
| CVE-2025-71399 | Awaiting Analysis | 未確認 | CWE-20 | Better Auth relies on better-call, which uses the rou3 router library. In affected versions of rou3, paths are normalized by removing empty segments, so /path, //path, and ///path |
| CVE-2025-71400 | Deferred | 未確認 | CWE-639 | better-auth passkey versions before 1.4.0 contain an insecure direct object reference vulnerability in the passkey deletion endpoint that allows authenticated users to delete arbit |
| CVE-2025-71401 | Deferred | 未確認 | CWE-770 | better-auth (npm) before 1.4.2 allows an external request to configure baseURL when it is not otherwise defined (e.g., BETTER_AUTH_URL is unset). An attacker able to make the very |
| CVE-2025-71402 | Deferred | 未確認 | CWE-347 | better-auth versions greater than 1.3.34 and before 1.4.0 contain a vulnerability in the multi-session plugin's /sign-out after-hook, which trusts raw multi-session cookies and for |
| CVE-2025-71403 | Deferred | 未確認 | CWE-601 | better-auth versions before 1.1.20 contain a bypass vulnerability in trustedOrigins validation logic affecting absolute URLs and wildcard domains. Attackers can construct malicious |
| CVE-2025-71404 | Deferred | 未確認 | CWE-79 | better-auth versions after v0.0.2 and before 1.1.16 contain a reflected cross-site scripting (XSS) vulnerability on the /api/auth/error page, where the value of the 'error' URL par |
| CVE-2025-71405 | Deferred | 未確認 | CWE-601 | chi versions before v5.2.2 contain an open redirect vulnerability in the RedirectSlashes middleware function that uses the Host header to construct redirect URLs. Attackers can man |
| CVE-2025-71406 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected as a duplicate. | |
| CVE-2025-71407 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected as a duplicate. | |
| CVE-2025-71409 | Deferred | 未確認 | CWE-306 | Lack of authentication for Very High Frequency Data Link messages allows rogue ground stations to inject CPDLC messages leading to unexpected or misleading clearances and potential |
| CVE-2025-71410 | Deferred | 未確認 | CWE-770 | Unnumbered Disconnect (U DISC) and malformed Aviation Very High Frequency Link Control frames can terminate sessions and lead to a loss of CPDLC functions requiring a reversion to |
| CVE-2025-71411 | Deferred | 未確認 | CWE-770 | Broadcast control frames can disconnect multiple aircraft simultaneously leading to delayed clearances and air traffic controller overload. This type of attack can be carried out r |
| CVE-2025-71412 | Deferred | 未確認 | CWE-754 | Injection of false emergency or status messages over CPDLC may lead to misallocation of resources, operational confusion, and improper response actions by flight crews, traffic con |
| CVE-2025-71413 | Deferred | 未確認 | CWE-754 | Malformed or out-of-sequence frames at the Aviation Very High Frequency Link Control X.25 layers cause repeated resets which may result in increased workload and reduced situationa |
| CVE-2025-7639 | Deferred | 未確認 | CWE-502 | The vulnerability, if exploited, could allow an authenticated miscreant with "DNA Authority - Operator" privilege to tamper with serialized data, potentially resulting in code ex |
| CVE-2025-8087 | Awaiting Analysis | 未確認 | CWE-427 | A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges during the uninstallation process, potentially resulting in |
| CVE-2025-9210 | Awaiting Analysis | 未確認 | CWE-347 | Missing signature validation in JSON Web Tokens in Otalio Ship Property Management System versions before 2.22.0 allows authenticated attackers to escalate privileges via tampering |
| CVE-2025-9211 | Awaiting Analysis | 未確認 | CWE-79 | Unescaped stored values in application security page in Otalio Ship Property Management System versions before 2.22.0 allows authenticated attackers to escalate privileges via pers |
| CVE-2025-9266 | Deferred | 未確認 | CWE-862 | The Accelerate theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enqueue_scripts() function in all versions up to, and |
| CVE-2025-9291 | Analyzed | 未確認 | CWE-295 | A certification validation weakness exists in communication between affected Omada devices and cloud controllers. Certificate identity verification does not adequately validate tha |
| CVE-2025-9486 | Analyzed | 未確認 | CWE-266 | GitLab has remediated an issue in GitLab EE affecting all versions from 15.6 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allo |
| CVE-2025-9878 | Deferred | 未確認 | CWE-79 | The PPWP – Password Protect WordPress | #1 Most-Reviewed Password Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ppwp' shortcode in all |
| CVE-2026-0163 | Analyzed | 未確認 | CWE-416 | In multiple functions of vpu_ioctl.c, there is a possible use after free due to a use after free. This could lead to remote escalation of privilege with no additional execution pri |
| CVE-2026-0289 | Analyzed | 未確認 | CWE-522 | A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a user to bypass intended security controls. |
| CVE-2026-0290 | Analyzed | 未確認 | CWE-522 | An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a local attacker to view sensitive data. |
| CVE-2026-0291 | Analyzed | 未確認 | CWE-59 | An improper link resolution before file access vulnerability exists in the Palo Alto Networks Prisma® Access Agent on Linux platforms that enables a local low privileged user to de |
| CVE-2026-0292 | Analyzed | 未確認 | CWE-290 | An authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma® Access Agent on Windows enables a local administrator to bypass security inspection, subs |
| CVE-2026-0293 | Analyzed | 未確認 | CWE-693 | A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local attacker with administrator privileges to bypass the anti-tamper protection, enabling unauthor |
| CVE-2026-0294 | Analyzed | 未確認 | CWE-427 | A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS devices enables a local user to execute code with elevated privile |
| CVE-2026-0295 | Analyzed | 未確認 | CWE-362 | A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root. The GlobalP |
| CVE-2026-0296 | Undergoing Analysis | 未確認 | CWE-295 | Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an unauthenticated attacker with man-in-the-middle (MitM) access to intercept and mo |
| CVE-2026-0297 | Undergoing Analysis | 未確認 | CWE-787 | A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man-in-the-middle (MitM) attacker or a rogue gateway to disrupt system processes |
| CVE-2026-0298 | Undergoing Analysis | 未確認 | CWE-94 | An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect™ app on Windows devices which en |
| CVE-2026-0299 | Analyzed | 未確認 | CWE-426 | Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root |
| CVE-2026-0301 | Modified | 未確認 | CWE-908 | An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS® software enables an unauthenticated user with network access to obtain sensitive |
| CVE-2026-0392 | Deferred | 未確認 | CWE-295, CWE-347, CWE-494 | eParakstītājs 3.0 for Windows before version 1.10.0 retrieves and executes its automatic updates over a channel that is not authenticated or integrity-protected. On each launch the |
| CVE-2026-0465 | Awaiting Analysis | 未確認 | CWE-416 | A Use‑After‑Free (UAF) vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kernel memory, potentially resulting in loss of availability |
| CVE-2026-0516 | Awaiting Analysis | 未確認 | CWE-644 | A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host header and redirect firewall management |
| CVE-2026-0551 | Deferred | 未確認 | CWE-502 | The PPWP – Password Protect Pages plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.9.18 via deserialization of untrusted input fro |
| CVE-2026-0637 | Analyzed | 未確認 | CWE-532 | When an Event Publisher output adapter is configured with irrelevant properties, the affected products log these properties. This logging occurs without sufficient validation or sa |
| CVE-2026-0673 | Deferred | 未確認 | CWE-93 | The Element Pack Addons for Elementor plugin for WordPress is vulnerable to Email Header Injection in all versions up to, and including, 8.3.15 via the `element_pack_contact_form` |
| CVE-2026-0931 | Deferred | 未確認 | CWE-1286 | Denial-of-service vulnerability in M-Files Server versions before 26.5.16015.3 allows an authenticated admin user to cause the M-Files Server process to crash and fail to restart. |
| CVE-2026-10025 | Analyzed | 未確認 | CWE-611 | IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 has an XML External Entity (XXE) injection vulnerability. The vulnerability resides in the parseXm |
| CVE-2026-10032 | Analyzed | 未確認 | CWE-79 | The openUrl function in @a2ui/web_core passes an agent-controlled URL directly to window.open() without validating the URI scheme. A malicious agent can supply a javascript: URI as |
| CVE-2026-10035 | Deferred | 未確認 | CWE-502 | The Turnkey bbPress by WeaverTheme plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.7.1 via deserialization of untrusted input in |
| CVE-2026-10036 | Deferred | 未確認 | CWE-502 | SpeechBrain before 1.1.1 contains an arbitrary code execution vulnerability that allows attackers to execute arbitrary code by supplying a crafted CKPT.yaml checkpoint metadata fil |
| CVE-2026-10050 | Analyzed | 未確認 | CWE-173, CWE-303 | In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. This was done because the initial specification for HTTP did n |
| CVE-2026-10053 | Analyzed | 未確認 | CWE-22 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have a |
| CVE-2026-10059 | Awaiting Analysis | 未確認 | CWE-266 | A flaw was found in the Multicluster Engine for Kubernetes ClusterCurator controller. A tenant administrator with namespace-scoped privileges can exploit this vulnerability by crea |
| CVE-2026-10080 | Analyzed | 未確認 | CWE-704 | Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fails to validate WebSocket command field types which allows an authenticated user to crash the plugin p |
| CVE-2026-10090 | Awaiting Analysis | 未確認 | CWE-267 | A flaw was found in the Application Subscription controller (multicluster-operators-subscription) of Red Hat Advanced Cluster Management for Kubernetes (ACM). A user with namespace |
| CVE-2026-10128 | Analyzed | 未確認 | CWE-200 | IBM Langflow OSS 1.0.0 through 1.10.3 allows authenticated users can exploit a built-in Langflow component to read arbitrary server environment variables, exposing sensitive secret |
| CVE-2026-10522 | Deferred | 未確認 | CWE-269 | The MemberHero WordPress plugin through 6.9 does not restrict which account fields can be supplied during its frontend registration process, allowing unauthenticated attackers to |
| CVE-2026-10524 | Deferred | 未確認 | CWE-472 | The CoCart WordPress plugin before 4.9.0 does not validate a user-supplied price value against the actual product price when items are added to the cart through one of its public R |
| CVE-2026-10526 | Deferred | 未確認 | CWE-918 | The EmbedPress WordPress plugin before 4.6.1 does not validate user-supplied URLs before making server-side requests through unauthenticated endpoints, allowing unauthenticated at |
| CVE-2026-10527 | Analyzed | 未確認 | CWE-863 | Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fails to reconcile SchemeAdmin flags with a user's current role which allows a user demoted to System Gu |
| CVE-2026-10534 | Analyzed | 未確認 | CWE-121 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser. |
| CVE-2026-10543 | Analyzed | 未確認 | CWE-285 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation with a specially crafted query. |
| CVE-2026-10547 | Analyzed | 未確認 | CWE-284 | IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate ownership in the deprecated POST /api/v1/build/{flow_id}/vertices endpoint, allowing an authenticated user to injec |
| CVE-2026-10571 | Analyzed | 未確認 | CWE-502 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service caused by insecure deserialization. A low-privileged, administrative user co |
| CVE-2026-10579 | Awaiting Analysis | 未確認 | CWE-347 | A flaw was found in Picketlink Federation SAML; the unsolcited response handler would accept forged assertions with no verification or validation, permitting an unauthed attacker t |
| CVE-2026-10582 | Deferred | 未確認 | CWE-918 | Hugo's security.http.urls allowlist is the only control on outbound fetches made by resources.GetRemote, and it inspects the URL text alone. CheckAllowedHTTPURL in config/security/ |
| CVE-2026-10595 | Awaiting Analysis | 未確認 | CWE-23 | A path traversal vulnerability exists in parisneo/lollms version 2.1.0, specifically in the SPA catch-all route implemented in `backend/routers/ui.py`. The vulnerability arises fro |
| CVE-2026-10599 | Deferred | 未確認 | CWE-345, CWE-639 | The Integrate PhonePe with WooCommerce WordPress plugin through 1.2.1 does not validate that a verified payment transaction belongs to the order being marked as paid, nor does it v |
| CVE-2026-10618 | Analyzed | 未確認 | CWE-79 | Hugo's default fenced-code-block renderer writes attribute values taken from the code-fence info string into the rendered HTML without escaping them. New in markup/internal/attribu |
| CVE-2026-10627 | Deferred | 未確認 | CWE-862 | The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.4.0. This is due to t |
| CVE-2026-10630 | Deferred | 未確認 | CWE-639 | The WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in all ve |
| CVE-2026-10709 | Analyzed | 未確認 | CWE-121 | A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::FbxIO::BinaryReadSectionHeader. A malicious |
| CVE-2026-10710 | Analyzed | 未確認 | CWE-121 | A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::ExtractDrive. A malicious actor can leverag |
| CVE-2026-10716 | Deferred | 未確認 | CWE-89 | Directus contains an authenticated SQL injection vulnerability in the collection creation flow when the instance uses PostgreSQL with PostGIS enabled. An administrator can create a |
| CVE-2026-10734 | Deferred | 未確認 | CWE-79 | The Infility Global plugin for WordPress is vulnerable to Stored Cross-Site Scripting via /cf7_record Log Endpoint in all versions up to, and including, 2.15.21 due to insufficient |
| CVE-2026-10754 | Awaiting Analysis | 未確認 | CWE-347 | Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of cryptographic signatures that may allow an attacker to bypass security controls. |
| CVE-2026-10772 | Rejected | 未確認 | Rejected reason: ** DUPLICATE ** This CVE Record has been rejected by the Zephyr Project CNA. CVE-2026-10772 was assigned to a vulnerability already covered by CVE-2026-2411, which | |
| CVE-2026-10773 | Analyzed | 未確認 | CWE-125, CWE-682 | The DHCPv4 client helper net_dhcpv4_msg_type_name() in subsys/net/lib/dhcpv4/dhcpv4.c indexes a static 8-element const char * name table after a faulty bounds check. The guard used |
| CVE-2026-10774 | Analyzed | 未確認 | CWE-401 | Zephyr's Bluetooth Mesh subnet key management leaks one PSA Crypto key slot on every subnet-key teardown. In subsys/bluetooth/mesh/subnet.c, net_keys_create() imports the Private B |
| CVE-2026-10782 | Deferred | 未確認 | CWE-862 | The RealHomes Memberships plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.0.9. This is due to the plugin not properly verifying t |
| CVE-2026-10827 | Deferred | 未確認 | CWE-345 | The Spectra Legacy WordPress plugin before 2.20.0 does not validate or escape several block style attributes before using them to build the CSS it outputs on the front end, allowi |
| CVE-2026-10848 | Analyzed | 未確認 | CWE-125, CWE-787 | The OCPP 1.6 client in subsys/net/lib/ocpp parsed inbound WAMP RPC frames in parse_rpc_msg() (subsys/net/lib/ocpp/ocpp_j.c) using a hand-rolled helper, extract_string_field(), that |
| CVE-2026-10849 | Analyzed | 未確認 | CWE-122, CWE-787 | The hawkBit device management client in subsys/mgmt/hawkbit accumulates the body of an HTTP response from the update server into a heap buffer in response_json_cb() (subsys/mgmt/ha |
| CVE-2026-11325 | Awaiting Analysis | 未確認 | CWE-1104, CWE-78 | Description Cloudflare was recently notified by external researchers of vulnerabilities in this archived repository, including a remote code execution issue in `src/index.ts` re |
| CVE-2026-11361 | Deferred | 未確認 | CWE-345 | The Formidable Forms WordPress plugin before 6.32.1 does not properly validate the status of a PayPal subscription payment before marking it complete, allowing unauthenticated user |
| CVE-2026-11366 | Deferred | 未確認 | CWE-287 | The MonsterInsights WordPress plugin before 11.1.0 does not correctly validate the signature on one of its unauthenticated AJAX actions: when the MonsterInsights WordPress plugin |
| CVE-2026-11368 | Analyzed | 未確認 | CWE-416 | The Bluetooth host ATT layer (subsys/bluetooth/host/att.c) associates each in-flight ATT TX buffer with its owning channel via the static tx_meta_data_storage[] array (data->att_ch |
| CVE-2026-11418 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-11421 | Deferred | 未確認 | CWE-89 | The ERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support plugin for WordPress is vulnerable to SQL Injection via the 'erpadvancefilter' parameter in all versions u |
| CVE-2026-11425 | Deferred | 未確認 | CWE-79 | Domoticz versions prior to 2026.3 contains a stored cross-site scripting vulnerability in the mobile dashboard that allows authenticated attackers to inject arbitrary HTML and Java |
| CVE-2026-11427 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-11430 | Deferred | 未確認 | CWE-303 | Grav CMS's scheduler-webhook plugin contains an authentication bypass in the webhook token check. When the webhook feature is enabled but no webhookToken is configured, a compound |
| CVE-2026-11454 | Deferred | 未確認 | CWE-639 | The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.5.2 via t |
| CVE-2026-11565 | Deferred | 未確認 | The Advanced File Manager WordPress plugin before 5.4.13 does not perform capability checks in several of its file management AJAX actions, allowing users with any role to which a | |
| CVE-2026-11588 | Deferred | 未確認 | CWE-79 | The EONSR AEO Agent WordPress plugin through 3.7.9 does not perform any authorisation check on one of its REST API routes and disables HTML sanitisation before saving the post, all |
| CVE-2026-11609 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-11612 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-11615 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-11617 | Undergoing Analysis | 未確認 | CWE-409 | Tanium addressed a compression bomb vulnerability in Findings. |
| CVE-2026-11733 | Analyzed | 未確認 | CWE-121 | A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt the normal operation of the affected device. |
| CVE-2026-11734 | Analyzed | 未確認 | CWE-121 | A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable. |
| CVE-2026-11735 | Analyzed | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the router's software and fu |
| CVE-2026-11736 | Analyzed | 未確認 | CWE-20, CWE-787 | A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to router software and functionali |
| CVE-2026-11737 | Analyzed | 未確認 | CWE-20 | Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to t |
| CVE-2026-11738 | Analyzed | 未確認 | CWE-20 | Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to rou |
| CVE-2026-11739 | Analyzed | 未確認 | CWE-78 | A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic |
| CVE-2026-11742 | Awaiting Analysis | 未確認 | CWE-416 | The kernel queue helper z_queue_node_peek() in kernel/queue.c dereferences a node taken from a queue's data_q list, reading the node's flag byte and, for items enqueued via k_queue |
| CVE-2026-11743 | Awaiting Analysis | 未確認 | CWE-125 | The SF32LB MPI QSPI NOR flash driver (drivers/flash/flash_sf32lb_mpi_qspi_nor.c) validated the flash offset and length on its read and write paths with the test (offset + size) > d |
| CVE-2026-11747 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Seres Software syWEB allows Reflected XSS. This issue affects syWEB: through |
| CVE-2026-11751 | Deferred | 未確認 | A vulnerability has been identified in armeria-xds versions prior to 1.41.0, where xDS upstream TLS peer verification may be silently disabled, allowing man-in-the-middle attacks a | |
| CVE-2026-11754 | Deferred | 未確認 | CWE-203 | Observable discrepancy vulnerability in Seres Software syWEB allows Account Footprinting. This issue affects syWEB: through 27082026. NOTE: The vendor was contacted and it was lea |
| CVE-2026-11780 | Deferred | 未確認 | CWE-79 | The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'question_title' parameter in all versions u |
| CVE-2026-11801 | Deferred | 未確認 | CWE-862 | The WPAdverts – Classifieds Plugin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.3.2. This is due to the plugin not properly ve |
| CVE-2026-11803 | Modified | 未確認 | CWE-125 | A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a cras |
| CVE-2026-11805 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-11809 | Awaiting Analysis | 未確認 | CWE-125, CWE-908 | The UpdateHub OTA client in subsys/mgmt/updatehub/updatehub.c contains an out-of-bounds / uninitialized-memory read in z_impl_updatehub_probe(). The probe response from the UpdateH |
| CVE-2026-11810 | Awaiting Analysis | 未確認 | CWE-476 | The UpdateHub firmware-update agent's probe handler (z_impl_updatehub_probe() in subsys/mgmt/updatehub/updatehub.c) parses the JSON metadata returned by the update server into a fi |
| CVE-2026-11811 | Awaiting Analysis | 未確認 | CWE-772 | The UpdateHub over-the-air update client's start_coap_client() in subsys/mgmt/updatehub/updatehub.c leaks the CoAP/DTLS socket descriptor on its connection-setup failure paths. The |
| CVE-2026-11812 | Awaiting Analysis | 未確認 | CWE-362 | The UpdateHub management subsystem (subsys/mgmt/updatehub/updatehub.c) drives every update operation through a single file-scope ctx structure that holds the CoAP block context, pa |
| CVE-2026-11814 | Analyzed | 未確認 | CWE-295, CWE-77 | A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-mi |
| CVE-2026-11817 | Awaiting Analysis | 未確認 | CWE-863 | This vulnerability only affects Grafana stacks configured with multiple organizations; single-organization deployments are not impacted. In a multi-organization stack, a user who i |
| CVE-2026-11830 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-11835 | Awaiting Analysis | 未確認 | CWE-20, CWE-367 | Time-of-check time-of-use (TOCTOU) vulnerability combined with missing input validation in Caliptra Core ROM (UpdateResetFlow::run()) in subsystem mode allows a compromised local a |
| CVE-2026-11836 | Awaiting Analysis | 未確認 | CWE-345 | Insufficient verification of data authenticity in Caliptra Core ROM and Core Firmware (validate_debug_unlock_token()) in subsystem mode allows an attacker with access to the integr |
| CVE-2026-11840 | Awaiting Analysis | 未確認 | CWE-89 | Zohocorp ManageEngine Password Manager Pro versions before 13232 and ManageEngine PAM360 versions before 8552 are vulnerable to authenticated SQL injection. |
| CVE-2026-11861 | Modified | 未確認 | CWE-266 | A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, in |
| CVE-2026-11872 | Deferred | 未確認 | CWE-284 | The Clever Mega Menu for Visual Composer WordPress plugin through 1.0.1 does not perform a nonce or capability check in an AJAX action that updates navigation menu item metadata, a |
| CVE-2026-11882 | Deferred | 未確認 | CWE-284 | The Builderall for WordPress plugin before 3.0.2 does not bind the state value of its public OAuth authentication routes to the initiating user session, allowing unauthenticated at |
| CVE-2026-11893 | Awaiting Analysis | 未確認 | CWE-415 | The Bluetooth HCI driver for Bouffalo Lab on-chip BLE controllers (BL60x/BL70x/BL61x), bt_bflb_send() in drivers/bluetooth/hci/hci_bflb.c, violates the bt_hci_driver_api.send() buf |
| CVE-2026-11894 | Awaiting Analysis | 未確認 | CWE-415 | The Realtek BEE Bluetooth HCI driver's send callback, bt_hci_bee_send() in drivers/bluetooth/hci/hci_bee.c, violated the bt_hci_driver_api buffer-ownership contract. That contract |
| CVE-2026-11902 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-11907 | Deferred | 未確認 | CWE-862 | The Stream plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.2.0. This is due to the plugin not properly verifying that a user is a |
| CVE-2026-11920 | Deferred | 未確認 | CWE-89 | The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to time-based SQL Injection via the 'order' parameter in all versions up to, a |
| CVE-2026-11923 | Analyzed | 未確認 | CWE-287 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 Reverse Proxy in ce |
| CVE-2026-11932 | Analyzed | 未確認 | CWE-835 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 is vulnerable to a |
| CVE-2026-11937 | Analyzed | 未確認 | CWE-416 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 and IBM Security Ve |
| CVE-2026-11938 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-11947 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-11948 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-11969 | Deferred | 未確認 | CWE-89 | The WP TripAdvisor Review Slider plugin for WordPress is vulnerable to generic SQL Injection via 'curselrevs[]' Parameter in all versions up to, and including, 14.3 due to insuffic |
| CVE-2026-11970 | Awaiting Analysis | 未確認 | CWE-754 | This vulnerability allows a normal (non-admin) user to disable the Forcepoint One Endpoint SafariExtension and bypass DLP protection in F1E Mac OS before v26.04.5758. |
| CVE-2026-11976 | Deferred | 未確認 | CWE-912 | The official MonsterInsights Pro update distribution bucket (`monster-insights.s3.amazonaws.com`) was compromised. Both the current release (10.2.2) and the version MonsterInsights |
| CVE-2026-11977 | Deferred | 未確認 | CWE-89 | The WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars plugin for WordPress is vulnerable to generic SQL Injection via the 'wpma_metabox_authors_list' pa |
| CVE-2026-11983 | Deferred | 未確認 | CWE-862 | The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.8.16 due to a missing capability check |
| CVE-2026-11985 | Awaiting Analysis | 未確認 | CWE-200 | On the Zephyr ARM port, enabling the hardware FPU (CONFIG_FPU) forces the "Floating point ABI" choice, which defaults to CONFIG_FP_HARDABI. Both FP_HARDABI and FP_SOFTABI permit th |
| CVE-2026-1199 | Analyzed | 未確認 | CWE-362 | Zabbix API and Frontend login lockout mechanism has a flaw where several unsuccessful login requests are not properly counted towards the block counter if sent simultaneously, pote |
| CVE-2026-11995 | Deferred | 未確認 | CWE-862 | The Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, |
| CVE-2026-12000 | Deferred | 未確認 | CWE-862 | The Page and Post Restriction plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to and including 1.4.0 via the WordPress core REST endpoints /wp-j |
| CVE-2026-12004 | Analyzed | 未確認 | CWE-134 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 contains a format s |
| CVE-2026-12005 | Analyzed | 未確認 | CWE-78 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 contains a input va |
| CVE-2026-12036 | Awaiting Analysis | 未確認 | CWE-59 | An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to perfor |
| CVE-2026-12051 | Awaiting Analysis | 未確認 | CWE-476 | The USB DFU class implementation in Zephyr's new (experimental) device_next USB device stack contains a NULL pointer dereference in handle_download() (subsys/usb/device_next/class/ |
| CVE-2026-12052 | Awaiting Analysis | 未確認 | CWE-787 | The USB device-side CDC NCM class control-to-host handler usbd_cdc_ncm_cth in subsys/usb/device_next/class/usbd_cdc_ncm.c builds a fixed-size response for the GET_NTB_PARAMETERS (2 |
| CVE-2026-12070 | Deferred | 未確認 | CWE-73 | Tobit Laboratories AG TeamDavid's Webbox is vulnerable to an arbitrary file deletion vulnerability in the send email, fax, SMS, etc. functionality. By specifying an @@COMMENTFIL |
| CVE-2026-12071 | Deferred | 未確認 | CWE-601 | The Webbox of TeamDavid by Tobit Laboratories AG constructs redirect URLs using user-supplied input, which is appended to the redirect target in a 302 HTTP response. By using URL |
| CVE-2026-12128 | Deferred | 未確認 | CWE-20 | The Pinpoint Booking System – Version 2 plugin for WordPress is vulnerable to Price Manipulation via the `cart_data` parameter in all versions up to, and including, 2.9.9.6.8. This |
| CVE-2026-12185 | Undergoing Analysis | 未確認 | CWE-789 | In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This issue also affects Bouncy Castle for Java LTS before 2.73.12. |
| CVE-2026-12231 | Deferred | 未確認 | CWE-79 | The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ exad_infobox_image’ parameter in all versions up to, and including, 2 |
| CVE-2026-12232 | Awaiting Analysis | 未確認 | CWE-125 | The Intel ALH digital-audio-interface driver function dai_alh_get_properties() in drivers/dai/intel/alh/alh.c used a caller-supplied int stream_id with no range validation. The val |
| CVE-2026-12233 | Awaiting Analysis | 未確認 | CWE-665 | The PSA Protected Storage credential backend (subsys/net/lib/tls_credentials/tls_credentials_trusted.c) declared its credential-store mutex as a plain zero-filled static struct k_m |
| CVE-2026-12234 | Awaiting Analysis | 未確認 | CWE-367 | The userspace syscall verifiers z_vrfy_zsock_sendmsg() and z_vrfy_zsock_recvmsg() in subsys/net/lib/sockets/sockets.c snapshot the caller-supplied struct net_msghdr into a kernel-s |
| CVE-2026-12235 | Awaiting Analysis | 未確認 | CWE-787 | The Linkable Loadable Extensions (llext) subsystem mis-handles PLT/RELA relocation entries when linking a relocatable (partially-linked) ELF extension. In llext_link_plt() (subsys/ |
| CVE-2026-12236 | Awaiting Analysis | 未確認 | CWE-835 | The Bluetooth host GATT client function parse_read_std_char_desc() in subsys/bluetooth/host/gatt.c parses an ATT Read By Type Response received from a remote GATT server during BT_ |
| CVE-2026-12248 | Deferred | 未確認 | CWE-89 | The WPML Multilingual CMS plugin for WordPress is vulnerable to SQL Injection via the 'sorting' parameter in all versions up to, and including, 4.9.5 due to insufficient escaping o |
| CVE-2026-12259 | Analyzed | 未確認 | CWE-494 | In nltk version 3.9.4, the `nltk.downloader.Downloader._download_package()` function writes downloaded package bytes to disk and may extract them before enforcing SHA-256 or MD5 ch |
| CVE-2026-12261 | Analyzed | 未確認 | CWE-284 | A vulnerability in `nltk.downloader` in nltk/nltk versions <= 3.9.4 allows for cross-package resource and model poisoning. The downloader extracts package archives into shared name |
| CVE-2026-12263 | Awaiting Analysis | 未確認 | CWE-347 | Zohocorp ManageEngine Password Manager Pro versions before 13232 and PAM360 versions before 8551 are vulnerable to an authentication bypass vulnerability due to improper SAML valid |
| CVE-2026-12339 | Awaiting Analysis | 未確認 | CWE-22 | A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted archive containing directory traversal sequences. An authenticated adminis |
| CVE-2026-12359 | Analyzed | 未確認 | CWE-287 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 could allow a remot |
| CVE-2026-12363 | Awaiting Analysis | 未確認 | CWE-787 | The LoRaWAN Fragmented Data Block Transport service (subsys/lorawan/services/frag_transport.c) does not validate the fragment counter in a received DATA_FRAGMENT command before for |
| CVE-2026-12364 | Awaiting Analysis | 未確認 | CWE-822 | The user-space system-call verifier z_vrfy_z_log_msg_static_create() in subsys/logging/log_msg.c was a pure pass-through: it forwarded the caller-supplied source, desc, package, an |
| CVE-2026-12365 | Awaiting Analysis | 未確認 | CWE-416 | A use-after-free exists in the Zephyr second-generation work queue (kernel/work.c) in the handling of delayable work timeouts. When a delayable work item's timeout has been dequeue |
| CVE-2026-12366 | Awaiting Analysis | 未確認 | CWE-416 | Zephyr's dynamic kernel-object disposal path unref_check() in kernel/userspace/userspace.c frees an object's storage (k_free(dyn->data)) once its reference count reaches zero, afte |
| CVE-2026-12372 | Analyzed | 未確認 | CWE-918 | A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. The `nltk.pathsec.validate_network_url()` function, intended t |
| CVE-2026-12410 | Awaiting Analysis | 未確認 | CWE-59 | Link following vulnerability in the Uninstaller component in CCleaner prior to 7.10.1464 on Windows allows a local, low-privileged attacker to escalate privileges to SYSTEM via a s |
| CVE-2026-12477 | Deferred | 未確認 | CWE-79 | The Gravity Booster – Styles & Layouts for Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, |
| CVE-2026-12501 | Deferred | 未確認 | CWE-345 | The WP Travel Engine WordPress plugin before 6.8.2 does not verify that an incoming PayPal payment notification was sent to the site's configured merchant account, nor that the pai |
| CVE-2026-12513 | Deferred | 未確認 | CWE-73 | The Shared Files WordPress plugin before 1.7.67, shared-files-pro WordPress plugin before 1.7.68 do not properly sanitize a file path taken from a frontend file submission and the |
| CVE-2026-12514 | Deferred | 未確認 | CWE-862 | The Shared Files WordPress plugin before 1.7.67, shared-files-pro WordPress plugin before 1.7.70 do not perform a capability check in their file-upload handler, which is registere |
| CVE-2026-12519 | Awaiting Analysis | 未確認 | CWE-787 | The WNC-M14A2A LTE-M modem driver mishandles unsolicited %NOTIFYEV: events in on_cmd_socknotifyev() (drivers/modem/vendor_standalone/wncm14a2a.c). The response line is linearized i |
| CVE-2026-12520 | Awaiting Analysis | 未確認 | CWE-787 | The Sierra Wireless HL7800 cellular modem driver (drivers/modem/vendor_standalone/hl7800.c, located at drivers/modem/hl7800.c in v4.4.0 and earlier) parses AT responses with roughl |
| CVE-2026-12522 | Awaiting Analysis | 未確認 | CWE-787 | The HL7800 cellular modem driver's +CGCONTRDP: response handler on_cmd_atcmdinfo_ipaddr() in drivers/modem/vendor_standalone/hl7800.c parses the PDP-context dynamic parameters (loc |
| CVE-2026-12553 | Awaiting Analysis | 未確認 | CWE-787 | HP has identified a potential vulnerability in HP Web Jetadmin (WJA) that may allow an unauthenticated actor to read from or write to arbitrary files through a DLL hijacking mechan |
| CVE-2026-12554 | Deferred | 未確認 | CWE-1104 | Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of privi |
| CVE-2026-12555 | Deferred | 未確認 | CWE-379 | Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of privi |
| CVE-2026-12556 | Deferred | 未確認 | CWE-319 | Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of privi |
| CVE-2026-12561 | Deferred | 未確認 | CWE-79 | The tagDiv Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the vc_raw_html shortcode in all versions up to and including 5.4.5. This is due to insuff |
| CVE-2026-12564 | Awaiting Analysis | 未確認 | CWE-918 | A flaw was found in the AAP Controller's HashiCorp Vault credential plugin. The kubernetes_auth() function in awx_plugins/credentials/hashivault.py reads the controller pod's Kuber |
| CVE-2026-12570 | Awaiting Analysis | 未確認 | CWE-770 | A vulnerability in keras-team/keras versions <= 3.15.0 allows for a denial of service (DoS) attack when loading malicious .keras model files via the keras.models.load_model() funct |
| CVE-2026-12571 | Awaiting Analysis | 未確認 | CWE-287, CWE-640 | An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover. |
| CVE-2026-12584 | Deferred | 未確認 | The Payment Gateway for Redsys & WooCommerce Lite WordPress plugin before 7.0.2 does not verify the authenticity of incoming payment-provider notifications for one of its payment m | |
| CVE-2026-12586 | Deferred | 未確認 | CWE-287, CWE-352 | The Lenxel WP WordPress theme through 1.0.31 does not perform any authorization or ownership check on its password-reset action, validating only a CSRF nonce, allowing unauthentica |
| CVE-2026-12587 | Deferred | 未確認 | CWE-798 | The vulnerability allows the unauthorised generation of physical access QR codes due to the use of hard-coded credentials within the application. The generation mechanism uses the |
| CVE-2026-12600 | Deferred | 未確認 | CWE-400 | Denial-of-service (DoS) vulnerability in the internal JPEG2000 (JPX) decoding implementation of the Poppler fork developed by Innodata Labs. When an application processes an untrus |
| CVE-2026-12605 | Analyzed | 未確認 | CWE-918 | In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet ContentSources leaks the admin `gfresttoken` to attacker-controlled host if the victim is authentic |
| CVE-2026-12609 | Analyzed | 未確認 | CWE-22 | In Eclipse Theia versions 1.66.0 and up until including 1.73.1, the `@theia/plugin-ext` backend exposes the `/hostedPlugin/:pluginId/:path(*)` HTTP endpoint, which resolves the req |
| CVE-2026-12618 | Analyzed | 未確認 | CWE-74 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 could allow an admi |
| CVE-2026-12624 | Awaiting Analysis | 未確認 | CWE-863 | Vault’s ACL policy engine did not consistently enforce a wildcard (glob) deny rule against LIST requests made with a trailing slash on the denied path. This may allow a token holdi |
| CVE-2026-12629 | Awaiting Analysis | 未確認 | CWE-835 | The ARM PL011 UART driver in drivers/serial/uart_pl011.c fails to acknowledge receive error interrupts. On the PL011, the framing, parity, break, and overrun error interrupts (PL01 |
| CVE-2026-12630 | Awaiting Analysis | 未確認 | CWE-125 | Zephyr's 6LoWPAN IP Header Compression (IPHC) uncompression code contains an out-of-bounds read in get_ihpc_inlined_size() (subsys/net/ip/6lo.c). The destination inline size is loo |
| CVE-2026-12631 | Awaiting Analysis | 未確認 | CWE-862 | The Zephyr kernel validates the k_thread_join() and k_thread_abort() system calls (declared __syscall in include/zephyr/kernel.h) through thread_obj_validate() in kernel/thread.c. |
| CVE-2026-12632 | Awaiting Analysis | 未確認 | CWE-125 | Zephyr's Precision Time Protocol receive handler ptp_msg_post_recv() in subsys/net/lib/ptp/msg.c takes the 4-bit message type straight off the wire via ptp_msg_type() (msg->header. |
| CVE-2026-12633 | Awaiting Analysis | 未確認 | CWE-787 | The IPv6 neighbor-discovery code in subsys/net/ip/ipv6_nbr.c processes the 6LoWPAN Context Option (6CO, RFC 6775) carried inside ICMPv6 Router Advertisements. In handle_ra_6co() th |
| CVE-2026-12634 | Awaiting Analysis | 未確認 | CWE-787 | The NVS backend of the Zephyr settings subsystem (subsys/settings/src/settings_nvs.c) reads stored setting-name entries into fixed 74-byte stack buffers and NUL-terminates them wit |
| CVE-2026-12696 | Deferred | 未確認 | CWE-79 | The wpForo Forum WordPress plugin before 3.1.2 does not sanitize and escape a user profile field before outputting it inside an HTML attribute on the public participant profile pag |
| CVE-2026-12698 | Deferred | 未確認 | CWE-284 | The wpForo Forum WordPress plugin before 3.1.3 does not restrict which profile fields a member may set when editing their own account, allowing users with a subscriber-level accoun |
| CVE-2026-12710 | Awaiting Analysis | 未確認 | CWE-862 | A Missing Authorization vulnerability in the QueryEngineTask of Google Cloud Application Integration (versions from 2025-04-28 to 2026-04-04) allows an external attacker to access |
| CVE-2026-12713 | Deferred | 未確認 | CWE-89 | The WPCargo Track & Trace WordPress plugin before 8.0.4 does not properly sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perf |
| CVE-2026-12717 | Awaiting Analysis | 未確認 | CWE-74 | An Improper Input Validation vulnerability in CData JDBC driver integration in Google Cloud BigQuery Data Transfer Service versions prior to 2026-05-01 on Google Cloud Platform all |
| CVE-2026-12730 | Analyzed | 未確認 | CWE-297 | IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 007, and 24.0.0 through 24.0.0 Interim |
| CVE-2026-12743 | Deferred | 未確認 | CWE-89 | The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions |
| CVE-2026-12762 | Analyzed | 未確認 | CWE-538 | IBM Cloud Pak For Business Automation 24.0.0, 24.0.1, 25.0.0, and 26.0.0 could allow a remote attacker to obtain sensitive information exposed in manifest files. |
| CVE-2026-12801 | Deferred | 未確認 | CWE-79 | The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Range Slider 'data-label' and 'data-separator' attributes in all versi |
| CVE-2026-12802 | Analyzed | 未確認 | CWE-354 | In Bouncy Castle for Java before 1.85, CMS AuthEnvelopedData fails to enforce tag-length on decryption. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bounc |
| CVE-2026-12803 | Analyzed | 未確認 | CWE-354 | In Bouncy Castle for Java before 1.85, KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery). This issue also affects Bouncy Castle for Java LTS bef |
| CVE-2026-12816 | Analyzed | 未確認 | CWE-354 | In Bouncy Castle for Java before 1.85, IESEngine stream-mode MAC forgery via length-dependent KDF split. This issue also affects Bouncy Castle for Java LTS before 2.73.12. |
| CVE-2026-12817 | Analyzed | 未確認 | CWE-354 | In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy |
| CVE-2026-12852 | Analyzed | 未確認 | CWE-789 | In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check. |
| CVE-2026-12860 | Analyzed | 未確認 | CWE-347 | In Bouncy Castle for Java before 1.85, RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path. This issue also affects Bouncy Castle for Java LTS before 2.73.12. |
| CVE-2026-12872 | Deferred | 未確認 | CWE-434 | The Webinfos WordPress plugin through 1.2 does not validate the type or name of uploaded files, nor restrict the upload action with any authentication, capability, or nonce check, |
| CVE-2026-12878 | Analyzed | 未確認 | CWE-269 | In affected versions of the Codefresh platform an authenticated user can utilize an API endpoint to elevate to Admin permissions. |
| CVE-2026-1289 | Modified | 未確認 | CWE-416 | A maliciously crafted PDF file, when parsed through Autodesk Revit, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, di |
| CVE-2026-12894 | Awaiting Analysis | 未確認 | CWE-1336 | A flaw was found in the Qute template engine, which is used by Quarkus to generate dynamic content like HTML pages or emails. The issue exists in the component responsible for look |
| CVE-2026-12901 | Deferred | 未確認 | CWE-345 | The GetPaid WordPress plugin before 2.8.55 does not verify the authenticity of incoming Worldpay payment notifications, allowing unauthenticated attackers to forge a notification t |
| CVE-2026-12905 | Deferred | 未確認 | CWE-639 | The Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 27.7 via the appointment() method of the Mobile Staff Cabinet AP |
| CVE-2026-12908 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-12949 | Deferred | 未確認 | CWE-640 | The Wishlist Member plugin for WordPress is vulnerable to Account Takeover via Insufficient Verification of Data Authenticity in versions up to and including 3.34.1. This is due to |
| CVE-2026-12965 | Deferred | 未確認 | CWE-89 | The Super Store Finder WordPress plugin before 7.11 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthenticated attacke |
| CVE-2026-12966 | Deferred | 未確認 | CWE-284 | The Direct Payments for WooCommerce WordPress plugin before 2.5.3 does not verify that the requester owns the targeted WooCommerce order in several unauthenticated AJAX handlers b |
| CVE-2026-12971 | Deferred | 未確認 | CWE-918 | The LearnPress WordPress plugin before 4.4.4 does not validate a user-supplied URL before the server fetches it, allowing users with the instructor role to induce the server to is |
| CVE-2026-12976 | Deferred | 未確認 | CWE-200 | The LearnPress WordPress plugin before 4.4.4 does not verify that a user is enrolled in a course before processing AI-assistant requests against that course's lesson content, allo |
| CVE-2026-12983 | Deferred | 未確認 | CWE-89 | The Dinatur WordPress plugin through 1.18 does not sanitize and escape user input before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks. T |
| CVE-2026-12984 | Deferred | 未確認 | CWE-522 | Insufficiently Protected Credentials vulnerability in Zyxel Networks WAH7601 allows Retrieve Embedded Sensitive Data. This issue affects WAH7601: through 20072026. |
| CVE-2026-12998 | Deferred | 未確認 | CWE-639 | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, |
| CVE-2026-12999 | Awaiting Analysis | 未確認 | CWE-401 | The Infineon Airoc Wi-Fi driver's transmit callback airoc_mgmt_send() in drivers/wifi/infineon/airoc_wifi.c allocates a net_buf from the fixed airoc_pool for every outbound packet. |
| CVE-2026-13002 | Analyzed | 未確認 | CWE-835 | A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker who controls any DNSSEC-signed zone can hang the dnsmasq process with a s |
| CVE-2026-13047 | Rejected | 未確認 | Rejected reason: Red Hat is not the CNA for PHP. CVE was reserved in error; the appropriate CNA should assign CVE IDs for these vulnerabilities. | |
| CVE-2026-13048 | Deferred | 未確認 | CWE-22, CWE-95 | Data::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because load_lexicon interpolates the language attri |
| CVE-2026-13051 | Deferred | 未確認 | CWE-1336, CWE-470 | Form::Processor::Field::HtmlArea versions from 0.06 through 1.162360 for Perl allow attacker selected method dispatch and resource exhaustion via an HTML::Tidy diagnostic that vali |
| CVE-2026-13081 | Rejected | 未確認 | Rejected reason: Red Hat is not the CNA for PHP. CVE was reserved in error; the appropriate CNA should assign CVE IDs for these vulnerabilities. | |
| CVE-2026-13086 | Deferred | 未確認 | CWE-121, CWE-787, CWE-798 | A stack-based buffer overflow in the epm (Endpoint Protection Manager) service used by the deprecated Mobile Security feature in WatchGuard Fireware OS allows an unauthenticated re |
| CVE-2026-13094 | Analyzed | 未確認 | CWE-94 | IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable configuration fil |
| CVE-2026-13097 | Modified | 未確認 | CWE-706 | A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly account |
| CVE-2026-13105 | Analyzed | 未確認 | CWE-22 | IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to zip slip path traversal exploit when importing a configuration. |
| CVE-2026-13108 | Deferred | 未確認 | CWE-400 | WatchGuard Dimension is susceptible to a denial-of-service condition when an attacker sends a high volume of TCP SYN packets to the log listening service. |
| CVE-2026-13121 | Deferred | 未確認 | CWE-749 | Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on af |
| CVE-2026-13133 | Deferred | 未確認 | CWE-427 | A vulnerability has been identified in LineInst.exe (LINE for Windows) prior to version 26.4.0, where Msftedit.dll is loaded via a relative path without a secure DLL search path, a |
| CVE-2026-13153 | Deferred | 未確認 | CWE-200 | The Gutenberg Essential Blocks WordPress plugin before 6.4.0 does not restrict access to one of its public REST routes and over-fetches a non-public WooCommerce per-product sales |
| CVE-2026-13154 | Deferred | 未確認 | CWE-200 | The Gutenberg Essential Blocks WordPress plugin before 6.4.0 does not verify that an attacker-supplied post type is publicly viewable before querying it in one of its public REST |
| CVE-2026-13157 | Deferred | 未確認 | CWE-434 | The Demo Import WordPress plugin through 1.1.3 does not validate the type of files uploaded during demo-content import (the WordPress file-type test is disabled), allowing high-pr |
| CVE-2026-13158 | Deferred | 未確認 | CWE-434 | The Everest Toolkit WordPress plugin through 1.2.3 does not validate the type of files uploaded during demo-content import (the WordPress file-type test is disabled), allowing high |
| CVE-2026-13167 | Deferred | 未確認 | CWE-862 | The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and inc |
| CVE-2026-13168 | Deferred | 未確認 | CWE-200 | The Eventin WordPress plugin before 4.1.20 does not properly restrict access to stored customer records, allowing users with contributor-level access and above to read other custo |
| CVE-2026-13169 | Deferred | 未確認 | CWE-639 | The Eventin WordPress plugin before 4.1.21 does not properly verify ownership of events before allowing them to be modified, deleted, or reassigned to a different author, allowing |
| CVE-2026-13170 | Deferred | 未確認 | CWE-22 | The Eventin WordPress plugin before 4.1.20 does not properly validate a template path setting before using it to include a local file, allowing users with editor-level access and |
| CVE-2026-13171 | Deferred | 未確認 | CWE-284 | The Eventin WordPress plugin before 4.1.20 does not perform an authorization check on its waiting-list registration handler, allowing unauthenticated users to create WordPress use |
| CVE-2026-13172 | Deferred | 未確認 | CWE-862 | The Eventin WordPress plugin before 4.1.22 does not restrict access to non-published content by status or ownership in one of its REST API namespaces, allowing unauthenticated use |
| CVE-2026-13173 | Deferred | 未確認 | CWE-862 | The Eventin WordPress plugin before 4.1.21 does not verify the current user's permission to edit other users before assigning roles and updating user metadata during speaker creat |
| CVE-2026-13174 | Deferred | 未確認 | CWE-284 | The Eventin WordPress plugin before 4.1.21 does not verify ownership or capability before deleting user accounts, allowing users with contributor-level access and above to permane |
| CVE-2026-13175 | Deferred | 未確認 | CWE-639 | The Eventin WordPress plugin before 4.1.21 does not verify ownership before allowing schedule records to be modified or deleted, allowing users with contributor-level access and a |
| CVE-2026-13176 | Deferred | 未確認 | CWE-918 | The Eventin WordPress plugin before 4.1.21 does not validate a user-supplied webhook URL stored on events nor verify event ownership, allowing users with contributor-level access a |
| CVE-2026-13177 | Deferred | 未確認 | CWE-639 | The Eventin WordPress plugin before 4.1.20 does not properly restrict access to individual order records, allowing users with contributor-level access and above to read other cust |
| CVE-2026-13196 | Awaiting Analysis | 未確認 | CWE-787 | Nozomi Networks Labs identified a CWE-787: Out-of-bounds Write vulnerability in the process-image management functionality of KUNBUS piControl in version 2.6.2 that allows a local |
| CVE-2026-13197 | Awaiting Analysis | 未確認 | CWE-362 | Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in the configuration and proces |
| CVE-2026-13198 | Awaiting Analysis | 未確認 | CWE-362 | Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in the event notification funct |
| CVE-2026-13202 | Awaiting Analysis | 未確認 | CWE-79 | A vulnerability in OpenText Opentext Directory Services allows Input Data Manipulation. This issue affects Opentext Directory Services: through 22.2. |
| CVE-2026-13206 | Deferred | 未確認 | CWE-78 | Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Zyxel Networks WAH7601 allows OS Command Injection. This issue affects |
| CVE-2026-13212 | Awaiting Analysis | 未確認 | CWE-129 | The Zephyr virtio driver does not validate the descriptor-chain head id that the virtio device writes into the used ring. In virtio_isr() (drivers/virtio/virtio_common.c), the devi |
| CVE-2026-13213 | Awaiting Analysis | 未確認 | CWE-476 | The Hearing Access Service (HAS) GATT server in subsys/bluetooth/audio/has.c installs a connection-callback set unconditionally via BT_CONN_CB_DEFINE, so security_changed() runs fo |
| CVE-2026-13214 | Awaiting Analysis | 未確認 | CWE-787 | The OCPP 1.6 client in subsys/net/lib/ocpp/ocpp_j.c contains a stack buffer overflow in parse_getconfig_msg(). When handling a GetConfiguration request from the central system, the |
| CVE-2026-13215 | Awaiting Analysis | 未確認 | CWE-787 | The Zephyr ext2 filesystem driver fails to validate the s_log_block_size field of the on-disk superblock when mounting a filesystem. ext2_verify_disk_superblock() in subsys/fs/ext2 |
| CVE-2026-13216 | Awaiting Analysis | 未確認 | CWE-787 | The virtio PCI driver (drivers/virtio/virtio_pci.c) parses a device's PCI capability list during driver initialization. In virtio_pci_read_cap() the device-supplied capability leng |
| CVE-2026-13217 | Awaiting Analysis | 未確認 | CWE-476 | The OCPP 1.6 client in subsys/net/lib/ocpp/ocpp.c reconstructs a session handle and PDU id from the uid field of a CALLRESULT message. In ocpp_process_server_msg() the code calls a |
| CVE-2026-13227 | Deferred | 未確認 | CWE-862 | An Improper Authorization vulnerability exists in ERPNext version <v16.25.0 and <15.115.0 due to insufficient access control in the whitelisted API method erpnext.crm.doctype.pros |
| CVE-2026-13229 | Deferred | 未確認 | CWE-862 | Zammad 7.1.0 contains an authenticated improper authorization vulnerability in the ticket article attachment cloning endpoint. |
| CVE-2026-13267 | Analyzed | 未確認 | CWE-302 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 could allow an auth |
| CVE-2026-13328 | Deferred | 未確認 | CWE-284 | The Food Menu WordPress plugin before 6.0.2 does not perform any capability or ownership check on its reservation-status update action, which is also exposed to unauthenticated us |
| CVE-2026-13329 | Deferred | 未確認 | CWE-284 | The Buckaroo Woocommerce Payments Plugin WordPress plugin before 4.9.0 does not perform any capability check or nonce validation on an AJAX action that processes payment capture re |
| CVE-2026-13339 | Deferred | 未確認 | CWE-22 | The CubeWP Framework plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.30 via the 'cubewp_get_svg_content' function. This makes it |
| CVE-2026-13340 | Deferred | 未確認 | CWE-79 | The SVG Support WordPress plugin before 2.5.17 does not apply its SVG sanitisation to uploaded files using the .svgz extension, even though it registers and serves them as SVG, all |
| CVE-2026-13342 | Deferred | 未確認 | CWE-693 | The Security Optimizer WordPress plugin from 1.5.8 to 1.6.4 does not correctly validate requests to its optional IP-based login restriction feature, allowing the restriction to be |
| CVE-2026-13343 | Awaiting Analysis | 未確認 | CWE-200 | The UMP Stream responder library in lib/midi2/ump_stream_responder.c builds reply packets in a 16-byte struct midi_ump (uint32_t data[4]). The builders make_endpoint_info() and mak |
| CVE-2026-13358 | Deferred | 未確認 | CWE-639 | The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and inc |
| CVE-2026-13360 | Deferred | 未確認 | CWE-79 | The Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'regionArray' parameter in all versions up to, and |
| CVE-2026-13361 | Analyzed | 未確認 | CWE-121 | IBM Informix oninit sq_sgkprepare RCE via unchecked SQL Interface length field. |
| CVE-2026-13362 | Deferred | 未確認 | CWE-79 | The SendPulse Email Marketing Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via _sp_form_code Post Meta in all versions up to, and including, 2.2.5 d |
| CVE-2026-13365 | Analyzed | 未確認 | CWE-352 | IBM Planning Analytics 2.0, and 2.1 Local is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a |
| CVE-2026-13367 | Analyzed | 未確認 | CWE-284 | IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root utility. |
| CVE-2026-13389 | Deferred | 未確認 | CWE-862 | The webtoffee-cookie-consent WordPress plugin before 3.5.3 does not perform authorization checks on several of its REST API routes, allowing unauthenticated attackers to export and |
| CVE-2026-13399 | Deferred | 未確認 | CWE-639, CWE-862 | The Payment Plugins for PayPal WooCommerce WordPress plugin before 2.0.20 does not have proper authorization checks on a REST endpoint, allowing unauthenticated users to bypass pay |
| CVE-2026-13404 | Deferred | 未確認 | CWE-639 | The Royal Addons for Elementor WordPress plugin before 1.7.1066 does not perform any capability or ownership check (relying only on a publicly-scrapeable nonce) before writing lik |
| CVE-2026-13405 | Deferred | 未確認 | CWE-94 | The Royal Addons for Elementor WordPress plugin before 1.7.1066 does not correctly sanitise custom widget markup before writing it to a file that is later executed, allowing users |
| CVE-2026-13406 | Deferred | 未確認 | CWE-862 | The Royal Addons for Elementor WordPress plugin before 1.7.1066 does not perform any capability or nonce check before returning taxonomy term data for an arbitrary, caller-supplie |
| CVE-2026-13414 | Deferred | 未確認 | CWE-862 | The CMP WordPress plugin before 4.1.18 does not perform authorization checks on one of its AJAX actions and relies on a nonce that is skipped for certain (and exposed to anonymou |
| CVE-2026-13415 | Deferred | 未確認 | CWE-269 | The CMP WordPress plugin before 4.1.18 does not enforce an option-name allow-list when importing settings via one of its AJAX actions, allowing users with the Editor role (when th |
| CVE-2026-13416 | Deferred | 未確認 | CWE-79 | The CMP WordPress plugin before 4.1.18 does not sanitise and escape a settings value before outputting it on the coming-soon page, allowing users with the Editor role (when the ad |
| CVE-2026-13424 | Deferred | 未確認 | CWE-79 | The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via bookly_speed_up_update_addons AJAX action in all |
| CVE-2026-13433 | Analyzed | 未確認 | CWE-494 | IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 (ACS) is vulnerable to downloading unverified product code when configured to update from an IBM i. A bad actor could use thi |
| CVE-2026-13457 | Deferred | 未確認 | CWE-434 | The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 0.1.3.6 via the (top-level sc |
| CVE-2026-13458 | Deferred | 未確認 | CWE-79 | The GenerateBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Dynamic Tag Injection in HTML Attributes in all versions up to, and including, 2.3.0 due to |
| CVE-2026-13460 | Analyzed | 未確認 | CWE-798 | IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 GUI contains a hardcoded token in the source code, which was used for inter-node cluster communication and RE |
| CVE-2026-13476 | Analyzed | 未確認 | CWE-78 | IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper v |
| CVE-2026-13477 | Analyzed | 未確認 | CWE-78 | IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 could allow an authenticated privileged user to execute arbitrary commands with normal user privil |
| CVE-2026-13478 | Awaiting Analysis | 未確認 | CWE-125 | The Zephyr ext2 filesystem driver validates the on-disk block bitmap in ext2_init_fs() (subsys/fs/ext2/ext2_impl.c) by passing fs_blocks = s_blocks_count - s_first_data_block to ex |
| CVE-2026-13479 | Analyzed | 未確認 | CWE-125 | The LoRaWAN application-layer clock-synchronization service parses downlinks in clock_sync_package_callback() (subsys/lorawan/services/clock_sync.c). Its command loop only guarante |
| CVE-2026-13480 | Analyzed | 未確認 | CWE-125, CWE-20 | The LoRaWAN TS004 Fragmented Data Block Transport handler frag_transport_package_callback() in subsys/lorawan/services/frag_transport.c parses downlink command bytes without valida |
| CVE-2026-13481 | Analyzed | 未確認 | CWE-125 | The IEEE 1588 PTP management-message parser in subsys/net/lib/ptp/tlv.c mishandles the PTP_MGMT_TIME management id. In tlv_mgmt_post_recv(), the PTP_MGMT_TIME case casts mgmt_tlv-> |
| CVE-2026-13505 | Awaiting Analysis | 未確認 | CWE-772 | In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series), sensitive key material held by the AES and DESede engi |
| CVE-2026-13506 | Analyzed | 未確認 | CWE-674 | In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing resets nesting-depth guard. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle |
| CVE-2026-13586 | Analyzed | 未確認 | CWE-770 | In Bouncy Castle for Java before 1.85, PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS). This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy |
| CVE-2026-13596 | Deferred | 未確認 | CWE-89 | The Participants Database WordPress plugin before 2.7.8.4 does not properly sanitize and escape a user-supplied parameter before using it in a SQL query, allowing unauthenticated a |
| CVE-2026-13598 | Deferred | 未確認 | CWE-269 | The RestrictMate WordPress plugin before 1.3.0 does not restrict the user role supplied during account registration, allowing unauthenticated attackers to create a new administrat |
| CVE-2026-13600 | Deferred | 未確認 | CWE-287 | The AutoNetTV Relay WordPress plugin before 3.0.14 does not perform any capability or authentication check before setting a WordPress administrator authentication cookie during its |
| CVE-2026-13604 | Deferred | 未確認 | CWE-918 | The Pixelavo WordPress plugin before 1.5.4 registers an unauthenticated AJAX action, gated only by a nonce that it emits publicly on every front-end page, that forwards client-sup |
| CVE-2026-13610 | Deferred | 未確認 | CWE-269 | The KiviCare WordPress plugin before 4.5.2 does not restrict the roles assignable through its unauthenticated registration endpoint, allowing unauthenticated attackers to create a |
| CVE-2026-13612 | Deferred | 未確認 | CWE-639 | The KiviCare WordPress plugin before 4.5.2 does not verify that the requesting user owns the records being accessed, allowing authenticated patient-level users to read other patie |
| CVE-2026-13613 | Deferred | 未確認 | CWE-89 | The KiviCare WordPress plugin before 4.5.2 does not properly sanitise and escape user-supplied parameters before using them in a SQL query, allowing authenticated users with a cli |
| CVE-2026-13622 | Awaiting Analysis | 未確認 | CWE-22 | A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod v |
| CVE-2026-13700 | Deferred | 未確認 | CWE-918 | The WooMS WordPress plugin through 9.14 does not validate a user-supplied URL before using it in a server-side request and attaches stored third-party integration credentials to ev |
| CVE-2026-13701 | Deferred | 未確認 | CWE-79 | The Advanced Excerpt WordPress plugin before 4.5 does not sanitise and escape one of its settings before outputting it on the front end of the site, which could allow administrator |
| CVE-2026-13703 | Deferred | 未確認 | CWE-284 | The SEO Redirection Plugin WordPress plugin before 9.19 does not perform a capability check in one of its authenticated AJAX actions, allowing any logged-in user such as a subscri |
| CVE-2026-13712 | Deferred | 未確認 | CWE-79 | The Divi WordPress theme before 5.9.0 does not properly escape some of its Social Media Follow module settings before outputting them in link attributes, allowing users with a role |
| CVE-2026-13716 | Analyzed | 未確認 | CWE-35 | Path traversal in server import and admin file upload in Crafty Controller. Allows a remote, authenticated attacker to upload files to arbitrary paths permitted to the Crafty Contr |
| CVE-2026-13717 | Awaiting Analysis | 未確認 | CWE-284 | A flaw was found in the Red Hat OpenShift AI (RHOAI) MaaS Gateway. Improper configuration of the Gateway in a model-serving context allows a standard user with low privileges to in |
| CVE-2026-13725 | Deferred | 未確認 | CWE-79 | The Dynamic Pricing With Discount Rules for WooCommerce WordPress plugin before 5.0.0 does not validate a nonce or user capabilities on one of its AJAX actions and reflects unsanit |
| CVE-2026-13729 | Deferred | 未確認 | CWE-352 | The Podlove Podcast Publisher WordPress plugin before 4.5.3 does not perform nonce validation on some of its administrative create and delete actions, allowing attackers to create |
| CVE-2026-13732 | Awaiting Analysis | 未確認 | CWE-787 | A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a linked list removal bug in the code that separates destructo |
| CVE-2026-13734 | Awaiting Analysis | 未確認 | CWE-294 | Zephyr's WireGuard VPN data-plane receive handler wg_process_data_message() in subsys/net/lib/wireguard/wg_crypto.c validated the anti-replay counter too late. After AEAD decryptio |
| CVE-2026-13735 | Awaiting Analysis | 未確認 | CWE-290 | Zephyr's WireGuard implementation in subsys/net/lib/wireguard/wg_crypto.c mishandled keepalive packets. In wg_process_data_message(), any type-4 transport-data message whose payloa |
| CVE-2026-13736 | Deferred | 未確認 | CWE-284 | The NewPath WildApricotPress Add-on WordPress plugin through 1.0.0 does not enforce its members-only field privacy on an unauthenticated REST route, allowing anonymous visitors to |
| CVE-2026-13737 | Analyzed | 未確認 | CWE-863 | CommServe contained an allowlist bypass vulnerability affecting command execution authorization. Software customers upgrade to resolved maintenance release. Update all Commvault i |
| CVE-2026-13738 | Analyzed | 未確認 | CWE-863 | CommServe contained an authorization bypass vulnerability affecting a limited set of command execution operations. Software customers upgrade to resolved maintenance release. Upd |
| CVE-2026-13739 | Analyzed | 未確認 | CWE-918 | A legacy endpoint in Command Center contained an unauthenticated server-side request forgery (SSRF) vulnerability related to the handling of arbitrary target URLs. Software custom |
| CVE-2026-13761 | Awaiting Analysis | 未確認 | CWE-606 | Pega Platform versions 7.1.0 through 25.1.2 are affected by an improper validation of inputs that are used for loop conditions, potentially leading to a denial of service or other |
| CVE-2026-14163 | Analyzed | 未確認 | CWE-532 | In affected versions of Octopus Server under certain circumstances it is possible for sensitive variables to be printed in the deployment variable snapshot in clear-text. |
| CVE-2026-14175 | Deferred | 未確認 | CWE-434 | Unrestricted upload of file with dangerous type vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Upload a Web Shell to a Web |
| CVE-2026-14180 | Awaiting Analysis | 未確認 | CWE-444 | A flaw was found in the ChunkReader component of the Undertow HTTP server, which is used by WildFly and JBoss EAP to handle chunked transfer encoding. The issue occurs because the |
| CVE-2026-14182 | Deferred | 未確認 | CWE-287 | The Customer Email Verification for WooCommerce WordPress plugin before 3.2.6 does not correctly validate the email-verification activation code, relying on a loose comparison that |
| CVE-2026-14187 | Deferred | 未確認 | CWE-639 | The Tutor LMS WordPress plugin before 4.0.6 does not enforce per-object ownership checks on its course content type, allowing any user with the instructor role to read the content |
| CVE-2026-14192 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resourc |
| CVE-2026-14194 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources all |
| CVE-2026-14195 | Deferred | 未確認 | CWE-639 | The Brizy WordPress plugin before 2.8.18 does not properly verify authorization on a request handler before returning post content, allowing users with the Contributor role or hig |
| CVE-2026-14196 | Deferred | 未確認 | CWE-639 | The WCFM Marketplace WordPress plugin before 3.8.1 does not verify that a marketplace vendor owns a review before allowing it to be unapproved or deleted, allowing any vendor to m |
| CVE-2026-14197 | Deferred | 未確認 | CWE-639 | The Fluent Support WordPress plugin before 2.3.1 does not perform a per-ticket access check before reassigning a ticket's customer, allowing a restricted support agent to change t |
| CVE-2026-14202 | Deferred | 未確認 | CWE-204 | Observable response discrepancy vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Account Footprinting. This issue affects H |
| CVE-2026-14204 | Deferred | 未確認 | CWE-352 | The Google Authenticator WordPress plugin before 0.56 does not verify a CSRF nonce when saving its two-factor setup, allowing attackers to trick a logged-in user into overwriting t |
| CVE-2026-14205 | Deferred | 未確認 | CWE-287 | The WP Events Manager WordPress plugin before 2.2.5 does not validate the requested quantity when registering for a paid event and computes the price from the attacker-controlled q |
| CVE-2026-14206 | Deferred | 未確認 | CWE-200 | The HT Contact Form WordPress plugin before 2.9.3 does not perform any authorization check on the endpoint that returns a saved form draft, allowing unauthenticated users to read |
| CVE-2026-14208 | Deferred | 未確認 | CWE-732 | Remote Utilities Host <=7.7.3.0 sets insecure ACLs on all DLL files in the installation directory (C:\Program Files (x86)\Remote Utilities - Host\), granting FULL CONTROL (F) to th |
| CVE-2026-14211 | Deferred | 未確認 | CWE-639 | The Booking for Appointments and Events Calendar WordPress plugin before 9.7 does not verify that an authenticated employee (provider) is related to the customer whose record is b |
| CVE-2026-14212 | Deferred | 未確認 | CWE-639 | The Booking for Appointments and Events Calendar WordPress plugin before 9.8 does not verify that an authenticated employee (provider) owns the provider account being updated, all |
| CVE-2026-14213 | Deferred | 未確認 | CWE-639 | The Booking for Appointments and Events Calendar WordPress plugin before 2.4.6 does not verify that an authenticated employee (provider) is assigned to the appointment being acces |
| CVE-2026-14214 | Deferred | 未確認 | CWE-287 | The Booking for Appointments and Events Calendar WordPress plugin before 2.4.4 does not restrict which fields can be written through its customer import, allowing a user with the |
| CVE-2026-14216 | Deferred | 未確認 | CWE-287 | The Booking for Appointments and Events Calendar WordPress plugin before 2.4.7 does not require authentication before processing its pending notification queue, allowing an unauth |
| CVE-2026-14219 | Deferred | 未確認 | CWE-601 | URL redirection to untrusted site ('open redirect') vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Phishing. This issue a |
| CVE-2026-14225 | Deferred | 未確認 | CWE-20 | The Easy Appointments WordPress plugin before 3.12.28 does not correctly validate shortcode input in one of its block-rendering actions, checking only the first tag of the supplied |
| CVE-2026-14229 | Deferred | 未確認 | CWE-284 | The ECS WordPress plugin before 4.3.8 does not check the post status or any capability when rendering an Elementor document requested through one of its AJAX actions, allowing una |
| CVE-2026-14230 | Deferred | 未確認 | CWE-79 | The ECS WordPress plugin before 4.3.8 does not perform capability or object-ownership checks on its Dynamic Repeater AJAX handlers (gated only by a capability-agnostic nonce that |
| CVE-2026-14237 | Deferred | 未確認 | CWE-269 | The vitepos WordPress plugin before 3.6.0, Vitepos WordPress plugin before 3.5.0 do not perform a per-target authorization check in their point-of-sale password-reset API and gran |
| CVE-2026-14238 | Deferred | 未確認 | CWE-89 | The vitepos WordPress plugin before 3.6.0 does not sanitize or parameterize an identifier taken from a REST request body before using it in a database query in one of its report en |
| CVE-2026-14240 | Deferred | 未確認 | CWE-200 | The tourmaster WordPress plugin before 5.4.9 writes its order/booking export to a fixed, predictable file inside its publicly accessible directory with no access control, allowing |
| CVE-2026-14256 | Awaiting Analysis | 未確認 | CWE-125 | ELAN reported a potential out-of-bounds write vulnerability in the ELAN TrackPoint driver that, under certain circumstances, could allow a local authenticated user to cause a syste |
| CVE-2026-14279 | Deferred | 未確認 | CWE-269 | The Wholesale Market plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.2.2 via the ced_wholesale_request_send AJAX action. The ced_whol |
| CVE-2026-14280 | Deferred | 未確認 | CWE-98 | The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 7.3.7.4 via the em_opti |
| CVE-2026-14287 | Deferred | 未確認 | CWE-79 | The 10Web Booster WordPress plugin before 2.33.5 does not correctly validate an access token on an unauthenticated request handler and does not escape attacker-supplied stylesheet |
| CVE-2026-14290 | Deferred | 未確認 | CWE-79 | The Embed Google Photos album WordPress plugin through 2.2.1 does not escape a shortcode attribute value before outputting it inside an HTML attribute, allowing users with the Cont |
| CVE-2026-14292 | Deferred | 未確認 | CWE-79 | The Download Manager WordPress plugin before 3.3.66 does not properly escape a package's title before outputting it in the front-end package templates, allowing users with the Auth |
| CVE-2026-14293 | Deferred | 未確認 | CWE-79 | The Autopay WordPress plugin before 5.0.1 does not perform any capability or nonce check before saving a styling option from a public request, and does not escape that value when i |
| CVE-2026-14298 | Modified | 未確認 | CWE-409 | Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 fail to limit decompressed content size and enforce the configured maximum file size i |
| CVE-2026-14304 | Analyzed | 未確認 | CWE-611 | In Eclipse Accessibility Tools Framework (ACTF) versions up to 1.6.0 (including source code versions up to v20260630 and ACTF based application miChecker versions up to 3.1.0), it |
| CVE-2026-14306 | Deferred | 未確認 | CWE-639 | The Tutor LMS WordPress plugin before 3.9.14 does not properly verify enrollment when restricting access to protected course content, allowing authenticated users with subscriber-l |
| CVE-2026-14307 | Deferred | 未確認 | CWE-79 | The geotargetingwp WordPress plugin before 3.5.6.2 does not sanitise or escape several parameters before reflecting them back in AJAX responses that are served with an HTML content |
| CVE-2026-14309 | Deferred | 未確認 | CWE-287 | The Chat On Desk Order Notifications WordPress plugin before 1.0.9 does not verify that the one-time password has been validated before processing a password-reset request, allowi |
| CVE-2026-14313 | Deferred | 未確認 | CWE-352, CWE-639 | PeproDev WooCommerce Receipt Uploader (PeproDev WooCommerce Receipt Uploader WordPress plugin through 2.8.0 slug: pepro-bacs-receipt-upload-for-woocommerce), all versions up to and |
| CVE-2026-14314 | Deferred | 未確認 | CWE-200 | The PeproDev WooCommerce Receipt Uploader WordPress plugin through 2.8.0 does not verify that a requested attachment belongs to the order referenced by its access token, allowing u |
| CVE-2026-14315 | Deferred | 未確認 | CWE-284 | The Pixel Tag Manager for WooCommerce WordPress plugin before 2.2.1 does not perform an authorization check on one of its AJAX actions, allowing unauthenticated users to submit fo |
| CVE-2026-14325 | Deferred | 未確認 | CWE-79 | The Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin before 1.3.9.9 does not escape one of its settings before using it as an HTML tag name in front-end outpu |
| CVE-2026-14331 | Deferred | 未確認 | CWE-79 | The Subscribe2 WordPress plugin before 10.46 does not properly escape a user-supplied value before reflecting it into a public subscription form, leading to Reflected Cross-Site S |
| CVE-2026-14332 | Deferred | 未確認 | CWE-862 | The Ecwid by Lightspeed Ecommerce Shopping Cart WordPress plugin before 7.0.9 does not perform a capability check or nonce verification on one of its store-management actions, allo |
| CVE-2026-14334 | Deferred | 未確認 | CWE-79 | The Booking calendar, Appointment Booking System WordPress plugin through 3.2.36 does not properly sanitize uploaded SVG files, allowing unauthenticated attackers to upload a file |
| CVE-2026-14337 | Awaiting Analysis | 未確認 | CWE-79 | Pega Platform versions 23.1.0 through 25.1.3 are affected by an Stored Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with |
| CVE-2026-14364 | Deferred | 未確認 | CWE-640 | The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to account takeover via improper password reset validation in all versions up to, and i |
| CVE-2026-14365 | Deferred | 未確認 | CWE-862 | The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2.3. This is due to the |
| CVE-2026-14366 | Awaiting Analysis | 未確認 | CWE-416 | The Silicon Labs SiWx917 WiFi driver's transmit callback siwx91x_send() in drivers/wifi/siwx91x/siwx91x_wifi.c frees a network packet it does not own. In the Zephyr TX path the net |
| CVE-2026-14367 | Awaiting Analysis | 未確認 | CWE-362 | The I3C IBI subsystem in drivers/i3c/i3c_ibi_workq.c hands out statically-allocated work nodes through a free-list i3c_ibi_work_nodes_free implemented as a plain sys_slist_t, which |
| CVE-2026-14368 | Awaiting Analysis | 未確認 | CWE-193, CWE-787 | The LwM2M JSON content formatter's get_string() in subsys/net/lib/lwm2m/lwm2m_rw_json.c copies a parsed JSON string into a caller-supplied buffer and NUL-terminates it. The length |
| CVE-2026-14433 | Deferred | 未確認 | CWE-79 | The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'business_id' parameter in all versions up |
| CVE-2026-14450 | Awaiting Analysis | 未確認 | CWE-290 | A flaw was found in the MaaS API. This vulnerability allows any pod within the cluster to bypass the Kuadrant AuthPolicy gateway by forging HTTP headers, specifically `X-MaaS-Usern |
| CVE-2026-14456 | Awaiting Analysis | 未確認 | CWE-770 | Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes valid QUIC Initial packets for unknown destination connection IDs, it can allocate and queue new incoming |
| CVE-2026-14457 | Analyzed | 未確認 | CWE-476 | Issue summary: In a server or client configuration with RFC7250 Raw Public Keys (RPKs) enabled, and only the private key (with no associated certificate) configured locally, a NULL |
| CVE-2026-14465 | Deferred | 未確認 | CWE-613 | Insufficient session expiration vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Reusing Session IDs (aka Session Replay). |
| CVE-2026-14478 | Analyzed | 未確認 | CWE-732 | A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify p |
| CVE-2026-14479 | Analyzed | 未確認 | CWE-1285 | A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an ou |
| CVE-2026-14484 | Deferred | 未確認 | CWE-22 | The RapiSafe – Secure Multi File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the handleAjaxR |
| CVE-2026-14494 | Deferred | 未確認 | CWE-434 | The Sigma Forms Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.4.5 via the handle_form_submission function. This is due to |
| CVE-2026-14498 | Deferred | 未確認 | CWE-434 | The Query Wrangler plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.5.57 via the 'options' parameter parameter. This is due to mi |
| CVE-2026-14514 | Analyzed | 未確認 | CWE-770 | IBM Reliable Scalable Cluster Technology (RSCT) 3.0 could allow a remote attacker to cause a denial of service by sending a specially crafted request due improper input validation. |
| CVE-2026-14524 | Deferred | 未確認 | CWE-22 | The ProSolution WP Client plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the proSol_fileDeleteProcess function in all ver |
| CVE-2026-14525 | Analyzed | 未確認 | CWE-306 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 IBM WebSphere Application Server Liberty is vulnerable to an authentication bypass when the rtcomm-1.0 or rtcom |
| CVE-2026-14526 | Deferred | 未確認 | CWE-269 | The AI Copilot – Content Generator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.5.6. This is due to the plugin not properly ve |
| CVE-2026-14547 | Deferred | 未確認 | CWE-287 | The Estatik Real Estate Plugin WordPress plugin before 4.3.3 does not properly enforce its anti-spam check or restrict the recipient routing of its property request form, allowing |
| CVE-2026-14548 | Deferred | 未確認 | CWE-862 | The Ray Enterprise Translation WordPress plugin through 1.7.3 does not perform any capability or nonce checks on one of its AJAX actions, allowing any authenticated user, including |
| CVE-2026-14549 | Deferred | 未確認 | CWE-862 | The Ray Enterprise Translation WordPress plugin through 1.7.3 does not perform any capability or nonce checks on one of its AJAX actions, allowing any authenticated user, including |
| CVE-2026-14550 | Deferred | 未確認 | CWE-862 | The WPCafe WordPress plugin before 3.0.18 does not perform an authorization check when creating a reservation through its REST API, verifying only a publicly available nonce, allo |
| CVE-2026-14553 | Deferred | 未確認 | CWE-434 | The zportals WordPress plugin before 6.3.4 does not properly validate uploaded files, trusting the client-supplied content type and preserving the original file extension, allowing |
| CVE-2026-14557 | Deferred | 未確認 | CWE-287 | The SoftMarket — Digital Marketplace WordPress plugin through 1.0.0 does not properly validate an authentication token in one branch of its email-verification flow, allowing unauth |
| CVE-2026-14558 | Deferred | 未確認 | CWE-502 | The User Frontend WordPress plugin before 4.3.10 does not properly validate field type definitions and deserialises user-controlled post metadata when rendering submitted posts, a |
| CVE-2026-14561 | Deferred | 未確認 | CWE-287 | The Authora : Easy login with mobile number WordPress plugin before 1.7.7 does not keep its one-time login code confidential, returning the code and a valid verification token in t |
| CVE-2026-14564 | Deferred | 未確認 | CWE-522 | Insufficiently Protected Credentials vulnerability in Innotim Software Telecommunications and Consulting Trade Ltd. Co. Logsign SIEM allows Retrieve Embedded Sensitive Data. This |
| CVE-2026-14567 | Deferred | 未確認 | CWE-200 | The User Frontend WordPress plugin before 4.3.10 does not restrict access to its user directory search endpoint, allowing unauthenticated attackers to retrieve the email address a |
| CVE-2026-14574 | Analyzed | 未確認 | CWE-1321 | In Eclipse Theia versions 0.7.0 and up until including 1.73.1, the `PreferenceUtils.merge` function in `@theia/core` recursively merges preference values without rejecting prototyp |
| CVE-2026-14587 | Analyzed | 未確認 | CWE-130 | Neo4j's Bolt modern handshake decoder treats an overlong capability bit mask the same way it treats a truncated bit mask. When an unauthenticated client sends a selected protocol v |
| CVE-2026-14596 | Deferred | 未確認 | CWE-287 | The DynamicKit for Elementor WordPress plugin before 1.0.3 does not validate the host of a user-supplied URL used as the base of the password-reset link it emails, allowing unauthe |
| CVE-2026-14601 | Deferred | 未確認 | CWE-89 | The Link Whisper Free WordPress plugin before 0.9.7 does not properly sanitize and escape a parameter before using it in a SQL query, allowing authenticated users with the Editor r |
| CVE-2026-14644 | Analyzed | 未確認 | CWE-843 | Nexus Repository 3 contained a privilege escalation vulnerability in the REST privileges API. An authenticated user with permission to manage privileges could, under certain role c |
| CVE-2026-14662 | Modified | 未確認 | CWE-190 | Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bound |
| CVE-2026-14663 | Modified | 未確認 | CWE-313, CWE-345 | Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertext. The OpenSSL version and OpenSSL conf |
| CVE-2026-14664 | Modified | 未確認 | CWE-122 | Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via text that would not pass encoding |
| CVE-2026-14666 | Modified | 未確認 | CWE-1250 | Incomplete tracking in PostgreSQL of changes to role membership, role attributes, and database ownership allows a query to continue using cached row-level security policies after t |
| CVE-2026-14668 | Modified | 未確認 | CWE-843 | Type confusion regarding input of PostgreSQL ctid data type selectivity estimator allows an object creator to view a calculation derived from the value of an arbitrary 4-byte span |
| CVE-2026-14669 | Modified | 未確認 | CWE-122 | Heap buffer overflow in PostgreSQL to_char(timestamptz) allows the party choosing the timezone to execute arbitrary code as the operating system user running the database, via a lo |
| CVE-2026-14670 | Modified | 未確認 | CWE-122 | Heap buffer overflow in PostgreSQL plperl return of a tied hash allows the function owner to execute arbitrary code as the operating system user running the database, via a crafted |
| CVE-2026-14671 | Modified | 未確認 | CWE-843 | Type confusion in PostgreSQL module "refint" allows an object creator to execute arbitrary code as the operating system user running the database. The fix for this emerged as a no |
| CVE-2026-14672 | Modified | 未確認 | CWE-204 | Observable response discrepancy in PostgreSQL SCRAM authentication allows an unauthenticated user to test the existence of a user via observing the SCRAM iteration count. This req |
| CVE-2026-14673 | Modified | 未確認 | CWE-426 | Untrusted search path in PostgreSQL amcheck allows a grantee of amcheck function EXECUTE privilege to execute arbitrary functions as the owners of expression indexes that depend on |
| CVE-2026-14676 | Modified | 未確認 | CWE-122 | Heap buffer overflow in PostgreSQL pg_stat_statements allows the query author to execute arbitrary code as the operating system user running the database, via crafted queries conta |
| CVE-2026-14677 | Modified | 未確認 | CWE-190 | Integer wraparound in PostgreSQL 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write out-of-bounds via crafted funct |
| CVE-2026-14678 | Modified | 未確認 | CWE-126 | Buffer over-read in PostgreSQL pg_trgm index picksplit function reads past end of a heap buffer. This might allow a table maintainer to infer limited memory values, via the lossy |
| CVE-2026-14679 | Modified | 未確認 | CWE-121 | Stack buffer overflow in PostgreSQL argument name matching allows an object creator to achieve unknown impacts via OUT parameter count. The attack can write only 0x0 and 0x1 bytes |
| CVE-2026-14680 | Modified | 未確認 | CWE-843 | Type confusion with PostgreSQL "internal" data type arguments allows any user to execute arbitrary code as the operating system user running the database, via calls to functions wi |
| CVE-2026-14681 | Modified | 未確認 | CWE-924 | Improper enforcement of message integrity in PostgreSQL GSSAPI support allows a user to negotiate GSSAPI contrary to pg_hba.conf rules, via initial direct TLS connection. Despite |
| CVE-2026-14682 | Analyzed | 未確認 | CWE-789 | In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-front allocation on a definite-length read. This issue also affects Bouncy Castle for Java LTS before 2.73.12, |
| CVE-2026-14696 | Awaiting Analysis | 未確認 | CWE-401 | When Ethernet bridging is enabled (CONFIG_NET_ETHERNET_BRIDGE), eth_bridge_input_process() in subsys/net/l2/ethernet/bridge/bridge_input.c decides how each frame received on a brid |
| CVE-2026-14697 | Awaiting Analysis | 未確認 | CWE-401 | net_ipv6_send_ns() in subsys/net/ip/ipv6_nbr.c allocates a transmit net_pkt for a Neighbor Solicitation. When it is called with a data packet pending on an unresolved neighbor and |
| CVE-2026-14804 | Deferred | 未確認 | CWE-321 | Use of hard-coded cryptographic key vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Read Sensitive Constants Within an Exec |
| CVE-2026-14812 | Deferred | 未確認 | CWE-912 | The Premium SEO WordPress plugin is malicious: it ships an unauthenticated backdoor that creates a hidden administrator account and, in some builds, also enables remote code execut |
| CVE-2026-14816 | Deferred | 未確認 | CWE-284 | The GDPR Framework By Data443 WordPress plugin before 2.4.0 does not properly verify authorization or the identity of the data subject when recording cookie-consent choices and pri |
| CVE-2026-14817 | Deferred | 未確認 | CWE-79 | The Element Pack Addons for Elementor WordPress plugin before 8.7.13 does not sanitize option values passed through certain data attributes before a bundled front-end library re-p |
| CVE-2026-14818 | Awaiting Analysis | 未確認 | CWE-22 | A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel ATP series firmware versions from V4.32 through V5.42 Patch 1, USG FLEX series firmwa |
| CVE-2026-14822 | Deferred | 未確認 | CWE-284 | The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not perform any authorization check on one of its order-management REST endpoints, allowing unauthenticated |
| CVE-2026-14823 | Deferred | 未確認 | CWE-639 | The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not properly verify authorization on some of its seating actions, allowing users with contributor-level acc |
| CVE-2026-14824 | Deferred | 未確認 | CWE-79 | The Quiz and Survey Master (QSM) WordPress plugin before 11.2.2 does not properly escape a question setting before outputting it into an unquoted HTML attribute, allowing users wi |
| CVE-2026-14825 | Deferred | 未確認 | CWE-639 | The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not perform a per-object ownership check before saving a quiz's front-end text settings, allowing users with c |
| CVE-2026-14826 | Deferred | 未確認 | CWE-639 | The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not perform a per-object ownership check on the REST routes that return a quiz's email-notification and result |
| CVE-2026-14829 | Deferred | 未確認 | CWE-284 | The Checkimate — WooCommerce Checkout, Abandoned Cart Recovery & Order Bumps WordPress plugin through 1.0.13 does not properly restrict access to its license-management functionali |
| CVE-2026-14831 | Deferred | 未確認 | CWE-602 | The Easy Booking WordPress plugin before 3.5.0 does not re-enforce a bookable product's configured minimum booking duration on the server side when adding to cart and calculating t |
| CVE-2026-14832 | Deferred | 未確認 | CWE-639 | The ShopSmart Loyalty for WooCommerce WordPress plugin through 1.0.0 does not perform any authorization or ownership check on a phone-number lookup exposed to unauthenticated users |
| CVE-2026-14835 | Deferred | 未確認 | CWE-79 | The SOGO Add Script to Individual Pages Header Footer WordPress plugin through 3.9 does not sanitise or escape the custom header/footer script values saved from its post metabox, a |
| CVE-2026-14836 | Deferred | 未確認 | CWE-287 | The Login & Register Forms WordPress plugin before 3.2.5 does not properly enforce the rate limit on its password-reset verification-code flow, keying both the verification code a |
| CVE-2026-14838 | Deferred | 未確認 | CWE-598 | Use of GET request method with sensitive query strings vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Session Hijacking. |
| CVE-2026-14839 | Deferred | 未確認 | CWE-200 | The Mapster WP Maps WordPress plugin before 1.24.0 does not perform any authorization or post-status check on a public REST endpoint, allowing unauthenticated users to retrieve the |
| CVE-2026-14840 | Deferred | 未確認 | CWE-290 | The YOP Poll WordPress plugin before 7.0.6 does not validate the connection's origin IP address and instead trusts client-controlled forwarding headers when enforcing its per-IP vo |
| CVE-2026-14841 | Deferred | 未確認 | CWE-79 | The King Addons for Elementor WordPress plugin before 51.1.76 does not escape a user-supplied grid setting before reflecting it into an HTML attribute in an unauthenticated AJAX r |
| CVE-2026-14842 | Deferred | 未確認 | CWE-639 | The Events Made Easy WordPress plugin before 3.1.2 does not bind the payment authorization token to the payment record being charged, allowing unauthenticated attackers to pay a lo |
| CVE-2026-14848 | Deferred | 未確認 | CWE-284 | The Paid Membership Subscriptions WordPress plugin before 3.0.8 does not verify that the subscription being modified through its change-subscription checkout belongs to the curren |
| CVE-2026-14853 | Deferred | 未確認 | CWE-862 | The WooCommerce Bookings WordPress plugin before 3.9.0 does not perform a capability check on one of its AJAX actions, and its nonce check can be bypassed by omitting the token, al |
| CVE-2026-14857 | Deferred | 未確認 | CWE-639 | The WP Crowdfunding WordPress plugin before 2.2.1 does not verify ownership of a campaign before allowing its update history to be modified and a notification email sent to its bac |
| CVE-2026-14858 | Deferred | 未確認 | CWE-639 | The WP Crowdfunding WordPress plugin before 2.2.1 does not verify order ownership before returning order details, allowing any authenticated users such as Subscribers to read the p |
| CVE-2026-14859 | Deferred | 未確認 | CWE-284 | The WP Crowdfunding WordPress plugin before 2.2.1 does not check the campaign-submission capability in one of its AJAX actions, allowing any authenticated users such as Subscribers |
| CVE-2026-14860 | Deferred | 未確認 | CWE-918 | The Podcast Player WordPress plugin before 8.3.1 does not validate the destination of a server-side request built from user-supplied input, allowing unauthenticated attackers to m |
| CVE-2026-14861 | Deferred | 未確認 | CWE-639 | The User Verification by PickPlugins WordPress plugin through 2.0.47 does not verify that a request to resend a verification email is authorized to act on the supplied user, nor bi |
| CVE-2026-14863 | Deferred | 未確認 | CWE-78 | FileRun up to and including version 2026.2.0 contains an OS command injection vulnerability that allows authenticated attackers to achieve remote code execution by uploading a file |
| CVE-2026-14864 | Deferred | 未確認 | CWE-79 | The JetEngine WordPress plugin before 3.8.12 does not escape a post meta value before outputting it through one of its shortcodes, allowing users with the Contributor role and abov |
| CVE-2026-14866 | Analyzed | 未確認 | CWE-798 | IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to injection of rogue certificate authority due to publicly writeable truststore. |
| CVE-2026-14872 | Deferred | 未確認 | CWE-89 | The Database for Contact Form 7, WPforms, Elementor forms WordPress plugin before 1.5.5 does not properly sanitise and escape a parameter before using it in a SQL statement, leadin |
| CVE-2026-14875 | Analyzed | 未確認 | CWE-426 | IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable directory. |
| CVE-2026-14886 | Awaiting Analysis | 未確認 | CWE-862 | Vault Enterprise's identity entity batch-delete endpoint is vulnerable to a cross-namespace authorization bypass that may allow an authenticated caller in one namespace to permanen |
| CVE-2026-14920 | Deferred | 未確認 | CWE-89 | ## Summary |
| CVE-2026-14925 | Deferred | 未確認 | CWE-200 | The Import WP WordPress plugin before 2.14.23 does not perform any authorization check on one of its export-file download handlers, allowing unauthenticated attackers to download |
| CVE-2026-14936 | Deferred | 未確認 | CWE-345 | The Simple Membership WordPress plugin before 4.7.7 does not verify that a PayPal payment notification was sent to the site's own configured merchant account before activating a me |
| CVE-2026-14938 | Deferred | 未確認 | CWE-639 | The FluentBoards WordPress plugin before 1.95.3 does not verify that the items selected for a board import operation belong to a board the requesting user is authorized to access, |
| CVE-2026-14939 | Deferred | 未確認 | CWE-918 | The Visualizer WordPress plugin before 4.0.6 does not restrict a user-supplied URL to safe address ranges before fetching it server-side, allowing users with Contributor-level acc |
| CVE-2026-14941 | Deferred | 未確認 | CWE-862 | The Customer Reviews for WooCommerce WordPress plugin before 5.116.0 does not perform nonce or capability checks on several settings-related AJAX actions, allowing users with minim |
| CVE-2026-14942 | Rejected | 未確認 | Rejected reason: This CVE ID was assigned to a reported vulnerability in the Customer Reviews for WooCommerce WordPress plugin and was never published. The report was withdrawn: th | |
| CVE-2026-14943 | Deferred | 未確認 | CWE-200 | The Password Protected — Lock Entire Site, Pages, Posts, Categories, and Partial Content WordPress plugin before 2.8.4 does not restrict REST API access to authenticated users when |
| CVE-2026-14946 | Deferred | 未確認 | CWE-434 | A high privileged remote attacker can upload a .php file and then request it directly from /uploads/<filename>.php to achieve arbitrary code execution due to improper file type val |
| CVE-2026-14947 | Deferred | 未確認 | CWE-24 | A high-privileged remote attacker can upload malicious ZIP archive containing directory traversal sequences such as ../ can escape the intended extraction directory and write files |
| CVE-2026-14948 | Deferred | 未確認 | CWE-532 | A low privileged remote attacker can hijack an active administrative session without needing to know the administrator password by extracting live plaintext session identifiers for |
| CVE-2026-14949 | Deferred | 未確認 | CWE-863 | A low privileged remote attacker with a valid session can submit a request to the user creation functionality exposed through /api/user/add.php to create new accounts with arbitrar |
| CVE-2026-14950 | Deferred | 未確認 | CWE-613 | An unauthenticated remote attacker in possession of a valid session identifier is able to continue using the session after it should have expired. This increases the risk associate |
| CVE-2026-14951 | Deferred | 未確認 | CWE-352 | An low privileged remote attacker can cause authenticated users to perform unintended actions in the FDS Web interface using malicious web pages. |
| CVE-2026-14952 | Deferred | 未確認 | CWE-306 | An unauthenticated remote attacker can retrieve sensible files from the FDS Web server, such as the backup archive at /FdsBackup.zip and additional files under /downloads/*, direct |
| CVE-2026-14953 | Deferred | 未確認 | CWE-425 | A low-privileged remote attacker can enumerate all configured users and identify which accounts hold elevated privileges using the endpoint /api/user/fetch-all.php. |
| CVE-2026-14970 | Analyzed | 未確認 | CWE-120 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM server process is crashing during client registration due to buffer overflow. |
| CVE-2026-14978 | Analyzed | 未確認 | CWE-176 | HashiCorp go-slug 0.4.0 through 0.18.2 could allow a local attacker to bypass .terraformignore exclusions and cause sensitive files to be included in Terraform slug uploads due to |
| CVE-2026-15001 | Deferred | 未確認 | CWE-269 | The bLoyal: Loyalty & Promotions by bLoyal plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.1.611.78. This is due to the AJAX acti |
| CVE-2026-15002 | Deferred | 未確認 | CWE-79 | The Platnosci Online Blue Media (Autopay) plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 5.0.0 via the 'bm_woocommerce_css_edit |
| CVE-2026-15006 | Deferred | 未確認 | CWE-22 | The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and inc |
| CVE-2026-15009 | Deferred | 未確認 | CWE-79 | The Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'soundFile' |
| CVE-2026-15018 | Deferred | 未確認 | CWE-89 | The Database Collation Fix plugin for WordPress is vulnerable to time-based SQL Injection via the 'force-collation-algorithm' parameter in all versions up to, and including, 1.2.10 |
| CVE-2026-15023 | Deferred | 未確認 | CWE-89 | The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to generic SQL Injection via Stored 'meta_key' via Event/Location Duplicate Action in |
| CVE-2026-15032 | Deferred | 未確認 | CWE-79 | The Comments WordPress plugin before 7.6.60 does not properly escape a user-supplied URL before outputting it inside an HTML attribute, allowing unauthenticated users to store a C |
| CVE-2026-15038 | Deferred | 未確認 | CWE-287 | The InfiniteWP Client WordPress plugin before 1.13.6 does not properly verify the site-connection state and the authenticity of requests to its remote-management endpoint on WordPr |
| CVE-2026-15039 | Deferred | 未確認 | CWE-434 | The giftware WordPress plugin before 4.2.10 does not validate the type of uploaded files in one of its upload paths, allowing unauthenticated users to upload arbitrary files, inclu |
| CVE-2026-15045 | Deferred | 未確認 | CWE-472 | The Wallet System for WooCommerce WordPress plugin before 2.7.10 does not validate a user-supplied wallet amount against the customer's actual stored balance during checkout, allow |
| CVE-2026-15046 | Deferred | 未確認 | CWE-352 | The LitExtension WordPress plugin through 1.2.5 does not verify a nonce before an administrative action that overwrites the store-migration connector's authentication token, allowi |
| CVE-2026-15047 | Deferred | 未確認 | CWE-79 | The s2Member WordPress plugin before 260805 does not escape several shortcode attributes before outputting them inside an inline script context, allowing users with contributor-le |
| CVE-2026-15049 | Deferred | 未確認 | CWE-434 | The Depicter — Popup & Slider Builder WordPress plugin before 4.8.0 does not validate the type of a file uploaded through its import feature and does not remove a malformed upload, |
| CVE-2026-15052 | Deferred | 未確認 | CWE-79 | The MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Form Field Values in all versions up |
| CVE-2026-15055 | Analyzed | 未確認 | CWE-770 | In Bouncy Castle for Java before 1.85, PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy |
| CVE-2026-15056 | Deferred | 未確認 | CWE-22 | The StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and in |
| CVE-2026-15059 | Awaiting Analysis | 未確認 | CWE-22, CWE-59 | Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation. |
| CVE-2026-15060 | Awaiting Analysis | 未確認 | CWE-284, CWE-862 | When systemd-machined >= v259 (or v258 with a custom `polkit` policy that allows `register-machine` access) is running on a desktop system, an unprivileged user logged in a desktop |
| CVE-2026-15061 | Analyzed | 未確認 | CWE-22 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 's nimesis registration service could allow a remote attacker to overwrite files due to path traversal. |
| CVE-2026-15065 | Analyzed | 未確認 | CWE-312 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to bypass security restrictions due to the exposure of intermediate certificate authority private ke |
| CVE-2026-15066 | Deferred | 未確認 | CWE-79 | The Loco Translate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PO File Extracted Comments in all versions up to, and including, 2.8.7 due to insufficient |
| CVE-2026-15068 | Analyzed | 未確認 | CWE-78 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used |
| CVE-2026-15078 | Analyzed | 未確認 | CWE-295 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to gain unauthorized access to AIX systems due to improper validation of TLS certificates. |
| CVE-2026-15088 | Awaiting Analysis | 未確認 | CWE-20 | Vulnerability in Drupal Development Environment. This issue affects Development Environment versions: *.*. |
| CVE-2026-15141 | Analyzed | 未確認 | CWE-346 | The web interface of the affected device relies on the HTTP referrer header as part of request validation. Requests containing empty Referer value, or omitting the Referer header |
| CVE-2026-15142 | Deferred | 未確認 | CWE-269 | The Real Estate Manager Pro plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 12.8.6. This is due to improper capability handling in |
| CVE-2026-15147 | Deferred | 未確認 | CWE-345, CWE-639 | The Five Star Restaurant Reservations WordPress plugin before 2.7.23 does not verify the authenticity of incoming payment notifications, failing to validate the payment recipient, |
| CVE-2026-15148 | Deferred | 未確認 | CWE-345 | The WP Events Manager WordPress plugin before 2.2.5 does not verify that an incoming payment notification originates from the site's configured merchant account, nor that the paid |
| CVE-2026-15149 | Deferred | 未確認 | CWE-20, CWE-472 | The WP Hotel Booking WordPress plugin before 2.3.3 does not ensure that room quantities and the resulting order total are non-negative when placing a booking, and relies on client- |
| CVE-2026-15150 | Deferred | 未確認 | CWE-345 | The myCred WordPress plugin before 3.2.5 does not verify that the receiver of an incoming payment gateway notification matches the site's configured merchant account, allowing unau |
| CVE-2026-15151 | Deferred | 未確認 | CWE-284 | The Five Star Restaurant Reservations WordPress plugin before 2.7.23 does not perform a capability check on one of its AJAX actions, allowing users with the lowest booking-managem |
| CVE-2026-15152 | Deferred | 未確認 | CWE-345 | The WP Hotel Booking WordPress plugin before 2.3.2 does not verify that a payment notification corresponds to a payment made to the site's own merchant account, nor that the paid a |
| CVE-2026-15162 | Deferred | 未確認 | CWE-89 | The Object Sync for Salesforce plugin is vulnerable to unauthenticated SQL Injection via the wordpress_object_type parameter of its /wp-json/object-sync-for-salesforce/push/ REST r |
| CVE-2026-15203 | Deferred | 未確認 | CWE-1191 | Improper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 allows attackers to gain read/write access to internal valu |
| CVE-2026-15205 | Deferred | 未確認 | CWE-89 | The Paymob for WooCommerce WordPress plugin before 4.1.9 does not properly sanitise a client-supplied identifier before using it in a SQL query within its public, unauthenticated p |
| CVE-2026-15206 | Deferred | 未確認 | CWE-287 | The SMS Alert WordPress plugin before 3.9.8 does not bind its "mobile verified" session flag to the phone number that was actually verified: after an attacker verifies an OTP sent |
| CVE-2026-15208 | Deferred | 未確認 | CWE-345 | The RegistrationMagic WordPress plugin before 6.0.9.5 does not compare the verified PayPal capture's amount, currency, payee, or prior use against the registration it is finalising |
| CVE-2026-15210 | Deferred | 未確認 | CWE-287 | The OTP Login With Phone Number, OTP Verification WordPress plugin before 1.8.71 does not limit the number of OTP verification attempts or invalidate a one-time login code after a |
| CVE-2026-15211 | Deferred | 未確認 | CWE-345 | The Subscriptions for WooCommerce WordPress plugin before 2.0.1 does not validate the payment amount or bind the PayPal order token to the order being completed on the WooCommerce |
| CVE-2026-15213 | Deferred | 未確認 | The Welcart e-Commerce WordPress plugin before 2.11.33 does not verify the authenticity of its convenience-store / bank-transfer settlement callback: an unauthenticated request can | |
| CVE-2026-15214 | Deferred | 未確認 | CWE-639 | The Subscriptions for WooCommerce WordPress plugin before 2.0.1 does not verify that the requester owns the subscription being viewed before rendering its details, allowing any aut |
| CVE-2026-15215 | Deferred | 未確認 | CWE-269 | The Subscriptions for WooCommerce WordPress plugin before 2.0.1 does not verify the user's capability before installing and activating a Subscriptions for WooCommerce WordPress plu |
| CVE-2026-15216 | Analyzed | 未確認 | CWE-79 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have a |
| CVE-2026-15217 | Analyzed | 未確認 | CWE-79 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have a |
| CVE-2026-15218 | Awaiting Analysis | 未確認 | CWE-266 | A flaw was found in the maas-api and maas-controller ServiceAccounts within Red Hat OpenShift AI. These ServiceAccounts are granted cluster-wide permissions that exceed their opera |
| CVE-2026-15229 | Deferred | 未確認 | CWE-863 | The Pinpoint Booking System WordPress plugin through 2.9.9.7.1 does not validate the booking price on the server side, allowing unauthenticated users to create bookings at an arbi |
| CVE-2026-15230 | Deferred | 未確認 | CWE-284 | The YayPricing WordPress plugin before 3.5.7 does not perform capability checks on several of its REST API routes, relying only on a shared nonce, allowing any authenticated user |
| CVE-2026-15231 | Deferred | 未確認 | CWE-639 | The Tag, Category, and Taxonomy Manager WordPress plugin before 3.51.0 does not verify that a user is authorized to access a referenced post before processing it and returning der |
| CVE-2026-15233 | Deferred | 未確認 | CWE-79 | The Nested Pages WordPress plugin before 3.2.15 does not properly escape post titles before outputting them into HTML attributes on an administrative listing screen, allowing users |
| CVE-2026-15234 | Deferred | 未確認 | CWE-79 | The Codeless Page Builder WordPress plugin through 1.1.4 does not sanitize or validate a shortcode attribute before using it as an HTML tag name when rendering content, allowing us |
| CVE-2026-15236 | Deferred | 未確認 | CWE-200 | The Gallery for Google Photos WordPress plugin before 1.2.1 does not properly restrict access to the stored third-party OAuth credentials of the connected account, exposing the pe |
| CVE-2026-15237 | Deferred | 未確認 | CWE-862 | The MotoPress Hotel Booking WordPress plugin before 6.2.3 does not perform any authorization or ownership check on a REST endpoint that creates payment records, allowing unauthenti |
| CVE-2026-15238 | Deferred | 未確認 | CWE-639 | The MotoPress Hotel Booking WordPress plugin before 6.2.3 does not verify record ownership before updating customer records, allowing any authenticated user with a low-privileged a |
| CVE-2026-15239 | Deferred | 未確認 | CWE-345 | The Simple CAPTCHA with Cloudflare Turnstile WordPress plugin before 1.42.0 does not bind its Turnstile validation cache to the single-use challenge token in its Forminator integra |
| CVE-2026-15241 | Deferred | 未確認 | CWE-284 | The AI ChatBot for WooCommerce WordPress plugin before 4.8.4 does not perform any authorization or nonce check on one of its AJAX actions, allowing unauthenticated users to abuse |
| CVE-2026-15244 | Deferred | 未確認 | CWE-22 | The HUSKY WordPress plugin before 1.4.1 does not sanitize a stored setting value against directory traversal before concatenating it into a file inclusion path, allowing users wit |
| CVE-2026-15245 | Deferred | 未確認 | CWE-79 | The BNE Testimonials WordPress plugin before 2.0.8.2 does not properly escape a shortcode attribute for a JavaScript context before echoing it into an inline script, allowing users |
| CVE-2026-15246 | Deferred | 未確認 | CWE-345, CWE-862 | The RealHomes Memberships WordPress plugin before 3.1.0 does not verify that a membership payment actually completed, nor check a nonce or the user's capability, before granting a |
| CVE-2026-15248 | Deferred | 未確認 | CWE-862 | The Meta Box WordPress plugin before 5.13.1 does not verify that a user is authorized to delete the supplied attachment before deleting it, allowing users with a low-privilege role |
| CVE-2026-15249 | Deferred | 未確認 | CWE-79 | The Patterns Kit WordPress plugin through 1.0.3 does not escape a link attribute before its client-side script inserts it into the page, allowing users with a role as low as Contri |
| CVE-2026-15253 | Deferred | 未確認 | CWE-79 | The Easy Media Replace WordPress plugin through 0.2.0 does not sanitise and escape an attachment title before outputting it in an HTML attribute in the media library list view, all |
| CVE-2026-15254 | Deferred | 未確認 | CWE-863 | The Simply Schedule Appointments WordPress plugin before 1.6.12.11 does not perform a capability check on an administrative appointment-listing shortcode, and its per-user result s |
| CVE-2026-15256 | Deferred | 未確認 | CWE-74 | The Ninja Forms WordPress plugin before 3.14.10 does not prevent user-supplied query-string input, used to pre-populate a form field's default value, from being processed as a shor |
| CVE-2026-15260 | Deferred | 未確認 | CWE-639 | The GEO my WP WordPress plugin before 4.5.5.3 does not perform any ownership or capability check on two of its logged-in AJAX actions, allowing users with subscriber-level access o |
| CVE-2026-15262 | Deferred | 未確認 | CWE-79 | The Admin Columns for ACF Fields WordPress plugin through 0.3.2 does not escape Advanced Custom Fields values before outputting them in the WordPress admin list-table columns, allo |
| CVE-2026-15281 | Deferred | 未確認 | CWE-89 | The User Access Manager plugin for WordPress is vulnerable to Second-Order SQL Injection via the 'id' parameter of the wp_ajax_save-attachment-compat AJAX action in versions up to, |
| CVE-2026-15303 | Deferred | 未確認 | CWE-287 | The 6Storage Rentals plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.27.0. This is due to the six_storage_create_wp_user() AJAX hand |
| CVE-2026-15307 | Analyzed | 未確認 | CWE-73, CWE-918 | An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. GeoDjango spatial lookups optimistically parse the right-hand-side value as a raster by passing it to the |
| CVE-2026-15310 | Awaiting Analysis | 未確認 | CWE-400 | When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memo |
| CVE-2026-15312 | Deferred | 未確認 | CWE-269 | The Propovoice: All-in-One Client Management System plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.7.8. This is due to the `crea |
| CVE-2026-15314 | Analyzed | 未確認 | CWE-120 | Tapo P110 v1 smart Wi-Fi Plug contains an improper boundary validation vulnerability in the handling of authenticated HTTP request bodies due to insufficient input validation befor |
| CVE-2026-15315 | Analyzed | 未確認 | CWE-287 | Tapo C120 v1 and C200 v5 contain an improper authentication vulnerability within the login authentication verification module. An attacker on the local network can exploit weakness |
| CVE-2026-15316 | Analyzed | 未確認 | CWE-20 | An improper input validation vulnerability in the configuration service for processing encrypted credential data has been identified in Tapo C200 v5. An attacker can send oversize |
| CVE-2026-15337 | Analyzed | 未確認 | CWE-789 | An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. `django.utils.translation.check_for_language()` is subject to a potential denial-of-service attack when gi |
| CVE-2026-15341 | Deferred | 未確認 | CWE-287 | The User Session Synchronizer plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 1.4.0. The `synchronize_ |
| CVE-2026-15345 | Deferred | 未確認 | CWE-862 | The ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.11.5. This i |
| CVE-2026-15351 | Deferred | 未確認 | CWE-89 | The WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors plugin for WordPress is vulnerable to generic SQL Injection via the 'status' parameter in all ver |
| CVE-2026-15359 | Deferred | 未確認 | CWE-862 | The Templately WordPress plugin before 3.7.1 does not have an authorisation check on one of its request handlers, allowing unauthenticated attackers to overwrite the administrator |
| CVE-2026-15360 | Deferred | 未確認 | CWE-89 | The Ajax Load More WordPress plugin before 8.0.1 does not properly sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated attackers to perform ti |
| CVE-2026-15361 | Deferred | 未確認 | CWE-89 | The Content Views WordPress plugin before 4.5 does not perform a capability check on one of its AJAX actions and does not properly sanitise attacker-supplied data before using it |
| CVE-2026-15365 | Deferred | 未確認 | CWE-841 | A pop-up logic flaw in a certain feature of Kids Mode allows users to bypass password verification and use Quick Apps outside the app. |
| CVE-2026-15366 | Deferred | 未確認 | CWE-653 | A control logic defect in a specific built-in webpage of Kids Mode allows users to view local gallery photos directly within the page |
| CVE-2026-15368 | Deferred | 未確認 | CWE-269 | The User Profile Builder WordPress plugin before 3.16.4 does not correctly bind the automatic login performed after user registration to the newly created account, allowing unauth |
| CVE-2026-15369 | Deferred | 未確認 | CWE-269 | The Custom User Registration Fields for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.2.3. This is due to the plugin ac |
| CVE-2026-15371 | Awaiting Analysis | 未確認 | CWE-177 | Velociraptor's web GUI allows specifying a custom type for columns in tables. The URL type takes the cell value and forms a URL which can be clicked in the GUI.The code does not li |
| CVE-2026-15372 | Deferred | 未確認 | CWE-287 | The WP 2FA WordPress plugin before 4.1.0 does not validate the second authentication factor when one of its supported methods is selected at login, allowing an attacker who alread |
| CVE-2026-15383 | Deferred | 未確認 | CWE-79 | The Blog Floating Button WordPress plugin through 1.4.20 does not sanitize or escape the visitor User-Agent header, which it stores through an unauthenticated tracking REST endpoin |
| CVE-2026-15384 | Deferred | 未確認 | CWE-287, CWE-352 | The Manual Image Crop WordPress plugin before 1.15 does not perform any capability check or nonce verification on the authenticated AJAX action that crops attachment images; its on |
| CVE-2026-15385 | Deferred | 未確認 | CWE-79 | The RT Mega Menu WordPress plugin before 1.5.2 does not perform a capability check on the AJAX action that saves mega-menu configuration and per-menu-item settings; its only gate |
| CVE-2026-15386 | Deferred | 未確認 | CWE-79 | The Meow Gallery WordPress plugin before 5.5.2 does not escape an attachment's alt text before outputting it into an attribute of the link it builds for linked galleries, allowing |
| CVE-2026-15387 | Analyzed | 未確認 | CWE-349 | GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authentica |
| CVE-2026-15388 | Deferred | 未確認 | CWE-863 | The Cookie Consent WordPress plugin before 0.0.10 does not correctly enforce its intended administrator-only capability check on its consent-settings REST routes, so they fall bac |
| CVE-2026-15403 | Deferred | 未確認 | CWE-89 | The Pinpoint Booking System – Version 2 plugin for WordPress is vulnerable to blind SQL Injection via the 'field' parameter in all versions up to, and including, 2.9.9.6.9 due to i |
| CVE-2026-15413 | Deferred | 未確認 | CWE-912 | The Link Factory WordPress plugin is a backdoor. Distributed as a "homepage sentence publisher", it exposes an operator-controlled REST API under /wp-json/link-factory/v1/ - authen |
| CVE-2026-15414 | Deferred | 未確認 | CWE-269 | The Subscriptions for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.0.0. This is due to the `save_meta_boxes()` functio |
| CVE-2026-15421 | Deferred | 未確認 | CWE-79 | The Speed Optimizer – The All-In-One Performance-Boosting Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Image Tag Attributes in all versions up to, a |
| CVE-2026-15423 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have a |
| CVE-2026-15424 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-15426 | Deferred | 未確認 | CWE-269 | The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and |
| CVE-2026-15430 | Awaiting Analysis | 未確認 | CWE-269, CWE-284, CWE-732 | Improper access control in the IRP_MJ_WRITE command interface in Wellbia XIGNCODE3 xhunter2.sys, version 2026.6.1.192, allows a local, unprivileged attacker to achieve local privi |
| CVE-2026-15441 | Deferred | 未確認 | CWE-74 | The WC Product Table Lite plugin for WordPress is vulnerable to CSS Injection in versions up to, and including, 5.6.0 via the 'laptop_scroll_offset' shortcode attribute exposed thr |
| CVE-2026-15446 | Deferred | 未確認 | CWE-79 | The EWWW Image Optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'data-script' Lazy Load Attribute in Post Content in all versions up to, and includin |
| CVE-2026-15450 | Deferred | 未確認 | CWE-22 | The Nex Forms – Ultimate Form Builder – Lite plugin for WordPress is vulnerable to arbitrary file deletion via path traversal in versions up to, and including, 9.2.3. This is due t |
| CVE-2026-15452 | Deferred | 未確認 | CWE-79 | The Smash Balloon Social Photo Feed – Easy Social Feeds Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via REQUEST_URI Query String in all versions up |
| CVE-2026-15453 | Deferred | 未確認 | CWE-89 | The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to generic SQL Injection via the 'searchTerm' parameter in all versions up to, and includ |
| CVE-2026-15459 | Deferred | 未確認 | CWE-287 | The WPMU DEV Dashboard plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.0.0. On sites not yet connected to the WPMU DEV Hub — the |
| CVE-2026-15467 | Awaiting Analysis | 未確認 | CWE-266 | A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can exploit this vulnerability by configuring a sidecar container |
| CVE-2026-15469 | Awaiting Analysis | 未確認 | CWE-321 | The use of hard-coded cryptographic key vulnerability has been identified in the mesh functionality of Deco XE75 v3, XE5300 v3.6 and WE10800 v3.6. A shared RSA-512 mesh group priv |
| CVE-2026-15534 | Awaiting Analysis | 未確認 | CWE-125, CWE-190, CWE-787 | Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch. The regex engine's supe |
| CVE-2026-15554 | Awaiting Analysis | 未確認 | CWE-295 | the Undertow AJP listener honours forged ssl_cert and is_ssl AJP attributes without requiring any shared-secret authentication. This enables an unauthenticated attacker with direct |
| CVE-2026-15555 | Awaiting Analysis | 未確認 | CWE-502 | A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filte |
| CVE-2026-15556 | Awaiting Analysis | 未確認 | CWE-347 | A flaw was found in Picketlink's SP signature validation; a SAML response containing zero assertion elements matching the signature check can allow an attacker to forge a SAML resp |
| CVE-2026-15560 | Awaiting Analysis | 未確認 | CWE-829 | when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object unmarshalling on :3528, allowing an unauthenticated attacker to lo |
| CVE-2026-15561 | Awaiting Analysis | 未確認 | CWE-770 | A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder. missing limits on size and count would allow an attacker to use an unauthenticated connection to drive the JVM |
| CVE-2026-15562 | Awaiting Analysis | 未確認 | CWE-190 | A flaw was found in EAP's jboss-remoting. A remote unauthenticated attacker who can reach :8080 (or :9990, or :4447) and complete an Upgrade: jboss-remoting handshake can cause OOM |
| CVE-2026-15563 | Awaiting Analysis | 未確認 | CWE-306 | A flaw was found in EAP's IIOP. The listener's NameService would accept bind operations without authentication, allowing an attacker to hijack JNDI lookups and binding them to a ma |
| CVE-2026-15565 | Awaiting Analysis | 未確認 | CWE-120 | A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any @ServerEndpoint class that has any @OnMessage method. T |
| CVE-2026-15567 | Awaiting Analysis | 未確認 | CWE-789 | A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2Util's GSS token decoder reads an attacker-controlled length field without bound |
| CVE-2026-15570 | Deferred | 未確認 | CWE-918 | An improper restriction of URL schemes and destinations in the SmartCenter browserseturl command in the Telefunken TE24553B45V2DZ Smart TV running on the Vestel MB181 / Voltron181 |
| CVE-2026-15571 | Awaiting Analysis | 未確認 | CWE-341 | A flaw was found in the legacy client-initiated account-linking endpoint of Keycloak, a widely used open-source identity and access management solution. The mechanism used to prote |
| CVE-2026-15572 | Analyzed | 未確認 | CWE-843 | A flaw was found in Keycloak's Dynamic Client Registration (DCR) security policy management. The "Allowed Protocol Mapper Types" policy, which restricts which types of data mappers |
| CVE-2026-15573 | Modified | 未確認 | CWE-178, CWE-551 | A flaw was found in Keycloak's Authorization Services. The component responsible for matching request paths to security policies (PathMatcher) does not properly normalize URIs befo |
| CVE-2026-15576 | Deferred | 未確認 | CWE-306 | Improper authentication in the agent receiver of Checkmk <2.5.0p10 allows an unauthenticated remote attacker to bypass mutual TLS client certificate verification of relay endpoints |
| CVE-2026-15580 | Awaiting Analysis | 未確認 | CWE-1385 | vault token disclosure via unvalidated postMessage vulnerability in N-able PassPortal allows Authentication Abuse. This issue affects the PassPortal browser extension: before 3.49 |
| CVE-2026-15581 | Awaiting Analysis | 未確認 | CWE-306 | A flaw was found in the TrustyAI Service (TAS) deployment. This vulnerability allows any pod on the cluster network to bypass authentication and directly access the TAS backend API |
| CVE-2026-15585 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AKIN Software Computer Import Export Industry and Trade Ltd. AKINSOFT Wolvox9 ERP / |
| CVE-2026-15587 | Awaiting Analysis | 未確認 | CWE-346 | Improper Privilege Management in Google SecOps (Chronicle SOAR) versions prior to 6.3.85 on Google Cloud Platform allows an authenticated attacker to escalate privileges to system- |
| CVE-2026-15599 | Deferred | 未確認 | CWE-283 | Unverified ownership vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-domain-joiner allows Privilege Abuse. This issue affects pardus-domain-joiner: |
| CVE-2026-15601 | Deferred | 未確認 | CWE-22 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Path Traversal (Zip Slip) in all versions up to, and including, 6.0.13 via the |
| CVE-2026-15602 | Deferred | 未確認 | CWE-89 | The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to generic SQL Injection via the 'additional_params' parameter in all versions up to, and inc |
| CVE-2026-15603 | Analyzed | 未確認 | CWE-117 | morgan is an HTTP request logger middleware for Node.js. In versions prior to 1.12.0, the internal helper that escapes log token values did not neutralize the Unicode line separato |
| CVE-2026-15604 | Deferred | 未確認 | CWE-79 | The Toocheke Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.10 via the 'series_bg_color' post meta field. This is d |
| CVE-2026-15606 | Deferred | 未確認 | CWE-862 | The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.29.9. This is due to the plugin not properly ver |
| CVE-2026-15623 | Awaiting Analysis | 未確認 | CWE-89 | A SQL Injection vulnerability in a legacy dashboard widget API in Google Cloud Google SecOps (Chronicle SOAR) versions prior to 6.3.85 on Google Cloud Platform allows an authentica |
| CVE-2026-15644 | Deferred | 未確認 | CWE-79 | The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'style' Shortcode Attribute in all versions up to, and includin |
| CVE-2026-15645 | Deferred | 未確認 | CWE-79 | The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'nav' Shortcode Attribute in all versions up to, and including, |
| CVE-2026-15649 | Deferred | 未確認 | CWE-79 | The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 3.1. |
| CVE-2026-15656 | Analyzed | 未確認 | CWE-614 | IBM Maximo Application Suite 9.2, 9.1, and 9.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sendi |
| CVE-2026-15662 | Deferred | 未確認 | CWE-79 | The Advanced Woo Labels – Product Labels & Badges for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bg_color' parameter in all versions up |
| CVE-2026-15679 | Awaiting Analysis | 未確認 | CWE-502 | Hugging Face PyTorch Image Models checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary |
| CVE-2026-15686 | Deferred | 未確認 | CWE-253 | Adminer multi_query Incorrect Check of Function Return Value Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected i |
| CVE-2026-15689 | Deferred | 未確認 | CWE-640 | Dancer2::Plugin::Auth::Extensible versions through 0.713 for Perl allow password reset link poisoning via the request Host header in _default_email_password_reset and _default_welc |
| CVE-2026-15706 | Deferred | 未確認 | CWE-306 | Missing authentication for critical function vulnerability in Baylan Measuring Instruments Industry and Trade Inc. Baylan Smart Meter Management Application (BMS) allows Authentica |
| CVE-2026-15721 | Deferred | 未確認 | CWE-312 | Cleartext storage of sensitive information vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows SQL Injection. This issue affec |
| CVE-2026-15726 | Deferred | 未確認 | CWE-79 | The Serious Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'theme' Shortcode Attribute in all versions up to, and including, 1.4.0 due to insufficient |
| CVE-2026-15732 | Deferred | 未確認 | CWE-918 | A Server-Side Request Forgery (SSFR) vulnerability exist in WGDashboard version 4.2.3 and earlier. The webhook functionality allows authenticated attackers to make arbitrary HTTP r |
| CVE-2026-15733 | Deferred | 未確認 | CWE-78 | A Remote Code Execution (RCE) vulnerability exist in WGDashboard version 4.2.3 and earlier. Multiple OS command injection allows authenticated attackers to execute arbitrary comman |
| CVE-2026-15734 | Deferred | 未確認 | CWE-1336 | A Server-Side Template Injection (SSTI) vulnerability in WGDashboard version 4.3.2 and earlier, allows authenticated attackers to execute arbitrary code as root. |
| CVE-2026-15741 | Modified | 未確認 | CWE-89 | SQL injection in PostgreSQL EXTRACT() deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition. Attacks affect expression deparse con |
| CVE-2026-15742 | Modified | 未確認 | CWE-190 | Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct writes to a huge range of addresses, executing arbitrary code as the operating system user running the databa |
| CVE-2026-15743 | Deferred | 未確認 | CWE-524 | Catalyst::Plugin::Static::Simple versions through 0.38 for Perl mark responses as publicly cacheable. The _serve_static method always sets the Cache-Control header to "public", wi |
| CVE-2026-15748 | Deferred | 未確認 | CWE-434 | The Forminator Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.56.1 via the handle_file_upload function. This is due to in |
| CVE-2026-15754 | Analyzed | 未確認 | CWE-863 | Mattermost versions 11.7.x <= 11.7.6, 11.8.x <= 11.8.3 The access control policy unassign endpoint fails to re-validate that each target channel still belongs to the requesting adm |
| CVE-2026-15780 | Deferred | 未確認 | CWE-79 | The WP Statistics – Simple, privacy-friendly Google Analytics alternative plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'utm_campaign' parameter in all |
| CVE-2026-15790 | Deferred | 未確認 | CWE-79 | The Youtube Showcase plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 4.0.4 via the 'emd_mb_meta' shortcode. This is due to insuf |
| CVE-2026-15798 | Deferred | 未確認 | CWE-79 | The Smart Slider 3 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'slider' Block Attribute in all versions up to, and including, 3.5.1.38 due to insufficient |
| CVE-2026-15803 | Awaiting Analysis | 未確認 | CWE-611, CWE-827 | In Eclipse RDF4J, several XML parser entry points do not fully restrict XML External Entity (XXE) processing when parsing untrusted XML-based RDF data or query results, permitting |
| CVE-2026-15805 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-15806 | Awaiting Analysis | 未確認 | CWE-319, CWE-522 | The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, did not take the URL scheme into |
| CVE-2026-15816 | Awaiting Analysis | 未確認 | CWE-78 | A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. |
| CVE-2026-15826 | Deferred | 未確認 | CWE-704 | The User Profile Builder plugin for WordPress is vulnerable to Authentication Bypass via Type Confusion in versions up to, and including, 3.16.4. This is due to the wppb_log_in_use |
| CVE-2026-15830 | Modified | 未確認 | CWE-674 | An issue was discovered in Django 6.0 before 6.0.9 and 5.2 before 5.2.18. GeoDjango's `django.contrib.gis.geos.GEOSGeometry` is subject to a potential denial-of-service when parsin |
| CVE-2026-15916 | Awaiting Analysis | 未確認 | CWE-862 | Missing Authorization vulnerability in Drupal Drupal core allows Forceful Browsing. This issue affects Drupal core versions: from 0.0.0 to 10.6.13, from 11.3.0 to 11.3.14, from 11. |
| CVE-2026-15917 | Awaiting Analysis | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS). This issue affects Drupa |
| CVE-2026-15918 | Deferred | 未確認 | CWE-89 | VikAppointments Service Booking Calendar wordpress plugin is vulnerable to unauthenticated SQL injection due to one of the parameters that controls how the public reviews list is s |
| CVE-2026-15920 | Analyzed | 未確認 | CWE-83 | An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. `django.contrib.admin.utils.display_for_field()` renders `URLField` values as clickable links in the admin |
| CVE-2026-15930 | Deferred | 未確認 | CWE-862 | The Simple Membership WordPress plugin before 4.7.8 does not verify whether user creation failed during registration before using the returned value as a user ID to update an accou |
| CVE-2026-15931 | Deferred | 未確認 | CWE-79 | The Simple Membership WordPress plugin before 4.7.8 does not sanitise a subscriber name value received from an unauthenticated payment approval request, nor escape it when displayi |
| CVE-2026-15932 | Deferred | 未確認 | CWE-22 | The Support Genix WordPress plugin before 1.4.48 does not prevent directory traversal in its ticket-attachment download route, allowing unauthenticated attackers to read arbitrary |
| CVE-2026-15939 | Deferred | 未確認 | CWE-863 | The Simple Restrict WordPress plugin before 1.2.9 does not enforce its content-restriction permission check on the REST API the way it does on the front end, relying there on a gen |
| CVE-2026-15941 | Deferred | 未確認 | CWE-89 | The plugin provides an Admin Search page that allows users with the `edit_posts` capability to run Relevanssi searches from the WordPress dashboard. The AJAX handler accepts a URL- |
| CVE-2026-15948 | Deferred | 未確認 | CWE-79 | The Hydra Booking — Appointment Scheduling & Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'first_name' parameter in all versions up to |
| CVE-2026-15950 | Deferred | 未確認 | CWE-79 | The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 600+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'layoutCir |
| CVE-2026-15951 | Deferred | 未確認 | CWE-89 | The Icegram Mailer plugin for WordPress is vulnerable to SQL Injection via the 'fields' parameter in versions up to, and including, 1.0.12. This is due to insufficient escaping on |
| CVE-2026-15958 | Deferred | 未確認 | CWE-862 | The Easy Integration for Dropbox WordPress plugin before 2.2.0 does not perform authorization checks on several of its file-management AJAX actions that it also registers for unau |
| CVE-2026-15961 | Undergoing Analysis | 未確認 | CWE-134 | IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 IBM PowerVM could allow a local attacker to obtain sensitive information or cause a d |
| CVE-2026-15963 | Deferred | 未確認 | CWE-89 | The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to generic SQL Injection via 'randon_category' Quiz Option in all versions up to, a |
| CVE-2026-15964 | Deferred | 未確認 | CWE-620 | The Single Sign On For TNG plugin for WordPress is vulnerable to Authentication Bypass via unauthenticated password reset in all versions up to, and including, 2.0.0. This is due t |
| CVE-2026-15965 | Deferred | 未確認 | CWE-434 | The MaxUpload – Big File Uploads – Increase Maximum File Upload Size plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.4.0 via the |
| CVE-2026-15970 | Awaiting Analysis | 未確認 | CWE-647 | Consul Community Edition and Consul Enterprise 1.20.1 through 2.0.2 are vulnerable to an L7 intention authorization bypass when a service proxy is configured with a custom public l |
| CVE-2026-15972 | Awaiting Analysis | 未確認 | CWE-770 | Consul Community Edition and Consul Enterprise 1.13.0 through 2.0.2 are vulnerable to an unauthenticated denial of service through unbounded connection acceptance on the external g |
| CVE-2026-15973 | Deferred | 未確認 | CWE-79 | LimeSurvey Community Edition 7.0.5 contains a stored cross-site scripting vulnerability in the Survey Menu Entries administration page. An authenticated user with the global settin |
| CVE-2026-15979 | Deferred | 未確認 | CWE-22 | The Content Egg – Affiliate Product Importer & Price Comparison plugin for WordPress is vulnerable to Arbitrary File Deletion via Path Traversal in versions up to and including 11. |
| CVE-2026-15980 | Deferred | 未確認 | CWE-289 | The MyHome Core plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 4.4.5. This is due to missing authorization in the send_link() AJA |
| CVE-2026-15985 | Deferred | 未確認 | CWE-289 | The Classified Listing - Mobile Number Verification plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.6.0. This is due to missing |
| CVE-2026-15988 | Deferred | 未確認 | CWE-352 | The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.5 This is d |
| CVE-2026-15990 | Deferred | 未確認 | CWE-22 | The Formidable Charts plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.0.1 via the 'frm_graph' parameter. This makes it possible fo |
| CVE-2026-15991 | Deferred | 未確認 | CWE-862 | The File Manager plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the connector function in all versions from 6.0 - 6.9. Th |
| CVE-2026-15993 | Deferred | 未確認 | CWE-89 | The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to blind SQL Injection via '{username}' Placeholder in Dynamic-Choice |
| CVE-2026-15994 | Awaiting Analysis | 未確認 | CWE-59 | During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticat |
| CVE-2026-15996 | Analyzed | 未確認 | CWE-674 | A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause excessive CPU consumption and exhaust the pool of req |
| CVE-2026-16007 | Deferred | 未確認 | CWE-89 | AppFlowy's qcuiknote feature is affected by a SQL injection vulnerability. Authenticated users with access to the feature can inject arbitrary SQL to exfiltrate data in the underly |
| CVE-2026-16019 | Deferred | 未確認 | CWE-89 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Faydam Innovation Inc. FAYDAM Datalogger allows SQL Injection. This issue aff |
| CVE-2026-16022 | Deferred | 未確認 | CWE-78 | @oblique/cli 15.4.0 contains an OS command injection vulnerability in the project creation functionality. The CLI constructs shell commands through string concatenation and execute |
| CVE-2026-16027 | Deferred | 未確認 | CWE-918 | Server-Side request forgery (SSRF) vulnerability in Revenue Administration Türkiye's E-Signature allows Server Side Request Forgery. This issue affects Türkiye's E-Signature: from |
| CVE-2026-16030 | Deferred | 未確認 | CWE-287 | The MStore API WordPress plugin before 4.21.0 does not correctly verify the cryptographic signature of the token used to authenticate its phone-based login, allowing unauthenticat |
| CVE-2026-16032 | Deferred | 未確認 | CWE-79 | The LWS Optimize WordPress plugin before 4.1.2 does not properly escape a value submitted through an unauthenticated analytics endpoint before storing it and rendering it in an ad |
| CVE-2026-16033 | Analyzed | 未確認 | CWE-22 | A path traversal vulnerability in LXD allows an attacker to achieve arbitrary host file read or unconstrained file creation. When processing image metadata templates, LXD fails to |
| CVE-2026-16035 | Deferred | 未確認 | CWE-862 | The miniOrange 2FA WordPress plugin before 6.2.7 does not restrict who can trigger its second-factor configuration OTP send, nor bind the OTP recipient to the enrolling user's own |
| CVE-2026-16036 | Deferred | 未確認 | CWE-287 | The miniOrange 2FA WordPress plugin before 6.2.7 does not bind the second factor being configured during the pre-login two-factor challenge to the target account's existing factor |
| CVE-2026-16038 | Deferred | 未確認 | CWE-862 | The MStore API WordPress plugin before 4.21.0 does not verify the payment with the payment gateway before marking an order as paid on several of its payment-completion endpoints, |
| CVE-2026-16039 | Deferred | 未確認 | CWE-639 | The MStore API WordPress plugin before 4.21.0 does not restrict its vendor-orders endpoint to the caller's own orders, allowing any authenticated user, including Subscribers, to r |
| CVE-2026-16041 | Deferred | 未確認 | CWE-862 | The MStore API WordPress plugin before 4.21.0 does not perform authorization or purchase-ownership checks on its REST product-review creation route, allowing an unauthenticated at |
| CVE-2026-16042 | Deferred | 未確認 | CWE-862 | The LWS Optimize WordPress plugin before 3.4 does not perform a capability check on its cache-clearing actions, allowing any authenticated user, including Subscribers, to flush th |
| CVE-2026-16044 | Analyzed | 未確認 | CWE-863 | Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21 fail to prevent guest users from receiving Board Admin privileges during board archive import which allows a board member |
| CVE-2026-16045 | Analyzed | 未確認 | CWE-863 | Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21 Mattermost failed to restrict OAuth deauthorization and personal access token management endpoints to direct user sessions |
| CVE-2026-16046 | Analyzed | 未確認 | CWE-863 | Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21 fail to enforce run-state validation on write operations for finished playbook runs which allows a run participant to modi |
| CVE-2026-16047 | Analyzed | 未確認 | CWE-862 | Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fail to validate that users have read access to a channel before linking a board to it, which allows an |
| CVE-2026-16048 | Analyzed | 未確認 | CWE-863 | Mattermost versions 11.8.x <= 11.8.2, 11.7.x <= 11.7.6, 10.11.x <= 10.11.21 fail to restrict channel member role assignment to channel-scoped roles which allows a channel administr |
| CVE-2026-16049 | Awaiting Analysis | 未確認 | CWE-862 | Mattermost Plugins versions <=11.8 10.20.11 11.5.7.0 _The Mattermost GitLab plugin fails to verify channel permissions when processing API requests with a caller-supplied_ {{post_i |
| CVE-2026-16051 | Deferred | 未確認 | CWE-94 | The wpmudev-updates WordPress plugin before 5.0.1 does not verify the integrity of the packages installed through its remote management interface, nor protect those requests agains |
| CVE-2026-16053 | Awaiting Analysis | 未確認 | CWE-23 | Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerability in Exchange Online backup module. |
| CVE-2026-16054 | Deferred | 未確認 | CWE-73 | The Drag and Drop Multiple File Upload for WooCommerce WordPress plugin before 1.1.8 does not prevent unauthenticated users from obtaining a valid nonce that is the only control ga |
| CVE-2026-16055 | Deferred | 未確認 | CWE-287 | The Contest Gallery WordPress plugin before 30.0.7 does not route its front-end login through the standard WordPress authentication flow, issuing an authentication cookie directly |
| CVE-2026-16056 | Deferred | 未確認 | CWE-862 | The Contest Gallery WordPress plugin before 30.0.7 does not perform any capability or nonce check in one of its handlers, allowing any authenticated user down to Subscriber to rea |
| CVE-2026-16057 | Deferred | 未確認 | CWE-862 | The Contest Gallery WordPress plugin before 30.0.7 does not perform per-object capability or nonce checks in one of its post-deletion handlers, gating it only by a coarse role-mem |
| CVE-2026-16058 | Deferred | 未確認 | CWE-639 | The YayCurrency WordPress plugin before 3.3.5 does not perform any capability or ownership check on several of its multi-vendor integration handlers that are reachable by unauthen |
| CVE-2026-16060 | Deferred | 未確認 | CWE-434 | The Insert or Embed Articulate Content into WordPress plugin through 4.3000000027 does not correctly validate the contents of an uploaded archive, relying on a bypassable check tha |
| CVE-2026-16061 | Deferred | 未確認 | CWE-89 | The Rest Routes WordPress plugin through 5.5.5 does not sanitize and validate a value taken from the URL of one of its public REST routes before using it in a SQL query, allowing |
| CVE-2026-16062 | Deferred | 未確認 | CWE-502 | The Event Booking Manager for WooCommerce WordPress plugin before 5.3.7 does not prevent the deserialization of user-controlled input in some of its event content fields, allowing |
| CVE-2026-16063 | Deferred | 未確認 | CWE-79 | The Event Booking Manager for WooCommerce WordPress plugin before 5.3.7 does not sanitise or escape event timeline content submitted by users with post-editing access before stori |
| CVE-2026-16064 | Deferred | 未確認 | CWE-863 | The Event Booking Manager for WooCommerce WordPress plugin before 5.3.7 does not properly verify authorization on the object being modified when quick-editing events, only checkin |
| CVE-2026-16065 | Deferred | 未確認 | CWE-89 | The Welcart e-Commerce WordPress plugin before 2.11.32 does not properly sanitise a value taken from an imported CSV file before using it in a SQL statement, allowing users with th |
| CVE-2026-16066 | Deferred | 未確認 | CWE-79 | The Welcart e-Commerce WordPress plugin before 2.11.34 does not sanitise or escape a product field before outputting it on the product pages, allowing users with the Author role an |
| CVE-2026-16067 | Deferred | 未確認 | CWE-472 | The Event Booking Manager for WooCommerce (Pro) WordPress plugin before 5.0.3 does not validate the ticket price on the server during its native (non-WooCommerce) checkout, trustin |
| CVE-2026-16068 | Deferred | 未確認 | CWE-79 | The Brizy WordPress plugin before 2.8.19 does not properly restrict who can modify its site-global design data and does not sanitise part of that data before outputting it, allowi |
| CVE-2026-16069 | Deferred | 未確認 | CWE-79 | The Brizy WordPress plugin before 2.8.19 does not sanitize or escape featured-image focal-point coordinates submitted through one of its AJAX actions before storing them and later |
| CVE-2026-16070 | Deferred | 未確認 | CWE-639 | The Brizy WordPress plugin before 2.8.19 does not properly verify authorization on the object being modified before updating a template's type meta, validating a request parameter |
| CVE-2026-16071 | Modified | 未確認 | CWE-269, CWE-90 | A flaw was found in the LDAP storage provider of Keycloak, which is used to federate user identities from external directories. The issue occurs when a delegated administrator perf |
| CVE-2026-16079 | Deferred | 未確認 | CWE-89 | The Fullscreen Galleria plugin for WordPress is vulnerable to generic SQL Injection via 'href' Attribute in Post Content in all versions up to, and including, 1.6.12 due to insuffi |
| CVE-2026-16080 | Deferred | 未確認 | CWE-89 | The Image Uploader for Welcart plugin for WordPress is vulnerable to generic SQL Injection via the 'post_title' parameter in all versions up to, and including, 1.4.6 due to insuffi |
| CVE-2026-16087 | Deferred | 未確認 | CWE-89 | The Icegram Engage – Popups, Optins, CTAs & Lead Generation plugin for WordPress is vulnerable to second-order SQL Injection via 'messages[][id]' Parameter in all versions up to, a |
| CVE-2026-16090 | Deferred | 未確認 | CWE-79 | The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'heading_size' |
| CVE-2026-16091 | Deferred | 未確認 | CWE-79 | The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gamipress |
| CVE-2026-16094 | Deferred | 未確認 | CWE-89 | The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms plugin for WordPress is vulnerable to generic SQL Injection via the 'key' parameter in all versions up to, a |
| CVE-2026-16098 | Deferred | 未確認 | CWE-434 | The ProSolution WP Client plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.0.10 via the proSol_handleFileUpload function. This is |
| CVE-2026-16099 | Deferred | 未確認 | CWE-502 | The Podlove Podcast Publisher plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the create_link_item function in all version |
| CVE-2026-16100 | Modified | 未確認 | CWE-770 | A flaw was found in the user-event metrics recording of Keycloak. When metrics are enabled, the system records raw error messages from failed account operations as Prometheus metri |
| CVE-2026-16101 | Awaiting Analysis | 未確認 | CWE-290 | Spoofing an already bonded device can force either RS9116W or SiWx917 to re-pair/bond with a rogue device. See V1 in BLERP paper below |
| CVE-2026-16102 | Modified | 未確認 | CWE-284, CWE-551 | A flaw was found in the Dynamic Client Registration (DCR) component of Keycloak, an identity and access management solution. The default DCR policy fails to properly validate the c |
| CVE-2026-16137 | Analyzed | 未確認 | CWE-22, CWE-434, CWE-73 | In Progress ShareFile Storage Zones Controller v5.12.5 and below, a party with valid zone credentials can perform path traversal using resumable upload initiation endpoint, allowin |
| CVE-2026-16138 | Analyzed | 未確認 | CWE-502 | In Progress ShareFile Storage Zones Controller v5.12.5 and below versions, unsafe deserialization of untrusted file metadata can allow a user with write access to a Network share t |
| CVE-2026-16139 | Analyzed | 未確認 | CWE-20, CWE-22, CWE-73 | In Progress ShareFile Storage Zones Controller versions <= 5.12.5 and <= 6.0.2, an authenticated zone administrator can exploit improper validation in the download preparation flow |
| CVE-2026-16142 | Deferred | 未確認 | CWE-639 | The TrueBooker plugin for WordPress is vulnerable to Account Takeover in all versions up to, and including, 1.2.6. This is due to the add_front_user_update() AJAX handler being reg |
| CVE-2026-16143 | Deferred | 未確認 | CWE-79 | The VikRentItems – Flexible Rental Management System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customer email field of the booking checkout form in |
| CVE-2026-16144 | Deferred | 未確認 | CWE-94 | The Kali Forms — Contact Form & Drag-and-Drop Builder plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.4.20 via the _save_data fu |
| CVE-2026-16145 | Deferred | 未確認 | CWE-79 | The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'action' parameter in all versions |
| CVE-2026-16146 | Deferred | 未確認 | CWE-89 | The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms plugin for WordPress is vulnerable to generic SQL Injection via Pattern JSON Keys/Values in all versions up |
| CVE-2026-16149 | Deferred | 未確認 | CWE-269 | The Security Hardener plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.4.4. The vulnerability exists because the plugin's user-en |
| CVE-2026-1621 | Deferred | 未確認 | CWE-305 | Authentication bypass by primary weakness vulnerability in Universal Software Inc. E-Municipality allows Exploitation of Trusted Identifiers. This issue affects E-Municipality: fr |
| CVE-2026-16230 | Deferred | 未確認 | CWE-23 | The Formidable Digital Signatures plugin for WordPress is vulnerable to file deletion due to insufficient file path validation in the delete_file function in all versions up to, an |
| CVE-2026-16231 | Analyzed | 未確認 | CWE-79 | hbs is an Express view engine that wraps Handlebars. Its registerAsyncHelper API bypasses Handlebars' automatic HTML escaping: an async helper returns an opaque placeholder during |
| CVE-2026-16233 | Analyzed | 未確認 | CWE-787 | There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation require |
| CVE-2026-16234 | Analyzed | 未確認 | CWE-125 | There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation require |
| CVE-2026-16238 | Modified | 未確認 | CWE-843 | Type confusion in PostgreSQL pg_restore_attribute_stats() allows an object creator to execute arbitrary code as the operating system user running the database, via conflation of ra |
| CVE-2026-16239 | Modified | 未確認 | CWE-843 | Type confusion in PostgreSQL "portal"/cursor lifecycle allows a user to execute arbitrary code as the operating system user running the database, via re-creation of a cursor or oth |
| CVE-2026-16241 | Modified | 未確認 | CWE-191 | Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the man |
| CVE-2026-16249 | Rejected | 未確認 | Rejected reason: This CVE ID is a duplicate of CVE-2026-15303 and was never published. Both IDs were assigned to the same vulnerability in the 6Storage Rentals WordPress plugin. Al | |
| CVE-2026-16250 | Deferred | 未確認 | CWE-434 | The Personal QR Message WordPress plugin through 1.0 does not restrict the file types that can be uploaded through an unauthenticated handler, allowing unauthenticated users to upl |
| CVE-2026-16253 | Deferred | 未確認 | CWE-200 | The Total Upkeep WordPress plugin before 1.17.3 does not adequately protect the secret that authorizes its backup-restore functionality and exposes it to unauthenticated users, all |
| CVE-2026-16256 | Deferred | 未確認 | CWE-269 | The POUCO Import Users WordPress plugin through 1.0.0 does not perform any capability or nonce checks on AJAX actions available to unauthenticated users that create and update Word |
| CVE-2026-16257 | Deferred | 未確認 | CWE-287 | The Arvow AI SEO Writer WordPress plugin before 1.5.4 does not properly restrict access to one of its REST endpoints, whose only access control can be bypassed by unauthenticated u |
| CVE-2026-16258 | Deferred | 未確認 | CWE-502 | The Ajax Search Lite WordPress plugin before 4.14.5 does not prevent the deserialization of untrusted input, allowing unauthenticated attackers to perform PHP Object Injection. Wh |
| CVE-2026-16259 | Deferred | 未確認 | CWE-269 | The Uix UserCenter WordPress plugin through 1.0.3 does not verify that the account being modified through an unauthenticated profile-update action belongs to the requester, and it |
| CVE-2026-16260 | Deferred | 未確認 | CWE-79 | The Post Grid, Slider & Carousel Ultimate WordPress plugin before 1.8.1 does not sanitise and escape one of its custom post type settings before outputting it in an HTML attribute |
| CVE-2026-16261 | Deferred | 未確認 | CWE-287 | The login-social WordPress plugin through 1.0.4 does not validate password-reset requests against a reset key or the requester's identity, and it issues authentication sessions fro |
| CVE-2026-16262 | Deferred | 未確認 | CWE-352 | The Estatik Real Estate Plugin WordPress plugin before 4.3.3 does not bind its OAuth social login flow to the initiating user session, allowing an unauthenticated attacker to log a |
| CVE-2026-16263 | Deferred | 未確認 | CWE-22 | The WP Maps WordPress plugin before 4.9.7 does not perform a capability check in one of its AJAX actions and does not properly validate a user-controlled path before using it in a |
| CVE-2026-16265 | Deferred | 未確認 | CWE-400 | The WP Maps WordPress plugin before 4.9.7 does not perform a capability check in one of its AJAX actions and does not restrict the operation it dispatches, allowing users with a S |
| CVE-2026-16267 | Deferred | 未確認 | CWE-502 | The Newsletters WordPress plugin before 4.16 does not restrict the classes allowed when unserialising a value taken from a public form submission, allowing unauthenticated attacker |
| CVE-2026-16268 | Deferred | 未確認 | CWE-918 | The Newsletters WordPress plugin before 4.16 does not authenticate or validate a bounce-processing request before fetching a user-supplied URL on the server side, allowing unauthen |
| CVE-2026-16269 | Deferred | 未確認 | CWE-287 | The Newsletters WordPress plugin before 4.16 does not strictly compare its API authentication key, allowing unauthenticated attackers to bypass the API authentication via type jugg |
| CVE-2026-16273 | Deferred | 未確認 | CWE-79 | The Narrative Publisher WordPress plugin through 1.0.7 does not restrict write access to a REST-exposed post meta field or escape it when rendering, allowing users with contributor |
| CVE-2026-16274 | Deferred | 未確認 | CWE-862 | The Classified Listing WordPress plugin before 5.4.4 does not perform a capability or ownership check on an AJAX action that returns a post's content, allowing users with contribu |
| CVE-2026-16276 | Deferred | 未確認 | CWE-862 | The Classified Listing WordPress plugin before 5.4.4 does not perform a capability check on an AJAX action that returns aggregated store revenue totals, allowing users with contri |
| CVE-2026-16279 | Awaiting Analysis | 未確認 | CWE-285 | An Improper Authorization vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x could allow an attacker to gain access |
| CVE-2026-16282 | Deferred | 未確認 | CWE-287 | The Appointment Hour Booking WordPress plugin before 1.5.88 does not validate a client-supplied booking price against the server-side configured service price, allowing unauthenti |
| CVE-2026-16285 | Deferred | 未確認 | CWE-862 | The Product Attachment for WooCommerce WordPress plugin before 2.3.3 does not perform any authorization check before streaming media library files, allowing unauthenticated users t |
| CVE-2026-16286 | Deferred | 未確認 | CWE-434 | Unrestricted upload of file with dangerous type vulnerability in TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company Software Repository Mana |
| CVE-2026-16289 | Deferred | 未確認 | CWE-862 | The ProfileGrid WordPress plugin before 6.0.0.0 does not perform authorization checks when listing a group's pending membership requests, allowing any authenticated user such as a |
| CVE-2026-16290 | Deferred | 未確認 | CWE-862 | The ProfileGrid WordPress plugin before 6.0.0.0 does not perform authorization checks before returning a group's member list, and registers the handler for unauthenticated users, |
| CVE-2026-16291 | Deferred | 未確認 | CWE-639 | The ProfileGrid WordPress plugin before 5.9.9.8 does not verify that a notification belongs to the requesting user before deleting it, allowing any authenticated user such as a Su |
| CVE-2026-16292 | Deferred | 未確認 | CWE-352 | The Frontend File Manager Plugin WordPress plugin through 23.6 does not perform nonce validation on one of its file-metadata update actions, allowing an attacker to modify the meta |
| CVE-2026-16293 | Deferred | 未確認 | CWE-79 | The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.16.11 does not sanitise and escape some of its Podcast Episode settings, which could allow users with a role |
| CVE-2026-16294 | Deferred | 未確認 | CWE-918 | The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.1 does not validate one of its Podcast Episode URL settings before performing a server-side request with i |
| CVE-2026-16295 | Deferred | 未確認 | CWE-284 | The Clearfy Cache WordPress plugin before 2.4.3 does not perform a capability check in one of its admin-page dispatch paths, allowing any authenticated user such as a Subscriber t |
| CVE-2026-16296 | Deferred | 未確認 | CWE-601 | The Clearfy Cache WordPress plugin before 2.4.3 does not validate the redirect target in its Cyrlitera old-URL redirect handler, passing a decoded request URI to an unsafe redirec |
| CVE-2026-16297 | Deferred | 未確認 | CWE-502 | The Clearfy Cache WordPress plugin before 2.4.3 does not restrict the classes allowed when unserializing settings-import data, allowing users with administrator access to perform |
| CVE-2026-16298 | Deferred | 未確認 | CWE-269 | The FoodBoxBooker WordPress plugin before 1.0.7 does not properly validate the password reset request, allowing unauthenticated attackers to reset the password of arbitrary users, |
| CVE-2026-16299 | Deferred | 未確認 | CWE-287 | The Single Sign On For TNG WordPress plugin before 2.2.0 does not properly validate a password reset request, allowing unauthenticated attackers to reset the password of arbitrary |
| CVE-2026-16300 | Deferred | 未確認 | CWE-862 | The ChamaWP WordPress plugin before 1.0.13 does not properly validate a password reset request, allowing unauthenticated attackers to reset the password of arbitrary users, includ |
| CVE-2026-16309 | Deferred | 未確認 | CWE-639 | Authorization bypass through User-Controlled key vulnerability in Netiket Information Technologies EdoWEB allows Accessing Functionality Not Properly Constrained by ACLs. This iss |
| CVE-2026-16315 | Deferred | 未確認 | CWE-208 | OMICRON StationGuard before version 4.10 contains a cryptographic timing side-channel vulnerability in the backend authentication mechanism that may allow an unauthenticated attack |
| CVE-2026-16316 | Deferred | 未確認 | CWE-20 | OMICRON StationGuard 4.00 contains an improper input validation vulnerability in its IEC 61850 Sampled Values (SV) frame processing. A specially crafted SV frame can cause the affe |
| CVE-2026-16323 | Deferred | 未確認 | CWE-698 | Execution after redirect (EAR) vulnerability in FuyaWeb Internet and Informatics Services ArchitectPanel Web Admin Panel allows Authentication Bypass. This issue affects Architect |
| CVE-2026-16348 | Awaiting Analysis | 未確認 | CWE-78 | An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands with root privileges |
| CVE-2026-16434 | Deferred | 未確認 | CWE-20 | Adminer 4.6.0 through 5.5.0 (fixed in 5.5.1) contains an incomplete fix for a prior X-Forwarded-Prefix vulnerability (GHSA-8478-xrj3-h9c2). The validation guard (bootstrap.inc.php) |
| CVE-2026-16440 | Deferred | 未確認 | CWE-674 | In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested annotations causes a segmentation fault. |
| CVE-2026-16442 | Analyzed | 未確認 | CWE-346 | A flaw was found in the SAML broker component of Keycloak, which is used to manage identity federation and user authentication. The issue occurs because the IdP-initiated Single Si |
| CVE-2026-16443 | Analyzed | 未確認 | CWE-347 | A flaw was found in the SAML metadata import functionality of the keycloak-services component, which is the core engine for identity brokering in Red Hat Build of Keycloak. When im |
| CVE-2026-16444 | Deferred | 未確認 | CWE-73 | Improper neutralization of path traversal sequences in TeamViewer Desktop Clients prior Version 15.81.5 allows an authenticated remote session participant to write files to uninten |
| CVE-2026-16455 | Deferred | 未確認 | CWE-93 | In Teltonika Networks RUTOS devices running versions 7.07.1 through 7.24.1 and TSWOS devices running versions 1.03 through 1.10, a vulnerability exists whereby a lower privileged u |
| CVE-2026-16456 | Awaiting Analysis | 未確認 | CWE-441 | A flaw was found in the `odh-model-controller`. An authenticated user with permissions to create custom resources can exploit a vulnerability in the `loadSecret` function. This fun |
| CVE-2026-16458 | Deferred | 未確認 | CWE-208, CWE-327 | Padding oracle attack vulnerability in Oberon microsystem AG’s ocrypto library in all versions since 3.0.0 and prior to 4.0.1 allows an attacker to recover plaintexts via timing me |
| CVE-2026-16459 | Deferred | 未確認 | CWE-208, CWE-327 | Padding oracle attack vulnerability in Oberon microsystem AG’s Oberon PSA Crypto library in all versions since 1.0.0 and prior to 2.1.1 allows an attacker to recover plaintexts via |
| CVE-2026-16467 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Dolusoft Software Technologies Fortilogger allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Fortilogger: |
| CVE-2026-16471 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Dolusoft Software Technologies Sonlogger allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Sonlogger: from |
| CVE-2026-16480 | Analyzed | 未確認 | CWE-602 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass aut |
| CVE-2026-16494 | Analyzed | 未確認 | CWE-862 | GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.4 and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated |
| CVE-2026-16520 | Deferred | 未確認 | CWE-20, CWE-202 | Improper input validation and Exposure of sensitive information through data queries vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, and Genians Genian ZTNA V6.0 |
| CVE-2026-16532 | Deferred | 未確認 | CWE-89 | The Link Library WordPress plugin before 7.9.3 does not properly sanitise and escape a user-supplied value before using it in a SQL query, allowing unauthenticated users to perform |
| CVE-2026-16534 | Deferred | 未確認 | CWE-269 | The Import and export users and customers WordPress plugin before 2.4.2 does not enforce WordPress's role-assignment and per-user edit permissions during CSV import, allowing a use |
| CVE-2026-16535 | Deferred | 未確認 | CWE-79 | The Link Library WordPress plugin before 7.9.4 does not sanitise and escape a parameter before reflecting it back in a response, allowing unauthenticated attackers to perform Refle |
| CVE-2026-16536 | Deferred | 未確認 | CWE-918 | The Simple Google Calendar Outlook Events Widget WordPress plugin before 3.1.0 does not validate a user-supplied URL before performing a server-side request, allowing unauthenticat |
| CVE-2026-16537 | Deferred | 未確認 | CWE-79 | The Slick Slider WordPress plugin before 0.5.3 does not sanitize and escape a shortcode attribute value before outputting it in an HTML attribute, allowing users with the Contribut |
| CVE-2026-16538 | Deferred | 未確認 | CWE-284 | The Wallet for WooCommerce WordPress plugin before 1.6.10 does not verify the amount actually collected for a wallet top-up before crediting the wallet, allowing customers to top u |
| CVE-2026-16539 | Deferred | 未確認 | CWE-89 | The sm page duplicator WordPress plugin through 1.0.0 does not sanitise and escape a stored value before using it in a SQL statement when duplicating a page, allowing users with th |
| CVE-2026-16540 | Deferred | 未確認 | CWE-863 | The Simply Schedule Appointments WordPress plugin before 1.6.12.6 does not correctly restrict a bulk appointment operation to the requester's own records, allowing unauthenticated |
| CVE-2026-16541 | Deferred | 未確認 | CWE-200 | The Simply Schedule Appointments WordPress plugin before 1.6.12.17 does not restrict the user records returned by some of its REST endpoints to those the requester is entitled to s |
| CVE-2026-16546 | Deferred | 未確認 | CWE-862 | The Wired Impact Volunteer Management WordPress plugin before 2.8.2 does not have authorisation checks in one of its AJAX actions, and does not verify that the RSVP being removed b |
| CVE-2026-16547 | Deferred | 未確認 | CWE-284 | The REST API Log WordPress plugin before 1.7.1 does not bind the token protecting its log download feature to the log entry being requested, nor does it check the capability of the |
| CVE-2026-16548 | Deferred | 未確認 | CWE-434 | The Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat WordPress plugin before 1.8.2 does not validate the type, extension, content, o |
| CVE-2026-16558 | Deferred | 未確認 | CWE-79 | The YMC Filter WordPress plugin before 3.12.8 does not sanitize and escape a layout builder setting before outputting it on a public endpoint, and does not verify object ownership |
| CVE-2026-16559 | Deferred | 未確認 | CWE-79 | The YMC Filter WordPress plugin before 3.12.9 does not sanitize SVG files uploaded through one of its icon upload features and permits their upload by low-privileged users, allowin |
| CVE-2026-16561 | Deferred | 未確認 | CWE-862 | The Sunshine Photo Cart WordPress plugin before 3.6.12 does not perform access control checks in one of its AJAX actions, allowing unauthenticated users to retrieve the comments o |
| CVE-2026-16562 | Deferred | 未確認 | CWE-200 | The WP Statistics WordPress plugin before 14.16.10 does not perform a capability check on a set of dashboard analytics AJAX handlers, relying only on a nonce that every authentica |
| CVE-2026-16563 | Deferred | 未確認 | CWE-284 | The Academy LMS WordPress plugin before 3.8.3 does not verify course enrollment or lesson publication status when returning a single lesson through its REST API, allowing users wit |
| CVE-2026-16564 | Deferred | 未確認 | CWE-639 | The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.9 does not verify order ownership on a REST endpoint that performs bulk order-status |
| CVE-2026-16565 | Deferred | 未確認 | CWE-639 | The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.9 does not verify product ownership on its product-attribute REST write endpoints, a |
| CVE-2026-16567 | Deferred | 未確認 | CWE-639 | The Document Embedder WordPress plugin before 2.3.1 does not check a document's status before issuing a download token and streaming the file, allowing unauthenticated attackers t |
| CVE-2026-16568 | Deferred | 未確認 | CWE-639 | The Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce WordPress plugin through 0.4.62 does not verify that the requesting user owns the customer prof |
| CVE-2026-16569 | Deferred | 未確認 | CWE-284 | The Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce WordPress plugin through 0.4.62 does not check the user's capabilities before allowing a stock- |
| CVE-2026-16570 | Deferred | 未確認 | CWE-79 | The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.4.8 does not escape some of the query-string parameters it reflects back on one of its admin pages, allowing |
| CVE-2026-16572 | Deferred | 未確認 | CWE-89 | The LogMyTrip WordPress plugin through 1.9 does not sanitize and escape a value taken from a cookie before using it in a SQL query, allowing unauthenticated users to perform SQL in |
| CVE-2026-16573 | Deferred | 未確認 | CWE-79 | The Bit Form WordPress plugin before 3.2.0 does not sanitize an uploaded signature image before storing it, allowing unauthenticated attackers to upload a crafted SVG file contain |
| CVE-2026-16574 | Deferred | 未確認 | CWE-639 | The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.11 does not verify that a downloadable product belongs to the requesting vendor befo |
| CVE-2026-16575 | Deferred | 未確認 | CWE-200 | The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.14 does not restrict access to per-vendor commission configuration returned by one o |
| CVE-2026-16576 | Deferred | 未確認 | CWE-284 | The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.14 does not correctly check user capabilities on some of its admin REST API routes, |
| CVE-2026-16577 | Deferred | 未確認 | CWE-863 | The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.14 does not validate a client-supplied payment amount against the vendor's actual ou |
| CVE-2026-16578 | Deferred | 未確認 | CWE-200 | The Admin Safety Guard — Login Security, Limit Logins, 2FA & Brute Force Protection WordPress plugin before 1.4.0 does not perform any capability check on one of its REST API endpo |
| CVE-2026-16583 | Deferred | 未確認 | CWE-79 | The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.8 does not sanitize uploaded SVG files when its SVG upload fe |
| CVE-2026-16586 | Deferred | 未確認 | CWE-89 | The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to Second-Order SQL Injection via MultipleFiles Second-Order Payload |
| CVE-2026-16589 | Deferred | 未確認 | CWE-89 | The WP Directory Kit WordPress plugin before 1.5.5 does not sanitize and escape a parameter before using it in a SQL statement through one of its authenticated AJAX actions, which |
| CVE-2026-16590 | Deferred | 未確認 | CWE-200 | The WP Directory Kit WordPress plugin before 1.5.5 does not perform authorization or nonce checks on one of its authenticated AJAX actions, allowing any authenticated user such as |
| CVE-2026-16594 | Deferred | 未確認 | CWE-200 | The WP Directory Kit WordPress plugin before 1.5.5 does not perform authorization or nonce checks on one of its authenticated AJAX actions, allowing any authenticated user such as |
| CVE-2026-16595 | Deferred | 未確認 | CWE-200 | The WP Directory Kit WordPress plugin before 1.5.5 does not perform authorization or nonce checks on one of its authenticated AJAX actions, allowing any authenticated user such as |
| CVE-2026-16599 | Deferred | 未確認 | CWE-606 | GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP challenge line is used as an iterat |
| CVE-2026-16600 | Deferred | 未確認 | CWE-918 | The SmartAIPress WordPress plugin through 1.2.0 does not perform a capability check on one of its AJAX actions and does not validate a user-supplied URL before fetching it server-s |
| CVE-2026-16601 | Deferred | 未確認 | CWE-434 | The CM Map Locations – Visualize and share your locations in a few clicks plugin for WordPress is vulnerable to Limited Arbitrary File Upload in all versions up to, and including, |
| CVE-2026-16602 | Deferred | 未確認 | CWE-200 | The Passster WordPress plugin before 4.3.6 does not perform a post-status check before returning post content from an unauthenticated REST endpoint, allowing unauthenticated users |
| CVE-2026-16603 | Deferred | 未確認 | CWE-200 | The Passster WordPress plugin before 4.3.6 does not enforce its category-based content protection on the WordPress REST API, allowing unauthenticated users to read the full conten |
| CVE-2026-16604 | Deferred | 未確認 | CWE-200 | The Passster WordPress plugin before 4.3.6 outputs password-protected block content in the public page response before verifying the password, allowing unauthenticated users to re |
| CVE-2026-16605 | Deferred | 未確認 | CWE-862 | The MultiVendorX WordPress plugin before 5.0.11 does not verify that the store targeted through its REST API belongs to the requesting vendor, allowing an authenticated vendor (St |
| CVE-2026-16608 | Deferred | 未確認 | CWE-862 | The Download Monitor WordPress plugin before 5.2.6 does not perform authorization checks on one of its download-logging AJAX actions, and exposes the nonce protecting it to unauthe |
| CVE-2026-16611 | Deferred | 未確認 | CWE-200 | The Product Feed PRO for WooCommerce by AdTribes WordPress plugin before 13.5.7 does not perform an authorization check on one of its REST read routes, allowing unauthenticated us |
| CVE-2026-16612 | Deferred | 未確認 | CWE-200 | The FiboSearch WordPress plugin before 1.34.1 does not consistently exclude password-protected products from its unauthenticated AJAX endpoints, allowing unauthenticated users to |
| CVE-2026-16613 | Deferred | 未確認 | CWE-352 | The GDPR Cookie Compliance WordPress plugin before 5.1.0 expires the visitor's cookies from an action that is reachable without authentication and performs no request-origin check |
| CVE-2026-16614 | Deferred | 未確認 | CWE-89 | The GSheetConnector – CF7 Google Sheets Connector with Real-Time Sync plugin for WordPress is vulnerable to generic SQL Injection via the 's' parameter in all versions up to, and i |
| CVE-2026-16616 | Deferred | 未確認 | CWE-22 | The Simple File List WordPress plugin through 6.3.11 does not validate the source path of a file-move operation reachable by unauthenticated users, allowing them to read arbitrary |
| CVE-2026-16617 | Deferred | 未確認 | CWE-79 | The Simple File List WordPress plugin through 6.3.11 does not properly sanitise and escape a file's description before outputting it on the public file list, allowing unauthenticat |
| CVE-2026-16618 | Deferred | 未確認 | CWE-434 | The Improve SEO WordPress plugin through 2.0.11 does not properly validate uploaded files, checking only the file content type while writing the file with the attacker-supplied ext |
| CVE-2026-16619 | Deferred | 未確認 | CWE-307 | The miniOrange 2FA WordPress plugin before 6.2.8 does not correctly limit the number of second-factor verification attempts, tracking them against a client-supplied identifier that |
| CVE-2026-16620 | Deferred | 未確認 | CWE-472 | The WPC Name Your Price for WooCommerce WordPress plugin before 2.2.5 does not enforce its server-side price allowlist for products configured in "Select" price mode, allowing an u |
| CVE-2026-16621 | Deferred | 未確認 | The Payment Gateway for PayPal on WooCommerce WordPress plugin before 9.2.1 does not verify that payment actually succeeded before completing an order in its PayPal return handler: | |
| CVE-2026-16623 | Deferred | 未確認 | CWE-94 | The Create Block WordPress plugin before 2.10.0 does not correctly escape user-supplied text before writing it into a generated PHP pattern file, allowing a multisite subsite admi |
| CVE-2026-16626 | Awaiting Analysis | 未確認 | CWE-611 | Improper restriction of XML external entity reference vulnerability (unauthenticated) in Jaspersoft JasperReports Server. This issue affects JasperReports Server: from 9.0.0 befor |
| CVE-2026-16627 | Analyzed | 未確認 | CWE-79 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user with developer- |
| CVE-2026-16635 | Deferred | 未確認 | CWE-269 | The Pronamic Pay plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 10.1.0 This is due to the `maybe_update_user_role()` function pass |
| CVE-2026-16636 | Deferred | 未確認 | CWE-79 | The FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Rec |
| CVE-2026-16637 | Awaiting Analysis | 未確認 | CWE-201, CWE-918 | OPeNDAP Hyrax allows SSRF and credential disclosure via unvalidated HTTP redirects that bypass the AllowedHosts allowlist and leak Earthdata headers (User-Id, Echo-Token) to attack |
| CVE-2026-16638 | Awaiting Analysis | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Media Folders allows Stored XSS. This issue affects Media Folders versi |
| CVE-2026-16639 | Awaiting Analysis | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalization Single Sign-On allows Authentication Bypass. This issue affects Internationali |
| CVE-2026-16640 | Awaiting Analysis | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Search API Autocomplete allows Reflected XSS. This issue affects Search |
| CVE-2026-16641 | Awaiting Analysis | 未確認 | CWE-20 | Vulnerability in Drupal Commerce Elavon. This issue affects Commerce Elavon versions: *.*. |
| CVE-2026-16642 | Awaiting Analysis | 未確認 | CWE-20 | Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions: *.*. |
| CVE-2026-16643 | Awaiting Analysis | 未確認 | CWE-20 | Vulnerability in Drupal Lunr exposed filters. This issue affects Lunr exposed filters versions: *.*. |
| CVE-2026-16644 | Awaiting Analysis | 未確認 | CWE-863 | Incorrect Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST versions: from 0.0.0 to 4.1.0. |
| CVE-2026-16645 | Awaiting Analysis | 未確認 | CWE-862 | Missing Authorization vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Forceful Browsing. This issue affects PhotoSwipe - Responsive JavaScript |
| CVE-2026-16646 | Awaiting Analysis | 未確認 | CWE-306 | Vulnerability in Drupal PanKM. This issue affects PanKM versions: *.*. |
| CVE-2026-16650 | Deferred | 未確認 | CWE-345 | The Charitable WordPress plugin before 1.8.12 does not verify the authenticity of incoming Square payment webhook events in a default configuration, allowing unauthenticated attack |
| CVE-2026-16654 | Deferred | 未確認 | CWE-79 | The Avada (Fusion) Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'size' Shortcode Attribute in all versions up to, and including, 3.15.6 due to insu |
| CVE-2026-16656 | Analyzed | 未確認 | CWE-287 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to gain root privileges due to improper authentication. |
| CVE-2026-16661 | Analyzed | 未確認 | CWE-190 | IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the service processor ma |
| CVE-2026-16674 | Analyzed | 未確認 | CWE-426 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to an untrusted search path. |
| CVE-2026-16684 | Deferred | 未確認 | CWE-79 | The Easy Property Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'facebook' User Contact Method in all versions up to, and including, 3.5.24 due to |
| CVE-2026-16685 | Deferred | 未確認 | CWE-79 | The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'icon' Shortcode Attribute in all versions up to, and including, 3.3.66 due to insufficie |
| CVE-2026-16686 | Analyzed | 未確認 | CWE-287 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to access NFS-exported filesystems due to improper authentication. |
| CVE-2026-16687 | Analyzed | 未確認 | CWE-121 | IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the ASMI web interf |
| CVE-2026-16690 | Analyzed | 未確認 | CWE-400 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption. |
| CVE-2026-16692 | Analyzed | 未確認 | CWE-787 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a stack-based buffer overflow. |
| CVE-2026-16694 | Analyzed | 未確認 | CWE-79 | IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus alt |
| CVE-2026-16695 | Analyzed | 未確認 | CWE-78 | IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 could allow a local attacker to execute arbitrary code due to improper neutralization of special elements used in an OS comma |
| CVE-2026-16703 | Analyzed | 未確認 | CWE-269 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper privilege management. |
| CVE-2026-16706 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds write. |
| CVE-2026-16707 | Analyzed | 未確認 | CWE-125 | IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the service processor ma |
| CVE-2026-16708 | Analyzed | 未確認 | CWE-15 | IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information due to external control of system configuration. |
| CVE-2026-16713 | Analyzed | 未確認 | CWE-1327 | IBM Documentation Offline 1.0.0 through 1.4.1 IBM Documentation could allow a remote attacker to obtain sensitive information due to a security misconfiguration where the documenta |
| CVE-2026-16722 | Undergoing Analysis | 未確認 | CWE-269 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain unauthorized privileges due to improper privilege management. |
| CVE-2026-16724 | Analyzed | 未確認 | CWE-190 | IBM Virtualization Management Interface FW1110.00 through FW1110.30, FW1120.00 through FW1120.00, and FW1060.00 through FW1060.80 is affected by a vulnerability in the Virtualizati |
| CVE-2026-16731 | Deferred | 未確認 | CWE-208 | OMICRON StationScout before version 3.05 contains a cryptographic timing side-channel vulnerability in the backend authentication mechanism that may allow an unauthenticated attack |
| CVE-2026-16732 | Analyzed | 未確認 | CWE-348 | fastify is a fast and low overhead web framework for Node.js. Impact: the fix for CVE-2026-3635 added a guard on the forwarded-header reads used to derive the request host, protoco |
| CVE-2026-16734 | Deferred | 未確認 | CWE-862 | The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.2 does not verify that the caller owns the Stripe payment intent referenced by two unauthenticated payment-form |
| CVE-2026-16736 | Deferred | 未確認 | CWE-284 | The User Registration & Membership WordPress plugin before 5.2.6 does not enforce the site's registration-disabled setting when processing registration-form submissions, allowing |
| CVE-2026-16737 | Deferred | 未確認 | CWE-639 | The WP Travel Engine WordPress plugin before 6.8.5 does not perform authorization or ownership checks when loading a caller-supplied booking identifier in one of its unauthenticat |
| CVE-2026-16738 | Deferred | 未確認 | CWE-284 | The Conekta Payment Gateway WordPress plugin before 6.2.2 does not verify the authenticity of incoming payment gateway webhook notifications, nor bind the confirmed payment to the |
| CVE-2026-16739 | Deferred | 未確認 | CWE-287 | The Epeken All Kurir for Woocommerce WordPress plugin through 2.1.4 does not verify that a payment-confirmation request originates from the owner of the targeted order, nor that an |
| CVE-2026-16742 | Awaiting Analysis | 未確認 | CWE-269, CWE-347 | systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user |
| CVE-2026-16746 | Deferred | 未確認 | CWE-639 | The MultiVendorX WordPress plugin before 5.0.11 does not verify that the requested store belongs to the current user in one of its REST API endpoints, allowing any vendor-level us |
| CVE-2026-16747 | Deferred | 未確認 | CWE-74 | The Kirki WordPress plugin before 6.2.1 does not properly authorise its front-end form submission REST routes and passes attacker-controlled input through shortcode execution, allo |
| CVE-2026-16758 | Deferred | 未確認 | CWE-79 | The Snippet Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 5.2.0 due to insufficient in |
| CVE-2026-16759 | Deferred | 未確認 | CWE-74 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Remote Code Execution limited to zero-argument function invocation in all versions up to, |
| CVE-2026-16770 | Deferred | 未確認 | CWE-88 | PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the source document. For an HTML string or file source, the constructor collec |
| CVE-2026-16772 | Deferred | 未確認 | CWE-269, CWE-862 | In Akaunting versions <= 3.1.21, low‑privileged authenticated users can modify their own account to assign themselves the admin role ID, granting full administrator privileges. Thi |
| CVE-2026-16775 | Deferred | 未確認 | CWE-79 | The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'id' Shortcode Attribute in all version |
| CVE-2026-16779 | Deferred | 未確認 | CWE-862 | The Kubio AI Page Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.8.5. This is due to the plugin not properly verifying t |
| CVE-2026-16781 | Analyzed | 未確認 | CWE-674 | A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can trigger an Uncontrolled Recursion vulnerability. A malicious actor may leverage this vulnerability to caus |
| CVE-2026-16782 | Analyzed | 未確認 | CWE-125 | A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a cr |
| CVE-2026-16783 | Analyzed | 未確認 | CWE-787 | A maliciously crafted ABC file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a c |
| CVE-2026-16791 | Awaiting Analysis | 未確認 | CWE-377 | A temporary file creation vulnerability in the Linux version of Lenovo XClarity Essentials OneCLI 5.5.0 and below could allow a local low-privileged attacker to overwrite or trunca |
| CVE-2026-16792 | Awaiting Analysis | 未確認 | CWE-295 | An improper certificate validation vulnerability was reported in multiple Lenovo XClarity Orchestrator (LXCO) 2.2.0 microservices that could allow an adjacent network attacker to i |
| CVE-2026-16793 | Awaiting Analysis | 未確認 | CWE-20, CWE-78 | An improper neutralization of special elements used in an operating system command vulnerability was reported in Lenovo XClarity Orchestrator (LXCO) 2.2.0 that could allow an authe |
| CVE-2026-16809 | Deferred | 未確認 | CWE-79 | LimeSurvey Community Edition 7.0.5 contains a stored cross-site scripting vulnerability in the survey quota creation workflow. An authenticated low-privileged user who can create a |
| CVE-2026-16810 | Deferred | 未確認 | CWE-89 | The Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder plugin for WordPress is vulnerable to generic SQL Injection via the 'data[queryCondit |
| CVE-2026-16814 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow. |
| CVE-2026-16815 | Undergoing Analysis | 未確認 | CWE-787 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and potentially obtain sensitive information due to a stack-based buffer overflow. |
| CVE-2026-16816 | Analyzed | 未確認 | CWE-78 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in a |
| CVE-2026-16817 | Analyzed | 未確認 | CWE-476 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference. |
| CVE-2026-16818 | Analyzed | 未確認 | CWE-400 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption. |
| CVE-2026-16819 | Analyzed | 未確認 | CWE-367 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service and compromise data integrity due to a time-of-check time-of-use race condit |
| CVE-2026-16821 | Analyzed | 未確認 | CWE-134 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a format string vulnerability. |
| CVE-2026-16822 | Analyzed | 未確認 | CWE-295 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to impersonate the TNC policy server and modify traffic due to improper certificate validation. |
| CVE-2026-16824 | Analyzed | 未確認 | CWE-400 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to unbounded recursion. |
| CVE-2026-16825 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to obtain sensitive information and cause a denial of service due to an out-of-bounds writ |
| CVE-2026-16827 | Analyzed | 未確認 | CWE-908 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to the use of an uninitialized stack pointer. |
| CVE-2026-16828 | Analyzed | 未確認 | CWE-125 | IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the ASMI web interfa |
| CVE-2026-16829 | Analyzed | 未確認 | CWE-476 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference. |
| CVE-2026-16831 | Analyzed | 未確認 | CWE-400 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption. |
| CVE-2026-16832 | Analyzed | 未確認 | CWE-121 | IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP management n |
| CVE-2026-16833 | Analyzed | 未確認 | CWE-125 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to disclose kernel memory due to an out-of-bounds read. |
| CVE-2026-16834 | Analyzed | 未確認 | CWE-190 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an integer underflow. |
| CVE-2026-16835 | Analyzed | 未確認 | CWE-295 | IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP management n |
| CVE-2026-16836 | Analyzed | 未確認 | CWE-400 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption. |
| CVE-2026-16837 | Analyzed | 未確認 | CWE-400 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to improper handling of a missing SSL client certificate. |
| CVE-2026-16838 | Analyzed | 未確認 | CWE-367 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to overwrite critical files and obtain sensitive information due to a time-of-check to time-of-use (TOCTO |
| CVE-2026-16839 | Analyzed | 未確認 | CWE-125 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to an integer underflow in the IPv4 IP-options parser. |
| CVE-2026-16840 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write. |
| CVE-2026-16841 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow. |
| CVE-2026-16842 | Analyzed | 未確認 | CWE-78 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command. |
| CVE-2026-16844 | Analyzed | 未確認 | CWE-78 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command. |
| CVE-2026-16845 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow. |
| CVE-2026-16846 | Analyzed | 未確認 | CWE-476 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a null pointer dereference. |
| CVE-2026-16847 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow. |
| CVE-2026-16848 | Analyzed | 未確認 | CWE-78 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of shell metacharacters in DHCP options. |
| CVE-2026-16849 | Analyzed | 未確認 | CWE-129 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an improper check for an array index boundary. |
| CVE-2026-16850 | Analyzed | 未確認 | CWE-269 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to command injection via crafted Router Advertisements. |
| CVE-2026-16851 | Analyzed | 未確認 | CWE-416 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a use-after-free. |
| CVE-2026-16852 | Analyzed | 未確認 | CWE-190 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an integer overflow. |
| CVE-2026-16853 | Analyzed | 未確認 | CWE-125 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read. |
| CVE-2026-16855 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to a heap buffer overflow. |
| CVE-2026-16856 | Analyzed | 未確認 | CWE-78 | IBM i 7.6, and 7.5 could allow a local attacker to gain elevated privileges due to improper neutralization of special elements used in an OS command. |
| CVE-2026-16857 | Analyzed | 未確認 | CWE-287 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to manipulate network traffic and DNS configuration due to improper authentication. |
| CVE-2026-16859 | Undergoing Analysis | 未確認 | CWE-125 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read. |
| CVE-2026-16860 | Analyzed | 未確認 | CWE-427 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to an uncontrolled search path element. |
| CVE-2026-16861 | Undergoing Analysis | 未確認 | CWE-125 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds read. |
| CVE-2026-16862 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow. |
| CVE-2026-16863 | Analyzed | 未確認 | CWE-125 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to an out-of-bounds read. |
| CVE-2026-16864 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow. |
| CVE-2026-16865 | Analyzed | 未確認 | CWE-78 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to command injection. |
| CVE-2026-16866 | Analyzed | 未確認 | CWE-125 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds read. |
| CVE-2026-16867 | Analyzed | 未確認 | CWE-287 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to access server resources with the privileges of an authenticated user due to improper authentication during NTLM sessio |
| CVE-2026-16868 | Analyzed | 未確認 | CWE-908 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to the use of uninitialized memory during ASN.1 length processing. |
| CVE-2026-16869 | Analyzed | 未確認 | CWE-426 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improperly scrubbed environment variables. |
| CVE-2026-16871 | Undergoing Analysis | 未確認 | CWE-787 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a heap buffer overflow. |
| CVE-2026-16872 | Analyzed | 未確認 | CWE-121 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow. |
| CVE-2026-16873 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to achieve local privilege escalation due to an out-of-bounds write. |
| CVE-2026-16874 | Analyzed | 未確認 | CWE-269 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain root privileges due to improper enforcement of RBAC authentication roles. |
| CVE-2026-16875 | Analyzed | 未確認 | CWE-78 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to shell metacharacter injection. |
| CVE-2026-16877 | Analyzed | 未確認 | CWE-121 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow. |
| CVE-2026-16878 | Analyzed | 未確認 | CWE-125 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to an out-of-bounds read. |
| CVE-2026-16879 | Analyzed | 未確認 | CWE-285 | IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization using user-supplied input. |
| CVE-2026-16881 | Deferred | 未確認 | A code injection vulnerability exists in the LINE Android app prior to version 26.7.2. The profile rendering component does not adequately validate or sandbox externally supplied | |
| CVE-2026-16882 | Analyzed | 未確認 | CWE-78 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command. |
| CVE-2026-16883 | Analyzed | 未確認 | CWE-125 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due to an out-of-bounds read. |
| CVE-2026-16885 | Analyzed | 未確認 | CWE-121 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow. |
| CVE-2026-16886 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds write. |
| CVE-2026-16887 | Undergoing Analysis | 未確認 | CWE-787 | IBM i 7.6 could allow a remote attacker to cause a denial of service due to an out-of-bounds write. |
| CVE-2026-16888 | Analyzed | 未確認 | CWE-22 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to a path traversal vulnerability. |
| CVE-2026-16890 | Analyzed | 未確認 | CWE-190 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information or cause a denial of service due to an integer overflow. |
| CVE-2026-16891 | Analyzed | 未確認 | CWE-125 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due to an out-of-bounds read. |
| CVE-2026-16894 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow. |
| CVE-2026-16895 | Awaiting Analysis | 未確認 | CWE-305 | A logic vulnerability (fail-open condition) has been identified within the Metasploit Framework's JSON-RPC web service interface. When an exception occurs during the database healt |
| CVE-2026-16896 | Analyzed | 未確認 | CWE-367 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to obtain unauthorized access to files due to a time-of-check time-of-use (TOCTOU) race condition. |
| CVE-2026-16897 | Analyzed | 未確認 | CWE-369 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to an out-of-bounds write. |
| CVE-2026-16898 | Undergoing Analysis | 未確認 | CWE-73 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to change the ownership of arbitrary files due to improper validation of an attacker-controlled file path. |
| CVE-2026-16901 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write. |
| CVE-2026-16903 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code or cause a denial of service due to an out-of-bounds write. |
| CVE-2026-16904 | Analyzed | 未確認 | CWE-269 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper privilege management during monitor owner reassignment. |
| CVE-2026-16905 | Analyzed | 未確認 | CWE-287 | IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication. |
| CVE-2026-16906 | Analyzed | 未確認 | CWE-78 | IBM i 7.6, and 7.5 could allow a remote authenticated attacker to execute arbitrary commands with elevated privileges due to improper neutralization of special elements used in an |
| CVE-2026-16907 | Analyzed | 未確認 | CWE-787 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to improper bounds checking. |
| CVE-2026-16908 | Undergoing Analysis | 未確認 | CWE-22 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain unauthorized access to arbitrary objects due to a path traversal vulnerability. |
| CVE-2026-16909 | Analyzed | 未確認 | CWE-128 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an off-by-one error in bounds checking. |
| CVE-2026-16911 | Analyzed | 未確認 | CWE-121 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack buffer overflow. |
| CVE-2026-16913 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow. |
| CVE-2026-16914 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an out-of-bounds write. |
| CVE-2026-16915 | Analyzed | 未確認 | CWE-22 | IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper input validation. |
| CVE-2026-16917 | Analyzed | 未確認 | CWE-190 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an integer overflow. |
| CVE-2026-16919 | Analyzed | 未確認 | CWE-843 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper validation of network-supplied pointers. |
| CVE-2026-16922 | Analyzed | 未確認 | CWE-367 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a time-of-check to time-of-use (TOCTOU) race condition. |
| CVE-2026-16923 | Analyzed | 未確認 | CWE-269 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper privilege management. |
| CVE-2026-16924 | Analyzed | 未確認 | CWE-131, CWE-191 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an improper calculation of a memory offset during IPsec decapsulatio |
| CVE-2026-16925 | Analyzed | 未確認 | CWE-285 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to achieve privilege escalation due to improper authorization. |
| CVE-2026-16926 | Analyzed | 未確認 | CWE-73 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to overwrite arbitrary files due to improper neutralization of special elements in input. |
| CVE-2026-16927 | Analyzed | 未確認 | CWE-367 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain root privileges due to a time-of-check to time-of-use (TOCTOU) race condition. |
| CVE-2026-16928 | Analyzed | 未確認 | CWE-122 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a heap-based buffer overflow. |
| CVE-2026-16929 | Undergoing Analysis | 未確認 | CWE-787 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a buffer overflow. |
| CVE-2026-16930 | Analyzed | 未確認 | CWE-862 | IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the interface between the BMC/FSP and the host |
| CVE-2026-16931 | Analyzed | 未確認 | CWE-835 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper handling of zero-length TCP options. |
| CVE-2026-16932 | Analyzed | 未確認 | CWE-78 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to improper validation of the ODMDIR environment variable. |
| CVE-2026-16933 | Analyzed | 未確認 | CWE-190 | IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 through |
| CVE-2026-16934 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a heap-based buffer overflow. |
| CVE-2026-16935 | Analyzed | 未確認 | CWE-367 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a time-of-check to time-of-use (TOCTOU) race condition. |
| CVE-2026-16936 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a buffer overflow. |
| CVE-2026-16937 | Analyzed | 未確認 | CWE-269 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper privilege management. |
| CVE-2026-16938 | Analyzed | 未確認 | CWE-862 | IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in access controls over |
| CVE-2026-16940 | Deferred | 未確認 | CWE-22 | The Custom Fields WordPress plugin before 1.5.1 does not validate a user-supplied file path before deletion, allowing unauthenticated users to delete arbitrary files on the server |
| CVE-2026-16942 | Deferred | 未確認 | CWE-79 | The WP Custom HTML Page WordPress plugin through 0.6.2 does not sanitise HTML stored through one of its custom page handlers, nor restrict it to users allowed to post unfiltered HT |
| CVE-2026-16943 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a heap-based buffer overflow. |
| CVE-2026-16944 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a stack-based buffer overflow. |
| CVE-2026-16945 | Analyzed | 未確認 | CWE-121 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a stack-based buffer overflow. |
| CVE-2026-16946 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a heap buffer overflow. |
| CVE-2026-16947 | Deferred | 未確認 | CWE-918 | The Total processing card payments for WooCommerce WordPress plugin through 7.3 does not validate a user-supplied path before using it to build a server-side verification request, |
| CVE-2026-16948 | Deferred | 未確認 | CWE-284 | The Solace Extra WordPress plugin before 1.6.1 does not perform capability checks in several of its AJAX actions and exposes the nonce that protects them on admin pages reachable b |
| CVE-2026-16949 | Deferred | 未確認 | CWE-89 | The Term Pages WordPress plugin before 2.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL |
| CVE-2026-16950 | Deferred | 未確認 | CWE-89 | The Product Shortlist WordPress plugin through 1.0.4 does not properly sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to per |
| CVE-2026-16951 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local authenticated attacker to execute arbitrary code due to a heap-based buffer overflow. |
| CVE-2026-16952 | Analyzed | 未確認 | CWE-400 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to uncontrolled resource consumption. |
| CVE-2026-16953 | Deferred | 未確認 | CWE-639 | The AI Engine WordPress plugin before 3.6.4 does not verify ownership of a guest's uploaded chatbot files before deletion, authorising the action solely by a client-supplied sessi |
| CVE-2026-16954 | Deferred | 未確認 | CWE-200 | The AI Engine WordPress plugin before 3.6.4 does not redact secret configuration values before exposing them in an admin page's inline script data, allowing users with the Editor |
| CVE-2026-16955 | Deferred | 未確認 | CWE-22 | The AI Engine WordPress plugin before 3.6.6 does not confine a caller-supplied file path before reading it and forwarding the contents to an external service, allowing users with |
| CVE-2026-16956 | Analyzed | 未確認 | CWE-78 | IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command. |
| CVE-2026-16957 | Deferred | 未確認 | CWE-639 | The Slim SEO WordPress plugin before 4.9.11 does not restrict a post-meta preview feature to posts the user is allowed to edit, verifying only read access, allowing users with the |
| CVE-2026-16958 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds write. |
| CVE-2026-16959 | Deferred | 未確認 | CWE-89 | The Media Library Assistant WordPress plugin before 3.40 does not validate a search parameter before concatenating it into a SQL query in one of its media-library query handlers, a |
| CVE-2026-16961 | Undergoing Analysis | 未確認 | CWE-89 | IBM i 7.6, 7.5, and 7.4 s vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete |
| CVE-2026-16962 | Deferred | 未確認 | CWE-862 | The Tamara Checkout WordPress plugin through 1.9.9.20 does not verify the order key, a nonce, or any capability on its public payment cancel/fail return URLs, changing a WooCommerc |
| CVE-2026-16964 | Analyzed | 未確認 | CWE-200 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to intercept messages and forge replies due to the exposure of sensitive information. |
| CVE-2026-16965 | Deferred | 未確認 | CWE-352, CWE-862 | The Solace Extra WordPress plugin before 1.6.1 does not perform capability or nonce checks in one of its AJAX actions, allowing any authenticated user such as a subscriber (and, vi |
| CVE-2026-16967 | Undergoing Analysis | 未確認 | CWE-367 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain unauthorized access to system objects due to a time-of-check to time-of-use (TOCTOU) race condition |
| CVE-2026-16968 | Deferred | 未確認 | CWE-200 | The GeoDirectory WordPress plugin before 2.8.168 does not restrict a user-search handler to users allowed to list users, allowing any authenticated user with Contributor-level acc |
| CVE-2026-16972 | Analyzed | 未確認 | CWE-287 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to improper authentication. |
| CVE-2026-16973 | Analyzed | 未確認 | CWE-200 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to disclose sensitive kernel memory due to an out-of-bounds read. |
| CVE-2026-16974 | Deferred | 未確認 | CWE-79 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post_meta Shortcode in all versions up to, |
| CVE-2026-16975 | Analyzed | 未確認 | CWE-787 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to a heap-based buffer overflow. |
| CVE-2026-16977 | Deferred | 未確認 | CWE-89 | The Form Maker by 10Web WordPress plugin before 1.15.45 does not properly parameterize a user-controlled value that is substituted into a dynamic SQL query built for a database-ba |
| CVE-2026-16979 | Deferred | 未確認 | CWE-639 | The SmartCrawl SEO checker, analyzer & optimizer WordPress plugin before 3.16.3 does not perform capability checks on two of its AJAX actions, allowing users with at least the Subs |
| CVE-2026-16980 | Analyzed | 未確認 | CWE-59 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to improper validation of symbolic links. |
| CVE-2026-16981 | Deferred | 未確認 | CWE-639 | The DHL Shipping Germany for WooCommerce WordPress plugin before 4.0.1 does not perform any authorization check (no capability, nonce, login, or ownership check) on one of its ship |
| CVE-2026-16982 | Undergoing Analysis | 未確認 | CWE-787 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a heap buffer overflow. |
| CVE-2026-16984 | Deferred | 未確認 | CWE-284 | The Privacy Policy Generator, Terms & Conditions, GDPR, CCPA, Cookie Policy & Disclaimer Templates WordPress plugin before 3.7.1 does not include an authorization check on a REST |
| CVE-2026-16985 | Deferred | 未確認 | CWE-434 | The Squeeze WordPress plugin before 1.7.12 does not validate the file type or extension of the per-size image data written by one of its attachment-update actions, allowing users |
| CVE-2026-16986 | Deferred | 未確認 | CWE-284 | The Booking Package WordPress plugin before 1.7.25 does not validate the payment amount server-side against the stored service price, deriving the expected charge from attacker-sup |
| CVE-2026-16987 | Undergoing Analysis | 未確認 | CWE-73 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to improper validation of the LANG environment variable. |
| CVE-2026-16988 | Deferred | 未確認 | CWE-200 | The GeoDirectory WordPress plugin before 2.8.169 does not perform any authorization check when returning map marker data for a single requested listing, allowing unauthenticated u |
| CVE-2026-16989 | Analyzed | 未確認 | CWE-59 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper resolution of symbolic links. |
| CVE-2026-16990 | Deferred | 未確認 | The Payment Button for PayPal WordPress plugin through 1.2.3.44 does not enforce the merchant-configured price server-side and trusts a client-supplied payment amount, allowing una | |
| CVE-2026-16991 | Analyzed | 未確認 | CWE-269 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper handling of symbolic links. |
| CVE-2026-16992 | Deferred | 未確認 | CWE-862 | The Create WordPress plugin before 2.5.4 does not perform an authorization check before returning content over one of its REST API routes, and that route additionally publishes the |
| CVE-2026-16993 | Deferred | 未確認 | CWE-200 | The DHL Shipping Germany for WooCommerce WordPress plugin before 4.0.1 does not protect its shipping-label storage directory with server-independent access control, relying only on |
| CVE-2026-16996 | Analyzed | 未確認 | CWE-191, CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an integer underflow. |
| CVE-2026-16997 | Analyzed | 未確認 | CWE-269 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to improper privilege management. |
| CVE-2026-16999 | Deferred | 未確認 | CWE-611 | Improper restriction of XML external entity reference vulnerability in Ministry of Justice UYAP Document Editor allows Serialized Data External Linking. This issue affects UYAP Do |
| CVE-2026-17000 | Analyzed | 未確認 | CWE-287 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper authentication. |
| CVE-2026-17002 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-17003 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to compromise the confidentiality and integrity of the system due to an out-of-bounds write. |
| CVE-2026-17004 | Undergoing Analysis | 未確認 | CWE-835 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an infinite loop. |
| CVE-2026-17006 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow. |
| CVE-2026-17007 | Analyzed | 未確認 | CWE-125 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information or cause a denial of service due to an out-of-bounds read. |
| CVE-2026-17008 | Deferred | 未確認 | The Quick Paypal Payments WordPress plugin through 5.7.50 does not verify the paid amount, receiver, or payment status in its PayPal IPN handler and marks an order paid on an order | |
| CVE-2026-17009 | Analyzed | 未確認 | CWE-476 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to a NULL pointer dereference. |
| CVE-2026-17010 | Deferred | 未確認 | CWE-79 | The Saitama Addon Pack WordPress plugin through 1.0.8 does not sanitise and escape certain post metadata values before outputting them, allowing users with contributor-level access |
| CVE-2026-17011 | Deferred | 未確認 | CWE-345 | The Nexter Blocks WordPress plugin before 5.0.2 does not restrict who can save global CSS through one of its REST endpoints, allowing users with at least the Contributor role to s |
| CVE-2026-17012 | Deferred | 未確認 | CWE-284 | The Accept PayPal & Stripe with Subscriptions for WooCommerce WordPress plugin through 3.1.0 does not verify that the PayPal account which received a payment matches the merchant's |
| CVE-2026-17013 | Deferred | 未確認 | CWE-287, CWE-79 | The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not sanitise and escape a parameter before reflecting it into an inline script block, which could allow unauthentica |
| CVE-2026-17014 | Deferred | 未確認 | CWE-73 | The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not perform any capability or nonce check on one of its public REST endpoint actions, allowing unauthenticated users |
| CVE-2026-17015 | Analyzed | 未確認 | CWE-125 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service and obtain sensitive information due to an out-of-bounds read. |
| CVE-2026-17016 | Deferred | 未確認 | CWE-284 | The Accept PayPal & Stripe with Subscriptions for WooCommerce WordPress plugin through 3.1.0 does not validate the amount actually paid against the order total in its PayPal Data T |
| CVE-2026-17017 | Deferred | 未確認 | CWE-89 | The CubeWP Framework WordPress plugin before 1.1.31 does not properly sanitize and escape a parameter before using it in a SQL statement through an AJAX action, and does not includ |
| CVE-2026-17018 | Deferred | 未確認 | CWE-639 | The CubeWP Framework WordPress plugin through 1.1.30 does not perform a per-object read authorization check, nor restrict which metadata keys may be requested, on one of its REST A |
| CVE-2026-17019 | Deferred | 未確認 | CWE-79 | The JetEngine WordPress plugin before 3.8.13.1 does not sanitise uploaded SVG files before storing and serving them, and does not adequately restrict who can upload them, allowing |
| CVE-2026-17020 | Deferred | 未確認 | CWE-639 | The Salon Booking System WordPress plugin through 10.31.0 does not verify that a requested booking belongs to the caller on one of its REST API endpoints, requiring only a basic r |
| CVE-2026-17021 | Deferred | 未確認 | CWE-862 | The Salon Booking System WordPress plugin before 10.30.34 does not properly restrict access to some of its booking-modification AJAX actions and does not verify ownership of the ta |
| CVE-2026-17022 | Deferred | 未確認 | CWE-200 | The Salon Booking System WordPress plugin before 10.30.34 does not properly validate a booking's ownership token before loading it in its booking-wizard confirmation steps, allowi |
| CVE-2026-17023 | Deferred | 未確認 | CWE-284 | The Salon Booking System WordPress plugin through 10.30.33 does not perform any capability check or validate an OAuth state value on its Google Calendar authorization callback, wh |
| CVE-2026-17024 | Analyzed | 未確認 | CWE-295 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper certificate validation. |
| CVE-2026-17028 | Analyzed | 未確認 | CWE-125 | IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in partition firmware durin |
| CVE-2026-17029 | Analyzed | 未確認 | CWE-787 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary code due to an out-of-bounds write. |
| CVE-2026-17032 | Deferred | 未確認 | CWE-912 | Multiple Supsystic Pro plugins were distributed with malicious code through the vendor's compromised update server, allowing unauthenticated attackers to deploy a second-stage payl |
| CVE-2026-17033 | Awaiting Analysis | 未確認 | CWE-79 | An authenticated attacker with Editor access or alert.instances.external:write can submit an external Alertmanager alert containing a controlled generatorURL. The attacker is autho |
| CVE-2026-17040 | Analyzed | 未確認 | CWE-120 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow. |
| CVE-2026-17042 | Analyzed | 未確認 | CWE-125 | IBM Power Systems Firmware FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 - OP940.81 (Power HMC) is affected by a vulnerability in host firmware NVRAM |
| CVE-2026-17043 | Analyzed | 未確認 | CWE-22 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to delete arbitrary files due to path traversal. |
| CVE-2026-17044 | Deferred | 未確認 | CWE-89 | The Iptanus File Upload WordPress plugin before 5.1.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to an SQL injection exploitable |
| CVE-2026-17045 | Analyzed | 未確認 | CWE-294 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to perform unauthorized operations and access sensitive information due to improper session management. |
| CVE-2026-17060 | Analyzed | 未確認 | CWE-200 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information and cause a denial of service due to a kernel heap over-read. |
| CVE-2026-17061 | Awaiting Analysis | 未確認 | CWE-502 | A Deserialization of Untrusted Data vulnerability affecting SIMULIA Execution Engine from Release 2023 through Release 2026 could lead to an unauthenticated remote code execution. |
| CVE-2026-17063 | Analyzed | 未確認 | CWE-863 | IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the interface between the BMC/FSP and the host |
| CVE-2026-17069 | Analyzed | 未確認 | CWE-352 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper validation of anti-CSRF tokens. |
| CVE-2026-17070 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Liman MYS: from 2.2.3 before 2.3 |
| CVE-2026-17071 | Analyzed | 未確認 | CWE-22 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to perform file manipulation due to path traversal. |
| CVE-2026-17074 | Analyzed | 未確認 | CWE-269 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper privilege management. |
| CVE-2026-17075 | Analyzed | 未確認 | CWE-287 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information and perform unauthorized operations due to improper validation of authentication tokens. |
| CVE-2026-17076 | Analyzed | 未確認 | CWE-770 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper processing of DRDA and DDM resynchronization requests. |
| CVE-2026-17077 | Analyzed | 未確認 | CWE-457 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to the use of an uninitialized variable. |
| CVE-2026-17078 | Analyzed | 未確認 | CWE-400 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to resource exhaustion. |
| CVE-2026-17079 | Analyzed | 未確認 | CWE-693 | IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to the ability to disable server-side input validation via a |
| CVE-2026-17081 | Analyzed | 未確認 | CWE-22 | IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write arbitrary files due to improper limitation of a pathname to a restricted directory. |
| CVE-2026-17082 | Analyzed | 未確認 | CWE-269 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain elevated privileges due to improper validation of a client-supplied profile name. |
| CVE-2026-17083 | Analyzed | 未確認 | CWE-787 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow. |
| CVE-2026-17084 | Awaiting Analysis | 未確認 | CWE-436 | The "stringprep" module didn't process characters from RFC 3454 tables B.2 or B.3 correctly: the latest Unicode codepoint attributes were used instead of the specified Unicode 3. |
| CVE-2026-17087 | Deferred | 未確認 | CWE-862 | The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.8.4. This is |
| CVE-2026-17088 | Analyzed | 未確認 | CWE-22 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a path traversal vulnerability. |
| CVE-2026-17089 | Deferred | 未確認 | CWE-79 | The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'header_format' parameter in all versions u |
| CVE-2026-17090 | Deferred | 未確認 | CWE-79 | The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Button Module 'button' (Button Code) Setting i |
| CVE-2026-17091 | Analyzed | 未確認 | CWE-190 | IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the PowerVM hypervisor c |
| CVE-2026-17093 | Analyzed | 未確認 | CWE-121 | IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 - OP940. |
| CVE-2026-17094 | Analyzed | 未確認 | CWE-22 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information and manipulate files due to a path traversal vulnerability. |
| CVE-2026-17095 | Analyzed | 未確認 | CWE-915 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to unsafe reflection. |
| CVE-2026-17097 | Analyzed | 未確認 | CWE-129 | IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the PowerVM hypervisor c |
| CVE-2026-17099 | Analyzed | 未確認 | CWE-287 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to improper authentication. |
| CVE-2026-17100 | Analyzed | 未確認 | CWE-787 | Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1, and OP940.00 - OP940.81 is affecte |
| CVE-2026-17101 | Analyzed | 未確認 | CWE-287 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code or obtain sensitive information due to improper authentication. |
| CVE-2026-17106 | Awaiting Analysis | 未確認 | CWE-59 | The tar extraction routines in moby/go-archive (Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers) do not confine filesystem operations to the destination di |
| CVE-2026-17109 | Analyzed | 未確認 | CWE-20 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to add unexpected parameters to a command due to parameter injection. |
| CVE-2026-17110 | Analyzed | 未確認 | CWE-250 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands and obtain sensitive information due to improper privilege management. |
| CVE-2026-17111 | Analyzed | 未確認 | CWE-89 | IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or d |
| CVE-2026-17113 | Awaiting Analysis | 未確認 | CWE-1287 | A flaw was found in CRI-O's container-creation environment-variable handling (`mergeEnvs` in `server/utils.go`, consumed by `setupContainerEnvironmentAndWorkdir` in `server/contain |
| CVE-2026-17118 | Analyzed | 未確認 | CWE-416 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a use-after-free vulnerability. |
| CVE-2026-17120 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a buffer overflow. |
| CVE-2026-17121 | Analyzed | 未確認 | CWE-400, CWE-674 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled recursion. |
| CVE-2026-17122 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow. |
| CVE-2026-17123 | Deferred | 未確認 | CWE-918 | The Royal Elementor Addons plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 1.7.1064 via the Form Builder widget's 'webhook_url' |
| CVE-2026-17124 | Analyzed | 未確認 | CWE-125 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an out-of-bounds read. |
| CVE-2026-17136 | Analyzed | 未確認 | CWE-134 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a format string vulnerability. |
| CVE-2026-17138 | Analyzed | 未確認 | CWE-121 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow. |
| CVE-2026-17141 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow. |
| CVE-2026-17142 | Analyzed | 未確認 | CWE-287 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper authentication. |
| CVE-2026-17145 | Analyzed | 未確認 | CWE-269 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper privilege management. |
| CVE-2026-17152 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow. |
| CVE-2026-17153 | Deferred | 未確認 | CWE-862 | The AI Agent by SiteGround plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2.7. This is due to the plugin not properly verifying |
| CVE-2026-17157 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow. |
| CVE-2026-17159 | Analyzed | 未確認 | CWE-190 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an integer overflow. |
| CVE-2026-17160 | Analyzed | 未確認 | CWE-190 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an integer overflow during size computation. |
| CVE-2026-17163 | Analyzed | 未確認 | CWE-770 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to improper validation of an array size field. |
| CVE-2026-17165 | Analyzed | 未確認 | CWE-476 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference. |
| CVE-2026-17168 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow. |
| CVE-2026-17170 | Analyzed | 未確認 | CWE-770 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to improper validation of an allocation size. |
| CVE-2026-17171 | Analyzed | 未確認 | CWE-59 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to overwrite arbitrary files due to improper resolution of symbolic links. |
| CVE-2026-17173 | Analyzed | 未確認 | CWE-22 | IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of file paths. |
| CVE-2026-17175 | Analyzed | 未確認 | CWE-287 | IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication enforcement. |
| CVE-2026-17177 | Analyzed | 未確認 | CWE-674 | IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to uncontrolled recursion. |
| CVE-2026-17179 | Analyzed | 未確認 | CWE-78 | IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service due to command injection. |
| CVE-2026-17181 | Analyzed | 未確認 | CWE-22 | IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write files to arbitrary locations due to path traversal. |
| CVE-2026-17182 | Analyzed | 未確認 | CWE-287 | IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to bypass authentication and obtain or alter sensitive information due to improper validation of request URI pa |
| CVE-2026-17183 | Awaiting Analysis | 未確認 | CWE-863 | An authenticated user with permission to create or edit alert rules can bypass datasource query authorization by marking an alert rule query as a server-side expression while refer |
| CVE-2026-17184 | Analyzed | 未確認 | CWE-73 | IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary code due to external control of file name or path. |
| CVE-2026-17186 | Analyzed | 未確認 | CWE-78 | IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary CL commands due to improper neutralization of special elements in a command. |
| CVE-2026-17195 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to an out-of-bounds write. |
| CVE-2026-17197 | Undergoing Analysis | 未確認 | CWE-287 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to bypass security restrictions due to improper validation of client-asserted identity. |
| CVE-2026-17199 | Analyzed | 未確認 | CWE-770 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to unbounded resource allocation. |
| CVE-2026-17203 | Awaiting Analysis | 未確認 | CWE-287 | IBM Administration Runtime Expert for i 1R1M0 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication enforcement. |
| CVE-2026-17206 | Analyzed | 未確認 | CWE-787 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to a buffer overflow. |
| CVE-2026-17209 | Analyzed | 未確認 | CWE-79 | IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary scripts due to cross-site scripting. |
| CVE-2026-17212 | Analyzed | 未確認 | CWE-125 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds read. |
| CVE-2026-17216 | Analyzed | 未確認 | CWE-190 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an integer error when processing DRDA large-object headers. |
| CVE-2026-17218 | Analyzed | 未確認 | CWE-787 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write. |
| CVE-2026-17220 | Undergoing Analysis | 未確認 | CWE-120 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and modify authentication metadata due to a buffer overflow. |
| CVE-2026-17222 | Analyzed | 未確認 | CWE-89 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify data in certain SQL tables due to improper neutralization of special elements used in an SQL comm |
| CVE-2026-17223 | Analyzed | 未確認 | CWE-787 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to a buffer overflow. |
| CVE-2026-17226 | Analyzed | 未確認 | CWE-125 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information or cause a denial of service due to an out-of-bounds read. |
| CVE-2026-17227 | Analyzed | 未確認 | CWE-89 | IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper neutralization of special elements used in an SQL |
| CVE-2026-17229 | Analyzed | 未確認 | CWE-835 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an infinite loop. |
| CVE-2026-17248 | Analyzed | 未確認 | CWE-78 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to improper neutralization of special elements in an OS command. |
| CVE-2026-17250 | Awaiting Analysis | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability exists in the firmware update functionality of TL-MR6400 v7 due to unsafe processing of attacker-controlled metadata within a firmware i |
| CVE-2026-17251 | Awaiting Analysis | 未確認 | CWE-476 | A NULL pointer dereference vulnerability exists in the HTTP request parsing functionality of TL-MR6400 v7. An unauthenticated remote attacker can trigger the vulnerability by send |
| CVE-2026-17252 | Awaiting Analysis | 未確認 | CWE-787 | A stack-based out-of-bounds write vulnerability exists in the login request handling functionality of the administrative web interface of TP-Link TL-MR6400 v7 routers. An unauthent |
| CVE-2026-17264 | Deferred | 未確認 | CWE-787 | Opening a crafted DICOM file containing malicious JPEG-compressed pixel data triggers an attacker-controlled heap out-of-bounds write, which may allow an attacker to remotely execu |
| CVE-2026-17266 | Analyzed | 未確認 | CWE-22 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory. |
| CVE-2026-17268 | Analyzed | 未確認 | CWE-294 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper validation of a session token. |
| CVE-2026-17271 | Analyzed | 未確認 | CWE-770 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper validation of input size. |
| CVE-2026-17272 | Analyzed | 未確認 | CWE-787 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a buffer overflow. |
| CVE-2026-17276 | Analyzed | 未確認 | CWE-269 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to escalate privileges due to improper authorization in the handling of high-authority threads. |
| CVE-2026-1728 | Analyzed | 未確認 | CWE-269 | Tokens issued to a low-privileged user are not sufficiently restricted, allowing them to be used to access product-level Admin REST APIs. Exploitation of this vulnerability allows |
| CVE-2026-17414 | Analyzed | 未確認 | CWE-20 | IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 Power Systems Firmware is affected by a vulnerability in p |
| CVE-2026-17417 | Analyzed | 未確認 | CWE-78 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of shell metacharacters. |
| CVE-2026-17418 | Analyzed | 未確認 | CWE-89 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to cause a denial of service due to improper neutralization of special elements used in an SQL command. |
| CVE-2026-17419 | Analyzed | 未確認 | CWE-89 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify SQL tables due to improper neutralization of special elements used in an SQL command. |
| CVE-2026-17420 | Analyzed | 未確認 | CWE-78 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper neutralization of special elements in an SQL parameter. |
| CVE-2026-17422 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a buffer overflow. |
| CVE-2026-17423 | Analyzed | 未確認 | CWE-125 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information and cause a denial of service due to an out-of-bounds read. |
| CVE-2026-17424 | Analyzed | 未確認 | CWE-22 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to bypass security restrictions due to improper limitation of a pathname to a restricted directory. |
| CVE-2026-17425 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a stack buffer overflow. |
| CVE-2026-17429 | Analyzed | 未確認 | CWE-863 | IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 - OP940. |
| CVE-2026-17431 | Deferred | 未確認 | CWE-73, CWE-78 | PDF::WebKit versions through 1.2 for Perl allow OS command injection via a 2-arg open() of the output path in to_pdf and of stylesheet paths in _style_tag_for. to_pdf reads the ge |
| CVE-2026-17435 | Deferred | 未確認 | CWE-59 | File::Rotate::Simple versions before 0.4.0 for Perl create the target of dangling symlinks when rotating files. When the file to be rotated is a symbolic link to a missing file, a |
| CVE-2026-17436 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow. |
| CVE-2026-17438 | Analyzed | 未確認 | CWE-269 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to obtain sensitive information or modify data due to improper privilege management. |
| CVE-2026-17445 | Analyzed | 未確認 | CWE-250 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper validation of an attacker-supplied user profile name. |
| CVE-2026-17468 | Analyzed | 未確認 | CWE-321 | IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to forge valid session tokens due to the use of a hardcoded cryptographic key. |
| CVE-2026-17473 | Analyzed | 未確認 | CWE-22 | IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to read arbitrary files due to improper limitation of a pathname to a restricted directory. |
| CVE-2026-17476 | Analyzed | 未確認 | CWE-787 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an improper buffer write. |
| CVE-2026-17481 | Analyzed | 未確認 | CWE-117 | IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper output neutralization for logs. |
| CVE-2026-17482 | Analyzed | 未確認 | CWE-73 | IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper control of file paths. |
| CVE-2026-17485 | Analyzed | 未確認 | CWE-125, CWE-191 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and obtain sensitive information due to an integer underflow. |
| CVE-2026-17494 | Analyzed | 未確認 | CWE-121 | IBM Power Systems Firmware FW1120.00, and FW1110.00 through FW1110.30 is affected by a vulnerability in the interface between the BMC and the host system. An attacker with service |
| CVE-2026-17502 | Analyzed | 未確認 | CWE-787 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds write. |
| CVE-2026-17505 | Deferred | 未確認 | CWE-79 | The Translate Multilingual sites – TranslatePress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in versions up to, and including, 3.2.5 |
| CVE-2026-17506 | Deferred | 未確認 | CWE-79 | The Independent Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 404 not_found_url tracking parameter in versions up to, and including, 2.15.0. T |
| CVE-2026-17510 | Deferred | 未確認 | CWE-476 | Crypt::OpenSSL::PKCS12 versions before 1.98 for Perl allow a NULL pointer dereference in print_attribute via a zero length BMPSTRING attribute. print_attribute() sizes the destina |
| CVE-2026-17515 | Deferred | 未確認 | CWE-200, CWE-352 | The MLSImport: IDX Plugin & MLS Plugin for Real Estate Listings WordPress plugin before 7.0.4 does not have authorisation and CSRF checks in one of its AJAX actions, allowing any a |
| CVE-2026-17519 | Rejected | 未確認 | Rejected reason: This is rejected. | |
| CVE-2026-17520 | Deferred | 未確認 | CWE-326 | The Newsletters WordPress plugin before 4.17 does not generate its API key using a sufficiently random source, deriving it from a publicly known value, allowing unauthenticated att |
| CVE-2026-17522 | Deferred | 未確認 | CWE-352 | The Newsletters WordPress plugin before 4.17 does not perform any nonce or capability check when saving one of its settings screens, and writes every submitted parameter into its o |
| CVE-2026-17532 | Deferred | 未確認 | CWE-79 | The Seraphinite Accelerator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'seraph_accel_prep' parameter in versions up to, and including, 2.29.15. Th |
| CVE-2026-17533 | Deferred | 未確認 | CWE-269 | The All-in-One WP Migration and Backup WordPress plugin before 7.108 does not restrict its migration import functionality to network administrators on multisite installations, allo |
| CVE-2026-17535 | Awaiting Analysis | 未確認 | CWE-125, CWE-369, CWE-789 | Velociraptor's NTFS parsing library mishandles several out of bound and memory exhaustion bugs which may be triggered by maliciously crafted NTFS images. Typically Velociraptor's |
| CVE-2026-17540 | Deferred | 未確認 | CWE-284 | The File Manager WordPress plugin before 6.9.1 does not properly authorise its file management commands, allowing any authenticated user, such as a subscriber, to read and delete a |
| CVE-2026-17541 | Deferred | 未確認 | CWE-200 | The File Manager WordPress plugin before 6.9.1 does not have authorisation checks on one of its REST API routes, allowing unauthenticated users to read its file activity log, discl |
| CVE-2026-17542 | Deferred | 未確認 | CWE-200 | The File Manager WordPress plugin before 6.9.1 does not perform any capability check on one of its file manager connector endpoints, allowing any authenticated user, such as a subs |
| CVE-2026-17548 | Deferred | 未確認 | CWE-862 | Missing authorization in Checkmk <2.5.0p12, <2.4.0p36, <2.3.0p50 and all 2.2.0 versions allows an authenticated user who knows the ID of a background job to view that job's status |
| CVE-2026-17555 | Deferred | 未確認 | CWE-89 | The WPvivid Backup & Migration plugin for WordPress is vulnerable to SQL Injection via the export_data parameter in versions up to, and including, 0.9.131. This is due to insuffici |
| CVE-2026-17556 | Analyzed | 未確認 | CWE-22 | A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to delete arbitrary files and directories on the instance, includ |
| CVE-2026-17559 | Deferred | 未確認 | CWE-863 | The Passster WordPress plugin before 4.3.9 does not correctly match its own public endpoint paths when deciding which REST API requests may bypass global password protection, compa |
| CVE-2026-17562 | Deferred | 未確認 | CWE-639 | Authorization bypass through User-Controlled key vulnerability in Summit Security Systems AdisyonPro allows Accessing Functionality Not Properly Constrained by ACLs. This issue af |
| CVE-2026-17565 | Deferred | 未確認 | CWE-918 | The Animation Addons for Elementor WordPress plugin before 2.7.2 does not validate a user-supplied value before using it to build the host of a server-side HTTP request, allowing |
| CVE-2026-17571 | Deferred | 未確認 | CWE-79 | The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'param' in all v |
| CVE-2026-17578 | Awaiting Analysis | 未確認 | CWE-323 | Kong Event Gateway versions 1.0.0 through 1.1.1 and 1.2.0 do not enforce key rotation before reaching NIST SP 800-38D recommended usage limit for AES-GCM encryption keys with rando |
| CVE-2026-17580 | Deferred | 未確認 | CWE-862 | The Advanced Views – Display Custom Fields (ACF, Pods, MetaBox), Posts, CPT and Woo Products anywhere in Gutenberg, Elementor, Divi, Beaver… plugin for WordPress is vulnerable to S |
| CVE-2026-17581 | Deferred | 未確認 | CWE-94 | The WCPOS – Point of Sale (POS) plugin for WooCommerce plugin for WordPress is vulnerable to Code Injection via the 'thermal' Template Engine in all versions up to, and including, |
| CVE-2026-17582 | Deferred | 未確認 | CWE-89 | The Slider Hero plugin for WordPress is vulnerable to second-order SQL Injection in versions up to, and including, 9.1.7 via the qcld_sliderhero_duplicate() function. Slide data (d |
| CVE-2026-17583 | Analyzed | 未確認 | CWE-353 | The affected Thermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can be edited. An attacker could tamper with these files, altering DN |
| CVE-2026-17587 | Deferred | 未確認 | CWE-862 | The My Agile Privacy® – CMP, Cookie Consent & Privacy Tools plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.3.6. This is due to t |
| CVE-2026-17590 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-32475. Reason: This candidate is a reservation duplicate of CVE-2026-32475. Notes: All CVE user | |
| CVE-2026-17593 | Analyzed | 未確認 | CWE-470 | An account holding the nexus:settings:update permission in Nexus Repository 3 (or the equivalent nexus:settings permission in the legacy Nexus Repository 2) could submit arbitrary |
| CVE-2026-17594 | Analyzed | 未確認 | CWE-863 | Nexus Repository 3 CE/Pro versions 3.0.0 through 3.94.x contain an incorrect authorization vulnerability (CWE-863) in the repository-creation user interface. An individual user acc |
| CVE-2026-17595 | Analyzed | 未確認 | CWE-497 | Nexus Repository 3 did not fully sandbox JEXL expressions used in Content Selectors. An account holding the nexus:selectors:create permission could construct an expression that rea |
| CVE-2026-17596 | Analyzed | 未確認 | CWE-79 | Nexus Repository 3 was found to be vulnerable to stored cross-site scripting (XSS). A user with the nexus:blobstores:create or nexus:blobstores:update permission could set a blob s |
| CVE-2026-17597 | Analyzed | 未確認 | CWE-918 | Nexus Repository 3 contains a Server-Side Request Forgery (SSRF) vulnerability in the email configuration verification feature. A user holding the nexus:settings:update permission |
| CVE-2026-17598 | Analyzed | 未確認 | CWE-915 | Sonatype Nexus Repository 3 did not properly filter internal configuration keys from user-supplied task properties when creating or updating a scheduled task through the administra |
| CVE-2026-17599 | Analyzed | 未確認 | CWE-620 | Nexus Repository 3 contained an endpoint used to change the administrator account password during initial onboarding. This endpoint did not verify that onboarding was still in prog |
| CVE-2026-17600 | Analyzed | 未確認 | CWE-613 | Sonatype Nexus Repository 3 did not immediately terminate a user's active login session or revoke their cached permissions when that user's account was deleted, deactivated, or had |
| CVE-2026-17601 | Analyzed | 未確認 | CWE-862 | A user holding a permission to update privilege definitions could modify a wildcard privilege already assigned to their own role to grant broader permissions than they were authori |
| CVE-2026-17603 | Analyzed | 未確認 | CWE-94 | Nexus Repository 3 did not sufficiently restrict which HikariCP connection-pool properties could be set through the DataStore configuration API. A user holding the nx-datastores-up |
| CVE-2026-17604 | Deferred | 未確認 | CWE-22 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.1.1 via the 'data' |
| CVE-2026-17605 | Deferred | 未確認 | CWE-98 | The Payment forms, Buy now buttons, and Invoicing System | GetPaid plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.8.56 via the g |
| CVE-2026-17608 | Deferred | 未確認 | CWE-352 | The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 7.10.09. This is d |
| CVE-2026-17610 | Awaiting Analysis | 未確認 | CWE-404 | In SiSDK v2026.6.0 and earlier, high network traffic loads can cause a dropped ACK leading to a denial of service. This is only present for EFR32MG24 and EFR32MG26 devices running |
| CVE-2026-17613 | Deferred | 未確認 | CWE-862 | Penpot’s ::import-binfile RPC command lacks authorization on the optional file-id parameter, allowing any authenticated user to overwrite any files on the target server and subscri |
| CVE-2026-17614 | Awaiting Analysis | 未確認 | CWE-22 | A path traversal flaw was found in WildFly's domain mode implementation. The LocalFileRepository.getFile() and getConfigurationFile() methods in wildfly-core/deployment-repos |
| CVE-2026-17615 | Awaiting Analysis | 未確認 | CWE-611 | A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially crafted |
| CVE-2026-17616 | Analyzed | 未確認 | CWE-310 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 Reverse Proxy in ce |
| CVE-2026-17617 | Analyzed | 未確認 | CWE-918 | IBM Application Gateway Operator 22.2 through 26.06 is vulnerable to Server-Side Request Forgery (SSRF) due to insufficient validation of URLs specified in custom resources. |
| CVE-2026-17623 | Analyzed | 未確認 | CWE-78 | IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper validation of the command field in MCP server config |
| CVE-2026-17624 | Analyzed | 未確認 | CWE-94 | IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could |
| CVE-2026-17625 | Analyzed | 未確認 | CWE-78 | IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could |
| CVE-2026-17626 | Analyzed | 未確認 | CWE-266 | IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow an authenticated attacker to read, modify, or expose sensitive host files via Docker-based MCP servers due to incomplete |
| CVE-2026-17630 | Analyzed | 未確認 | CWE-184 | IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to execute arbitrary code due to improper validation of configuration parameters. |
| CVE-2026-17632 | Analyzed | 未確認 | CWE-94 | IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of Python code during AST-based security scan |
| CVE-2026-17633 | Analyzed | 未確認 | CWE-94 | IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to code injection. |
| CVE-2026-17639 | Deferred | 未確認 | CWE-400 | Certain HP Smart Tank All-in-One printers may be potentially vulnerable to a denial of service condition that allows an unauthenticated attacker to cause the device to become unava |
| CVE-2026-17642 | Analyzed | 未確認 | CWE-78 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command. |
| CVE-2026-17649 | Analyzed | 未確認 | CWE-125 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read. |
| CVE-2026-18020 | Analyzed | 未確認 | CWE-125 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an off-by-one error in bounds checking. |
| CVE-2026-18024 | Modified | 未確認 | CWE-126 | Buffer over-read in PostgreSQL ascii() SQL function allows a user to disclose up to 3 bytes after the end of a specific allocation, via a crafted text value. This is the same clas |
| CVE-2026-18027 | Deferred | 未確認 | CWE-22 | The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and includi |
| CVE-2026-18030 | Deferred | 未確認 | CWE-862 | The BricksForge WordPress plugin before 3.1.8.8 does not verify the identity of the requester when processing a password change submitted through one of its form actions, allowing |
| CVE-2026-18031 | Deferred | 未確認 | CWE-287 | The TabaPay Gateway WordPress plugin through 1.4.0 does not validate the payment callback before establishing a session for the account associated with the referenced order, allowi |
| CVE-2026-18032 | Deferred | 未確認 | CWE-200 | The WP Data Access WordPress plugin before 5.5.79 does not validate the column names it accepts on one of its unauthenticated AJAX actions, and the nonce guarding that action does |
| CVE-2026-18035 | Deferred | 未確認 | CWE-862 | The User Access Manager WordPress plugin before 2.3.15 does not apply its access restrictions to REST API requests, allowing unauthenticated attackers to read the content of posts, |
| CVE-2026-18037 | Deferred | 未確認 | CWE-862 | The Create WordPress plugin before 2.5.4 does not perform an authorization check before rendering content over one of its public REST API routes, and that route additionally publis |
| CVE-2026-18039 | Deferred | 未確認 | CWE-269 | The Essential Addons for Elementor WordPress plugin before 6.7.2 does not prevent user-supplied registration fields from overwriting reserved account attributes, allowing unauthen |
| CVE-2026-18044 | Deferred | 未確認 | CWE-345 | The Estatik Real Estate Plugin WordPress plugin before 4.3.4 does not validate the same recipient list that it later uses to address the message sent by its property request form, |
| CVE-2026-18046 | Deferred | 未確認 | CWE-863 | The Cookie Consent WordPress plugin before 0.0.10 does not correctly enforce its intended administrator-only capability check on the REST route that stores its geolocation service |
| CVE-2026-18048 | Deferred | 未確認 | CWE-73 | The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not validate a client-controlled value used to build a file path in one of its public endpoint actions, and performs |
| CVE-2026-18049 | Deferred | 未確認 | CWE-200 | The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not perform any capability or nonce check on one of its public endpoint actions and builds an option name from a cli |
| CVE-2026-18050 | Deferred | 未確認 | CWE-200 | The Events Manager WordPress plugin before 7.4 does not perform any authorization check on a REST route that serves temporarily stored file uploads, allowing unauthenticated users |
| CVE-2026-18051 | Deferred | 未確認 | CWE-22 | The W3 Total Cache WordPress plugin before 2.10.5 does not properly validate the request path it uses to build cache file names, allowing unauthenticated attackers to write a file |
| CVE-2026-18052 | Deferred | 未確認 | CWE-287 | The ManageWP Worker WordPress plugin before 4.9.37 does not bind the account being logged in to the signature which authorises the login, nor prevent an already used login link fro |
| CVE-2026-18057 | Deferred | 未確認 | CWE-89 | The Events Manager WordPress plugin before 7.4.1 does not sanitise and escape a user-controlled value before using it in a SQL statement, allowing users with a subscriber account |
| CVE-2026-18059 | Deferred | 未確認 | CWE-200 | The PixelYourSite – Your smart PIXEL (TAG) & API Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 11.2.1 via the g |
| CVE-2026-18062 | Deferred | 未確認 | CWE-79 | The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Identity Block Inner Image Content in all versi |
| CVE-2026-18068 | Analyzed | 未確認 | CWE-200 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to a byte-count and element-count confusion. |
| CVE-2026-18071 | Analyzed | 未確認 | CWE-269 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to improper privilege management. |
| CVE-2026-18077 | Analyzed | 未確認 | CWE-787 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a stack-based buffer overflow. |
| CVE-2026-18080 | Deferred | 未確認 | CWE-434 | The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 1.17.8 |
| CVE-2026-18086 | Analyzed | 未確認 | CWE-787 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary code or cause a denial of service due to improper bounds checking. |
| CVE-2026-18089 | Analyzed | 未確認 | CWE-295, CWE-347 | Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass by verifying responses against the response-embedded certificate in verify_xml when no trust anchor is con |
| CVE-2026-18092 | Analyzed | 未確認 | CWE-347 | Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass via XML signature wrapping because new_from_xml reads assertion identity with document-wide XPath instead |
| CVE-2026-18096 | Analyzed | 未確認 | CWE-770 | IBM Db2 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to cause a denial of service due to a memory leak. |
| CVE-2026-18097 | Analyzed | 未確認 | CWE-532 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to obtain sensitive information due |
| CVE-2026-18098 | Analyzed | 未確認 | CWE-346 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information and compromise system integrity due to an XML injection flaw. |
| CVE-2026-18099 | Analyzed | 未確認 | CWE-79 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary script code due to improper neutralization of user-controlled input. |
| CVE-2026-18100 | Deferred | 未確認 | CWE-79 | The MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'mf_form_id' Widget Setting in a |
| CVE-2026-18101 | Analyzed | 未確認 | CWE-269 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to improper management of thread authority swaps. |
| CVE-2026-18102 | Analyzed | 未確認 | CWE-122 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to overwrite adjacent memory due to an integer underflow during bounds checking. |
| CVE-2026-18103 | Awaiting Analysis | 未確認 | CWE-120 | A flaw was found in dhcp-server. A remote attacker with network access to the OMAPI (Open Management Application Programming Interface) port, especially if not secured with TSIG (T |
| CVE-2026-18106 | Analyzed | 未確認 | CWE-22 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of user-supplied path input. |
| CVE-2026-18108 | Analyzed | 未確認 | CWE-347 | Net::SAML2 versions before 0.86 for Perl allow authentication bypass because _verify_encrypted_assertion accepts an EncryptedAssertion whose decrypted content carries no signature. |
| CVE-2026-18109 | Deferred | 未確認 | CWE-79 | The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author Name in all versions up to, and including, 2.10.3 due to insufficient input |
| CVE-2026-18125 | Awaiting Analysis | 未確認 | CWE-125 | An out-of-bounds read in the Agent of Ivanti Endpoint Manager before version 2024 SU7 allows a remote unauthenticated attacker to crash an agent service. |
| CVE-2026-18127 | Awaiting Analysis | 未確認 | CWE-73 | External control of a filename in the Core of Ivanti Endpoint Manager before version 2024 SU7 allows a remote authenticated attacker full write control over an S3 bucket configured |
| CVE-2026-18129 | Awaiting Analysis | 未確認 | CWE-295 | Cleartext transmission of sensitive information in the Core of Ivanti Endpoint Manager before version 2024 SU7 allows a remote unauthenticated attacker in a MITM position to leak c |
| CVE-2026-18144 | Analyzed | 未確認 | CWE-285 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization. |
| CVE-2026-18146 | Deferred | 未確認 | CWE-79 | The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Notification Smartc |
| CVE-2026-18148 | Analyzed | 未確認 | CWE-117 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to inject arbitrary content into Navigator log files due to improper output neutralization for logs. |
| CVE-2026-18150 | Analyzed | 未確認 | CWE-362 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a race condition. |
| CVE-2026-18164 | Deferred | 未確認 | CWE-798 | An undocumented hard-coded credential, shared by all device units, is authorized to bypass authentication. This allows an attacker within Bluetooth range to arbitrarily manipulate |
| CVE-2026-18165 | Analyzed | 未確認 | CWE-352 | @fastify/oauth2 is an OAuth 2.0 plugin for Fastify. In versions from 7.2.0 up to but not including 8.3.0, the plugin validates the OAuth state, and with PKCE the code verifier, by |
| CVE-2026-18171 | Awaiting Analysis | 未確認 | CWE-863 | Docker Sandboxes (sbx) applies the read-only intent of a runtime host mount to the in-guest container bind only: the underlying virtio-fs host-edge grant is added to the sandbox's |
| CVE-2026-18178 | Analyzed | 未確認 | CWE-22 | IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to delete arbitrary files due to path traversal. |
| CVE-2026-18193 | Analyzed | 未確認 | CWE-269 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to bypass security restrictions due to improper validation of user-controlled addresses. |
| CVE-2026-18200 | Deferred | 未確認 | CWE-639 | The FoodBoxBooker WordPress plugin before 1.0.8 does not verify that the user account being updated belongs to the user making the request, allowing authenticated users, with Subsc |
| CVE-2026-18202 | Deferred | 未確認 | CWE-79 | The JetEngine WordPress plugin before 3.8.14 adds SVG to the site-wide list of allowed upload types without sanitising the file contents, allowing users with the upload files capab |
| CVE-2026-18216 | Deferred | 未確認 | CWE-287 | The Backup Migration WordPress plugin before 2.1.7 does not properly restrict a post-restore automatic login mechanism, allowing a user who administers one site of a multisite netw |
| CVE-2026-18230 | Deferred | 未確認 | CWE-89 | The WP Directory Kit WordPress plugin before 1.5.6 does not sanitise and escape a parameter before using it in a SQL statement through one of its authenticated AJAX actions, which |
| CVE-2026-18231 | Deferred | 未確認 | CWE-200 | The WP Directory Kit WordPress plugin before 1.5.7 does not perform any authorization check on one of its public AJAX actions and returns unfiltered database rows, allowing unauthe |
| CVE-2026-18233 | Deferred | 未確認 | CWE-862 | The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by one of its delivery endpoints belongs to the requester, allowing any authenticated user, i |
| CVE-2026-18234 | Deferred | 未確認 | CWE-862 | The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by its wallet payment handling belongs to the requester, and does not deduct the wallet balan |
| CVE-2026-18235 | Analyzed | 未確認 | CWE-78 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary Control Language commands due to insufficient input validation. |
| CVE-2026-18243 | Awaiting Analysis | 未確認 | CWE-79 | Certain HP DesignJet products may be potentially vulnerable to cross-site scripting (XSS), which may allow unauthenticated HTTP requests to view print job previews. |
| CVE-2026-18244 | Analyzed | 未確認 | CWE-862 | GitLab has remediated an issue in GitLab EE affecting all versions from 17.7 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allo |
| CVE-2026-18246 | Analyzed | 未確認 | CWE-436 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to an interpretation conflict in the multipart parser. |
| CVE-2026-18247 | Deferred | 未確認 | CWE-79 | A Cross Site Scripting (XSS) vulnerability in the Web Portals of AtHoc IWS in versions earlier than 7.21 HF-734 could allow an attacker to potentially execute actions in the contex |
| CVE-2026-18248 | Analyzed | 未確認 | CWE-345 | @fastify/aws-lambda version 6.4.0 decorates each Fastify request with request.awsLambda.event and request.awsLambda.context, values that applications are documented to use for auth |
| CVE-2026-18249 | Analyzed | 未確認 | CWE-269 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain elevated privileges due to improper validation of pointers read from Java-controlled addresses. |
| CVE-2026-18250 | Analyzed | 未確認 | CWE-362 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information and bypass security restrictions due to a race condition. |
| CVE-2026-18252 | Analyzed | 未確認 | CWE-829 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.9 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authentica |
| CVE-2026-18258 | Analyzed | 未確認 | CWE-639 | Authorization bypass in the Line, LineTranscription, VirtualCollection, tag and process API endpoints in Scripta/eScriptorium through 26.04.1 allows a remote authenticated user to |
| CVE-2026-18259 | Awaiting Analysis | 未確認 | CWE-208 | Observable Timing Discrepancy vulnerability in Drupal Token Content Access allows Brute Force. This issue affects Token Content Access versions: from 0.0.0 to 3.1.2. |
| CVE-2026-18260 | Awaiting Analysis | 未確認 | CWE-20, CWE-307 | Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Disable Login Page allows Brute Force. This issue affects Disable Login Page versions: from 0.0.0 |
| CVE-2026-18261 | Awaiting Analysis | 未確認 | CWE-20 | Vulnerability in Drupal Powerful Surveys. This issue affects Powerful Surveys versions: *.*. |
| CVE-2026-18262 | Deferred | 未確認 | CWE-749 | Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on af |
| CVE-2026-18263 | Deferred | 未確認 | CWE-749 | Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on af |
| CVE-2026-18264 | Deferred | 未確認 | CWE-78 | NoMachine getstat Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NoMachine |
| CVE-2026-18265 | Deferred | 未確認 | CWE-306 | OSNEXUS QuantaStor Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OSN |
| CVE-2026-18267 | Deferred | 未確認 | CWE-59 | Kenwood DNR1007XR Firmware Update Link Following Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installa |
| CVE-2026-18268 | Deferred | 未確認 | CWE-78 | Kenwood DNR1007XR JKGenService Command Injection Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installation |
| CVE-2026-18269 | Deferred | 未確認 | CWE-787 | Kenwood DNR1007XR tchdr_bytestream_read Out-Of-Bounds Write Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affect |
| CVE-2026-18270 | Deferred | 未確認 | CWE-732 | Kenwood DNR1007XR udhcpd Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected inst |
| CVE-2026-18271 | Deferred | 未確認 | CWE-122 | Kenwood DNR1007XR vCardParser Heap-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected |
| CVE-2026-18272 | Deferred | 未確認 | CWE-78 | Kenwood DNR1007XR startUpdateProcess Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of |
| CVE-2026-18273 | Deferred | 未確認 | CWE-276 | Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability. This vulnerability allows physically present attackers to escalate privileges on affec |
| CVE-2026-18274 | Deferred | 未確認 | CWE-22 | Heimdall Data Database Proxy uploadJar Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected ins |
| CVE-2026-18275 | Analyzed | 未確認 | CWE-639 | Authorization bypass in the process and annotation taxonomy serializers in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to run segmentation and transcrip |
| CVE-2026-18276 | Analyzed | 未確認 | CWE-862 | Missing authorization in the websocket consumer in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to subscribe to any document's event stream and observe a |
| CVE-2026-18277 | Analyzed | 未確認 | CWE-862 | Missing authorization in the OcrModelRight create and delete views in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to grant themselves access to another |
| CVE-2026-18278 | Deferred | 未確認 | CWE-125 | Sony XAV-9500ES prh_l2_decode_packet Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information |
| CVE-2026-18279 | Deferred | 未確認 | CWE-120 | Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installat |
| CVE-2026-18280 | Deferred | 未確認 | CWE-120 | Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installati |
| CVE-2026-18281 | Deferred | 未確認 | CWE-122 | Sony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on |
| CVE-2026-18282 | Deferred | 未確認 | CWE-122 | Sony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary c |
| CVE-2026-18283 | Deferred | 未確認 | CWE-285 | Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability. This vulnerability allows physically present attackers to bypass authorization on affected installations on Sony |
| CVE-2026-18284 | Deferred | 未確認 | CWE-78 | Sony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installa |
| CVE-2026-18285 | Deferred | 未確認 | CWE-502 | Aeon load_rehab_pile_dataset Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected |
| CVE-2026-18286 | Deferred | 未確認 | CWE-94 | Aeon load_human_activity_segmentation_datasets Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected |
| CVE-2026-18287 | Deferred | 未確認 | CWE-94 | Aeon load_time_series_segmentation_benchmark Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected in |
| CVE-2026-18288 | Awaiting Analysis | 未確認 | CWE-787 | OriginLab OriginPro OPJU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected inst |
| CVE-2026-18289 | Awaiting Analysis | 未確認 | CWE-787 | OriginLab OriginPro OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected insta |
| CVE-2026-18290 | Awaiting Analysis | 未確認 | CWE-787 | OriginLab OriginPro OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected insta |
| CVE-2026-18291 | Awaiting Analysis | 未確認 | CWE-119 | OriginLab OriginPro OGW File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected install |
| CVE-2026-18292 | Awaiting Analysis | 未確認 | CWE-119 | OriginLab OriginPro OGG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected install |
| CVE-2026-18293 | Awaiting Analysis | 未確認 | CWE-787 | OriginLab Origin Viewer OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected i |
| CVE-2026-18294 | Awaiting Analysis | 未確認 | CWE-119 | OriginLab Origin Viewer OGW File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected ins |
| CVE-2026-18295 | Analyzed | 未確認 | CWE-787 | GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations o |
| CVE-2026-18296 | Analyzed | 未確認 | CWE-122 | GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installa |
| CVE-2026-18297 | Analyzed | 未確認 | CWE-121 | GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected install |
| CVE-2026-18298 | Analyzed | 未確認 | CWE-122 | GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installa |
| CVE-2026-18299 | Analyzed | 未確認 | CWE-416 | GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreame |
| CVE-2026-18300 | Analyzed | 未確認 | CWE-190 | GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. |
| CVE-2026-18301 | Analyzed | 未確認 | CWE-190 | GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. |
| CVE-2026-18302 | Analyzed | 未確認 | CWE-122 | GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations |
| CVE-2026-18303 | Analyzed | 未確認 | CWE-121 | GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installation |
| CVE-2026-18304 | Analyzed | 未確認 | CWE-190 | GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. |
| CVE-2026-18305 | Analyzed | 未確認 | CWE-190 | GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. |
| CVE-2026-18306 | Analyzed | 未確認 | CWE-190 | GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. |
| CVE-2026-18307 | Analyzed | 未確認 | CWE-122 | GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations |
| CVE-2026-18308 | Analyzed | 未確認 | CWE-190 | GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. |
| CVE-2026-18309 | Analyzed | 未確認 | CWE-190 | GIMP APNG File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. |
| CVE-2026-18315 | Deferred | 未確認 | CWE-639 | The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key leading to Account Takeover in all |
| CVE-2026-18316 | Deferred | 未確認 | CWE-862 | The Solace Extra plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the import_zip() function in versions up to, |
| CVE-2026-18322 | Deferred | 未確認 | CWE-269 | The Smart Popup by Supsystic plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.12.0. This is due to a permission map collision in t |
| CVE-2026-18323 | Deferred | 未確認 | CWE-79 | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Radio Field (Save and Continue Draft) |
| CVE-2026-18324 | Deferred | 未確認 | CWE-79 | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Rich-Text Textarea Field in all versio |
| CVE-2026-18325 | Deferred | 未確認 | CWE-79 | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Forged Upload Record via Select Field |
| CVE-2026-18328 | Deferred | 未確認 | CWE-79 | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to DOM-Based Reflected Cross-Site Scripting via the 'error_description' p |
| CVE-2026-18331 | Deferred | 未確認 | CWE-79 | The Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'frm_user_id' |
| CVE-2026-18344 | Deferred | 未確認 | CWE-79 | The Wp Responsive Thumbnail Slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'id' parameter in versions up to, and excluding, 1.1.53. This is due |
| CVE-2026-18347 | Deferred | 未確認 | CWE-862 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.1.1. This is due |
| CVE-2026-18348 | Awaiting Analysis | 未確認 | CWE-863 | Missing authorization check in the upload_azure, upload_sftp, and upload_smb VQL plugins allows an authenticated analyst-role user can initiate attacker-controlled outbound network |
| CVE-2026-18349 | Deferred | 未確認 | CWE-1247 | Improper protection against voltage and clock glitches vulnerability in Microchip SAMA5D4 allows Hardware Fault Injection. This issue affects SAMA5D4. |
| CVE-2026-18352 | Deferred | 未確認 | CWE-22 | The User Access Manager plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.3.15 via the 'uamgetfile' parameter parameter. This makes |
| CVE-2026-18356 | Deferred | 未確認 | CWE-184 | The Limit Login Attempts Reloaded WordPress plugin before 3.3.5 does not compare logins against its username denylist case-insensitively and does not account for the account's emai |
| CVE-2026-18357 | Deferred | 未確認 | CWE-200 | The WPC Order Tip for WooCommerce WordPress plugin before 3.3.1 does not perform authorisation or nonce checks in one of its reporting features, allowing unauthenticated attackers |
| CVE-2026-18359 | Analyzed | 未確認 | CWE-918 | Server-side request forgery in the METS and IIIF import URI handling in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to make the server issue arbitrary H |
| CVE-2026-18366 | Deferred | 未確認 | CWE-269 | The Events Manager WordPress plugin before 7.4.1 does not properly scope its capability mapping, discarding the access control decisions WordPress already made for unrelated privi |
| CVE-2026-18367 | Awaiting Analysis | 未確認 | CWE-285 | A privilege escalation vulnerability allows local users to execute arbitrary code as root via Sophos Endpoint for macOS older than version 2026.1.1 and Sophos Home for macOS older |
| CVE-2026-18368 | Deferred | 未確認 | CWE-122 | In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd due to improper handling of Modbus TCP request data. A remote, unauthenticated attacker with access to th |
| CVE-2026-18370 | Deferred | 未確認 | CWE-122 | entr is vulnerable to Heap-based buffer overflow in run_utility() function. The function allocates a fixed-size heap buffer using malloc(ARG_MAX) and copies command-line arguments |
| CVE-2026-18371 | Deferred | 未確認 | CWE-79 | HTML injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated attacker to affect web user interface contents displayed to other users. |
| CVE-2026-18372 | Deferred | 未確認 | CWE-79 | CSS injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated vault administrator to inject arbitrary CSS, affecting the web user interface displayed to ot |
| CVE-2026-18374 | Awaiting Analysis | 未確認 | CWE-787 | Passing an effectively empty string to the `,ccs=` syntax extension of the mode argument in the `fopen` function in the GNU C Library version 2.45 or earlier may result in a heap b |
| CVE-2026-18385 | Deferred | 未確認 | CWE-94 | The The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to arbitrary shortc |
| CVE-2026-18387 | Deferred | 未確認 | CWE-89 | The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to generic SQL Injection via the 'tag_query' parameter in all versions up to, and inc |
| CVE-2026-18391 | Deferred | 未確認 | CWE-434 | The WooCommerce Subscriptions WordPress plugin before 9.1.0 does not validate user input before unserializing it on stores with High-Performance Order Storage enabled, leading to a |
| CVE-2026-18392 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-18393 | Awaiting Analysis | 未確認 | CWE-787 | A flaw was found in FFmpeg. The tdsc_load_cursor() function writes beyond the bounds of a heap-allocated buffer when processing crafted TDSC cursor data. A remote attacker could ex |
| CVE-2026-18395 | Deferred | 未確認 | CWE-79 | The Child Pages Card WordPress plugin before 1.09 does not sanitise and escape some of its shortcode attributes before outputting them back in a page, allowing users with the contr |
| CVE-2026-18400 | Deferred | 未確認 | CWE-79 | The Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'delay' Post Meta Setting in all |
| CVE-2026-18401 | Awaiting Analysis | 未確認 | CWE-770 | The non-blocking (asynchronous) JSON parser in jackson-core does not enforce the maxNumberLength constraint defined in StreamReadConstraints (default: 1000 characters). An attacker |
| CVE-2026-18402 | Deferred | 未確認 | CWE-79 | The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'draweropenverposition' Block/Shortcode Attribute in all |
| CVE-2026-18403 | Deferred | 未確認 | CWE-89 | LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the Central Participant Database (CPDB) workflow that copies survey participant tokens t |
| CVE-2026-18408 | Modified | 未確認 | CWE-829 | Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client operating syst |
| CVE-2026-18409 | Deferred | 未確認 | CWE-79 | The WPForms Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Single Line Text and Paragraph Text Field Values in all versions up to, and including, 2.0.0.2 |
| CVE-2026-18411 | Deferred | 未確認 | CWE-321 | The KARR Security System and SWDS dealer-installed automotive anti-theft systems use a shared Bluetooth authentication key across affected devices. An attacker within Bluetooth ran |
| CVE-2026-18412 | Deferred | 未確認 | OpenCart extensions are uploaded as zip files with .ocmod.zip extensions. Upon installation, the OpenCart v4.2.0.0 extension installer extracts these zip files, but does not valida | |
| CVE-2026-18420 | Awaiting Analysis | 未確認 | CWE-1321 | Improper input validation in the Time Series Visual Builder (TSVB) plugin in OpenSearch Dashboards allows an authenticated remote user to execute arbitrary code on the server via a |
| CVE-2026-18427 | Analyzed | 未確認 | CWE-22, CWE-436 | @fastify/static before version 10.1.3 contains an incomplete fix for a previous route guard bypass. The static file handler rejected only parent directory segments, but it did not |
| CVE-2026-18428 | Awaiting Analysis | 未確認 | CWE-693 | A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenticated actor with async query access to execute arbitrary cod |
| CVE-2026-18430 | Deferred | 未確認 | CWE-79 | HumHub 1.18.4 contains a stored cross-site scripting vulnerability in the comment-deletion notification flow. A Space administrator can delete another user's comment, choose to not |
| CVE-2026-18431 | Deferred | 未確認 | CWE-862 | The Avada theme for WordPress is vulnerable to Arbitrary File Write in all versions up to, and including, 7.16 when the Fusion Builder plugin is installed and active in versions up |
| CVE-2026-18432 | Deferred | 未確認 | CWE-269 | The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.29.9. The vulnerability exists because `ActionUs |
| CVE-2026-18433 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.4 and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated |
| CVE-2026-18435 | Deferred | 未確認 | CWE-79 | The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'toggleIcon' Block Attribute in all versions up |
| CVE-2026-18438 | Deferred | 未確認 | CWE-434 | The Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! plugin for WordPress is vulnerable to Remote Code Execution in all versions up |
| CVE-2026-18444 | Analyzed | 未確認 | CWE-195 | There is an integer conversion vulnerability resulting in an out-of-bounds read when loading images recently discovered in NI LabVIEW. This may result in information disclosure or |
| CVE-2026-18445 | Analyzed | 未確認 | CWE-190 | There is an integer overflow vulnerability resulting in an out-of-bounds write recently discovered in NI LabVIEW. This may result in information disclosure or arbitrary code execu |
| CVE-2026-18464 | Deferred | 未確認 | CWE-400 | The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not restric |
| CVE-2026-18465 | Deferred | 未確認 | CWE-22 | The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not properl |
| CVE-2026-18466 | Deferred | 未確認 | CWE-284 | The WP Maps WordPress plugin before 4.9.8 does not perform a capability check, nor validate a nonce, in one of its AJAX actions, allowing users with a Subscriber account to create |
| CVE-2026-18468 | Deferred | 未確認 | CWE-287 | The Login & Register Forms WordPress plugin before 4.0.2 does not bind the password reset verification state to the account being reset or to the party that completed the verifica |
| CVE-2026-18469 | Deferred | 未確認 | CWE-287 | The Login & Register Forms WordPress plugin before 4.0.2 does not enforce its password reset attempt limit against a server-derived value, keying both the verification code and th |
| CVE-2026-18470 | Deferred | 未確認 | CWE-200 | The Login & Register Forms WordPress plugin before 4.0.2 does not verify that a password reset request comes from the account's owner, and does not adequately redact the address r |
| CVE-2026-18473 | Deferred | 未確認 | CWE-89 | The WP Directory Kit WordPress plugin before 1.5.5 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by u |
| CVE-2026-18474 | Deferred | 未確認 | CWE-89 | The WP Directory Kit WordPress plugin before 1.5.6 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenti |
| CVE-2026-18477 | Modified | 未確認 | CWE-367 | A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write access to a directory being backed up to |
| CVE-2026-18478 | Deferred | 未確認 | CWE-79 | Magnolia CMS is vulnerable to Stored XSS in import functionality. An attacker with editor privileges can inject arbitrary HTML and JS into the name of uploaded image, which will be |
| CVE-2026-18482 | Awaiting Analysis | 未確認 | CWE-78 | Neo.mjs contains a command injection vulnerability within the FileSystemService.mjs component of the ai/mcp/server/file-system MCP server, where the checkSyntax() and runPlaywright |
| CVE-2026-18485 | Awaiting Analysis | 未確認 | CWE-1285 | There is a local privilege escalation vulnerability recently discovered in the NI-PAL kernel driver. This may allow a local, authenticated user to escalate privileges and execute |
| CVE-2026-18487 | Awaiting Analysis | 未確認 | CWE-451 | A flaw was found in Epiphany. An issue in how the browser reads web addresses allows attackers to fake the domain name shown in the address bar. If a user clicks a specially crafte |
| CVE-2026-18497 | Deferred | 未確認 | CWE-122 | A heap-buffer-overflow vulnerability exists in the nothings stb TrueType library, up to version 1.26, that is used for parsing TrueType font files. The vulnerability exists in the |
| CVE-2026-18499 | Analyzed | 未確認 | CWE-285 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to a privilege escalation when using Liberty collectives. |
| CVE-2026-18500 | Analyzed | 未確認 | CWE-347 | @fastify/jwt is a JSON Web Token plugin for Fastify. In versions before 10.2.2, a per-request verification key passed to request.jwtVerify({ key }) is silently overridden by the pl |
| CVE-2026-18501 | Deferred | 未確認 | CWE-79 | The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Badge Wi |
| CVE-2026-18502 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-18503 | Awaiting Analysis | 未確認 | CWE-1176 | Attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU when applications pass unbounded input to csv |
| CVE-2026-18504 | Analyzed | 未確認 | CWE-20 | fastify is a fast and low overhead web framework for Node.js. Versions of fastify before 5.12.1 are affected by a schema validation bypass when a request body schema targets a root |
| CVE-2026-18508 | Modified | 未確認 | CWE-59 | A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confined to the designated top-level directory and may resolve rel |
| CVE-2026-18509 | Undergoing Analysis | 未確認 | CWE-285 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to gain privilege escalation via the Navigator for i debugger. This could allow the attacker to access or ma |
| CVE-2026-18510 | Deferred | 未確認 | CWE-79 | The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content (URL-encoded gettext mar |
| CVE-2026-18511 | Undergoing Analysis | 未確認 | CWE-787 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to generate a stack-based buffer overflow in the Native IBM i JSSE provider, caused by improper bounds check |
| CVE-2026-18512 | Deferred | 未確認 | CWE-79 | The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Approved Comment Body Rendered in Transl |
| CVE-2026-18526 | Deferred | 未確認 | CWE-79 | HumHub Community Edition 1.18.4 and 1.18.4-pl1 contain a stored Cross-Site Scripting (XSS) vulnerability in the oEmbed confirmation rendering workflow. |
| CVE-2026-18527 | Awaiting Analysis | 未確認 | CWE-384 | IBM Administration Runtime Expert for i 1R1M0 IBM Application Runtime Expert (ARE) for i could allow a remote attacker to gain elevated privileges, caused by ARE GUI component proc |
| CVE-2026-18531 | Analyzed | 未確認 | CWE-330 | IBM Maximo Application Suite 9.2, 9.1, and 9.0 could allow a remote attacker to tamper with session data due to the use of a weak HMAC session signing secret. |
| CVE-2026-18532 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-18534 | Deferred | 未確認 | CWE-1021 | ArcSearch for iOS versions prior to 1.48.0 could keep the address bar hidden after a page-initiated scroll, allowing attacker-controlled content to imitate browser interface elemen |
| CVE-2026-18536 | Analyzed | 未確認 | CWE-319, CWE-353 | Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. The Data::Entropy::RawSource::RandomOrg and Data::Entropy::RawSource::RandomnumbersInfo r |
| CVE-2026-18544 | Analyzed | 未確認 | CWE-862 | IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references. |
| CVE-2026-18545 | Analyzed | 未確認 | CWE-918 | IBM Langflow OSS 1.0.0 through 1.11.1 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, p |
| CVE-2026-18547 | Deferred | 未確認 | CWE-79 | The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting |
| CVE-2026-18549 | Analyzed | 未確認 | CWE-400, CWE-664 | @fastify/multipart is a multipart form-data parser for Fastify. In versions from 5.3.0 up to but not including 10.1.1, when the busboy fileSize limit truncates a file part, the plu |
| CVE-2026-18554 | Analyzed | 未確認 | CWE-22 | IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted director |
| CVE-2026-18556 | Analyzed | 掲載 | CWE-288 | Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1. |
| CVE-2026-18568 | Analyzed | 未確認 | CWE-347 | XML::Sig versions from 0.29 before 0.72 for Perl allow signature verification bypass because verify returns true when every signature was skipped before any cryptographic check. v |
| CVE-2026-18569 | Analyzed | 未確認 | CWE-347 | A flaw was found in the backchannel logout endpoint of the keycloak-services component, which is part of the Red Hat Build of Keycloak. This component handles authentication and se |
| CVE-2026-18570 | Modified | 未確認 | CWE-862 | A flaw was found in the full-scope-disabled client-policy executor within the keycloak-services component. This component is responsible for enforcing security policies during clie |
| CVE-2026-18571 | Modified | 未確認 | CWE-862 | A flaw was found in the user creation component of Keycloak when Fine-Grained Admin Permissions V2 (FGAP V2) is enabled. This issue allows a sub-administrator with permission to cr |
| CVE-2026-18572 | Modified | 未確認 | CWE-863 | Keycloak provides authorization services that allow administrators to restrict access to resources based on time policies (for example, only allowing access during business hours). |
| CVE-2026-18573 | Modified | 未確認 | CWE-862 | A flaw was found in the keycloak-services component of Keycloak, which is used for managing authentication and authorization flows. The issue occurs when a realm administrator conf |
| CVE-2026-18574 | Awaiting Analysis | 未確認 | CWE-288 | An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server (MDS) could allow an unauthenticated remote attacker wi |
| CVE-2026-18577 | Analyzed | 掲載 | CWE-288 | An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1 |
| CVE-2026-18581 | Deferred | 未確認 | CWE-617 | A vulnerability was determined in ggml-org llama.cpp e15efe0. Affected by this issue is some unknown functionality of the file common/jinja/parser.cpp of the component Jinja Minja |
| CVE-2026-18582 | Deferred | 未確認 | CWE-590 | A security flaw has been discovered in mz-automation libiec61850 up to 1.6.1. This vulnerability affects the function Reporting_RCBWriteAccessHandler of the file src/iec61850/serve |
| CVE-2026-18583 | Deferred | 未確認 | CWE-119, CWE-125 | A weakness has been identified in mz-automation libiec61850 up to 1.6.1. This issue affects the function checkDataSetAccess of the file src/iec61850/server/mms_mapping/mms_mapping. |
| CVE-2026-18584 | Deferred | 未確認 | CWE-266, CWE-285 | A security vulnerability has been detected in GL.iNet E5800, E750, X2000, X3000, XE3000 and XE300 up to 20260707. Impacted is an unknown function of the file /sdk/v1 of the compone |
| CVE-2026-18585 | Deferred | 未確認 | CWE-119, CWE-122 | A vulnerability was detected in GL.iNet MT3000, MT6000, BE9300, BE3600, MT3600BE, E5800, BE6500, MT5000, X3000, XE3000 and MT2500 up to 20260707. The affected element is the functi |
| CVE-2026-18587 | Deferred | 未確認 | CWE-77, CWE-78 | A flaw has been found in Wavlink WL-NU516U1 708c073-mt7628. The impacted element is an unknown function of the component Config Import. Executing a manipulation of the argument Pas |
| CVE-2026-18588 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability has been found in Wavlink WL-NU516U1 708c073-mt7628. This affects the function fgets of the file nas.cgi. The manipulation of the argument CONTENT_LENGTH leads to s |
| CVE-2026-18589 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was found in Wavlink WL-NU516U1 708c073-mt7628. This impacts the function change_password of the file nas.cgi. The manipulation of the argument User1Passwd results |
| CVE-2026-18590 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was determined in Wavlink WL-NU516U1 708c073-mt7628. Affected is the function set_sys_adm of the file adm.cgi of the component Admin Password Handler. This manipula |
| CVE-2026-18591 | Deferred | 未確認 | CWE-310, CWE-312 | A vulnerability was identified in Meesho Online Shopping App up to 20260607 on Android. Affected by this vulnerability is an unknown functionality of the component com.meesho.suppl |
| CVE-2026-18592 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in osCommerce 4.14.63493. Affected by this issue is the function EmailController of the file app/lib/backend/controllers/EmailController.php of |
| CVE-2026-18593 | Deferred | 未確認 | CWE-264, CWE-265 | A weakness has been identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown part of the file backend/pkg/templates/prompts/pentester.tmpl of the component Tool Managem |
| CVE-2026-18597 | Awaiting Analysis | 未確認 | CWE-918 | The PDF creation feature of Foxit PDF Services API supports referencing external files. Although local file access is restricted, an attacker could trigger an SSRF vulnerability by |
| CVE-2026-18598 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function logread.get_system_log of the file /usr/lib/oui-httpd/rpc/logread of the compone |
| CVE-2026-18599 | Deferred | 未確認 | CWE-74, CWE-77 | A flaw has been found in GL.iNet GL-MT3000 up to 4.4.5. The impacted element is the function logread.set_config of the file /usr/lib/oui-httpd/rpc/logread of the component Logread |
| CVE-2026-18600 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability has been found in GL.iNet GL-MT3000 up to 4.4.5. This affects the function network.switch_info/network.switch_status of the file /usr/lib/oui-httpd/rpc/network of t |
| CVE-2026-18601 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was found in GL.iNet GL-MT3000 up to 4.4.5. This impacts the function ovpn-client.check_config of the file /cgi-bin/glc of the component ovpn-client.so Native Plugi |
| CVE-2026-18602 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was determined in GL.iNet GL-MT3000 up to 4.4.5. Affected is the function ovpn-client.get_recommend_config of the file /cgi-bin/glc of the component ovpn-client.so |
| CVE-2026-18603 | Deferred | 未確認 | CWE-862 | The PiWeb Cancel order / Refund request for WooCommerce WordPress plugin before 1.3.4.34 does not have authorization or ownership checks when adding the contents of a previous orde |
| CVE-2026-18604 | Deferred | 未確認 | CWE-926 | A vulnerability was identified in textPlus Text Message and Call App up to 8.3.5 on Android. This impacts the function DialerActivity of the component com.gogii.textplus. Such mani |
| CVE-2026-18605 | Deferred | 未確認 | CWE-426, CWE-427 | A security flaw has been discovered in CheckMAL AppCheck Pro 3.1.43.10. Affected is an unknown function in the library AppCheckD.sys of the component Kernel Mini-Filter Driver. Per |
| CVE-2026-18606 | Deferred | 未確認 | CWE-266, CWE-269 | A weakness has been identified in Razer RzUpdateService 1.10.14.0. Affected by this vulnerability is an unknown functionality of the file C:\Program Files (x86)\Razer\RzUpdateEngin |
| CVE-2026-18607 | Deferred | 未確認 | CWE-119, CWE-121 | A security vulnerability has been detected in Wavlink WN572, WN570H, WN573, WN529, WN530, WN531, WN535, etc. WN529, WN530, WN531, WN535, WN536, WN551, WN557 and NU516 up to 2026060 |
| CVE-2026-18608 | Awaiting Analysis | 未確認 | CWE-250 | A flaw was found in the Data Science Pipelines Operator (DSPO). The operator's ClusterRole, which defines its permissions, includes extensive privileges beyond what is necessary fo |
| CVE-2026-18610 | Deferred | 未確認 | CWE-287 | A vulnerability was detected in NewType WebEIP up to 3.0. This affects an unknown part of the file /EIP_Com_FileList.aspx. The manipulation results in improper authentication. It i |
| CVE-2026-18611 | Awaiting Analysis | 未確認 | CWE-338 | A flaw was found in the Data Science Pipelines Operator. This vulnerability allows an unauthenticated attacker to derive sensitive credentials, such as MariaDB root/user passwords |
| CVE-2026-18612 | Deferred | 未確認 | CWE-74, CWE-77 | A flaw has been found in GL-iNet GL-MT3000 up to 4.4.5. This vulnerability affects the function plugins.remove_package/plugins.install_package of the file /cgi-bin/glc of the compo |
| CVE-2026-18613 | Deferred | 未確認 | CWE-707, CWE-74 | A vulnerability has been found in GL-iNet GL-MT3000 up to 4.4.5. This issue affects the function plugins.set_config of the file /cgi-bin/glc of the component plugins.so Native Plug |
| CVE-2026-18614 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was found in GL-iNet GL-MT3000 up to 4.4.5. Impacted is the function s2s.enable_echo_server of the file /cgi-bin/glc of the component s2s.so Native Plugin. Performi |
| CVE-2026-18615 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was determined in GL-iNet GL-MT3000 up to 4.4.5. The affected element is the function wg-server.generate_publickey of the file /cgi-bin/glc of the component wg-serv |
| CVE-2026-18616 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was identified in GL-iNet GL-MT3000 up to 4.4.5. The impacted element is the function server.set_peer of the file /cgi-bin/glc of the component wg-server.so Native |
| CVE-2026-18617 | Awaiting Analysis | 未確認 | CWE-915 | A flaw was found in the Data Science Pipelines Operator (DSPO). A namespace editor can exploit a vulnerability in the spec.database.customExtraParams field, which allows for the in |
| CVE-2026-18618 | Awaiting Analysis | 未確認 | CWE-770 | A flaw was found in ml-metadata. The statically-linked gRPC stack in ml-metadata is outdated, making it vulnerable to known HTTP/2 denial of service (DoS) issues. An in-cluster att |
| CVE-2026-18620 | Awaiting Analysis | 未確認 | CWE-639 | A flaw was found in Data Science Pipelines. A restricted user, or tenant, can exploit an improper authorization vulnerability in the setDefaultServiceAccount function. By specifyin |
| CVE-2026-18621 | Awaiting Analysis | 未確認 | CWE-266 | A flaw was found in Data Science Pipelines (DSP). An attacker with namespace editor privileges can bypass security hardening by submitting a malicious Argo Workflow through the V1 |
| CVE-2026-18622 | Analyzed | 未確認 | CWE-451 | Foxit PDF Editor/Reader inconsistently alerts users when signature fields are abnormally modified, including alterations to appearance, coordinates, or field duplication. This may |
| CVE-2026-18631 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was identified in jeequan jeepay up to 3.2.9. This vulnerability affects the function WebSecurityConfig of the file jeepay-manager/src/main/java/com/jeequan/jeepay/ |
| CVE-2026-18632 | Deferred | 未確認 | CWE-1336, CWE-791 | A security flaw has been discovered in langgenius dify up to 1.14.2. This issue affects the function jinja2.Template of the file api/core/helper/code_executor/jinja2/jinja2_transfo |
| CVE-2026-18634 | Awaiting Analysis | 未確認 | CWE-502 | An insecure handling of serialized objects vulnerability was found in the one of the service of GMS application 9.5.1 (Build 9510.1044) and earlier versions. A local attacker with |
| CVE-2026-18635 | Awaiting Analysis | 未確認 | CWE-863 | Velociraptor's VQL has a query() plugin which allows running a VQL query in a different org or user context. To be able to run as a different user, the calling user needs to have t |
| CVE-2026-18636 | Awaiting Analysis | 未確認 | CWE-288 | The Velociraptor gRPC API has a VFSGetBuffer endpoint which allows reading files from the datastore. To prevent users from reading sensitive files or accessing other orgs, the requ |
| CVE-2026-18638 | Awaiting Analysis | 未確認 | CWE-476, CWE-703 | Any authenticated Velociraptor user — including one holding only the readerrole — can terminate the entire server process with a single request, by calling SetPassword with a usern |
| CVE-2026-18639 | Awaiting Analysis | 未確認 | CWE-290 | When Velociraptor is configured to use an OIDC IdP for authentication, it uses the email claim as a username. However, some IdP allow users to change the email claim without verifi |
| CVE-2026-18640 | Awaiting Analysis | 未確認 | CWE-22 | The NewNotebook API does not sufficiently sanitize its parameters allowing an authenticated user with NOTEBOOK_EDIT permission to write the notebook record outside the org's data s |
| CVE-2026-18641 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was determined in Sangfor Operation and Maintenance Security Management System up to 3.0.13. Affected by this vulnerability is the function com.sbr.fort.foreignDP.D |
| CVE-2026-18642 | Deferred | 未確認 | CWE-502 | Deserialization of untrusted data vulnerability in TUBITAK BILGEM Software Technologies Research Institute eta-otp-lock allows Object Injection. This issue affects eta-otp-lock: b |
| CVE-2026-18644 | Deferred | 未確認 | CWE-22 | A vulnerability was identified in danpros HTMLy up to 3.1.1. Affected by this issue is the function unlink of the file /system/htmly.php of the component Delete Username Endpoint. |
| CVE-2026-18645 | Deferred | 未確認 | CWE-22 | A security flaw has been discovered in danpros HTMLy up to 3.1.1. This affects the function add_content of the file /system/admin/admin.php of the component Admin Content Endpoint. |
| CVE-2026-18646 | Deferred | 未確認 | CWE-22 | A weakness has been identified in danpros HTMLy up to 3.1.1. This vulnerability affects unknown code of the file /system/htmly.php of the component Author Name Handler. Executing a |
| CVE-2026-18647 | Deferred | 未確認 | CWE-918 | A security vulnerability has been detected in jina-ai reader up to 1574bfd380d249c86c82db4dace0d9c8fe17e2b1. This issue affects the function isValidTLD of the file /backend/functio |
| CVE-2026-18648 | Deferred | 未確認 | CWE-22 | A vulnerability was detected in Blix Email Blue Mail Calendar App 2.2.305. Impacted is the function FileDirectory.getDataColumn/FileDirectory.getFileFromUri of the component react- |
| CVE-2026-18649 | Awaiting Analysis | 未確認 | CWE-770 | A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on the reassembly buffer |
| CVE-2026-18650 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Privilege Escalation. This issue affects Liman MYS: from 2.2.3 before 2.3.1. |
| CVE-2026-18651 | Analyzed | 未確認 | CWE-287 | A flaw was found in 389 Directory Server. During SASL PLAIN authentication, the server installs connection-level bind credentials before performing the account-lock check. If the a |
| CVE-2026-18652 | Awaiting Analysis | 未確認 | CWE-862 | Velociraptor allows reading Stacked result sets from the GUI. Velociraptor's multi-tenant design stores sub orgs within the datastore directory. The path requested by the GUI is n |
| CVE-2026-18653 | Deferred | 未確認 | CWE-89 | The WP Directory Kit WordPress plugin before 1.5.7 does not sanitise and escape a parameter before using it in a SQL statement, allowing administrators to perform SQL injection att |
| CVE-2026-18654 | Analyzed | 未確認 | CWE-322 | Key exchange without entity authentication in the EMR SSH helper commands in Amazon AWS CLI before 1.45.28 and AWS CLI v2 before 2.35.3 might allow man-in-the-middle attackers to i |
| CVE-2026-18655 | Awaiting Analysis | 未確認 | CWE-923 | Improper restriction of intended endpoints in the RabbitMQ broker connection tools of the Amazon MQ MCP Server (awslabs.amazon-mq-mcp-server) before 2.0.24 may allow a remote unaut |
| CVE-2026-18656 | Analyzed | 未確認 | CWE-427 | An uncontrolled search path element in Kiro IDE before version 1.0.228 on Windows might allow a remote unauthenticated actor to execute arbitrary code via a maliciously crafted pro |
| CVE-2026-18657 | Analyzed | 未確認 | CWE-427 | An uncontrolled search path element in Kiro CLI before version 2.10.0 on Windows might allow a remote unauthenticated actor to execute arbitrary code via a maliciously crafted proj |
| CVE-2026-18663 | Awaiting Analysis | 未確認 | CWE-415 | A flaw was found in 389-ds-base. The get_ldapmessage_controls_ext() function frees the parsed controls array on the Session Tracking critical-control rejection path without clearin |
| CVE-2026-18664 | Analyzed | 未確認 | CWE-284, CWE-697 | When ranges are used for access control (i.e. of the form 1.2.3.4-1.2.3.25), because NSD wrongly compares the IP address with the range on little endian systems, IPs that were mean |
| CVE-2026-18666 | Deferred | 未確認 | CWE-89 | The Library Management System WordPress plugin before 3.6.7 does not sanitize and escape a user-supplied parameter before using it in a SQL statement, allowing users with a role as |
| CVE-2026-18667 | Awaiting Analysis | 未確認 | CWE-94 | A vulnerability in Tenable Sensor Proxy allows a remote attacker to execute code with elevated privileges by inducing an operator to connect the sensor to an attacker-controlled ho |
| CVE-2026-18669 | Analyzed | 未確認 | CWE-250 | IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to a privilege escalation as the result of a remote code execution vulnerability in the activation engine component. An authenticated att |
| CVE-2026-18670 | Analyzed | 未確認 | CWE-190, CWE-191 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service and potentially disclose sensitive information due to an integer underflow. |
| CVE-2026-18671 | Undergoing Analysis | 未確認 | CWE-190 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow an authenticated attacker to force a NetServer server thread exception, caused by an integer overflow during bounds checking in request pro |
| CVE-2026-18673 | Awaiting Analysis | 未確認 | CWE-200, CWE-306 | When kuma-dp is configured with the Envoy admin API on a Unix domain socket, which is the default, its readiness service on TCP port 9902 - bound to all interfaces - forwards almos |
| CVE-2026-18674 | Awaiting Analysis | 未確認 | CWE-345, CWE-863 | On a Kong Mesh global control plane, resources received over the zone-to-global KDS sync are attributed using the in-band, sender-controlled ControlPlane.Identifier rather than the |
| CVE-2026-18675 | Awaiting Analysis | 未確認 | CWE-248, CWE-704 | The dataplane token validator in kuma-cp performs an unchecked Go type assertion on the JWT kid header. A token whose kid is a JSON number decodes as a float64 and triggers a runti |
| CVE-2026-18676 | Awaiting Analysis | 未確認 | CWE-346, CWE-942 | The default kuma-cp configuration in Kong Mesh reveals the admin bootstrap token and signing keys to any webpage the operator visits while the control plane is reachable from their |
| CVE-2026-18677 | Awaiting Analysis | 未確認 | CWE-290 | In Kong Mesh running in universal mode with a MeshIdentity whose SPIFFE ID path template derives from the dataplane's kuma.io/workload label, the XDS authenticator in kuma-cp valid |
| CVE-2026-18678 | Awaiting Analysis | 未確認 | CWE-295 | When an operator adds an HTTPS control plane profile to kumactl without providing a CA certificate, kumactl disables TLS verification and sends API tokens over the unverified conne |
| CVE-2026-18679 | Awaiting Analysis | 未確認 | CWE-295 | When kuma-dp is started against an HTTPS control plane and the operator did not pass a CA certificate, the data plane connects with TLS peer verification disabled, and the dataplan |
| CVE-2026-18681 | Analyzed | 未確認 | CWE-121 | IBM Server Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP firmware update pro |
| CVE-2026-18682 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in OpenAkita up to 1.27.12. This vulnerability affects unknown code of the file /api/upload of the component File Upload API. The manipulation o |
| CVE-2026-18683 | Analyzed | 未確認 | CWE-78 | IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to privilege escalation via Navigator for i. An authenticated user could elevate privileges to a root user to execute commands. |
| CVE-2026-18684 | Deferred | 未確認 | CWE-74, CWE-77 | A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. This issue affects the function remove_profile of the file /cgi-bin/glc of the component modem.so. This manipulatio |
| CVE-2026-18685 | Deferred | 未確認 | CWE-74, CWE-77 | A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5. Impacted is the function set_upgrade of the file /cgi-bin/glc of the component modem.so. Such manipulat |
| CVE-2026-18686 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function nas-web.add_user of the file /cgi-bin/glc of the component nas-web RPC Wrapper. |
| CVE-2026-18687 | Analyzed | 未確認 | CWE-191 | MongoDB Server's handling of a Queryable Encryption maintenance operation did not properly validate certain request parameters against the collection's encrypted field configuratio |
| CVE-2026-18688 | Analyzed | 未確認 | CWE-125 | An issue in MongoDB Server's aggregation framework could allow an authenticated user to trigger an out-of-bounds memory read by providing a specially formed numeric parameter in a |
| CVE-2026-18690 | Analyzed | 未確認 | CWE-863 | An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that their assigned privi |
| CVE-2026-18691 | Analyzed | 未確認 | CWE-757 | An issue in MongoDB Server's intra-cluster connection setup could allow a party with suitable network access to influence which authentication mechanism is used when one replica se |
| CVE-2026-18692 | Analyzed | 未確認 | CWE-416 | An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated user with write privileges to cause an internal reference to be used after the und |
| CVE-2026-18693 | Analyzed | 未確認 | CWE-787 | An issue in MongoDB Server's handling of timeseries collections could allow an authenticated user with write privileges to cause an internal data structure to become inconsistent t |
| CVE-2026-18694 | Analyzed | 未確認 | CWE-125 | An issue in MongoDB Server's geospatial query processing could allow an authenticated user with write privileges to cause certain malformed geometry data to be stored and later pro |
| CVE-2026-18695 | Analyzed | 未確認 | CWE-617 | An issue in MongoDB Server's handling of certain query predicates against time-series collections with a metaField could allow an authenticated user with write access to cause the |
| CVE-2026-18696 | Analyzed | 未確認 | CWE-863 | An issue in MongoDB Server's applyOps command could allow an authenticated user with specific non-default privileges to perform certain data-definition operations, such as dropping |
| CVE-2026-18697 | Analyzed | 未確認 | CWE-617 | An issue in MongoDB Server's aggregation framework could allow an unauthenticated party to cause a mongos (router) process to terminate unexpectedly by submitting a specially forme |
| CVE-2026-18698 | Analyzed | 未確認 | CWE-863 | An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that should require more |
| CVE-2026-18699 | Analyzed | 未確認 | CWE-476 | An issue in MongoDB Server's query planner could allow an authenticated user with read-level privileges to cause the server process to terminate unexpectedly by submitting a specia |
| CVE-2026-18700 | Analyzed | 未確認 | CWE-416 | An issue in MongoDB Server's geospatial validation could allow an authenticated user with write privileges to cause an internal reference to be used after the underlying memory has |
| CVE-2026-18701 | Analyzed | 未確認 | CWE-843 | An issue in MongoDB Server's query subsystem could allow an authenticated user with read privileges to cause the server process to terminate unexpectedly by submitting a specially |
| CVE-2026-18702 | Analyzed | 未確認 | CWE-269 | An issue in MongoDB Server could allow an authenticated user with limited, database-scoped privileges to modify diagnostic logging settings that affect the entire server rather tha |
| CVE-2026-18703 | Analyzed | 未確認 | CWE-863 | An issue in MongoDB Server could allow a party with a valid client certificate and a corresponding user account to authenticate using a certificate-based authentication method, eve |
| CVE-2026-18704 | Analyzed | 未確認 | CWE-862 | An issue in MongoDB Server's aggregation framework could allow an authenticated user with only read privileges to perform write operations against collections they should not be ab |
| CVE-2026-18705 | Analyzed | 未確認 | CWE-807 | An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to one view to retrieve documents from a different, protected view over |
| CVE-2026-18706 | Analyzed | 未確認 | CWE-416 | An issue in MongoDB Server's $graphLookup aggregation stage could allow an authenticated user able to issue aggregation and memory-management commands to cause an internal referenc |
| CVE-2026-18707 | Analyzed | 未確認 | CWE-617 | An issue in MongoDB Server could allow an authenticated user, including one with no assigned privileges, to cause the server process to terminate unexpectedly by submitting a speci |
| CVE-2026-18708 | Analyzed | 未確認 | CWE-94 | An issue in MongoDB Server's JavaScript scripting engine could allow an authenticated user with write privileges to cause code they control to be executed within the query scope of |
| CVE-2026-18709 | Analyzed | 未確認 | CWE-862 | An issue in MongoDB Server could allow an authenticated user with direct network access to a shard to improperly commit or abort an in-progress prepared transaction, bypassing the |
| CVE-2026-18710 | Analyzed | 未確認 | CWE-532 | A MongoDB driver component could write sensitive configuration information, including a credential used for outbound network connectivity, to application log output in cleartext du |
| CVE-2026-18711 | Analyzed | 未確認 | CWE-416 | An issue in MongoDB Server's query execution engine could allow an authenticated user with read and write privileges to cause an internal reference to be used after the underlying |
| CVE-2026-18712 | Analyzed | 未確認 | CWE-863 | An issue in MongoDB Server's Queryable Encryption maintenance operations could allow an authenticated user with privileges on one encrypted collection to cause unauthorized modific |
| CVE-2026-18713 | Analyzed | 未確認 | CWE-269 | IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to privilege escalation via Navigator for i. An authenticated user could elevate privileges to a root user to execute commands. |
| CVE-2026-18715 | Undergoing Analysis | 未確認 | CWE-611 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to improper processing of XML external entities. |
| CVE-2026-18716 | Analyzed | 未確認 | CWE-125 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to obtain sensitive information or cause a denial of service due to an out-of-bounds read. |
| CVE-2026-18717 | Deferred | 未確認 | CWE-295 | ASE2000 2.35 through 2.37 is vulnerable to an improper certificate validation vulnerability, which may allow an attacker to impersonate the trusted peer, complete the TLS handshake |
| CVE-2026-18718 | Awaiting Analysis | 未確認 | CWE-427 | Ghidra contains an arbitrary code execution vulnerability in the Swift demangler analyzer that allows an attacker to execute arbitrary binaries by supplying a malicious Ghidra proj |
| CVE-2026-18719 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in cemtan sar2html 4.0.0. This affects an unknown part of the file sar2html.py of the component Search. Performing a manipulation of the argument Searc |
| CVE-2026-18720 | Deferred | 未確認 | CWE-266, CWE-285 | A flaw has been found in kalcaddle kodbox 1.67 Build 02. This vulnerability affects unknown code of the file /index.php?plugin/msgWarning/action of the component msgWarning Plugin. |
| CVE-2026-18721 | Deferred | 未確認 | CWE-601 | A vulnerability has been found in kalcaddle kodbox 1.67 Build 02. This issue affects some unknown processing of the file /user/sso/apiLogin of the component SSO API Login. The mani |
| CVE-2026-18722 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was found in diaowen DWSurvey up to 6.14.0. Impacted is the function in DwDeisgnSurveyController.devSurvey. of the file /api/dwsurvey/app/v6/dw-design-survey/dev-su |
| CVE-2026-18723 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was determined in diaowen DWSurvey up to 6.14.0. The affected element is an unknown function of the file /api/dwsurvey/app/survey/up-survey-status.do of the compone |
| CVE-2026-18726 | Analyzed | 未確認 | CWE-835 | A flaw was found in open-iscsi. This vulnerability allows a remote attacker on the same local network segment to cause a Denial of Service (DoS) in the iscsiuio daemon. By sending |
| CVE-2026-18727 | Analyzed | 未確認 | CWE-191 | A flaw was found in open-iscsi's iscsiuio component. This vulnerability involves an integer underflow and out-of-bounds read during Dynamic Host Configuration Protocol for IPv6 (DH |
| CVE-2026-18728 | Analyzed | 未確認 | CWE-191 | A flaw was found in open-iscsi. An integer underflow vulnerability in the `iscsiuio` component, specifically during IPv4 Dynamic Host Configuration Protocol (DHCP) parsing, allows |
| CVE-2026-18729 | Analyzed | 未確認 | CWE-94 | IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code. |
| CVE-2026-18733 | Awaiting Analysis | 未確認 | A prompt injection vulnerability in the shell tool in Amazon Strands Agents Tools before 0.8.0 might allow remote actors to execute arbitrary operating system commands on the agent | |
| CVE-2026-18736 | Deferred | 未確認 | CWE-918 | Shlink contains a server-side request forgery vulnerability that allows authenticated API key holders to cause the server to issue arbitrary HTTP GET requests by supplying a crafte |
| CVE-2026-18737 | Deferred | 未確認 | CWE-89 | Shlink contains a blind SQL injection vulnerability that allows any authenticated API key holder to inject arbitrary SQL fragments by supplying an unvalidated direction value in th |
| CVE-2026-18738 | Deferred | 未確認 | CWE-1236 | Shlink versions 5.0.0 through 5.1.5 contain a CSV formula injection vulnerability that allows unauthenticated remote attackers to plant spreadsheet formulas into exported visit dat |
| CVE-2026-18739 | Awaiting Analysis | 未確認 | CWE-787 | A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when repeatedly called by a host application or through deep ali |
| CVE-2026-18741 | Deferred | 未確認 | CWE-79 | Worksuite SaaS versions prior to 6.0.14 contains a stored cross-site scripting vulnerability in the Asset Management module that allows authenticated administrators to inject arbit |
| CVE-2026-18744 | Deferred | 未確認 | CWE-639 | Any authenticated case participant can fetch any OTHER vendor's CaseStatement + per-vul CaseMemberStatus by supplying that member's id — test_func only checks _is_my_case, not owne |
| CVE-2026-18749 | Deferred | 未確認 | CWE-639 | The type=track branch authorises on _is_my_case(t_attach.case) only and never checks VinceTrackAttachment.shared. A coordinator-uploaded case artefact that has NOT been marked shar |
| CVE-2026-18750 | Deferred | 未確認 | CWE-639 | vinny/views.py: (ModifyEmailNotifications) IDOR: view fetches VinceCommEmail by raw pk from URL and toggles email_function/name without checking the record's contact belongs to the |
| CVE-2026-18751 | Awaiting Analysis | 未確認 | CWE-73 | External control of file name or path vulnerability in Citrix WorkSpace App on MacOS. This issue affects WorkSpace App: 2607. |
| CVE-2026-18753 | Deferred | 未確認 | CWE-321 | The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web server for TLS termination. Exposure of this private key allows malicious actors to b |
| CVE-2026-18754 | Deferred | 未確認 | CWE-321 | The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web server for TLS termination. Exposure of this private key allows malicious actors to b |
| CVE-2026-18755 | Deferred | 未確認 | CWE-428 | A DLL hijacking vulnerability in GeoVision GV-ASManager allows a local attacker with write access to an unsafe search directory to execute arbitrary code. By placing a crafted dyna |
| CVE-2026-18756 | Deferred | 未確認 | CWE-79 | HumHub Community Edition 1.18.4 contains a reflected cross-site scripting vulnerability in the Space membership-request workflow. An attacker can place attacker-controlled button c |
| CVE-2026-18759 | Deferred | 未確認 | CWE-269, CWE-287 | The background service of ABP or AES runs as NT AUTHORITY\SYSTEM and implements a file-based inter-process communication (IPC) mechanism protected by AES encryption. Because the en |
| CVE-2026-18766 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in chetans9 core-php-admin-panel up to 90d07ed5aac5e0f09b6a5828d7bb2eb83010763f. This issue affects some unknown processing of the file /Applications/MAMP/htd |
| CVE-2026-18770 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability has been found in vibesurf-ai VibeSurf up to cd6e519d507cdd4d63061300bf60fb176e1f57e0. Impacted is an unknown function of the file /code of the component Python Val |
| CVE-2026-18772 | Analyzed | 未確認 | CWE-1325 | Improperly controlled sequential memory allocation vulnerability in Samsung Open Source rlottie allows Exponential Data Expansion. |
| CVE-2026-18773 | Deferred | 未確認 | CWE-285, CWE-863 | A vulnerability was detected in NousResearch hermes-agent up to 2026.6.5. Affected by this issue is the function _check_slash_access of the file gateway/run.py of the component Qui |
| CVE-2026-18774 | Deferred | 未確認 | CWE-918 | A flaw has been found in NousResearch hermes-agent up to 0.16.0. This affects the function save_url_image of the file agent/image_gen_provider.py of the component xAI Image Generat |
| CVE-2026-18775 | Deferred | 未確認 | CWE-918 | A vulnerability has been found in NousResearch hermes-agent up to 0.16.0. This vulnerability affects the function browser_snapshot of the file tools/browser_tool.py of the componen |
| CVE-2026-18776 | Deferred | 未確認 | CWE-284 | The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in some of its AJAX actions, allowing unauthenticated users to change the email address of a |
| CVE-2026-18777 | Deferred | 未確認 | CWE-862 | The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in one of its AJAX actions, allowing unauthenticated users to change the status of arbitrary |
| CVE-2026-18778 | Deferred | 未確認 | CWE-200 | The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in some of its AJAX actions, allowing unauthenticated users to retrieve the personal informa |
| CVE-2026-18779 | Deferred | 未確認 | CWE-862 | The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in one of its AJAX actions, allowing unauthenticated users to delete arbitrary appointment r |
| CVE-2026-18781 | Deferred | 未確認 | CWE-94 | The Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin before 1.3.9.9 does not validate the final name of an uploaded file after stripping characters from it, a |
| CVE-2026-18784 | Deferred | 未確認 | CWE-119, CWE-122 | A vulnerability was found in o6 open62541 up to 1.5.5. This issue affects the function UA_Client_readNodeClassAttribute of the file src/client/ua_client_highlevel.c. Performing a m |
| CVE-2026-18785 | Deferred | 未確認 | CWE-119, CWE-416 | A vulnerability was determined in o6 open62541 ca356b088ada7dee824d1b4acd07c1ff07ce242b. Impacted is the function UA_Client_getRemoteDataTypes of the file examples/custom_datatype/ |
| CVE-2026-18786 | Deferred | 未確認 | CWE-287 | The CheckView WordPress plugin before 2.3.2 does not restrict its REST API authentication filter to its own routes and unconditionally discards the authentication error raised for |
| CVE-2026-18787 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was identified in GL.iNet AX1800 up to 4.8.3. The affected element is the function remove_rule of the file /usr/share/gl-ngx/oui-rpc.lua of the component RPC Endpoi |
| CVE-2026-18788 | Deferred | 未確認 | CWE-284, CWE-434 | A security flaw has been discovered in Trippo ResponsiveFilemanager up to 9.14.0. The impacted element is an unknown function of the file filemanager/dialog.php. The manipulation r |
| CVE-2026-18789 | Deferred | 未確認 | CWE-862 | The Ezoic WordPress plugin before 2.23.1 does not properly restrict access to some of its content export functionality, allowing unauthenticated attackers to trigger a server-side |
| CVE-2026-18790 | Deferred | 未確認 | CWE-119, CWE-125 | A weakness has been identified in Systerel S2OPC up to 1.7.3. This affects the function LockedStaMac_ProcessMsg_DeleteMonitoredItemsResponse of the file src/ClientServer/frontend/c |
| CVE-2026-18794 | Awaiting Analysis | 未確認 | CWE-1288 | The OpenRGB network protocol allows attackers to cause memory exhaustion and out-of-bounds memory reads and writes by passing inconsistent data. |
| CVE-2026-18798 | Analyzed | 未確認 | CWE-415 | Issue summary: QUIC server may double free QRX (QUIC record layer RX) object when channel creation fails for initial packet. Impact summary: Double free leads to heap corruption, |
| CVE-2026-18801 | Awaiting Analysis | 未確認 | CWE-20 | OpenMeter contains a stored, or second-order, SQL injection vulnerability in the handling of customer usage-attribution values. An attacker who can create or update a customer c |
| CVE-2026-18806 | Deferred | 未確認 | CWE-73 | External control of file name or path vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-image-writer allows Removing Important Client Functionality. |
| CVE-2026-18807 | Deferred | 未確認 | CWE-862 | The ECS WordPress plugin before 4.3.13 does not have capability or ownership checks on its dynamic repeater actions, relying only on a nonce available to any user who can open the |
| CVE-2026-18809 | Awaiting Analysis | 未確認 | CWE-200 | Information disclosure in Firefox for Android and Firefox Focus for Android. This vulnerability was fixed in Firefox 153.0.3. |
| CVE-2026-18810 | Deferred | 未確認 | CWE-287, CWE-306 | A security vulnerability has been detected in H3C NX15 V100R017. Impacted is an unknown function of the file /api/wizard/networkSetup. Such manipulation leads to missing authentica |
| CVE-2026-18811 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was detected in H3C NX15 V100R017. The affected element is the function Add of the file /api/esps. Performing a manipulation of the argument esps.filter.url results |
| CVE-2026-18812 | Deferred | 未確認 | CWE-74, CWE-77 | A flaw has been found in H3C NX15 V100R017. The impacted element is the function esps.ipv6.wan of the file /api/esps. Executing a manipulation of the argument workMode can lead to |
| CVE-2026-18813 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability has been found in H3C NX15 V100R017. This affects the function delete of the file /api/esps. The manipulation of the argument esps.apcm.version leads to command inj |
| CVE-2026-18814 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was found in H3C NX15 V100R017. This impacts the function reload.reload_config of the file /api/esps. The manipulation results in command injection. The attack can |
| CVE-2026-18816 | Deferred | 未確認 | CWE-287 | A vulnerability was identified in Baserow up to 2.3.2. Affected by this vulnerability is the function verify of the file backend/src/baserow/api/two_factor_auth/views.py of the com |
| CVE-2026-18817 | Deferred | 未確認 | CWE-266, CWE-285 | A security flaw has been discovered in Baserow up to 2.3.2. Affected by this issue is the function BaserowImpersonateAuthTokenSerializer of the file backend/src/baserow/api/admin/u |
| CVE-2026-18818 | Deferred | 未確認 | CWE-285, CWE-639 | A weakness has been identified in Ehco1996 django-sspanel up to 2023.12.26. This affects the function TicketDetailView of the file apps/sspanel/views.py of the component Support Ti |
| CVE-2026-18819 | Deferred | 未確認 | CWE-352, CWE-862 | A security vulnerability has been detected in RackTables up to 0.22.0/e5fff9f8aab339798ed47e8c6d7d977ed97a82bd. This vulnerability affects unknown code. The manipulation leads to c |
| CVE-2026-18821 | Analyzed | 未確認 | CWE-787 | IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 Power Systems Firmware is affected by a vulnerability in p |
| CVE-2026-18822 | Analyzed | 未確認 | CWE-400 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to uncontrolled resource consumption when parsing directory records. |
| CVE-2026-18823 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-18824 | Analyzed | 未確認 | CWE-78 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in a |
| CVE-2026-18828 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a stack-based buffer overflow. |
| CVE-2026-18830 | Awaiting Analysis | 未確認 | CWE-1287 | Insufficient input validation in Amazon Bedrock AgentCore harness might allow an authenticated remote user to execute configured tools bypassing model invocation and security contr |
| CVE-2026-18832 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow. |
| CVE-2026-18835 | Analyzed | 未確認 | CWE-78 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in a |
| CVE-2026-18839 | Awaiting Analysis | 未確認 | CWE-191 | An integer underflow was found in the popt library when formatting help text for option tables that exceed the terminal width. A local user who can cause an application to print he |
| CVE-2026-18840 | Analyzed | 未確認 | CWE-822 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improper validation of an attacker-controlled pointer. |
| CVE-2026-18842 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to an out-of-bounds write. |
| CVE-2026-18844 | Deferred | 未確認 | CWE-912 | The firmware of the Pulsetto Vagus Nerve Stimulator accepts several undisclosed commands over its Bluetooth Low Energy (BLE) interface. These commands are sent without authenticati |
| CVE-2026-18846 | Analyzed | 未確認 | CWE-787 | IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a buffer overflow from improperly validating client data. By sending malformed requests to one of the host servers, a remote attacker c |
| CVE-2026-18847 | Analyzed | 未確認 | CWE-346 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to harvest credentials due to spoofing of Navigator for i. |
| CVE-2026-18848 | Analyzed | 未確認 | CWE-352 | IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the ASMI web interfa |
| CVE-2026-18849 | Analyzed | 未確認 | CWE-22 | IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process. An attacker with authenticated administrator-level access to the BMC can, |
| CVE-2026-18852 | Deferred | 未確認 | CWE-754 | A vulnerability has been found in epsilla-cloud vectordb up to 0.3.18/df5a5f5afb85a2376a0f2f316c79dea9b2c6ac7a. This impacts the function SplitTokens/ShuntingYard of the file engin |
| CVE-2026-18853 | Deferred | 未確認 | CWE-22 | A security vulnerability has been detected in ZomboDroid Meme Generator App 4.6830 on Android. This issue affects the function t5.l.c of the component com.zombodroid.MemeGenerator. |
| CVE-2026-18854 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in Shandong Hoteam PDM Product Data Management System up to 8.3.10. The impacted element is the function GetStoredClassByFilter of the file /Base/Bas |
| CVE-2026-18855 | Deferred | 未確認 | CWE-22 | The Link Library plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ll_delete_link_fields function in all versions up to, |
| CVE-2026-18856 | Deferred | 未確認 | CWE-918 | A vulnerability was determined in Poesis Rhymix CMS up to 2.1.33. This impacts the function procImporterAdminCheckXmlFile of the file modules/importer/importer.admin.controller.php |
| CVE-2026-18859 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of the file /CDGServer3/ukey/usbkey;logindojojs. Such manipulation of the argument ke |
| CVE-2026-18860 | Awaiting Analysis | 未確認 | CWE-280 | Velociraptor allows multi-tenant deployments named "Orgs". By default Velociraptor, uses the ROOT org, but users can create child orgs for other tenants within the same deployment |
| CVE-2026-18862 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-18871 | Analyzed | 未確認 | CWE-121 | IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in host firmware configuration parsing. An attacker wi |
| CVE-2026-18874 | Awaiting Analysis | 未確認 | CWE-94 | A flaw was found in volsync-addon-controller. This vulnerability allows an attacker to inject malicious YAML (Yet Another Markup Language) code into the OpenShift Lifecycle Manager |
| CVE-2026-18881 | Deferred | 未確認 | CWE-89 | The TableOn – WordPress Posts Table Filterable plugin for WordPress is vulnerable to blind SQL Injection via the `filter_data[comment_count]` parameter of the public `tableon_get_t |
| CVE-2026-18884 | Deferred | 未確認 | CWE-89 | The WooCommerce Lottery plugin for WordPress is vulnerable to Time-Based SQL Injection via 'orderby' and 'order' GET Parameters in all versions up to, and including, 2.2.9 due to i |
| CVE-2026-18885 | Awaiting Analysis | 未確認 | CWE-94 | ServiceNow has remediated a code injection vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circ |
| CVE-2026-18886 | Awaiting Analysis | 未確認 | CWE-284 | ServiceNow has remediated an improper access control vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in ce |
| CVE-2026-18888 | Analyzed | 未確認 | CWE-787 | The MongoDB BI Connector ODBC Driver converts floating point column values into text without checking that the result fits within the destination buffer. When an application reads |
| CVE-2026-18891 | Analyzed | 未確認 | CWE-287 | IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to execute arbitrary flows and access sensitive information due to improper authentication. |
| CVE-2026-18895 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function strcpy of the file /goform/APSecurity_5g. Performing a manipulation of the argumen |
| CVE-2026-18896 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in lavkush-maurya Student-Registration-System 1.0. The affected element is an unknown function of the file /student/changepass.php. Executing a manip |
| CVE-2026-18897 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535. The impacted element is the function strcpy of the file /goform/getOneApConfTempEntry. The manipulati |
| CVE-2026-18898 | Deferred | 未確認 | CWE-119, CWE-121 | A security flaw has been discovered in UTT HiPER 1200GW up to v2.5.3-170306. This affects the function strcpy of the file /goform/ConfigAdvideo. The manipulation of the argument ti |
| CVE-2026-18899 | Analyzed | 未確認 | CWE-22 | IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to read arbitrary files due to path traversal. |
| CVE-2026-18900 | Deferred | 未確認 | CWE-77, CWE-78 | A weakness has been identified in H3C NX15 V100R017. This impacts the function file.exec of the file /api/esps of the component Backend RPC. This manipulation of the argument File |
| CVE-2026-18901 | Deferred | 未確認 | CWE-749 | A security vulnerability has been detected in H3C NX15 V100R017. Affected is the function service.add of the file /api/esps of the component Web API. Such manipulation leads to exp |
| CVE-2026-18902 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was detected in H3C NX15 V100R017. Affected by this vulnerability is the function esps.wan.repeater.set/repeaterproc of the file /api/esps. Performing a manipulatio |
| CVE-2026-18903 | Deferred | 未確認 | CWE-22 | A vulnerability was determined in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This issue affects some unknown processing of the file src/main/java/com/yeqifu/s |
| CVE-2026-18904 | Analyzed | 未確認 | CWE-639 | IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to obtain sensitive information and inject unauthorized messages due to a namespace collision between user ident |
| CVE-2026-18907 | Deferred | 未確認 | CWE-23 | Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filename. |
| CVE-2026-18909 | Awaiting Analysis | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability exists in ELAN Microelectronics Corp. ELAN Smart-Pad on Windows (ETD.sys and ETDSMBus.sys). During Intel SMBus recovery, ETDSMBus.sys do |
| CVE-2026-18915 | Deferred | 未確認 | CWE-214 | Invocation of process using visible sensitive information vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-otp-lock allows System Footprinting. This is |
| CVE-2026-18916 | Analyzed | 未確認 | CWE-191 | Any remote client can crash a NSD serve child, by throttling the TCP receive window after a TCP query. By continuously crashing the serve childs, the remote client can denial all T |
| CVE-2026-18917 | Awaiting Analysis | 未確認 | CWE-190 | A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypa |
| CVE-2026-18918 | Deferred | 未確認 | CWE-863 | In Eclipse Lyo versions 2.0.0 to 7.0.0, OAuth server authorization checks can be bypassed when the 2-legged auth is supported by the server. In those cases, application that based |
| CVE-2026-18927 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was determined in imranrisal-dev Student-Management-System 18ea7904c339e0c7b0234724a79c939ce6191def/a8d43a29aaf267e7ca97171d6dbb44057bcd7f8c. This affects the funct |
| CVE-2026-18929 | Deferred | 未確認 | CWE-409 | Carbone is vulnerable to Denial of Service due to lack of protection against zip bombs when processing .docx files. The library uses yazl for zip decompression without validating e |
| CVE-2026-18932 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-18933 | Deferred | 未確認 | CWE-434 | The wp-downloadmanager WordPress plugin, in version 1.68.11 (also affecting the 6.9.4 release line), allows an admin-privileged user (current_user_can('manage_downloads')) to uploa |
| CVE-2026-18934 | Deferred | 未確認 | CWE-863 | The RSS Aggregator by Feedzy WordPress plugin before 5.2.6 does not verify that the requesting user owns or is allowed to edit the import job named in the request, allowing users |
| CVE-2026-18937 | Deferred | 未確認 | CWE-94 | The Broken Link Checker WordPress plugin before 2.4.12 does not limit which query variables it accepts from user input on sites using plain permalinks, allowing unauthenticated use |
| CVE-2026-18938 | Awaiting Analysis | 未確認 | CWE-122 | A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerability. By sending specially craft |
| CVE-2026-18941 | Awaiting Analysis | 未確認 | CWE-306 | A flaw was found in Feast and feast-operator. The default configuration for both the Feast SDK and the feast-operator is "no_auth," meaning no security manager is installed. This d |
| CVE-2026-18942 | Awaiting Analysis | 未確認 | CWE-94 | A flaw was found in the Feast operator. A malicious tenant could inject arbitrary code into their feature repository. This code would be executed by an automated process with eleva |
| CVE-2026-18943 | Deferred | 未確認 | CWE-200 | The WPC Admin Columns WordPress plugin before 2.3.4 does not have authorisation checks in one of its AJAX actions, allowing users with a role as low as subscriber to read arbitrary |
| CVE-2026-18945 | Deferred | 未確認 | CWE-639 | The WP Helper Premium WordPress plugin before 4.7.6 does not verify the order key when rendering its custom order confirmation page or when handling the related AJAX actions, allow |
| CVE-2026-18946 | Deferred | 未確認 | CWE-200 | The Contact Form to Any API WordPress plugin before 3.0.7 does not use a random filename when copying files uploaded through contact forms into a publicly accessible directory, all |
| CVE-2026-18947 | Awaiting Analysis | 未確認 | CWE-862 | A flaw was found in Feast. An authorization bypass vulnerability exists in the /materialize and /materialize-incremental endpoints. By sending a specially crafted request that omit |
| CVE-2026-18948 | Awaiting Analysis | 未確認 | CWE-502 | A flaw was found in Feast. The system improperly deserializes user-defined functions (UDFs) stored in its registry, which are serialized using the 'dill' library. This allows a rem |
| CVE-2026-18949 | Awaiting Analysis | 未確認 | CWE-250 | A flaw was found in odh-dashboard. This vulnerability allows an attacker, who has compromised the dashboard's Service Account (SA) token, to exploit overly broad permissions grante |
| CVE-2026-18950 | Awaiting Analysis | 未確認 | CWE-266, CWE-269 | A flaw was found in odh-dashboard. An authenticated user of the dashboard can exploit a vulnerability related to how RoleBindings are created. The system does not properly validate |
| CVE-2026-18951 | Awaiting Analysis | 未確認 | CWE-267, CWE-284 | A flaw was found in the Red Hat OpenShift AI (RHOAI) overlay for the training operator. The RHOAI overlay incorrectly aggregates `trainjobs` management permissions into the native |
| CVE-2026-18952 | Awaiting Analysis | 未確認 | CWE-918 | Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request |
| CVE-2026-18953 | Analyzed | 未確認 | CWE-22 | Improper limitation of a pathname to a restricted directory in the get_resource tool in Amazon awslabs.aws-transform-mcp-server 0.1.0 through 0.1.4 might allow a context-dependent |
| CVE-2026-18954 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP Server before 1.0.12 might allow an authenticated MCP client to perform inappropriate wri |
| CVE-2026-18958 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in imranrisal-dev Student-Management-System 18ea7904c339e0c7b0234724a79c939ce6191def/a8d43a29aaf267e7ca97171d6dbb44057bcd7f8c. Affected by this vulnera |
| CVE-2026-18959 | Deferred | 未確認 | CWE-22 | A flaw has been found in yushine InnoShop up to 0.8.2. Affected by this issue is the function FileManagerController::destroyFiles of the file innopacks/restapi/routes/panel-api.php |
| CVE-2026-18960 | Deferred | 未確認 | CWE-287 | The Block User Account WordPress plugin before 2.0.1 does not enforce its account block on every authentication path, allowing a blocked user who holds an application password crea |
| CVE-2026-18961 | Deferred | 未確認 | CWE-287 | The Social Login, Passkeys, Magic Link & Email OTP – Passwordless Login by VentraConnect plugin for WordPress is vulnerable to Authentication Bypass via Unverified Provider Email i |
| CVE-2026-18962 | Deferred | 未確認 | CWE-639 | The WP Photo Album Plus WordPress plugin before 9.2.09.002 does not check that the current user is allowed to upload into the album they target when it processes a front-end upload |
| CVE-2026-18963 | Awaiting Analysis | 未確認 | CWE-640 | A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak. The iss |
| CVE-2026-18965 | Deferred | 未確認 | CWE-862 | PayRange API is missing proper authorization on management endpoints, which allows verbose details of every device on the PayRange network to be publicly accessible, with or withou |
| CVE-2026-18967 | Analyzed | 未確認 | CWE-294 | A flaw was found in the SAML broker component of Keycloak, an identity and access management solution. When configured as a SAML broker using the IdP-Initiated flow, Keycloak fails |
| CVE-2026-18968 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in ttttonyhe OBlog up to 3ca6a45a2fcc81f6086751d8af124658720e8f8f. This issue affects some unknown processing of the file /tags.php. Such |
| CVE-2026-18969 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was detected in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260617. Impacted is an unknown function of the file /dm/dispatch/userinfo/upload |
| CVE-2026-18970 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260617. The affected element is an unknown function of the file /dm/dispatch/user/findA |
| CVE-2026-18972 | Awaiting Analysis | 未確認 | CWE-290 | An authenticated attacker can spoof another GUI user's identity by sending their request with the custom header \"Grpc-Metadata-USER\". This can lead to an account takeover attack |
| CVE-2026-18973 | Deferred | 未確認 | CWE-918 | A vulnerability has been found in heshengtao super-agent-party up to 0.4.1. The impacted element is the function sanitize_proxy_url of the file server.py of the component extension |
| CVE-2026-18974 | Deferred | 未確認 | CWE-200, CWE-284 | A vulnerability was found in heshengtao super-agent-party up to 0.4.1. This affects the function get_file_content of the file server.py of the component execute_tool_manually Endpo |
| CVE-2026-18976 | Deferred | 未確認 | CWE-266 | A vulnerability was determined in NousResearch hermes-agent up to 0.16.0. This impacts the function get_tool_definitions of the file agent/agent_init.py of the component disabled_t |
| CVE-2026-18978 | Deferred | 未確認 | CWE-79 | The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 7.8.1 due to insufficient input sani |
| CVE-2026-18980 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was identified in nearai ironclaw up to 0.29.1. Affected is the function classify_command_risk of the file src/tools/builtin/shell.rs. Such manipulation leads to co |
| CVE-2026-18982 | Awaiting Analysis | 未確認 | CWE-250 | A flaw was found in the RHOAI training-operator. This vulnerability allows a user with standard edit or admin roles in any Kubernetes namespace to escalate their privileges. Throug |
| CVE-2026-18983 | Deferred | 未確認 | CWE-434 | The One User Avatar | User Profile Picture plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.5.4 via the wpua_action_process |
| CVE-2026-18985 | Awaiting Analysis | 未確認 | CWE-285, CWE-863 | Incorrect Authorization vulnerability in Drupal Edit in-place field allows Forceful Browsing. This issue affects Edit in-place field versions: from 0.0.0 to 2.1.1. |
| CVE-2026-18988 | Deferred | 未確認 | CWE-79 | The Easy Accordion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'accordionTitleTag' block attribute in versions up to, and including, 3.1.8. This is du |
| CVE-2026-18990 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was detected in letta-ai LettaBot 0.2.0. Impacted is an unknown function of the file src/api/server.ts of the component API Status Route. The manipulation results i |
| CVE-2026-18991 | Deferred | 未確認 | CWE-22 | A security vulnerability has been detected in nanocoai NanoClaw up to 2.0.64. This affects an unknown part of the file container/agent-runner/src/mcp-tools/core.ts of the component |
| CVE-2026-18992 | Deferred | 未確認 | CWE-285, CWE-863 | A vulnerability was detected in zhayujie CowAgent up to 2.1.1. This vulnerability affects the function _select_tools of the file agent/evolution/executor.py of the component Self-E |
| CVE-2026-18993 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability was detected in NousResearch hermes-agent up to 0.16.0. Affected by this issue is some unknown functionality of the file hermes-agent/model_tools.py of the componen |
| CVE-2026-18995 | Deferred | 未確認 | CWE-200, CWE-284 | A flaw has been found in netease-youdao LobsterAI 2026.6.10. This affects the function parseMediaTokensFromText of the file src/renderer/services/artifactParser.ts of the component |
| CVE-2026-18996 | Deferred | 未確認 | CWE-266 | A vulnerability has been found in cosmicstack-labs mercury-agent up to 1.1.12. This vulnerability affects the function PermissionManager.checkShellCommand of the file src/capabilit |
| CVE-2026-18997 | Deferred | 未確認 | CWE-285, CWE-863 | A vulnerability was found in cosmicstack-labs mercury-agent up to 1.1.12. This issue affects the function Agent.handleBgCommand of the file src/core/agent.ts of the component bg Co |
| CVE-2026-18998 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was determined in cosmicstack-labs mercury-agent up to 1.1.12. Impacted is the function SubAgent.run of the file src/core/sub-agent.ts of the component delegate_tas |
| CVE-2026-19000 | Deferred | 未確認 | CWE-918 | A vulnerability was identified in JeecgBoot up to 3.9.2. The affected element is an unknown function of the file /airag/chat/send of the component Anonymous Chat Attachment Parser. |
| CVE-2026-19001 | Analyzed | 未確認 | CWE-190 | The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an application supplies an unusually long catalog, schema, or object name to a metadat |
| CVE-2026-19002 | Analyzed | 未確認 | CWE-120 | A missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI Connector ODBC Driver can result in an out-of-bounds write in the client application proce |
| CVE-2026-19003 | Analyzed | 未確認 | CWE-121 | A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC Driver setup dialog to write outside the bounds of an allocated buffer. |
| CVE-2026-19004 | Analyzed | 未確認 | CWE-122 | An application using the MongoDB BI Connector ODBC Driver may experience a memory-safety issue when processing output parameters from a stored procedure. Triggering this issue requ |
| CVE-2026-19005 | Deferred | 未確認 | CWE-266, CWE-269 | A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. Affected is the function handleCreateAgent of the file src/modules/agent-to-agent/create-agent.ts of the component C |
| CVE-2026-19006 | Deferred | 未確認 | CWE-285, CWE-863 | A vulnerability was found in mf-yang openclaw-cn 2026.2.5. This affects an unknown part of the file src/agents/bash-tools.exec.ts of the component Ggateway Exec Approval Flow. The |
| CVE-2026-19007 | Deferred | 未確認 | CWE-266, CWE-269 | A vulnerability was determined in mf-yang openclaw-cn up to 0.2.1. This vulnerability affects the function isApprovedElevatedSender of the file src/auto-reply/reply/reply-elevated. |
| CVE-2026-19008 | Deferred | 未確認 | CWE-59 | A vulnerability was identified in mf-yang openclaw-cn up to 0.2.1. This issue affects the function assertNoSymlinkEscape of the file src/agents/sandbox-paths.ts of the component ap |
| CVE-2026-19009 | Deferred | 未確認 | CWE-73 | A weakness has been identified in TinyAGI 0.0.20. This issue affects the function collectFiles of the file packages/core/src/response.ts of the component Message API Endpoint. This |
| CVE-2026-19010 | Deferred | 未確認 | CWE-862, CWE-863 | A security vulnerability has been detected in TinyAGI 0.0.20. Impacted is the function processMessage of the file packages/main/src/index.ts of the component Message API Endpoint. |
| CVE-2026-19011 | Deferred | 未確認 | CWE-73 | A vulnerability was detected in TinyAGI 0.0.20. The affected element is the function buildSystemPrompt of the file packages/server/src/routes/agents.ts. Performing a manipulation r |
| CVE-2026-19012 | Awaiting Analysis | 未確認 | CWE-476 | Consul Community Edition and Consul Enterprise 1.18.0 through 2.0.2 are vulnerable to an authenticated denial of service in the Enterprise-to-Community Edition downgrade path that |
| CVE-2026-19014 | Awaiting Analysis | 未確認 | CWE-770 | Consul Community Edition and Consul Enterprise 1.17.0 through 2.0.2 are vulnerable to an uncontrolled resource consumption issue in the Connect authorization endpoint that may allo |
| CVE-2026-19015 | Awaiting Analysis | 未確認 | CWE-770 | Consul Community Edition and Consul Enterprise 1.2.0 through 2.0.2 are vulnerable to an uncontrolled resource consumption issue in the Connect CA roots endpoint that may allow a re |
| CVE-2026-19016 | Awaiting Analysis | 未確認 | CWE-22 | Consul Community Edition and Consul Enterprise 1.19.1 through 2.0.2 did not enforce the {{session:write}} ACL permission for session deletion operations submitted through the trans |
| CVE-2026-19017 | Awaiting Analysis | 未確認 | CWE-862 | Consul Community Edition and Consul Enterprise 1.18.21 through 2.0.2 are vulnerable to a partial arbitrary file read when configured to use the Vault Connect CA provider with JWT o |
| CVE-2026-19019 | Deferred | 未確認 | CWE-459 | A security flaw has been discovered in poco-ai poco-agent up to 0.5.4. Affected is the function WorkspaceManager._setup_session_persistence of the file executor/app/core/workspace. |
| CVE-2026-19020 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /servicetype.php. This manipul |
| CVE-2026-19021 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in SourceCodester Computer Repair Shop Management System 1.0. Affected by this issue is some unknown functionality of the file /classes/M |
| CVE-2026-19022 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was determined in OpenHands up to 0.62.0. The affected element is the function initialize_repo of the file OpenHands/resolver/send_pull_request.py. This manipulatio |
| CVE-2026-19023 | Awaiting Analysis | 未確認 | CWE-822 | Untrusted pointer dereference in the render_bin_output function in the h5dump tool in HDF5 before 2.3.0 allows attackers to cause a denial of service via a variable-length string d |
| CVE-2026-19024 | Awaiting Analysis | 未確認 | CWE-476 | NULL pointer dereference in H5Pget_fill_value in HDF5 before 2.3.0 allows attackers to cause a denial of service via a dataset whose version 1 or 2 fill value message has the "defi |
| CVE-2026-19025 | Awaiting Analysis | 未確認 | CWE-369 | H5O__layout_decode in H5Olayout.c in HDF5 through 2.3.0 does not validate that a chunked dataset's stored chunk-layout dimensionality matches its dataspace rank when an existing da |
| CVE-2026-19026 | Awaiting Analysis | 未確認 | CWE-1284, CWE-476 | H5Z__filter_nbit in H5Znbit.c in HDF5 prior to 2.3.0 dereferences cd_values[0] through cd_values[4] without validating that cd_values is non-NULL or that cd_nelmts is at least 5, t |
| CVE-2026-19027 | Awaiting Analysis | 未確認 | CWE-125 | The H5Z__nbit_decompress_one_byte, H5Z__nbit_decompress_one_nooptype, and H5Z__nbit_decompress_one_atomic functions in H5Znbit.c in HDF5 prior to 2.3.0 advance a read index into th |
| CVE-2026-19028 | Awaiting Analysis | 未確認 | CWE-125, CWE-1284, CWE-190 | H5Z__filter_fletcher32 in H5Zfletcher32.c in HDF5 prior to 2.3.0 computes the data length to checksum by subtracting the 4-byte trailing checksum size from the input buffer size wi |
| CVE-2026-19034 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was determined in Shibby Tomato 1.28.0000. Affected by this vulnerability is the function new_qoslimit_stop of the file /tmp/qoslimittc_stop.sh. Executing a manipul |
| CVE-2026-19035 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in Shibby Tomato 1.28.0000. Affected by this issue is the function new_qoslimit_start of the file /etc/qoslimit. The manipulation of the argument new |
| CVE-2026-19036 | Deferred | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in Shibby Tomato 1.28.0000. This affects the function sub_40F88C of the file /tmp/ppp/wanoptions. The manipulation of the argument ppp_custom re |
| CVE-2026-19037 | Deferred | 未確認 | CWE-840, CWE-841 | A weakness has been identified in WonderTrader up to 0.9.9. This vulnerability affects the function MatchEngine::update_lob of the file src/WtBtCore/MatchEngine.cpp of the componen |
| CVE-2026-19038 | Deferred | 未確認 | CWE-22 | A security vulnerability has been detected in MonomythDevelopment la-forge-mcp 1.0.0. This issue affects the function screenshotElement of the file src/index.ts of the component sc |
| CVE-2026-19039 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was detected in Kino-Kafkaesque ssh-mcp-server up to 8ebbbb99b26f80ff6162fe00957c6dec73fbc5a5. Impacted is the function ssh_exec of the file src/index.ts of the com |
| CVE-2026-19040 | Deferred | 未確認 | CWE-918 | A flaw has been found in MissionSquad mcp-api up to 1.11.9. The affected element is an unknown function of the file src/services/dcrClients.ts. Executing a manipulation can lead to |
| CVE-2026-19041 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability has been found in MissionSquad mcp-api up to 1.11.8. The impacted element is the function this.packageService.installPackage of the file src/controllers/packages.ts |
| CVE-2026-19042 | Deferred | 未確認 | CWE-78 | A command injection vulnerability in TeamViewer Full Client and Host for Linux prior to version 15.81.5 allows a remote attacker to execute arbitrary commands in the context of the |
| CVE-2026-19044 | Deferred | 未確認 | CWE-74, CWE-77 | A flaw has been found in LeeSinLiang godot-mcp 0.1.0. Affected by this vulnerability is the function executeOperation of the file src/index.ts of the component create_scene/add_nod |
| CVE-2026-19045 | Deferred | 未確認 | CWE-74, CWE-77 | A weakness has been identified in NocteDefensor LudusMCP up to 1.0.24. The affected element is the function SecretDialog.showSecretDialog of the file src/utils/secretDialog.ts of t |
| CVE-2026-19046 | Deferred | 未確認 | CWE-22 | A security vulnerability has been detected in NocteDefensor LudusMCP up to 1.0.24. The impacted element is an unknown function of the file src/tools/ludusEnvironmentGuidesSearch.ts |
| CVE-2026-19047 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was detected in NocteDefensor LudusMCP up to 1.0.24. This affects the function executeArbitraryCommand/executeCommand of the file src/ludusMCP/cliWrapper.ts of the |
| CVE-2026-19049 | Deferred | 未確認 | CWE-89 | The ProSolution WP Client WordPress plugin before 2.0.9 does not sanitise a cookie value before using it in SQL queries, and processes that cookie on every request without any auth |
| CVE-2026-19050 | Deferred | 未確認 | CWE-918 | The ProSolution WP Client WordPress plugin before 2.0.9 does not validate a user-supplied URL, and does not check the capability or nonce of the requester, before performing a serv |
| CVE-2026-19052 | Deferred | 未確認 | CWE-862 | The ProSolution WP Client WordPress plugin before 2.0.9 does not perform capability checks on two administrative AJAX actions, and the nonce they rely on is published on its public |
| CVE-2026-19053 | Deferred | 未確認 | CWE-89 | The ProSolution WP Client WordPress plugin before 2.0.6 does not sanitise and escape a parameter before using it in a SQL statement reachable by unauthenticated visitors, leading t |
| CVE-2026-19054 | Deferred | 未確認 | CWE-22 | A vulnerability was detected in Lspace-io lspace-server up to 79f02fe5aa8970b210a6a05cf097155f8d9ffd71. This issue affects the function fileExists/readFile/writeFile/deleteFile of |
| CVE-2026-19055 | Deferred | 未確認 | CWE-79 | The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape several parameters before reflecting them into HTML attributes on its public pages, leading to |
| CVE-2026-19056 | Deferred | 未確認 | CWE-79 | The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape a parameter before reflecting it into an HTML attribute on one of its administrative pages, le |
| CVE-2026-19058 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability was found in FoundationAgents MetaGPT up to 0.8.2. The impacted element is the function DataInterpreter of the file metagpt/roles/di/data_interpreter.py. The manipu |
| CVE-2026-19059 | Deferred | 未確認 | CWE-22 | A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.2. This affects the function read of the file metagpt/tools/libs/editor.py. This manipulation causes path trave |
| CVE-2026-19060 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.2. This impacts an unknown function. Such manipulation leads to code injection. The attack needs to be performe |
| CVE-2026-19061 | Deferred | 未確認 | CWE-345 | A flaw has been found in Insta InstaKNXServiceApp 1.2.3.1469. Affected by this issue is the function CreateWebClientAndDownloadFileList of the component Firmware Update Handler. Ex |
| CVE-2026-19062 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in chiuwingyan house up to dea6bcceaebe2b364a5a209747f48ecc2b2dc670. This affects an unknown part of the file /paid/selectall.action. The manipulatio |
| CVE-2026-19064 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was found in SourceCodester Online Examination & Learning Management System 1.0. This vulnerability affects unknown code of the file /view.php. The manipulation of |
| CVE-2026-19065 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was determined in SourceCodester Online Examination & Learning Management System 1.0. This issue affects some unknown processing of the file upload_files.php. This |
| CVE-2026-19066 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was identified in SourceCodester Online Examination & Learning Management System 1.0. Impacted is an unknown function of the file view_students.php. Such manipulati |
| CVE-2026-19067 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in itsourcecode Hospital Management System 1.0. The affected element is an unknown function of the file /treatment.php. Performing a manipulatio |
| CVE-2026-19068 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /treatmentdetail.php. Executing a manipulatio |
| CVE-2026-19069 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /treatmentrecord.php. The manipulation of th |
| CVE-2026-19070 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /viewadmin.php. The manipulation of the argument delid res |
| CVE-2026-19071 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewappointment.php. This manipulation of the argument delid caus |
| CVE-2026-19073 | Deferred | 未確認 | CWE-200 | The Order Sync with Zendesk for WooCommerce WordPress plugin before 2.2.3 does not perform any capability check on one of its REST API endpoints, and does not verify that the reque |
| CVE-2026-19074 | Deferred | 未確認 | CWE-200, CWE-352 | The Advanced Classifieds & Directory Pro Advanced Classifieds & Directory Pro WordPress plugin before 3.4.3 (<= 3.4.2) is vulnerable to unauthenticated sensitive information exposu |
| CVE-2026-19075 | Deferred | 未確認 | CWE-918 | All-in-One Video Gallery registers a public, unauthenticated file-download handler triggered by `?vdl=<post_id>` on any `aiovg_videos` post (`public/video.php`, `AIOVG_Public_Video |
| CVE-2026-19077 | Deferred | 未確認 | CWE-639 | The Duplicate Post WordPress plugin before 1.5.5 does not perform per-object authorisation checks in its bulk copy and delete operations, allowing any user whose role an administra |
| CVE-2026-19078 | Awaiting Analysis | 未確認 | CWE-601 | A flaw was found in the oauth-server component. This open redirect vulnerability occurs when the 'then' parameter in the grant approval handler is not properly validated. A remote |
| CVE-2026-19079 | Awaiting Analysis | 未確認 | CWE-367 | A TOCTOU (Time-of-Check-Time-of-Use) race condition vulnerability was found in the fixfiles script in policycoreutils. When running fixfiles relabel or fixfiles restore, the script |
| CVE-2026-19082 | Deferred | 未確認 | CWE-125 | Imager versions from 0.45_02 before 1.034 for Perl may expose adjacent heap bytes via strlen() over-read from zero-count ASCII EXIF entries in copy_string_tags. copy_string_tags() |
| CVE-2026-19084 | Deferred | 未確認 | CWE-73 | The shared-files-pro WordPress plugin before 1.7.70 does not validate the file path supplied when creating a featured image, allowing unauthenticated attackers to read arbitrary fi |
| CVE-2026-19085 | Deferred | 未確認 | CWE-639 | The Duplicate Post WordPress plugin before 1.5.6 does not check that a user may read the content of a post before duplicating it, allowing users with a delegated role to republish |
| CVE-2026-19088 | Deferred | 未確認 | CWE-352 | The ShopEngine Elementor WooCommerce Builder Addon WordPress plugin before 4.9.3 does not protect one of its authentication endpoints against CSRF, allowing an attacker to log a v |
| CVE-2026-19089 | Deferred | 未確認 | CWE-434 | The Product Input Fields for WooCommerce WordPress plugin before 2.0.2 does not validate uploaded file types when its accepted-types setting is left empty, which its own documentat |
| CVE-2026-19091 | Deferred | 未確認 | CWE-22 | The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path valida |
| CVE-2026-19092 | Deferred | 未確認 | CWE-74 | The Tutor LMS WordPress plugin before 4.0.6 does not prevent request data from overwriting internal variables while rendering templates, allowing unauthenticated users to invoke ar |
| CVE-2026-19093 | Deferred | 未確認 | CWE-552 | The Tutor LMS WordPress plugin before 4.0.6 does not validate a stored file path before using it to stream media, allowing users with the instructor role to read arbitrary files o |
| CVE-2026-19094 | Deferred | 未確認 | CWE-89 | The Tutor LMS WordPress plugin before 4.0.6 does not validate values used to build a database query, and does not restrict which template file a request may load, allowing unauthe |
| CVE-2026-19108 | Deferred | 未確認 | CWE-119, CWE-416 | A vulnerability was found in MZ Automation libiec61850 up to 1.6.1. The affected element is the function deleteDataSetValuesShadowBuffer of the file src/iec61850/server/mms_mapping |
| CVE-2026-19110 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in DataGear up to 5.0.0. The impacted element is the function HtmlTplDashboardWidgetHtmlRenderer of the file HtmlTplDashboardWidgetHtmlRenderer.java |
| CVE-2026-19111 | Awaiting Analysis | 未確認 | CWE-639 | Insecure direct object reference in the mongodb_memory, elasticsearch_memory, and mem0_memory tools in Amazon Strands Agents Tools before 0.8.3 might allow remote authenticated use |
| CVE-2026-19113 | Awaiting Analysis | 未確認 | CWE-400 | Consul Community Edition and Consul Enterprise 1.3.0 through 2.0.2 are vulnerable to an unauthenticated denial of service in several agent HTTP API endpoints. A remote caller could |
| CVE-2026-19127 | Deferred | 未確認 | CWE-345 | An issue in the billing and license activation subsystem allows remote attackers to bypass payment authorization workflows. By exploiting insufficient cryptographic validation or l |
| CVE-2026-19130 | Awaiting Analysis | 未確認 | CWE-639 | A flaw was found in the provider-credential-controller component of multicluster-engine (MCE). An attacker with specific permissions on the hub cluster, and knowledge of a prior cr |
| CVE-2026-19135 | Awaiting Analysis | 未確認 | CWE-470 | A JEXL expression sandbox bypass exists in multiple versions of OpenNMS Meridian and Horizon. A low-privileged authenticated user can submit a crafted expression to the Measurement |
| CVE-2026-19137 | Analyzed | 未確認 | CWE-416 | Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox esca |
| CVE-2026-19138 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in CrashReporting in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox |
| CVE-2026-19139 | Analyzed | 未確認 | CWE-362 | Race in CredentialProvider in Google Chrome on Windows prior to 151.0.7922.109 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium sec |
| CVE-2026-19140 | Analyzed | 未確認 | CWE-416 | Use after free in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a craf |
| CVE-2026-19141 | Analyzed | 未確認 | CWE-416 | Use after free in Resources in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox |
| CVE-2026-19142 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corrup |
| CVE-2026-19143 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in WebAPKs in Google Chrome on Android prior to 151.0.7922.109 allowed a local attacker to potentially perform a sandbox escape via a mal |
| CVE-2026-19144 | Analyzed | 未確認 | CWE-416 | Use after free in HTML in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severit |
| CVE-2026-19145 | Analyzed | 未確認 | CWE-416 | Use after free in Translate in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium securit |
| CVE-2026-19146 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive info |
| CVE-2026-19147 | Analyzed | 未確認 | CWE-416 | Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape |
| CVE-2026-19148 | Analyzed | 未確認 | CWE-787 | Out of bounds write in GPU in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox esc |
| CVE-2026-19149 | Analyzed | 未確認 | CWE-416 | Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium securi |
| CVE-2026-19150 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium |
| CVE-2026-19151 | Analyzed | 未確認 | CWE-416 | Use after free in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sever |
| CVE-2026-19152 | Analyzed | 未確認 | CWE-693 | Insufficient policy enforcement in Navigation in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a s |
| CVE-2026-19153 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Workers in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to bypass site iso |
| CVE-2026-19154 | Analyzed | 未確認 | CWE-416 | Use after free in Skia in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escap |
| CVE-2026-19155 | Analyzed | 未確認 | CWE-416 | Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a |
| CVE-2026-19156 | Analyzed | 未確認 | CWE-122 | Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corrupti |
| CVE-2026-19157 | Analyzed | 未確認 | CWE-787 | Out of bounds write in ANGLE in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromiu |
| CVE-2026-19158 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit |
| CVE-2026-19159 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corrup |
| CVE-2026-19160 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML p |
| CVE-2026-19161 | Analyzed | 未確認 | CWE-457 | Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML p |
| CVE-2026-19162 | Analyzed | 未確認 | CWE-787 | Out of bounds write in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-19163 | Analyzed | 未確認 | CWE-416 | Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox esca |
| CVE-2026-19164 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Codecs in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML p |
| CVE-2026-19165 | Analyzed | 未確認 | CWE-416 | Use after free in Extensions in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a s |
| CVE-2026-19166 | Analyzed | 未確認 | CWE-416 | Use after free in Web Authentication in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium s |
| CVE-2026-19167 | Analyzed | 未確認 | CWE-190 | Integer overflow in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML pag |
| CVE-2026-19168 | Analyzed | 未確認 | CWE-693 | Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium |
| CVE-2026-19169 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Contextual Tasks in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to perform privilege escalation via a crafted HTML |
| CVE-2026-19170 | Analyzed | 未確認 | CWE-416 | Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium sec |
| CVE-2026-19171 | Analyzed | 未確認 | CWE-416 | Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium sec |
| CVE-2026-19172 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cr |
| CVE-2026-19173 | Analyzed | 未確認 | CWE-787 | Out of bounds write in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via |
| CVE-2026-19174 | Analyzed | 未確認 | CWE-190 | Integer overflow in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-19175 | Analyzed | 未確認 | CWE-416 | Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security se |
| CVE-2026-19176 | Analyzed | 未確認 | CWE-416 | Use after free in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a |
| CVE-2026-19177 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in UI in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform |
| CVE-2026-19182 | Awaiting Analysis | 未確認 | CWE-863 | An incorrect authorization check in the v2 Alarm REST API in OpenNMS Meridian and Horizon allows a low-privileged authenticated user (ROLE_REST) to acknowledge, escalate, or clear |
| CVE-2026-19188 | Deferred | 未確認 | CWE-78 | A critical OS command injection vulnerability has been identified in the Haiwell IoT Cloud HMI Gateway product. The vulnerability exists in the Net Check feature accessible via t |
| CVE-2026-19189 | Deferred | 未確認 | CWE-266, CWE-269 | A security flaw has been discovered in Power Sofware PowerISO 9.3.0.0. Affected by this issue is some unknown functionality in the library C:\Windows\System32\drivers\scdemu.sys of |
| CVE-2026-19190 | Deferred | 未確認 | CWE-266, CWE-275 | A weakness has been identified in StableBit Scanner 2.6.13.4088. This affects an unknown part of the file C:\Program Files (x86)\StableBit\Scanner\Service\Scanner.Service.exe of th |
| CVE-2026-19191 | Deferred | 未確認 | CWE-266, CWE-275 | A security vulnerability has been detected in StableBit DrivePool 2.3.13.1687. This vulnerability affects unknown code of the file C:\Program Files\StableBit\DrivePool\DrivePool.Se |
| CVE-2026-19192 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability was detected in DeepCool DisplayService 1.2.12. This issue affects some unknown processing of the file C:\DeepCool\resources\service\x64\DeepCoolDisplayService.exe. |
| CVE-2026-19193 | Deferred | 未確認 | CWE-266, CWE-284 | A flaw has been found in Jiangmin Antivirus 21. Impacted is the function MessageNotifyCallback in the library kvcore.sys of the component Minifilter Port. Executing a manipulation |
| CVE-2026-19195 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability has been found in V-Secure Jingyun Antivirus 2.4.2.39. The affected element is an unknown function in the library ZyArk.sys of the component Kernel Driver. The mani |
| CVE-2026-19196 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in SourceCodester Photo Share Website 1.0. The impacted element is an unknown function of the file /social/ajax.php?action=login. The manipulation of the |
| CVE-2026-19197 | Awaiting Analysis | 未確認 | CWE-862 | A user with organization administrator permissions can delete dashboard snapshots belonging to other organizations on the same Grafana instance, and can recover a snapshot's secret |
| CVE-2026-19198 | Deferred | 未確認 | CWE-863 | Akaunting 3.1.21 contains an authenticated improper authorization vulnerability in the common BulkActions dispatcher.This issue affects Akaunting: 3.1.21. |
| CVE-2026-19200 | Awaiting Analysis | 未確認 | CWE-862, CWE-94 | The Velociraptor verify() VQL function allows a user to verify an artifact for syntatic and other issues. Due to an implementation fault in this VQL function, the global artifact r |
| CVE-2026-19206 | Deferred | 未確認 | CWE-119, CWE-122 | A security flaw has been discovered in MZ Automation libiec61850 up to 1.6.1. This affects the function SVReceiver_stopThreadless of the file src/sampled_values/sv_subscriber.c of |
| CVE-2026-19207 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in PHPGurukul Company Visitor Management System 1.0. This issue affects some unknown processing of the file /manage-newvisitors.php. The |
| CVE-2026-19208 | Deferred | 未確認 | CWE-840, CWE-841 | A vulnerability was detected in WonderTrader up to 0.9.9. Impacted is the function TraderDD::queryTrades of the file src/TraderDD/TraderDD.cpp. The manipulation of the argument FID |
| CVE-2026-19209 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in SourceCodester Photo Share Website 1.0. The affected element is an unknown function of the file /social/index.php?page=home. This manipulation of the argum |
| CVE-2026-19210 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability has been found in SourceCodester Photo Share Website 1.0. The impacted element is an unknown function of the file /social/ajax.php?action=save_upload. Such manipula |
| CVE-2026-19211 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in SourceCodester Photo Share Website 1.0. This affects an unknown function of the file /social/ajax.php?action=signup. Performing a manipulation of the a |
| CVE-2026-19212 | Deferred | 未確認 | CWE-453, CWE-457 | A vulnerability was determined in WonderTrader up to 0.9.9. This impacts an unknown function of the file src/Includes/WTSTradeDef.hpp of the component TraderATP Cash Trade Conversi |
| CVE-2026-19213 | Deferred | 未確認 | CWE-840, CWE-841 | A vulnerability was identified in WonderTrader up to 0.9.9. Affected is the function _undone_qty in the library src/WtCore/TraderAdapter.h of the component Pending Order Handler. T |
| CVE-2026-19217 | Deferred | 未確認 | CWE-79 | The Royal Addons for Elementor WordPress plugin before 1.7.1065 does not validate a widget setting used to build an HTML tag before outputting it, which could allow users with the |
| CVE-2026-19220 | Deferred | 未確認 | CWE-269 | The Forminator Forms WordPress plugin before 1.57.1 does not verify that site registration is enabled on the network before creating a site signup, allowing unauthenticated visito |
| CVE-2026-19221 | Deferred | 未確認 | CWE-94 | The Forminator Forms WordPress plugin before 1.57.0.5 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisi |
| CVE-2026-19222 | Deferred | 未確認 | CWE-269 | The Forminator Forms WordPress plugin before 1.57.0.7 does not consistently enforce the role restriction it applies to registration forms, allowing users who are permitted to buil |
| CVE-2026-19223 | Deferred | 未確認 | CWE-94 | The Smush WordPress plugin before 4.3.2 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to |
| CVE-2026-19225 | Deferred | 未確認 | CWE-94 | The Defender Security WordPress plugin before 6.2.0 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite |
| CVE-2026-19226 | Deferred | 未確認 | CWE-79 | The Royal Addons for Elementor WordPress plugin before 1.7.1066 does not validate some widget settings before outputting them inside an HTML attribute, which could allow users wit |
| CVE-2026-19228 | Analyzed | 未確認 | CWE-639 | GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.4 and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated |
| CVE-2026-19229 | Deferred | 未確認 | CWE-200, CWE-538 | A vulnerability was determined in SourceCodester Online Clothing Store. Affected by this issue is some unknown functionality of the file /_notes/ of the component Dreamweaver Metad |
| CVE-2026-19230 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in SourceCodester Photo Share Website 1.0. This affects an unknown part of the file /social/ajax.php?action=save_upload of the component Comment Inpu |
| CVE-2026-19231 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in SourceCodester Simple Doctors Appointment System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=delete_appoi |
| CVE-2026-19234 | Analyzed | 未確認 | CWE-121 | Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware boot process image validation pat |
| CVE-2026-19243 | Deferred | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in HKUDS nanobot up to 0.2.1. Impacted is the function ExecTool._guard_command/ExecTool._spawn of the file nanobot/agent/tools/shell.py o |
| CVE-2026-19244 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability was detected in HKUDS nanobot up to 0.2.1. The affected element is the function connect_mcp_servers of the file nanobot/agent/tools/mcp.py of the component MCP enab |
| CVE-2026-19245 | Deferred | 未確認 | CWE-200, CWE-284 | A flaw has been found in HKUDS nanobot up to 0.2.1. The impacted element is the function ExecTool._prepare_command of the file nanobot/agent/tools/shell.py of the component Login-s |
| CVE-2026-19246 | Deferred | 未確認 | CWE-918 | A vulnerability has been found in HKUDS nanobot up to 0.2.1. This affects the function _download_image_data_url of the file nanobot/providers/image_generation.py of the component P |
| CVE-2026-19259 | Deferred | 未確認 | CWE-119, CWE-122 | A vulnerability has been found in MZ Automation libiec61850 up to 1.6.1. The affected element is the function MmsMapping_varAccessSpecToObjectReference of the file src/iec61850/com |
| CVE-2026-19263 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was found in INQUIRELAB mcp-bridge-api up to b30a82aa1d1d1139e0de846c41c8aadee6e06114. The impacted element is an unknown function of the file mcp-bridge.js of the |
| CVE-2026-19264 | Deferred | 未確認 | CWE-22 | Postiz is an open-source social media scheduling tool. The route that serves locally stored media joins URL-supplied path segments onto the upload directory and streams the file wi |
| CVE-2026-19266 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was determined in Kirachon context-engine up to 1.9.0. This affects the function execGitCommand of the file src/mcp/utils/gitUtils.ts of the component review-git-di |
| CVE-2026-19268 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was identified in abdullah1854 MCPGateway up to 549f494a9e363f40530149de324b8097de424230. This impacts the function getUsageByDateRange of the file src/services/cla |
| CVE-2026-19270 | Deferred | 未確認 | CWE-22 | A security flaw has been discovered in Hulupeep mcp-ui-probe up to 0.2.0. Affected is the function get_journey/delete_journey/analyze_journey/usage_stats of the file src/journey/Jo |
| CVE-2026-19271 | Deferred | 未確認 | CWE-90 | Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows LDAP |
| CVE-2026-19278 | Awaiting Analysis | 未確認 | CWE-625 | A flaw was found in StackRox/RHACS Central's Auth Machine-to-Machine (M2M) token exchange. When an administrator configures M2M role mappings, the system uses unanchored regular ex |
| CVE-2026-19279 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was identified in MIMICLab mcp-pdf-vision 1.1.0. The impacted element is the function load_pdf of the file src/index.ts. Such manipulation of the argument pdfPath/s |
| CVE-2026-19281 | Deferred | 未確認 | CWE-74, CWE-77 | A security flaw has been discovered in adolfosalasgomez3011 slidev-builder-mcp 2.1.0. This affects the function generateChart of the file src/tools/generateAssets.ts of the compone |
| CVE-2026-19282 | Deferred | 未確認 | CWE-74, CWE-77 | A weakness has been identified in andreahaku llm_memory_mcp up to f11dc8bcff3ff8cf943a2945f99ff3b0bdc8a6d0. This impacts the function auto.capture of the file src/autolearn/GitHook |
| CVE-2026-19284 | Deferred | 未確認 | CWE-74, CWE-77 | A security vulnerability has been detected in MauricioMilano coder-api up to 1.1.0. Affected is the function createProject of the file src/core/projects.ts of the component Project |
| CVE-2026-19285 | Deferred | 未確認 | CWE-22 | A vulnerability was detected in aaronsb memory-graph up to 5cfd2382778837b9f6399080956eee670d00452c. Affected by this vulnerability is the function JsonMemoryStorage.createDomain/J |
| CVE-2026-19286 | Analyzed | 未確認 | CWE-94 | IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to execute arbitrary code due to improper enforcement of security restrictions on the A2A public endpoint. |
| CVE-2026-19287 | Deferred | 未確認 | CWE-22 | A flaw has been found in abrinsmead mindpilot-mcp 0.5.0. Affected by this issue is some unknown functionality of the component HistoryService. This manipulation of the argument ID |
| CVE-2026-19288 | Deferred | 未確認 | CWE-22 | A vulnerability has been found in astralisone rive-mcp-server-core up to db1d0cc4cd52589116360428b7504fd0ca748b3e. This affects an unknown part of the file packages/mcp-server/src/ |
| CVE-2026-19291 | Awaiting Analysis | 未確認 | CWE-290 | Bluetooth re-pairing with an existing device can use a lower security level. RS9116W and SiWx91x impacted. See V3 in the BLERP paper linked below. |
| CVE-2026-19292 | Awaiting Analysis | 未確認 | CWE-305 | Re-pairing with a legitimate device can use a lower security level than previous making brute-forcing the LTK easier. See V4 in the BLERP paper linked below. |
| CVE-2026-19293 | Awaiting Analysis | 未確認 | CWE-521 | SMP security request (from peripheral) does not include the maximum encryption key size supported. Using a key with less than the maximum keysize makes brute-forcing the key easier |
| CVE-2026-19294 | Analyzed | 未確認 | CWE-639 | IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote authenticated attacker to execute and read any user's private flow due to improper authorization. |
| CVE-2026-19295 | Analyzed | 未確認 | CWE-95 | IBM Langflow OSS 1.0.0 through 1.11.1 allows an authenticated attacker to execute arbitrary operating system commands in the server process by saving a flow with a crafted type fie |
| CVE-2026-19297 | Analyzed | 未確認 | CWE-307 | IBM Langflow OSS 1.0.0 through 1.9.6 could allow a remote attacker to obtain unauthorized access to user accounts due to improper restriction of excessive authentication attempts. |
| CVE-2026-19311 | Awaiting Analysis | 未確認 | CWE-475 | Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a |
| CVE-2026-19313 | Deferred | 未確認 | CWE-122, CWE-190, CWE-680 | An heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network tr |
| CVE-2026-19314 | Deferred | 未確認 | CWE-191, CWE-787 | An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processi |
| CVE-2026-19315 | Deferred | 未確認 | CWE-125, CWE-763, CWE-843 | A type confusion vulnerability in the iked process of WatchGuard Fireware OS allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network |
| CVE-2026-19316 | Deferred | 未確認 | CWE-415, CWE-416 | A double-free vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by s |
| CVE-2026-19317 | Deferred | 未確認 | CWE-125, CWE-191 | An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN process |
| CVE-2026-19318 | Deferred | 未確認 | CWE-121, CWE-129, CWE-191 | A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially craft |
| CVE-2026-19321 | Analyzed | 未確認 | CWE-190 | Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware. An attacker with service access |
| CVE-2026-19323 | Deferred | 未確認 | CWE-22 | A security flaw has been discovered in azer react-analyzer-mcp up to 335f2a3585f265e2e88352b59b10d3b478d678b0. Affected by this vulnerability is the function generateProjectDocs of |
| CVE-2026-19324 | Deferred | 未確認 | CWE-22 | A weakness has been identified in HelloGGX shadcn-vue-mcp up to e170e277b94235cde627803277fc8c41103a4d38. Affected by this issue is the function fs.promises.readFile of the file sr |
| CVE-2026-19325 | Deferred | 未確認 | CWE-22 | A security vulnerability has been detected in IncomeStreamSurfer roo-code-memory-bank-mcp-server up to 9dcb2fb5e6b65a35ac1983885a6d4e5621a0081e. This affects the function readMemor |
| CVE-2026-19326 | Deferred | 未確認 | CWE-22 | A vulnerability was detected in Jevon-Zhong Ai-doctor 0.0.1. This vulnerability affects the function deleteImage of the file ai-doctor-server/src/filemanagement/filemanagement.serv |
| CVE-2026-19327 | Deferred | 未確認 | CWE-22 | A flaw has been found in abracadabra50 claude-sesh 1.0.0. This issue affects the function getEnrichedData/enrichSession of the file src/services/enricher.ts. Executing a manipulati |
| CVE-2026-19328 | Deferred | 未確認 | CWE-22 | A vulnerability has been found in aktsmm skill-ninja-mcp-server 0.1.0. Impacted is the function getInstalledSkills/installSkill/updateAgentsMd/uninstallSkill of the file src/instal |
| CVE-2026-19329 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was found in andreahaku codex_mcp up to 1ff521cc6cc57cfe56ddef946c644b8534771390. The affected element is an unknown function of the file src/codex-process-simple.t |
| CVE-2026-19330 | Deferred | 未確認 | CWE-22 | A vulnerability was determined in angrysky56 advanced-reasoning-mcp 1.0.0. The impacted element is the function create_system_json/create_library to get_system_json/switch_memory_l |
| CVE-2026-19331 | Deferred | 未確認 | CWE-22 | A vulnerability was identified in bazylhorsey obsidian-mcp-server 1.0.0. This affects the function readCanvas/writeCanvas of the file src/services/CanvasService.ts. Such manipulati |
| CVE-2026-19332 | Deferred | 未確認 | CWE-74, CWE-77 | A security vulnerability has been detected in NellyW8 MCP4EDA 1.0.0. Affected by this vulnerability is an unknown functionality of the component run_openlane/view_waveform. The man |
| CVE-2026-19333 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was detected in NightTrek Supabase-MCP cc994ab2d2a36b0af6ee7c7f3e6ce8e08cda2170/db03237d92f7dc2f0da0d70a87dba84ebcde5b66. Affected by this issue is some unknown fun |
| CVE-2026-19334 | Deferred | 未確認 | CWE-74, CWE-77 | A flaw has been found in NightTrek Ollama-mcp up to 80cf2e17cfc144963a475b619093a2d13c13dbc9. This affects an unknown part of the file src/index.ts. This manipulation of the argume |
| CVE-2026-19335 | Deferred | 未確認 | CWE-22 | A vulnerability has been found in Jane-xiaoer skill-vision-control up to 1.3.0. This vulnerability affects the function getSkillVersionsDir of the file src/svc/utils/config.ts. Suc |
| CVE-2026-19336 | Deferred | 未確認 | CWE-22 | A vulnerability was found in Pimzino spec-workflow-mcp up to 2.2.6. This issue affects the function ApprovalStorage.createApproval of the file src/tools/approvals.ts. Performing a |
| CVE-2026-19337 | Deferred | 未確認 | CWE-918 | A vulnerability was determined in adenot mcp-google-search up to 0.3.1. Impacted is an unknown function of the file src/index.ts of the component read_webpage. Executing a manipula |
| CVE-2026-19338 | Deferred | 未確認 | CWE-22 | A vulnerability was identified in automateyournetwork MCPyATS up to 0.1.4. The affected element is the function processGenerateRequest of the file mcp_servers/mermaid/index.ts of t |
| CVE-2026-19339 | Deferred | 未確認 | CWE-918 | A security flaw has been discovered in aliyun alibabacloud-dataworks-mcp-server up to 1.0.43. The impacted element is the function ReadResourceRequestSchema of the file src/resourc |
| CVE-2026-19340 | Deferred | 未確認 | CWE-918 | A weakness has been identified in anubissbe ProjectHub-Mcp up to 5.0.0. This affects an unknown function of the file backend-fix/complete_backend.js of the component Webhooks API. |
| CVE-2026-19341 | Deferred | 未確認 | CWE-119, CWE-121 | A security vulnerability has been detected in UTT HiPER 1200GW up to 2.5.3-170306. This impacts the function strcpy of the file /goform/pptpSrvGlobalConfig. Such manipulation of th |
| CVE-2026-19342 | Deferred | 未確認 | CWE-287 | A vulnerability was detected in code-projects Task Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation o |
| CVE-2026-19343 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in code-projects Task Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/AdminLogin.php. Executing a manipul |
| CVE-2026-19344 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in code-projects Task Management System 1.0. Affected by this issue is some unknown functionality of the file /user/comment_count_user.php. The manip |
| CVE-2026-19345 | Deferred | 未確認 | CWE-862, CWE-863 | A vulnerability was found in code-projects Task Management System 1.0. This affects an unknown part of the file /user/UpdateTaskStatus.php. The manipulation of the argument task_id |
| CVE-2026-19346 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formCertListInfo of the file /goform/CertListInfo. This manipulation of the argument N |
| CVE-2026-19347 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in itsourcecode Hospital Management System 1.0. This issue affects some unknown processing of the file /viewdoctor.php. Such manipulation of the argu |
| CVE-2026-19348 | Deferred | 未確認 | CWE-74, CWE-77 | A security flaw has been discovered in Shenzhen Aitemi M300 Wi-Fi Repeater r0-ea7890a. Impacted is the function sprintf of the file /protocol.csp?fname=net&opt=smacfilter_conf&func |
| CVE-2026-19349 | Deferred | 未確認 | CWE-305, CWE-628 | Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2 state parameter sto |
| CVE-2026-19350 | Deferred | 未確認 | CWE-862, CWE-863 | A vulnerability has been found in Dolibarr ERP up to 23.0.3. Affected is the function fail of the file htdocs/takepos/invoice.php of the component TakePOS Module. Such manipulation |
| CVE-2026-19351 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in dresende node-sql-query 0.1.25/0.1.26/0.1.27/0.1.28. Affected by this vulnerability is the function SelectQuery.from/SelectQuery.build in the library l |
| CVE-2026-19352 | Deferred | 未確認 | CWE-918 | A vulnerability was determined in mifi lossless-cut up to 3.69.0. Affected by this issue is some unknown functionality of the file src/main/httpServer.ts of the component Built-in |
| CVE-2026-19353 | Deferred | 未確認 | CWE-73 | A vulnerability has been found in DedeCMS up to 5.7.118 UTF8SP2. The affected element is the function _4_Setup of the file install/index.php of the component Installation Wizard. S |
| CVE-2026-19354 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in lock-upme OPMS up to 831440f37a92c1568f2e071d5233bc873a9d8b09. The impacted element is an unknown function of the file controllers/messages/message.go |
| CVE-2026-19355 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in MingSoft MCMS up to 3.0.6. This affects the function ModelDataImpl.queryDiyFormData of the file /mdiy/form/data/list.do of the component ms-mdiy. |
| CVE-2026-19356 | Deferred | 未確認 | CWE-200, CWE-284 | A vulnerability was identified in MingSoft MCMS up to 3.0.6. This impacts an unknown function of the file /mdiy/form/data/list of the component ms-mdiy. The manipulation leads to i |
| CVE-2026-19357 | Deferred | 未確認 | CWE-200, CWE-284 | A security flaw has been discovered in MingSoft MCMS up to 3.0.6. Affected is an unknown function of the file /mdiy/form/get of the component ms-mdiy. The manipulation results in i |
| CVE-2026-19358 | Deferred | 未確認 | CWE-266, CWE-284 | A weakness has been identified in 3CORESec Trapdoor up to 1.2.2. Affected by this vulnerability is the function DefaultFunction. This manipulation causes improper access controls. |
| CVE-2026-19359 | Deferred | 未確認 | CWE-266, CWE-284 | A security vulnerability has been detected in nxp-auto-goldvip gvip up to 1.4.0. Affected by this issue is the function SitewiseCustomFunction of the component Lambda Function Hand |
| CVE-2026-19360 | Deferred | 未確認 | CWE-266, CWE-269 | A vulnerability was detected in wongcyrus ExcelLexBot up to 0.0.3. This affects the function ExcelLexBotS3TriggerFunction of the component Lambda Function Handler. Performing a man |
| CVE-2026-19361 | Deferred | 未確認 | CWE-640 | A flaw has been found in macrozheng mall 0504e86. This vulnerability affects unknown code of the file /sso/getAuthCode of the component mall-portal Module. Executing a manipulation |
| CVE-2026-19362 | Deferred | 未確認 | CWE-404 | A vulnerability has been found in lmammino oidc-authorizer 0.4.0. This issue affects the function parse_token_from_header of the file src/parse_token_from_header.rs of the componen |
| CVE-2026-19363 | Deferred | 未確認 | CWE-200, CWE-532 | A vulnerability was found in lmammino oidc-authorizer up to 0.4.0. Impacted is an unknown function of the file src/handler.rs of the component Lambda Authorizer. The manipulation r |
| CVE-2026-19364 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in itsourcecode Hospital Management System 1.0. The affected element is an unknown function of the file /viewdoctorconsultancycharge.php. This manipu |
| CVE-2026-19365 | Deferred | 未確認 | CWE-22 | A vulnerability was identified in Ichigo3766 image-gen-mcp 0.1.0. The impacted element is an unknown function of the file src/index.ts of the component upscale_images. Such manipul |
| CVE-2026-19366 | Deferred | 未確認 | CWE-22 | A flaw has been found in NocteDefensor LudusMCP up to 1.0.24. Affected is an unknown function of the file src/tools/insertCredsRangeConfig.ts of the component insert_creds_range_co |
| CVE-2026-19367 | Deferred | 未確認 | CWE-918 | A vulnerability has been found in NocteDefensor LudusMCP 1.0.24. Affected by this vulnerability is an unknown functionality of the file src/tools/rangeConfig.ts of the component re |
| CVE-2026-19368 | Deferred | 未確認 | CWE-22 | A vulnerability was found in PV-Bhat gemsuite-mcp 1.0.0. Affected by this issue is some unknown functionality of the file src/handlers/unified-gemini.ts of the component gemini_sea |
| CVE-2026-19369 | Deferred | 未確認 | CWE-918 | A vulnerability was found in KS-GEN-AI jira-mcp-server 0.2.0. This affects the function axios.get of the file src/index.ts of the component add_attachment_from_public_url. The mani |
| CVE-2026-19370 | Deferred | 未確認 | CWE-22 | A vulnerability was determined in bartekke8it56w2 new-mcp 0.1.0. This impacts the function fs.writeFileSync/fs.existsSync/fs.readFileSync of the file index.ts of the component gemi |
| CVE-2026-19371 | Deferred | 未確認 | CWE-22 | A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0. Affected is the function copyFileSync of the file src/tools/utils.ts of the component comfy_upload_image. Su |
| CVE-2026-19372 | Deferred | 未確認 | CWE-22 | A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFileSync of the file src/index.ts of |
| CVE-2026-19373 | Deferred | 未確認 | CWE-918 | A weakness has been identified in PhialsBasement KoboldCPP-MCP-Server 1.0.0. Affected by this issue is the function makeRequest of the file src/index.ts of the component BaseConfig |
| CVE-2026-19374 | Deferred | 未確認 | CWE-918 | A security vulnerability has been detected in adafap api-mcp up to 92b9a5d04acfec165c7d4ef852496593aa87be06. This affects the function customAxios of the file app/api/proxy/route.t |
| CVE-2026-19375 | Deferred | 未確認 | CWE-918 | A vulnerability was detected in dmitriiweb article-scraper-mcp 1.0.0. This vulnerability affects the function fetch_article of the file news_scraper_mcp/server.py. The manipulation |
| CVE-2026-19376 | Deferred | 未確認 | CWE-266, CWE-275 | A vulnerability has been found in Uasoft Badaso 3.0.0-alpha. This vulnerability affects the function ApiRequest::class of the file src/Routes/api.php of the component File API. The |
| CVE-2026-19378 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in code-projects Task Management System 1.0. This issue affects some unknown processing of the file /user/CommentSave.php. The manipulation of the argumen |
| CVE-2026-19379 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was determined in EFM ipTIME AX8004M 15.09.0. Impacted is the function popen of the file /cgi/d.cgi of the component CGI Endpoint. This manipulation of the argument |
| CVE-2026-19380 | Deferred | 未確認 | CWE-664, CWE-911 | A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is the function AdapterState of the component IOCTL Handler. Such manipulation leads to imprope |
| CVE-2026-19381 | Deferred | 未確認 | CWE-266, CWE-269 | A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. The impacted element is an unknown function in the library NTIOLib_KSFX.sys of the componen |
| CVE-2026-19382 | Deferred | 未確認 | CWE-401, CWE-404 | A weakness has been identified in Almico Speedfan 4.52. This affects the function KiSystemCall64 in the library speedfan.sys of the component MSR Index Handler. Executing a manipul |
| CVE-2026-19383 | Deferred | 未確認 | CWE-284, CWE-434 | A security vulnerability has been detected in saithink/saigroup SaiAdmin up to 5.0.1. This impacts the function shell_exec of the file /app/saipackage/install/upload of the compone |
| CVE-2026-19384 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in SourceCodester Simple Doctors Appointment System 1.0. The affected element is an unknown function of the file /admin/ajax.php?action=set_appointme |
| CVE-2026-19385 | Modified | 未確認 | CWE-122 | Heap buffer overflow in PostgreSQL pg_dump of long function transform lists allows an object creator to execute arbitrary code as the operating system user running pg_dump, via a c |
| CVE-2026-19387 | Awaiting Analysis | 未確認 | CWE-787 | A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation of the per-block sam |
| CVE-2026-19389 | Awaiting Analysis | 未確認 | CWE-190 | Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer (asfdemux) when parsing header objects from crafted ASF, WMV, or WM |
| CVE-2026-19391 | Awaiting Analysis | 未確認 | CWE-312 | A flaw was found in insights-core where the password redaction layer fails to recognize credentials not keyed under the literal string 'password'. This allows SSSD LDAP bind passwo |
| CVE-2026-19398 | Deferred | 未確認 | CWE-787 | An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local administrator to cause a system crash (BSOD) or BIOS corruption via a crafted sof |
| CVE-2026-19401 | Analyzed | 未確認 | CWE-400, CWE-617 | Any remote client can crash a (debugging/non-release build type) NSD serve child by sending it a special crafted message with a specially tuned number of DNS Cookie options (17 whe |
| CVE-2026-19404 | Awaiting Analysis | 未確認 | CWE-862 | A flaw was found in 389 Directory Server. The CleanAllRUV and Abort CleanAllRUV replication-maintenance extended operations perform no authorization check, allowing an unauthentica |
| CVE-2026-19406 | Deferred | 未確認 | CWE-200 | The Easy Appointments WordPress plugin before 4.0.1 does not restrict one of its appointment-listing REST endpoints to the records belonging to the requesting user, allowing users |
| CVE-2026-19410 | Awaiting Analysis | 未確認 | CWE-345, CWE-367 | An Incorrect Authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-06-24 on Google Cloud Platform allows a remote attacker to execute un |
| CVE-2026-19411 | Awaiting Analysis | 未確認 | CWE-476 | A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of service attack on a sys |
| CVE-2026-19412 | Deferred | 未確認 | CWE-798 | This vulnerability exists in the CP Plus CP-XR-DE21-S Router due to the presence of hardcoded HTTP Digest authentication credentials in the firmware that are identical across all d |
| CVE-2026-19416 | Deferred | 未確認 | CWE-639 | The KiviCare WordPress plugin before 4.5.4 does not verify that the requesting user owns the appointment being modified, allowing authenticated patient-level users to cancel and r |
| CVE-2026-19417 | Deferred | 未確認 | CWE-639 | The KiviCare WordPress plugin before 4.5.4 does not verify that the requesting user is entitled to the media file being served, allowing authenticated patient-level users to downl |
| CVE-2026-19418 | Deferred | 未確認 | CWE-346, CWE-352 | The referrer enforcement introduced with TYPO3-CORE-SA-2020-006 (CVE-2020-11069) became ineffective in TYPO3 v13.0, where TYPO3 CMS started serving the backend and Install Tool app |
| CVE-2026-19423 | Deferred | 未確認 | CWE-269 | The Ultimate Member WordPress plugin before 2.13.0 does not validate a submitted role selection when it cannot resolve the set of roles a profile form permits, and screens the val |
| CVE-2026-19424 | Deferred | 未確認 | CWE-639 | Chiline Cloud developed by Inventec Appliances has a Insecure Direct Object Reference vulnerability. Unauthenticated remote attackers can modify a specific parameter to read other |
| CVE-2026-19425 | Deferred | 未確認 | CWE-89 | Travel Agency Management System developed by Win Men Intermational has a SQL Injection vulnerability. Unauthenticated remote attackers can inject arbitrary SQL commands to read, mo |
| CVE-2026-19426 | Deferred | 未確認 | CWE-306 | POS System developed by FitSoft has a Missing Authentication vulnerability. Unauthenticated remote attackers can directly access and operate the system. |
| CVE-2026-19429 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-19430 | Deferred | 未確認 | CWE-862 | The Catfolders Document Gallery Pro WordPress plugin before 2.0.7 does not authorise some of its REST API routes, and the token identifying the requested content is forgeable clien |
| CVE-2026-19433 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key in the contact management component in Roskus Prospero Flow CRM before 5.4.8 allows authenticated users of any company to blindly o |
| CVE-2026-19434 | Deferred | 未確認 | CWE-79 | Cross-site Scripting in the finding renderer in maalfer Pentestify before 2.3.1 allows authenticated users to execute arbitrary JavaScript in the application origin via HTML markup |
| CVE-2026-19435 | Deferred | 未確認 | CWE-200 | The Duplicate Post WordPress plugin before 1.5.6 does not check the user's capabilities before returning post data, allowing users with a delegated role to read the content, metada |
| CVE-2026-19437 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow. |
| CVE-2026-19441 | Deferred | 未確認 | CWE-306 | Missing authentication for critical function vulnerability in IKAS Technology Inc. Rush allows Fake the Source of Data. This issue affects Rush: through 21082026. NOTE: The vendo |
| CVE-2026-19442 | Analyzed | 未確認 | CWE-822 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a pointer validation flaw exists in the AIX Virtual SCSI (vSCSI) initiator driver. Successful exploitation may result in denial of |
| CVE-2026-19446 | Analyzed | 未確認 | CWE-400 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 allows a remote unauthenticated attacker can send a crafted UDP packet to a reachable RPC service, resulting in complete system unavai |
| CVE-2026-19447 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fileorbis Informatics Services Trade Inc. FileOrbis allows Stored XSS. This i |
| CVE-2026-19448 | Analyzed | 未確認 | CWE-908 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 A stack memory corruption vulnerability exists in the AIX IPsec ESP decapsulation handler. Successful exploitation may corrupt kernel |
| CVE-2026-19449 | Analyzed | 未確認 | CWE-269 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a vulnerability in cmdnim that may allow an unprivileged local user to executes the payload as root. |
| CVE-2026-19454 | Deferred | 未確認 | CWE-863 | The JetBackup WordPress plugin before 3.1.23.5 does not perform its multisite authorisation check before serving backup archives and job logs, allowing an administrator of the net |
| CVE-2026-19474 | Analyzed | 未確認 | CWE-459, CWE-770 | @fastify/multipart is a multipart form-data parser for Fastify. In versions from 3.0.0 up to but not including 10.1.1, request.saveRequestFiles() can leave completed temporary file |
| CVE-2026-19478 | Analyzed | 未確認 | CWE-94 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain c |
| CVE-2026-19481 | Analyzed | 未確認 | CWE-754 | @fastify/busboy is a multipart form-data parser. In versions 1.0.0 through 3.2.0, an attacker who can submit multipart form-data can crash the parser by sending a part header whose |
| CVE-2026-19483 | Analyzed | 未確認 | CWE-532 | IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 Secrets may be disclosed in log files in IBM Storage Scale Management GUI The admin password is logged into t |
| CVE-2026-19484 | Analyzed | 未確認 | CWE-1322, CWE-835 | @fastify/busboy is a multipart form-data parser. In versions 3.1.0 through 3.2.0, a remote unauthenticated attacker can stall the Node.js event loop by sending a multipart request |
| CVE-2026-19485 | Awaiting Analysis | 未確認 | CWE-330 | A Predictable Resource Name vulnerability in BigQuery Import Staging in Google Cloud Vertex AI Search for Commerce versions prior to 2026-04-27 on Google Cloud Platform allows an a |
| CVE-2026-19487 | Awaiting Analysis | 未確認 | CWE-670 | Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass. The pres |
| CVE-2026-19489 | Awaiting Analysis | 未確認 | CWE-120 | Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 t |
| CVE-2026-19490 | Analyzed | 掲載 | CWE-288 | Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 t |
| CVE-2026-19500 | Deferred | 未確認 | CWE-400 | The Entries component in Brainstorm Force SureForms version, less than 2.12.3, does not enforce adequate limits on user-controlled form fields or submitted content during processin |
| CVE-2026-19501 | Deferred | 未確認 | CWE-1236 | CSV export functionality in Brainstorm Force SureForms version, <= 2.12.1, fails to neutralize spreadsheet formula characters in user-controlled form field names before generating |
| CVE-2026-19502 | Analyzed | 未確認 | CWE-532 | MongoDB SQL Schema Builder CLI records its startup configuration to standard output and, when file logging is enabled, to a log file on disk. Certain connection settings were writt |
| CVE-2026-19503 | Analyzed | 未確認 | CWE-20 | MongoDB Schema Manager and MongoDB Atlas SQL ODBC Driver do not validate the scheme of the authorization and token endpoints returned by an OIDC issuer's discovery document. A user |
| CVE-2026-19505 | Awaiting Analysis | 未確認 | CWE-347 | Improper cryptographic signature verification in `jst_functions.c` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows a remote attacker to bypass authentication and obtain admi |
| CVE-2026-19506 | Awaiting Analysis | 未確認 | CWE-362 | Race condition in `check.jst` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows a remote attacker to gain unauthorized access via concurrent authentication requests that explo |
| CVE-2026-19507 | Awaiting Analysis | 未確認 | CWE-400 | Uncontrolled resource consumption in `check.jst` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows a remote unauthenticated attacker to cause denial of service via excessively |
| CVE-2026-19508 | Awaiting Analysis | 未確認 | CWE-119 | Heap-based buffer overflow in the multipart form-data parser in `jst_post.c` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows a remote unauthenticated attacker to cause memor |
| CVE-2026-19509 | Awaiting Analysis | 未確認 | CWE-20 | Improper input validation in `ajaxSet_wireless_network_configuration.jst` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows an authenticated attacker to cause denial of servic |
| CVE-2026-19516 | Awaiting Analysis | 未確認 | CWE-918 | A caller-supplied X-Grafana-URL request header controls the destination of mcp-grafana's outbound requests, and the grafana_api_request tool lets the caller also choose the HTTP me |
| CVE-2026-19517 | Analyzed | 未確認 | CWE-1284, CWE-770 | Improper Validation of Specified Quantity in Input and Allocation of Resources Without Limits or Throttling vulnerability in Samsung Open Source rlottie allows Excessive Allocation |
| CVE-2026-19518 | Analyzed | 未確認 | CWE-1284 | Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie allows Input Data Manipulation. |
| CVE-2026-19519 | Awaiting Analysis | 未確認 | CWE-617 | A flaw was found in claircore's RPM package scanner. Crafted RPM header data in a container layer can cause an unchecked type assertion to panic the scanner. The panic is not recov |
| CVE-2026-19538 | Analyzed | 未確認 | CWE-290, CWE-672 | The BLOCKED access control list items that are evaluated to deny access on the the proxy protocol port can be bypassed completely when connecting over TCP or TLS and sending the qu |
| CVE-2026-19539 | Deferred | 未確認 | CWE-862 | Authorization Bypass Through User-Controlled Key in the ticket management component in Roskus Prospero Flow CRM before 5.4.9 allows authenticated users of any company to read the f |
| CVE-2026-19546 | Awaiting Analysis | 未確認 | CWE-94 | A flaw was found in DBI. This is a fix for a partial fix for CVE-2026-14380 for RHEL 9.8.z and 10.2.z. For a detailed Statement, Description and Mitigation please reffer to the or |
| CVE-2026-19548 | Modified | 未確認 | CWE-416 | Multiple Use-After-Free vulnerabilities were found in the add_archive_element function in ld/ldmain.c of the GNU linker (ld), a component of binutils. The root cause is that plugin |
| CVE-2026-19550 | Modified | 未確認 | CWE-863 | A flaw was found in FreeIPA. The trust-fetch-domains command is gated by a read-only permission on the trust object rather than a trust-administration permission, allowing an authe |
| CVE-2026-19556 | Analyzed | 未確認 | CWE-416 | Use after free in V8 in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sever |
| CVE-2026-19557 | Analyzed | 未確認 | CWE-416 | Use after free in TabStrip in Google Chrome on Mac prior to 151.0.7922.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escap |
| CVE-2026-19558 | Analyzed | 未確認 | CWE-416 | Use after free in Extensions in Google Chrome prior to 151.0.7922.137 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a s |
| CVE-2026-19559 | Analyzed | 未確認 | CWE-416 | Use after free in HTML in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-19560 | Analyzed | 未確認 | CWE-416 | Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-19561 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-19562 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-19563 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-19565 | Deferred | 未確認 | CWE-341 | Apache::AppSamurai::Util versions through 1.01 for Perl generate predictable session authentication keys from the clock and process id in CreateSessionAuthKey. CreateSessionAuthKe |
| CVE-2026-19566 | Deferred | 未確認 | CWE-1284, CWE-789 | Net::CIDR::Set versions before 0.23 for Perl allow memory exhaustion and malformed set ranges via unbounded IPv6 prefix lengths. The _encode method accepts any prefix length match |
| CVE-2026-19568 | Analyzed | 未確認 | CWE-120 | A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbi |
| CVE-2026-19579 | Analyzed | 未確認 | CWE-639, CWE-807 | Snipe-IT before 8.6.0 contains an authorization bypass (insecure direct object reference) in the asset checkout-request cancellation endpoint. The cancel_by_admin and requestingUse |
| CVE-2026-19582 | Rejected | 未確認 | Rejected reason: Red Hat Product Security has come to the conclusion that this CVE is false due to upstream security policy. | |
| CVE-2026-19586 | Analyzed | 未確認 | CWE-78 | A pre-authentication OS command injection vulnerability has been identified in Omada gateways configured to operate as an OpenVPN Server due to insufficient validation of client-su |
| CVE-2026-19587 | Analyzed | 未確認 | CWE-400 | Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation. |
| CVE-2026-19588 | Analyzed | 未確認 | CWE-680 | Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers. |
| CVE-2026-19589 | Awaiting Analysis | 未確認 | CWE-22 | Packer up to 1.15.4 is vulnerable to an issue in the third-party plugin installer that may allow unintended file system modification and could lead to code execution. A user who in |
| CVE-2026-19594 | Awaiting Analysis | 未確認 | CWE-141, CWE-22 | Insufficient input sanitization in Snowflake Python API (`snowflake.core`) versions prior to 1.13.0 allowed confused-deputy privilege escalation through two related weaknesses: pat |
| CVE-2026-19598 | Deferred | 未確認 | CWE-863 | The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization Bypass in all versions up to, and including, 3.3.9. The vuln |
| CVE-2026-19608 | Awaiting Analysis | 未確認 | CWE-285 | A flaw was found in the group policy provider of Keycloak authorization services, which is used to manage fine-grained access control to resources. The issue occurs when the system |
| CVE-2026-19611 | Awaiting Analysis | 未確認 | CWE-173 | A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII equivalents. A remote att |
| CVE-2026-19613 | Deferred | 未確認 | CWE-200 | The ECS WordPress plugin before 4.3.10 does not perform ownership or post-status checks when one of its dynamic repeater data sources reads custom field values from a user-supplie |
| CVE-2026-19615 | Deferred | 未確認 | CWE-79 | The Admin and Site Enhancements (ASE) WordPress plugin before 9.0.1 does not sanitise uploaded SVG files on every route it accepts them through, allowing users with a role the site |
| CVE-2026-19616 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in TBC Technology Inc. KitLogistic allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects KitLogistic: before v2.2 |
| CVE-2026-19617 | Modified | 未確認 | CWE-770 | A flaw was found in libdm. A local attacker could craft a malicious Logical Volume Manager (LVM) metadata configuration with deeply nested structures. This could lead to uncontroll |
| CVE-2026-19626 | Analyzed | 未確認 | CWE-95 | A remote code execution vulnerability exists in Tenable Security Center's report generation functionality. An authenticated, non-administrative user could exploit this issue by sup |
| CVE-2026-19628 | Analyzed | 未確認 | CWE-78 | A command injection vulnerability exists in Tenable Security Center. An authenticated administrator could modify application configuration values to achieve arbitrary command execu |
| CVE-2026-19629 | Analyzed | 未確認 | CWE-863 | A privilege escalation vulnerability exists in Tenable Security Center that allows a user with "Security Manager" role and "manage user" permission on a single group to modify user |
| CVE-2026-19631 | Analyzed | 未確認 | CWE-89 | A SQL injection vulnerability exists in Security Center that could allow an authenticated administrator to execute arbitrary SQL queries, potentially resulting in unauthorized acce |
| CVE-2026-19632 | Deferred | 未確認 | CWE-640 | The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3 |
| CVE-2026-19635 | Analyzed | 未確認 | CWE-78 | A local privilege escalation vulnerability exists in Security Center. An attacker with write access to a specific configuration file could achieve arbitrary code execution with ele |
| CVE-2026-19636 | Analyzed | 未確認 | CWE-1270 | An issue was identified in which CSRF tokens were generated using a predictable method, potentially reducing their effectiveness as a security control. This has been addressed by i |
| CVE-2026-19639 | Analyzed | 未確認 | CWE-1284 | An improper access control vulnerability exists where an authenticated non-administrative application user could potentially view settings outside of their assigned scope. |
| CVE-2026-19642 | Analyzed | 未確認 | CWE-787 | An out-of-bounds write issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862 might allow a remote authenticated user to cause a crash or heap memory corruption in an ap |
| CVE-2026-19643 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862, on some platforms, might allow a remote authenticated user to crash an application that pro |
| CVE-2026-19650 | Analyzed | 未確認 | CWE-352 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain c |
| CVE-2026-19653 | Analyzed | 未確認 | CWE-400 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to improper handling of memory page table configurations. |
| CVE-2026-19654 | Modified | 未確認 | CWE-125 | A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid i |
| CVE-2026-19656 | Analyzed | 未確認 | CWE-862 | ScadaLTS 2.7.8.1 exposes a server-side method that lacks authorization checks, allowing any authenticated user (including one holding only low-privilege, read-only permissions) to |
| CVE-2026-19657 | Analyzed | 未確認 | CWE-79 | ScadaLTS 2.7.8.1 reflects user-supplied input into an HTML response without sanitization. An unauthenticated attacker who lures a victim into visiting a crafted URL can execute arb |
| CVE-2026-19670 | Awaiting Analysis | 未確認 | CWE-863 | Malcolm's nginx Lua role-based access control (RBAC) layer decides whether an authenticated user may reach a role-restricted path (e.g. /htadmin, /auth, /admin_login, /arkime/api/e |
| CVE-2026-19671 | Awaiting Analysis | 未確認 | CWE-409 | Malcolm's upload-processing pipeline (scripts/safe-extract.py) enforces entry-count, nesting-depth, and total-uncompressed-byte limits when extracting container archives (zip/tar/r |
| CVE-2026-19672 | Awaiting Analysis | 未確認 | CWE-22 | The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and returns to it, such as ../evil/ |
| CVE-2026-19679 | Analyzed | 未確認 | CWE-78 | An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of uploaded filenames could contribute to a downstream command i |
| CVE-2026-19680 | Analyzed | 未確認 | CWE-89 | A SQL injection vulnerability exists in Security Center that could allow an attacker to access unauthorized data from the application's database. |
| CVE-2026-19681 | Analyzed | 未確認 | CWE-78 | An authenticated command injection vulnerability exists in Security Center related to file upload processing. An attacker could exploit this issue by uploading a specially crafted |
| CVE-2026-19682 | Analyzed | 未確認 | CWE-78 | A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker could exploit this issue to execute arbitrary commands on the underlying operat |
| CVE-2026-19683 | Analyzed | 未確認 | CWE-319 | A vulnerability exists in the Dynamic DNS (DDNS) functionality of TP-Link Omada Gateways. During communication with a third-party DDNS service, authentication credentials are trans |
| CVE-2026-19684 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-19685 | Awaiting Analysis | 未確認 | CWE-863 | NetworkManager did not apply the private_user restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 all |
| CVE-2026-19693 | Deferred | 未確認 | CWE-22, CWE-59 | extract-zip through 2.0.1 containment-checks only the parent directory of each archive entry and never the entry's own final path component, so an archive containing two entries wi |
| CVE-2026-19694 | Analyzed | 未確認 | CWE-122 | TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service |
| CVE-2026-19695 | Analyzed | 未確認 | CWE-121 | Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service |
| CVE-2026-19696 | Analyzed | 未確認 | CWE-787 | Ixia IxVeriWave and Vector Informatik BLF file parser crashes in 4.6.0 to 4.6.7 allows denial of service on Windows |
| CVE-2026-19697 | Deferred | 未確認 | CWE-79 | The GutenKit WordPress plugin before 2.5.0 does not sanitise uploaded SVG files on all of the upload paths it enables, allowing users with the file upload capability, such as Auth |
| CVE-2026-19699 | Deferred | 未確認 | CWE-863 | The GutenKit WordPress plugin before 2.5.0 does not have a sufficient capability check on some of its REST API endpoints, allowing users with the Contributor role and above to ret |
| CVE-2026-19702 | Deferred | 未確認 | CWE-78 | Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus Boot Repa |
| CVE-2026-19709 | Deferred | 未確認 | CWE-287 | The Membership For WooCommerce WordPress plugin before 3.1.2 does not check that an API consumer secret has actually been generated before comparing it against the one supplied in |
| CVE-2026-19710 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in SourceCodester Simple Student Information System. Affected by this vulnerability is an unknown functionality of the file app/admin/departments/view_dep |
| CVE-2026-19711 | Deferred | 未確認 | CWE-284 | The Premium Packages WordPress plugin before 7.0.7 does not validate a withdrawal request against the requesting user's actual earned balance, allowing any authenticated user, inc |
| CVE-2026-19712 | Deferred | 未確認 | CWE-79 | The Masteriyo LMS WordPress plugin before 2.3.3 does not sanitise and escape a quiz field before outputting it back in a page, and grants its instructor role the ability to store |
| CVE-2026-19714 | Deferred | 未確認 | CWE-287 | The Simple JWT Login WordPress plugin before 3.6.8 does not validate the audience of the Google identity tokens it accepts, allowing unauthenticated users to authenticate as any u |
| CVE-2026-19715 | Deferred | 未確認 | CWE-200 | The WP OAuth Server ( Login with WordPress ) WordPress plugin before 6.3.1 does not restrict access to the debug log it writes, which is stored at a fixed and publicly reachable lo |
| CVE-2026-19716 | Deferred | 未確認 | CWE-79 | Stored Cross-site Scripting (CWE-79) in the user management component in maalfer Pentestify before 1.1.1 allows an authenticated attacker to execute arbitrary JavaScript in the bro |
| CVE-2026-19717 | Deferred | 未確認 | CWE-200 | The CatFolders Document Gallery & PDF Library WordPress plugin before 2.0.7 does not have authorisation checks in some of its REST API endpoints, allowing unauthenticated users to |
| CVE-2026-19718 | Deferred | 未確認 | CWE-287 | The BlogVault Backup & Staging WordPress plugin before 6.65, MalCare WordPress Security Plugin WordPress plugin before 6.65, The WP Remote WordPress Plugin WordPress plugin before |
| CVE-2026-19722 | Deferred | 未確認 | CWE-22 | The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.133 does not validate the destination of files extracted from a backup package during restoration, allowing hi |
| CVE-2026-19725 | Deferred | 未確認 | CWE-22 | The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.131 does not sanitise a value taken from an unauthenticated request before using it to build a log file path, |
| CVE-2026-19726 | Deferred | 未確認 | CWE-863 | The Visualizer WordPress plugin before 4.0.7 does not properly authorise access to the configuration of its charts, allowing users with the Contributor role and above to read the |
| CVE-2026-19728 | Deferred | 未確認 | CWE-862 | The Extra Product Options Builder for WooCommerce WordPress plugin before 1.2.176 does not verify that the requester is entitled to a customer-uploaded file before serving it, allo |
| CVE-2026-19730 | Awaiting Analysis | 未確認 | CWE-459 | The 'podman quadlet install --replace' command opens the existing destination file with O_CREATE|O_WRONLY but omits O_TRUNC. When the initial reflink copy attempt fails (common on |
| CVE-2026-19734 | Deferred | 未確認 | CWE-639 | Missing Authorization and Authorization Bypass Through User-Controlled Key in the product management component in Roskus Prospero Flow CRM before 5.4.7 allows authenticated users o |
| CVE-2026-19744 | Deferred | 未確認 | CWE-79 | Cross-site Scripting in the Markdown renderer in maalfer Pentestify before 2.3.2 allows authenticated users to execute arbitrary JavaScript in the application origin via a Markdown |
| CVE-2026-19745 | Deferred | 未確認 | CWE-404 | A flaw has been found in Calix GigaSpire 26.1.0. Impacted is an unknown function of the file utilities_configurationsave.cgi of the component Web Management Interface. Executing a |
| CVE-2026-19746 | Deferred | 未確認 | CWE-404 | A vulnerability has been found in Calix GigaSpire 26.1.0. The affected element is an unknown function of the file traceroute.cmd. The manipulation leads to denial of service. The a |
| CVE-2026-19747 | Deferred | 未確認 | CWE-74, CWE-77 | A weakness has been identified in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. This impacts the function CAte::HandleCmd of the f |
| CVE-2026-19748 | Deferred | 未確認 | CWE-330, CWE-331 | A security vulnerability has been detected in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. Affected is the function CWebSessionMa |
| CVE-2026-19749 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was detected in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. Affected by this vulnerability is an unknown functio |
| CVE-2026-19750 | Deferred | 未確認 | CWE-255, CWE-259 | A flaw has been found in Tenda CH, CP and TX3 V21.x/V22.x/V25.x/V26.x/V27.x. Affected by this issue is some unknown functionality of the component SSH. Executing a manipulation can |
| CVE-2026-19751 | Deferred | 未確認 | CWE-918 | A flaw has been found in EnzoVezzaro mcp-dominican-layer up to 39dd373786712650097ad31db27d5c477c8f9c82. The affected element is the function axios.get of the file src/index.ts of |
| CVE-2026-19752 | Deferred | 未確認 | CWE-918 | A vulnerability was found in EnzoVezzaro mcp-dominican-layer up to 39dd373786712650097ad31db27d5c477c8f9c82. This affects the function parse-pdf of the file src/index.ts of the com |
| CVE-2026-19753 | Deferred | 未確認 | CWE-918 | A vulnerability was detected in Model Context Protocol mcp-rdf-explorer 1.0.0. Affected is the function explore_url of the file src/mcp-rdf-explorer/server.py of the component MCP |
| CVE-2026-19755 | Deferred | 未確認 | CWE-862 | NoSleep 1.5.1 exposes a privileged XPC Mach service and accepts raw dictionary messages containing attacker-controlled command and NSBundlePath values.This issue affects NoSleep: 1 |
| CVE-2026-19756 | Deferred | 未確認 | CWE-22 | A vulnerability has been found in Dromara lamp-cloud up to 5.10.0. This affects an unknown part of the file DefGenProjectController.java of the component Code Generator. Such manip |
| CVE-2026-19757 | Deferred | 未確認 | CWE-22 | A vulnerability was found in Dromara lamp-cloud up to 5.10.0. This vulnerability affects unknown code of the file FileAnyoneController.java of the component File-Upload Controller. |
| CVE-2026-19758 | Deferred | 未確認 | CWE-22 | A vulnerability was determined in dromara lamp-cloud up to 5.10.0. This issue affects some unknown processing of the file FileChunkController.java of the component chunk-check endp |
| CVE-2026-19760 | Deferred | 未確認 | CWE-79 | The WP Fastest Cache – WordPress Cache Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTTP Host Header in all versions up to, and including, 1.5.0 due |
| CVE-2026-19761 | Deferred | 未確認 | CWE-22 | A vulnerability has been found in DTStack Taier 1.4.0. Affected is the function MultipartFile.getOriginalFilename of the file UploadController.java of the component Upload Controll |
| CVE-2026-19762 | Deferred | 未確認 | CWE-22 | A vulnerability was found in DTStack Taier 1.4.0. Affected by this vulnerability is the function Paths.ge of the file FileChunkController.java of the component Chunk-Check Endpoint |
| CVE-2026-19763 | Deferred | 未確認 | CWE-22 | A vulnerability was determined in DTStack Taier 1.4.0. Affected by this issue is the function FileUtils.deleteDirectory of the file ClusterController.java of the component Cluster |
| CVE-2026-19764 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in Raisecom Communication Command and Dispatch Management Platform up to 7.6.5. This affects an unknown part of the file /app/users/getpwd.php. Such |
| CVE-2026-19765 | Deferred | 未確認 | CWE-918 | A security flaw has been discovered in eyaushev swagger-testcase-mcp 5babb27c951fb404bc2b25ec80593616e49054e5. This vulnerability affects the function loadSource of the file src/ut |
| CVE-2026-19767 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in itsourcecode Hospital Management System 1.0. This issue affects some unknown processing of the file viewdoctortimings.php. Executing a manipulatio |
| CVE-2026-19768 | Awaiting Analysis | 未確認 | CWE-94 | Improper control of generation of code ('Code Injection') in the settings feature in Devolutions PowerShell Universal 2026.2.3 and earlier allows an authenticated user with setting |
| CVE-2026-19770 | Deferred | 未確認 | CWE-918 | A vulnerability was identified in feedmob fm-mcp-servers 0.0.3. Affected by this vulnerability is the function downloadReport of the file src/smadex-reporting/src/index.ts of the c |
| CVE-2026-19771 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in Baicells EG3661M BaiCE_BQ6_2.0.5.3_NA. This impacts an unknown function of the file /cgi-bin/luci of the component LuCI Web Interface. Such manipu |
| CVE-2026-19782 | Deferred | 未確認 | CWE-200 | The WPS Bidouille WordPress plugin before 1.33.5 does not have proper authorisation checks in an AJAX action, allowing any authenticated user, such as a subscriber, to retrieve the |
| CVE-2026-19783 | Analyzed | 未確認 | CWE-787 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause kernel memory corruption due to insufficient validation. A crafted filesystem image can trigger |
| CVE-2026-19784 | Deferred | 未確認 | CWE-285, CWE-639 | A flaw has been found in francoisjacquet RosarioSIS up to 12.8. This affects the function DBUpdate of the file Discipline/Referrals.php. This manipulation causes authorization bypa |
| CVE-2026-19785 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in francoisjacquet RosarioSIS up to 12.7.4. This vulnerability affects unknown code of the file modules/Students/includes/Medical.inc.php of the comp |
| CVE-2026-19786 | Deferred | 未確認 | CWE-352, CWE-862 | A vulnerability was found in francoisjacquet RosarioSIS up to 12.8. This issue affects some unknown processing of the file Modules.php. Performing a manipulation results in cross-s |
| CVE-2026-19787 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in SourceCodester Air Cargo Management System 1.0. Impacted is an unknown function of the file /classes/Master.php?f=save_cargo_type. Executing a man |
| CVE-2026-19788 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was found in Tenda AC1206 15.03.06.23_multi_TD01. This affects the function set_device_name of the file /goform/SetOnlineDevName of the component httpd web manageme |
| CVE-2026-19789 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was determined in Tenda AC1206 15.03.06.23_multi_TD01. This vulnerability affects the function set_wl_guest_iplist of the file /goform/WifiGuestSet of the component |
| CVE-2026-19790 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was identified in Tenda G0 up to 20260625. This issue affects the function formSetPortMirror of the file /goform/module of the component httpd Web Management Interf |
| CVE-2026-19791 | Deferred | 未確認 | CWE-119, CWE-121 | A weakness has been identified in Tenda G0 up to 20260625. The affected element is the function addStaticRoute of the file /goform/module of the component httpd web management inte |
| CVE-2026-19792 | Deferred | 未確認 | CWE-119, CWE-120 | A security flaw has been discovered in Tenda G0 up to 20260625. Impacted is the function setPortMapping of the file /goform/module of the component httpd web management interface. |
| CVE-2026-19794 | Deferred | 未確認 | CWE-79 | The WP-Stats plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.56 due to insufficient input sanitization and output escaping |
| CVE-2026-19801 | Deferred | 未確認 | CWE-862 | The BetterLinks – Link Shortener, Link Cloaking, Redirects, Affiliate Link Manager & MCP plugin for WordPress is vulnerable to authorization bypass in all versions up to, and inclu |
| CVE-2026-19811 | Deferred | 未確認 | CWE-119, CWE-121 | A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137_B20200730. The impacted element is the function setIpQosRules of the file /cgi-bin/cstecgi.cgi of the component f |
| CVE-2026-19812 | Deferred | 未確認 | CWE-119, CWE-121 | A weakness has been identified in TOTOLINK A800R 4.1.2cu.5137_B20200730. This affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi of the component product.so. |
| CVE-2026-19813 | Deferred | 未確認 | CWE-119, CWE-121 | A security vulnerability has been detected in TOTOLINK A800R 4.1.2cu.5137_B20200730. This impacts the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component f |
| CVE-2026-19814 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in TOTOLINK A800R 4.1.2cu.5137_B20200730. Affected is the function setMacQos of the file /cgi-bin/cstecgi.cgi of the component firewall.so. Performing |
| CVE-2026-19815 | Deferred | 未確認 | CWE-119, CWE-121 | A flaw has been found in TOTOLINK A800R 4.1.2cu.5137_B20200730. Affected by this vulnerability is the function setParentalRules of the file /cgi-bin/cstecgi.cgi of the component fi |
| CVE-2026-19821 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was determined in Tenda AC12 15.03.06.23_multi_TD01. This vulnerability affects the function formSetRebootTimer of the file /goform/SetSysAutoRebbotCfg of the compo |
| CVE-2026-19822 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was identified in Tenda W20E 15.11.0.6(1068_1546_841)_CN_TDC. This issue affects the function lstAdd of the file /goform/editQos of the component QoS Edit. Such man |
| CVE-2026-19823 | Deferred | 未確認 | CWE-119, CWE-121 | A security flaw has been discovered in Tenda W20E 15.11.0.6(1068_1546_841)_CN_TDC. Impacted is the function formQOSRuleDel of the file /goform/delQos of the component QoS Rule Dele |
| CVE-2026-19824 | Deferred | 未確認 | CWE-119, CWE-121 | A weakness has been identified in Tenda W20E 15.11.0.6(1068_1546_841)_CN_TDC. The affected element is the function ipMacBindListStore of the file /goform/addIpMacBind. Executing a |
| CVE-2026-19825 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in SourceCodester Simple Client Management System 1.0. The impacted element is an unknown function of the file /classes/Master.php?f=save |
| CVE-2026-19826 | Deferred | 未確認 | CWE-20, CWE-502 | A vulnerability was detected in alldatacenter alldata up to 0.6.8. This affects the function Hessian2Input.readObject of the file /serialize/impl/HessianSerializer.java of the comp |
| CVE-2026-19827 | Deferred | 未確認 | CWE-22 | A flaw has been found in alldatacenter alldata up to 0.6.8. This impacts the function FileInputStream of the file /admin/controller/JobLogController.java of the component logDetail |
| CVE-2026-19828 | Deferred | 未確認 | CWE-22 | A vulnerability was identified in 648540858 wvp-GB28181-pro 2.7.4-20260107. This affects an unknown part of the file PlayController.java of the component Snapshot Endpoint. The man |
| CVE-2026-19829 | Deferred | 未確認 | CWE-22 | A security flaw has been discovered in 648540858 wvp-GB28181-pro 2.7.4-20260107. This vulnerability affects unknown code of the file LogController.java of the component Log File Do |
| CVE-2026-19830 | Deferred | 未確認 | CWE-400, CWE-770 | A vulnerability was found in TRENDnet TEW-816DRM GURNC4.OT182B-C-TN-R1B028-US.EN. This impacts an unknown function of the file /etc/bftpd.conf of the component bftpd. The manipulat |
| CVE-2026-19834 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was determined in Webkul Bagisto up to 2.4.4. Affected is an unknown function of the file /admin/customers/login-as-customer/ of the component Admin Customer Impers |
| CVE-2026-19835 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability was identified in Webkul Bagisto up to 2.4.4. Affected by this vulnerability is an unknown functionality of the component Customer Item Deletion Endpoint. Such mani |
| CVE-2026-19836 | Deferred | 未確認 | CWE-285, CWE-639 | A security flaw has been discovered in Webkul Bagisto up to 2.4.4. Affected by this issue is some unknown functionality of the file /admin/customers/view of the component Backend C |
| CVE-2026-19837 | Deferred | 未確認 | CWE-200, CWE-284 | A weakness has been identified in Webkul Bagisto up to 2.4.4. This affects an unknown part of the file /admin/customers/search of the component Customer Search. Executing a manipul |
| CVE-2026-19838 | Deferred | 未確認 | CWE-285, CWE-639 | A security vulnerability has been detected in Webkul Bagisto up to 2.4.4. This vulnerability affects unknown code of the file /admin/reporting/sales/ of the component Backend Repor |
| CVE-2026-19839 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was detected in SourceCodester Simple Doctors Appointment System 1.0. This issue affects the function save_doctor of the file /save_file.php. The manipulation resul |
| CVE-2026-19841 | Deferred | 未確認 | CWE-266, CWE-276 | A flaw has been found in TRENDNET TEW-813DRU 1.01b01. Impacted is an unknown function of the file /etc/vsftpd.conf of the component vsftpd. This manipulation causes incorrect defau |
| CVE-2026-19842 | Deferred | 未確認 | CWE-287 | The SAML Single Sign On WordPress plugin before 5.4.7 does not verify the signature of a SAML response before storing the certificate it carries, and offers an administrator a one |
| CVE-2026-19844 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was found in TOTOLINK A800R 4.1.2cu.5137_B20200730. The impacted element is the function setRadvdCfg of the file /cgi-bin/cstecgi.cgi of the component ipv6.so. Perf |
| CVE-2026-19845 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was determined in TOTOLINK A800R 4.1.2cu.5137_B20200730. This affects the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi of the component lan.so. Exe |
| CVE-2026-19846 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was identified in TOTOLINK A800R 4.1.2cu.5137_B20200730. This impacts the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. |
| CVE-2026-19847 | Deferred | 未確認 | CWE-119, CWE-121 | A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137_B20200730. Affected is the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the component wps.so. Th |
| CVE-2026-19848 | Deferred | 未確認 | CWE-74 | The ProfilePress WordPress plugin before 4.17.1 does not strip shortcodes from two of its profile fields before rendering them on public pages, allowing unauthenticated attackers t |
| CVE-2026-19851 | Awaiting Analysis | 未確認 | CWE-1393 | A Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to gain access to user accounts created during XML import |
| CVE-2026-19852 | Deferred | 未確認 | CWE-434 | NewSiteServer (NSS) developed by CyberTutor has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload arbitrary files, including malicious HTML files, |
| CVE-2026-19853 | Deferred | 未確認 | CWE-306 | NewSiteServer (NSS) developed by CyberTutor has a Missing Authentication vulnerability. Unauthenticated remote attackers can exploit a specific functionality to send emails to anyo |
| CVE-2026-19854 | Awaiting Analysis | 未確認 | CWE-319 | When the ClickHouse plugin uses Native protocol (the default) with PDC or secure SOCKS, it asks for TLS but the connection library ignores that and talks to ClickHouse in the clear |
| CVE-2026-19869 | Awaiting Analysis | 未確認 | CWE-639 | @neo4j/graphql from 5.2.0 until the patched versions fails to enforce field-level @authentication rules on root custom-resolver fields when a type-level @authentication rule is als |
| CVE-2026-19870 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key in the payroll module in Roskus Prospero Flow CRM before 5.15.10 allows authenticated users holding the read payroll permission to |
| CVE-2026-19871 | Deferred | 未確認 | CWE-798 | Use of Hard-coded Credentials in the human resources component in Roskus Prospero Flow CRM before 5.15.9 allows unauthenticated remote attackers to authenticate as any employee onb |
| CVE-2026-19873 | Deferred | 未確認 | CWE-1284, CWE-770 | HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elements. When a Repeatable element has cou |
| CVE-2026-19874 | Deferred | 未確認 | CWE-122 | A heap-based buffer overflow vulnerability exists in Konami's Metal Gear Online 3, originating from improper validation of lobby data fields related to kicked players. The affected |
| CVE-2026-19875 | Analyzed | 未確認 | CWE-306 | IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to overwrite administrator email information and abuse the server as an outbound relay due to missing authentica |
| CVE-2026-19879 | Awaiting Analysis | 未確認 | CWE-681 | A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The `writeString()` method performs a silent narrowing cast from 16-bit Unicode characte |
| CVE-2026-19880 | Deferred | 未確認 | CWE-22 | Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java (logback-classic module) allows path-traversal vulnerability. More specifically, an MDC-based discriminator val |
| CVE-2026-19883 | Deferred | 未確認 | CWE-269 | The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on th |
| CVE-2026-19884 | Awaiting Analysis | 未確認 | CWE-15, CWE-829 | In Eclipse Theia versions up to and including 1.69.0, opening a folder starts source control integration without requiring the user to trust the folder first. This affects applicat |
| CVE-2026-19889 | Awaiting Analysis | 未確認 | CWE-918 | GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.9.0 to 19.0.12, 19.1 to 19.1.7, and 19.2 to 19.2.2 that co |
| CVE-2026-19891 | Deferred | 未確認 | CWE-310, CWE-311 | A vulnerability was determined in TRENDnet TEW-WLC100 2.05b02. This affects an unknown function of the file /etc/racoon.conf of the component IKE Phase 1 Aggressive Mode. This mani |
| CVE-2026-19892 | Deferred | 未確認 | CWE-862 | The InfusedWoo Pro plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 5.1.17. This is due to a missing capability |
| CVE-2026-19893 | Deferred | 未確認 | CWE-266, CWE-276 | A vulnerability was identified in D-Link DIR-842 2.01.B04. This impacts an unknown function of the file /etc/vsftpd.conf of the component vsftpd. Such manipulation leads to incorre |
| CVE-2026-19894 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewmedicine.php. Performing a manipulation of the |
| CVE-2026-19895 | Deferred | 未確認 | CWE-307, CWE-799 | A vulnerability was detected in opensourcepos Open Source Point of Sale up to 3.4.2. This affects the function Login::index of the file app/Config/Filters.php of the component Logi |
| CVE-2026-19896 | Deferred | 未確認 | CWE-310, CWE-330 | A flaw has been found in mangroup dtale up to 3.22.0. This vulnerability affects the function build_secret_key of the file dtale/app.py of the component Flask Session Cookie. This |
| CVE-2026-19897 | Deferred | 未確認 | CWE-307, CWE-799 | A vulnerability has been found in mangroup dtale up to 3.22.0. This issue affects the function Login of the file dtale/auth.py of the component Login Endpoint. Such manipulation le |
| CVE-2026-19898 | Deferred | 未確認 | CWE-307, CWE-799 | A vulnerability was found in VictoriaMetrics up to 1.146.0. Impacted is the function requestHandler of the file app/vmauth/main.go of the component VMAuth Authentication Endpoint. |
| CVE-2026-19899 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. The affected element is an unknown function of the file /edit_teacher.php. Executing a manip |
| CVE-2026-19900 | Deferred | 未確認 | CWE-259, CWE-798 | A vulnerability was identified in LB-LINK X-PRO 1.0.22-20231206. The impacted element is an unknown function of the file /etc/shadow. The manipulation leads to hard-coded credentia |
| CVE-2026-19901 | Deferred | 未確認 | CWE-259, CWE-798 | A security flaw has been discovered in LB-LINK X-PRO 1.0.22-20231206. This affects an unknown function of the file /etc/config/easycwmp. The manipulation results in hard-coded cred |
| CVE-2026-19903 | Deferred | 未確認 | CWE-425, CWE-552 | A vulnerability has been found in SourceCodester Online Clothing Store 1.0. This affects an unknown part of the file /db/shopping.sql of the component SQL Database Backup. The mani |
| CVE-2026-19904 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in SourceCodester Online Book Store System 1.0. This vulnerability affects unknown code of the file /admin/index.php?page=site_settings of the component S |
| CVE-2026-19905 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in Jinher OA 1.0. Impacted is an unknown function of the file /C6/JHSoft.Web.HrmAttendance/attendance_out_approve.aspx. This manipulation of the argu |
| CVE-2026-19906 | Deferred | 未確認 | CWE-330, CWE-331 | A weakness has been identified in pkp pkp-lib 3.3.0/3.4.0/3.5.0. This vulnerability affects the function setData of the file classes/user/form/APIProfileForm.php of the component A |
| CVE-2026-19908 | Deferred | 未確認 | CWE-306 | PAX Technology Q80 XCB Daemon Missing Authentication Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information and modify configuration |
| CVE-2026-19909 | Deferred | 未確認 | CWE-59 | PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected i |
| CVE-2026-19910 | Deferred | 未確認 | CWE-347 | PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrar |
| CVE-2026-19912 | Awaiting Analysis | 未確認 | CWE-20, CWE-22 | The Kaltura HTML5 player (mwEmbed / html5lib) contains an unauthenticated remote code execution vulnerability caused by unsafe data deserialization and unsanitized filesystem path |
| CVE-2026-19913 | Awaiting Analysis | 未確認 | CWE-20, CWE-73 | The Kaltura HTML5 player (mwEmbed / html5lib) contains a local file disclosure vulnerability due to improper validation of the ServiceUrl parameter in mwEmbedLoader.php. This param |
| CVE-2026-19916 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in code-projects Online Food Order System 1.0. The affected element is an unknown function of the file edit_food_items.php. Performing a manipulation o |
| CVE-2026-19917 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in code-projects Online Food Order System 1.0. The impacted element is an unknown function of the file delete_food_items1.php. Executing a manipulation of the |
| CVE-2026-19918 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability has been found in SpaceX Starlink Router Gen 3 2025.11.14.mr64708.3. This affects the function get_status of the component gRPC Management Interface. The manipulati |
| CVE-2026-19919 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in code-projects Online Shopping System 1.0. This impacts an unknown function of the file /login.php of the component Login. The manipulation of the argum |
| CVE-2026-19920 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in code-projects Online Shopping System 1.0. Affected is an unknown function of the file /action.php. This manipulation of the argument proId causes |
| CVE-2026-19921 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /homeaction.php. Such manipulatio |
| CVE-2026-19922 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in code-projects Online Shopping System 1.0. Affected by this issue is some unknown functionality of the file /checkout.php. Performing a manipu |
| CVE-2026-19923 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in code-projects Online Shopping System 1.0. This affects an unknown part of the file /checkout_process.php. Executing a manipulation of the argument |
| CVE-2026-19924 | Deferred | 未確認 | CWE-287 | A security vulnerability has been detected in Tenda AC10 16.03.10.09_multi_TDE01. This vulnerability affects the function R7WebsSecurityHandler of the component httpd. The manipula |
| CVE-2026-19925 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=delete_supplier. The manipu |
| CVE-2026-19926 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in Evergreen up to 3.14.11/3.15.11/3.16.5/3.17-beta1. The affected element is an unknown function of the file /osrf-gateway-v1 of the component open- |
| CVE-2026-19927 | Deferred | 未確認 | CWE-918 | A vulnerability was found in OpenBoxes up to 0.9.7. The impacted element is the function Upload of the file grails-app/controllers/org/pih/warehouse/product/ProductController.groov |
| CVE-2026-19928 | Deferred | 未確認 | CWE-266, CWE-269 | A vulnerability was determined in OpenBoxes up to 0.9.7. This affects the function needManager of the file grails-app/controllers/org/pih/warehouse/RoleInterceptor.groovy of the co |
| CVE-2026-19929 | Deferred | 未確認 | CWE-1336, CWE-791 | A vulnerability was identified in OpenBoxes up to 0.9.6. This impacts the function buildZebraTemplate of the file grails-app/controllers/org/pih/warehouse/core/DocumentController.g |
| CVE-2026-19930 | Deferred | 未確認 | CWE-74, CWE-90 | A security flaw has been discovered in Dolibarr up to 23.0.3. Affected is an unknown function of the file htdocs/user/card.php of the component User Cloning. The manipulation of th |
| CVE-2026-19932 | Deferred | 未確認 | CWE-74, CWE-94 | A security flaw has been discovered in DefaultFuction Notice-System-Managent 2.0. This issue affects the function GroovyShell.evaluate of the file /execute of the component NoticeC |
| CVE-2026-19933 | Deferred | 未確認 | CWE-119, CWE-121 | A weakness has been identified in DefaultFuction Customer-Relationship-Management-In-C-Project 2.0. Impacted is the function gets of the component Customer Search Module. This mani |
| CVE-2026-19934 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /vieworder.php. The manipulation of the argument delid l |
| CVE-2026-19942 | Deferred | 未確認 | CWE-22 | The Atarim – AI Agency for WordPress: Edit Pages, Fix Code, Update Plugins, SEO & Client Feedback plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient |
| CVE-2026-19943 | Deferred | 未確認 | CWE-79 | The Gutenverse – WordPress Blocks, Page Builder & Site Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'titleTag' Block Attribute in all versions up to |
| CVE-2026-19949 | Deferred | 未確認 | CWE-89 | The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to SQL Injection via archive restore functionality in all versions up to, and including, 7.109 due to insu |
| CVE-2026-19953 | Deferred | 未確認 | CWE-1289 | URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep. nameprep lowercases each host label but performs |
| CVE-2026-19955 | Deferred | 未確認 | CWE-119, CWE-125 | A vulnerability was detected in TrailDB 0.6. Impacted is the function tdb_open of the file /src/tdb.c of the component TOC Validation. The manipulation results in out-of-bounds rea |
| CVE-2026-19956 | Deferred | 未確認 | CWE-918 | A vulnerability has been found in gomarble-ai facebook-ads-mcp-server 0.1.0. The impacted element is the function fetch_pagination_url of the file server.py. Such manipulation lead |
| CVE-2026-19957 | Deferred | 未確認 | CWE-918 | A vulnerability was identified in graphlit graphlit-mcp-server 1.0.1. This affects the function fetch of the file src/tools.ts of the component ssrf-test Endpoint. Such manipulatio |
| CVE-2026-19958 | Deferred | 未確認 | CWE-74, CWE-94 | A security flaw has been discovered in iatsiuk pptr-mcp up to 0.2.7. The impacted element is the function executeCode of the file src/vm-executor.ts of the component execute Tool. |
| CVE-2026-19959 | Deferred | 未確認 | CWE-119, CWE-121 | A weakness has been identified in Edimax EW-7478APC 1.04. This affects the function formWanTcpipSetup of the file /goform/formWanTcpipSetup. This manipulation of the argument pppUs |
| CVE-2026-19960 | Deferred | 未確認 | CWE-74, CWE-77 | A security vulnerability has been detected in Edimax EW-7478APC 1.04. This impacts the function formWlbasic of the file /goform/formWlbasic. Such manipulation of the argument rootA |
| CVE-2026-19961 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was detected in Edimax EW-7478APC 1.04. Affected is the function formWlSiteSurvey of the file /goform/formWlSiteSurvey. Performing a manipulation of the argument se |
| CVE-2026-19962 | Deferred | 未確認 | CWE-74, CWE-77 | A flaw has been found in Edimax EW-7478APC 1.04. Affected by this vulnerability is the function setWAN of the file /goform/setWAN. Executing a manipulation of the argument pppUserN |
| CVE-2026-19963 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability has been found in Edimax EW-7478APC 1.04. Affected by this issue is the function stainfo of the file /goform/stainfo. The manipulation of the argument interface lea |
| CVE-2026-19964 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability was found in Jij-Inc Jij-MCP-Server 0.1.0. This affects the function PythonREPL.run of the file jij_mcp/python_repr.py of the component jm_check. The manipulation o |
| CVE-2026-19965 | Deferred | 未確認 | CWE-203, CWE-204 | A vulnerability was determined in automad up to 2.0.0-beta.32. This vulnerability affects the function requestPasswordResetToken of the file automad/src/server/Controllers/API/User |
| CVE-2026-19966 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was identified in CodeCanyon TimeCamp Integration for CRM up to 2.8. This issue affects some unknown processing of the file /clients/save_contact of the component C |
| CVE-2026-19967 | Deferred | 未確認 | CWE-119, CWE-122 | A security flaw has been discovered in Open Asset Import Library Assimp 17c12da. Impacted is the function Assimp::Compression::decompressBlock of the file code/Common/Compression.c |
| CVE-2026-19968 | Deferred | 未確認 | CWE-119, CWE-122 | A weakness has been identified in Open Asset Import Library Assimp 17c12da. The affected element is the function Assimp::MDLImporter::ReadFaces_3DGS_MDL7 in the library code/AssetL |
| CVE-2026-19969 | Deferred | 未確認 | CWE-119, CWE-120 | A security vulnerability has been detected in Open Asset Import Library Assimp 17c12da. The impacted element is the function Assimp::MDLImporter::GenerateOutputMeshes_3DGS_MDL7 of |
| CVE-2026-19970 | Deferred | 未確認 | CWE-119, CWE-122 | A vulnerability was detected in Open Asset Import Library Assimp 17c12da. This affects the function Assimp::MDLImporter::AddBonesToNodeGraph_3DGS_MDL7 of the file code/AssetLib/MDL |
| CVE-2026-19971 | Deferred | 未確認 | CWE-287, CWE-306 | A flaw has been found in LB-Link WR1210M 1.0.3. This impacts the function main of the file /www/cgi-bin/backup.cgi of the component Backup Endpoint. This manipulation causes missin |
| CVE-2026-19972 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewpatient.php. Such manipulation of the argument delid |
| CVE-2026-19973 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewpaymentreport.php. Performing |
| CVE-2026-19974 | Deferred | 未確認 | CWE-287 | A security flaw has been discovered in treefrogframework treefrog-framework up to 2.11.2. This vulnerability affects the function std::strncmp of the file src/tsessioncookiestore.c |
| CVE-2026-19975 | Deferred | 未確認 | CWE-362, CWE-367 | A weakness has been identified in Azuriom CMS up to 1.2.12. This issue affects the function transferMoney of the file app/Http/Controllers/ProfileController.php of the component Mo |
| CVE-2026-19976 | Deferred | 未確認 | CWE-74, CWE-77 | A security vulnerability has been detected in COMFAST CF-N1-S 2.6.0.1. Impacted is the function sub_44A968 of the file /cgi-bin/mbox-config?method=SET§ion=ptest_macaddress. Suc |
| CVE-2026-19977 | Deferred | 未確認 | CWE-287 | A vulnerability was detected in EFM ipTIME A3004T 14.19.0. The affected element is the function httpcon_check_session_url of the component Session Validation. Performing a manipula |
| CVE-2026-19978 | Deferred | 未確認 | CWE-77, CWE-78 | A flaw has been found in jiantao88 android-mcp-server up to cfb872b2446794193b58edd63f4dbf6af48a6292. The impacted element is the function child_process.exec of the file build/inde |
| CVE-2026-19979 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was identified in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, MT2500, MT3000, MT3600BE, MT5000, MT6000, X2000, X3000 and XE3000 |
| CVE-2026-19980 | Deferred | 未確認 | CWE-74, CWE-94 | A security flaw has been discovered in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, MT2500, MT3000, MT3600BE, MT5000, MT6000, X2000, X3000 and XE |
| CVE-2026-19981 | Deferred | 未確認 | CWE-77, CWE-78 | A weakness has been identified in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, MT2500, MT3000, MT3600BE, MT5000, MT6000, X2000, X3000 and XE3000 |
| CVE-2026-19982 | Deferred | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in GL.iNet BE9300 and MT6000 4.8.x. This vulnerability affects unknown code of the component Firewall-management RPC. The manipulation of |
| CVE-2026-19983 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was detected in GL.iNet A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000 and XE3000 4.8.x. This issue affects some unknown processing of the file /usr/bin/gl_n |
| CVE-2026-19984 | Deferred | 未確認 | CWE-918 | A flaw has been found in jkawamoto mcp-florence2 up to 0.3.13. Affected by this issue is the function get_images of the file src/mcp_florence2/__init__.py. This manipulation of the |
| CVE-2026-19986 | Deferred | 未確認 | CWE-266, CWE-285 | A weakness has been identified in Adblock for Youtube Extension up to 7.2.1 on Chrome. The impacted element is the function updateDynamicRules of the file contentscript.js of the c |
| CVE-2026-19987 | Deferred | 未確認 | CWE-548, CWE-552 | A security vulnerability has been detected in SourceCodester Best Employee Management System 1.0. This affects an unknown function of the file /assets/uploadImage/Profile/. Such ma |
| CVE-2026-19988 | Deferred | 未確認 | CWE-74, CWE-80 | A vulnerability was detected in Alaev SEO Tools Extension up to 1.0.10 on Chrome. This impacts the function addDiv of the file src/popup.html of the component Popup UI. Performing |
| CVE-2026-19992 | Deferred | 未確認 | CWE-200, CWE-284 | A flaw has been found in Orange View Limited DualSafe Password Manager & Digital Vault Extension up to 1.4.35 on Chrome. Affected is an unknown function of the component postMessag |
| CVE-2026-19993 | Deferred | 未確認 | CWE-840, CWE-841 | A vulnerability has been found in Webkul Bagisto up to 2.4.4. Affected by this vulnerability is an unknown functionality of the file /customer/account/rma/update-status of the comp |
| CVE-2026-19994 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was found in Webkul Bagisto up to 2.4.4. Affected by this issue is some unknown functionality of the file /admin/configuration/cache-management/execute of the compo |
| CVE-2026-19995 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in Webkul Bagisto up to 2.4.4. This affects an unknown part of the file /customer/account/rma/send-message of the component RMA Message Handler. This |
| CVE-2026-19996 | Deferred | 未確認 | CWE-266, CWE-269 | A vulnerability was identified in Webkul Bagisto up to 2.4.4. This vulnerability affects unknown code of the file /admin/customers of the component Backend Customer Behavior Data E |
| CVE-2026-19997 | Deferred | 未確認 | CWE-285, CWE-639 | A security flaw has been discovered in Webkul Bagisto up to 2.4.4. This issue affects some unknown processing of the file /admin/sales/rma/requests of the component Backend Sales R |
| CVE-2026-19998 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in code-projects Online Shopping System 1.0. Impacted is an unknown function of the file offersmail.php. Executing a manipulation of the argument ema |
| CVE-2026-19999 | Deferred | 未確認 | CWE-119, CWE-120 | A security vulnerability has been detected in Open Asset Import Library Assimp Assimp 17c12da. The affected element is the function Assimp::MDLImporter::ParseBoneTrafoKeys_3DGS_MDL |
| CVE-2026-20000 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /viewprescriptionrecord.php. The manipulation o |
| CVE-2026-20028 | Awaiting Analysis | 未確認 | CWE-266 | A vulnerability in the network driver of Cisco Terminal Service (TS) Agent could allow an authenticated, remote attacker to bypass firewall rules that are associated with the accou |
| CVE-2026-20030 | Awaiting Analysis | 未確認 | CWE-89 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This r |
| CVE-2026-20124 | Analyzed | 未確認 | CWE-772 | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to rel |
| CVE-2026-20177 | Awaiting Analysis | 未確認 | CWE-770 | A vulnerability in the handling of management plane packets by Cisco Industrial Ethernet (IE) 1000 Series Switches could allow an unauthenticated, remote attacker to cause the |
| CVE-2026-20198 | Awaiting Analysis | 未確認 | CWE-79 | A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to conduct a cross-site scriptin |
| CVE-2026-20200 | Analyzed | 未確認 | CWE-141 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with low privileges to execute arbitrary commands on the underlying |
| CVE-2026-20231 | Awaiting Analysis | 未確認 | CWE-74 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. |
| CVE-2026-20232 | Awaiting Analysis | 未確認 | CWE-80 | A vulnerability in the web-based management interface of Cisco Industrial Ethernet (IE) 1000 Series Switches could allow an authenticated, remote attacker to conduct a stored cross |
| CVE-2026-20263 | Analyzed | 未確認 | CWE-388 | A vulnerability in the Blocks Extensible Exchange Protocol (BEEP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS |
| CVE-2026-20267 | Modified | 未確認 | CWE-284 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. |
| CVE-2026-20268 | Modified | 未確認 | CWE-119 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. |
| CVE-2026-20269 | Modified | 未確認 | CWE-664 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. |
| CVE-2026-20270 | Modified | 未確認 | CWE-682 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. |
| CVE-2026-20271 | Modified | 未確認 | CWE-691 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. |
| CVE-2026-20272 | Modified | 未確認 | CWE-74 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. |
| CVE-2026-20273 | Analyzed | 未確認 | CWE-20 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. |
| CVE-2026-20288 | Analyzed | 未確認 | CWE-146 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with Admin privileges to execute arbitrary commands on the und |
| CVE-2026-20289 | Analyzed | 未確認 | CWE-532 | A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information. This vulnerability is |
| CVE-2026-20294 | Awaiting Analysis | 未確認 | CWE-319 | A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to view sensitive information in clear text on |
| CVE-2026-20301 | Analyzed | 未確認 | CWE-606 | A vulnerability in the Extensible Messaging Client Protocol (XMCP), also referred to as the External Client protocol, of Cisco IOS Software and Cisco IOS XE Software could allow an |
| CVE-2026-20302 | Awaiting Analysis | 未確認 | CWE-120 | A vulnerability in the USB driver of Cisco RoomOS could allow an unauthenticated, local attacker with physical access to the USB port on an affected device to execute arbitrary cod |
| CVE-2026-20303 | Awaiting Analysis | 未確認 | CWE-20 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. |
| CVE-2026-20304 | Awaiting Analysis | 未確認 | CWE-284 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. |
| CVE-2026-20308 | Awaiting Analysis | 未確認 | CWE-269 | A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to perform a denial of service (DoS |
| CVE-2026-20310 | Awaiting Analysis | 未確認 | CWE-59 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. |
| CVE-2026-20311 | Awaiting Analysis | 未確認 | CWE-126 | A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to cause a denial of service (DoS) |
| CVE-2026-20312 | Awaiting Analysis | 未確認 | CWE-312 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. |
| CVE-2026-20313 | Awaiting Analysis | 未確認 | CWE-1284 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. |
| CVE-2026-20314 | Awaiting Analysis | 未確認 | CWE-918 | A vulnerability in Cisco Packaged Contact Center Enterprise (Packaged CCE) and Cisco Unified Contact Center Enterprise (Unified CCE) could allow an authenticated, remote attacker t |
| CVE-2026-20315 | Awaiting Analysis | 未確認 | CWE-284 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. |
| CVE-2026-20317 | Awaiting Analysis | 未確認 | CWE-287 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. |
| CVE-2026-20318 | Awaiting Analysis | 未確認 | CWE-20 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. |
| CVE-2026-20319 | Awaiting Analysis | 未確認 | CWE-119 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. |
| CVE-2026-20320 | Awaiting Analysis | 未確認 | CWE-611 | A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an |
| CVE-2026-20327 | Awaiting Analysis | 未確認 | CWE-89 | A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, local attacker to perform a blind SQL injection attack agai |
| CVE-2026-20337 | Awaiting Analysis | 未確認 | CWE-120 | A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to |
| CVE-2026-20338 | Awaiting Analysis | 未確認 | CWE-415 | A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to |
| CVE-2026-20339 | Awaiting Analysis | 未確認 | CWE-190 | A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result o |
| CVE-2026-20345 | Awaiting Analysis | 未確認 | CWE-121 | A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of&n |
| CVE-2026-20346 | Awaiting Analysis | 未確認 | CWE-125 | A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of&n |
| CVE-2026-20347 | Awaiting Analysis | 未確認 | CWE-125 | A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result o |
| CVE-2026-20348 | Analyzed | 未確認 | CWE-120 | A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of&n |
| CVE-2026-20349 | Analyzed | 掲載 | CWE-244 | A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software co |
| CVE-2026-20357 | Awaiting Analysis | 未確認 | CWE-306 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This r |
| CVE-2026-20358 | Awaiting Analysis | 未確認 | CWE-73 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This r |
| CVE-2026-20359 | Awaiting Analysis | 未確認 | CWE-522 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This r |
| CVE-2026-20464 | Deferred | 未確認 | CWE-787 | In hevc decoder, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege if a malicious actor has already obtained the |
| CVE-2026-20465 | Deferred | 未確認 | CWE-122 | In wlan AP driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional e |
| CVE-2026-20466 | Deferred | 未確認 | CWE-787 | In sec boot, there is a possible escalation of privilege due to a heap buffer overflow. This could lead to local escalation of privilege, if an attacker has physical access to the |
| CVE-2026-20467 | Deferred | 未確認 | CWE-749 | In apusys, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the |
| CVE-2026-20468 | Deferred | 未確認 | CWE-787 | In apusys, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege if a malicious actor has already obtained the Syst |
| CVE-2026-20469 | Deferred | 未確認 | CWE-123 | In trusted_mem, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obta |
| CVE-2026-20470 | Deferred | 未確認 | CWE-926 | In Telephony, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges |
| CVE-2026-20471 | Deferred | 未確認 | CWE-787 | In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service, if an attacker has physical access to the device, with no |
| CVE-2026-20472 | Deferred | 未確認 | CWE-787 | In TFA, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obtained the System privi |
| CVE-2026-20473 | Analyzed | 未確認 | CWE-416 | In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privi |
| CVE-2026-20474 | Analyzed | 未確認 | CWE-367 | In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the Syst |
| CVE-2026-20475 | Analyzed | 未確認 | CWE-787 | In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the Sy |
| CVE-2026-20476 | Analyzed | 未確認 | CWE-787 | In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is |
| CVE-2026-20477 | Analyzed | 未確認 | CWE-787 | In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the Sy |
| CVE-2026-20478 | Analyzed | 未確認 | CWE-787 | In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution privileges needed. User interact |
| CVE-2026-20479 | Analyzed | 未確認 | CWE-125 | In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlle |
| CVE-2026-20480 | Analyzed | 未確認 | CWE-122 | In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution privileges needed. User interact |
| CVE-2026-20481 | Analyzed | 未確認 | CWE-787 | In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the |
| CVE-2026-20482 | Analyzed | 未確認 | CWE-770 | In wlan STA FW, there is a possible system becoming unresponsive due to logging. This could lead to remote (proximal/adjacent) denial of service with no additional execution privil |
| CVE-2026-20483 | Analyzed | 未確認 | CWE-862 | In Telephony, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privilege |
| CVE-2026-20484 | Analyzed | 未確認 | CWE-201 | In TFA, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the |
| CVE-2026-20485 | Analyzed | 未確認 | CWE-787 | In HFRP, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the Syste |
| CVE-2026-20486 | Analyzed | 未確認 | CWE-754 | In imgsensor, there is a possible application crash due to incorrect error handling. This could lead to local escalation of privilege if a malicious actor has already obtained the |
| CVE-2026-20488 | Analyzed | 未確認 | CWE-125 | In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the |
| CVE-2026-20489 | Analyzed | 未確認 | CWE-125 | In display, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained the Sys |
| CVE-2026-20490 | Analyzed | 未確認 | CWE-125 | In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obtained the System privi |
| CVE-2026-20491 | Analyzed | 未確認 | CWE-787 | In med, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local denial of service with User execution privileges needed. User interaction |
| CVE-2026-20492 | Analyzed | 未確認 | CWE-367 | In Audio HAL, there is a possible system becoming unresponsive due to a race condition. This could lead to local denial of service with User execution privileges needed. User inter |
| CVE-2026-20493 | Analyzed | 未確認 | CWE-787 | In wifi, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obtained the System priv |
| CVE-2026-20494 | Analyzed | 未確認 | CWE-125 | In wifi, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System |
| CVE-2026-20495 | Analyzed | 未確認 | CWE-862 | In Bluetooth driver, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed |
| CVE-2026-20496 | Analyzed | 未確認 | CWE-125 | In geniezone, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the Sy |
| CVE-2026-20497 | Analyzed | 未確認 | CWE-787 | In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the |
| CVE-2026-20498 | Analyzed | 未確認 | CWE-1287 | In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtai |
| CVE-2026-20679 | Analyzed | 未確認 | CWE-125, CWE-416 | The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. Processing a maliciously crafted file may lead to |
| CVE-2026-20702 | Undergoing Analysis | 未確認 | CWE-693 | Protection mechanism failure for some Intel(R) Data Center Attestation Primitives (Intel(R) DCAP) may allow information disclosure. Unprivileged software adversary with an unauthen |
| CVE-2026-20705 | Analyzed | 未確認 | CWE-922 | Insecure storage of sensitive information in the Intel(R) TDX module for some Intel(R) platform within Ring 0: Trust Domain may allow information disclosure. System software advers |
| CVE-2026-20707 | Undergoing Analysis | 未確認 | CWE-1298 | Hardware logic contains race conditions for some 3rd Gen Intel(R) Xeon(R) Scalable Processors within Ring 3: unprivileged software may allow a denial of service. Unprivileged softw |
| CVE-2026-20708 | Awaiting Analysis | 未確認 | CWE-532 | Insertion of sensitive information into log file in the subsystem for the Intel(R) AMT and Intel(R) Standard Manageability may allow an information disclosure. Network adversary wi |
| CVE-2026-20712 | Awaiting Analysis | 未確認 | CWE-459 | Incomplete cleanup in some UEFI firmware for some Intel(R) reference platforms within UEFI may allow an information disclosure. System software adversary with a privileged user com |
| CVE-2026-20713 | Undergoing Analysis | 未確認 | CWE-670 | Always-incorrect control flow implementation in some firmware for some Intel(R) Xeon(R) processors may allow an escalation of privilege. System software adversary with a privileged |
| CVE-2026-20715 | Awaiting Analysis | 未確認 | CWE-20 | Improper input validation in some firmware for some Intel(R) Active Management Technology (Intel(R) AMT) and some Intel(R) Standard Manageability may allow a denial of service. Net |
| CVE-2026-20716 | Analyzed | 未確認 | CWE-284 | Improper access control for some Intel(R) Processors within Ring 3: User Applications may allow an escalation of privilege. Simple hardware adversary with an authenticated user com |
| CVE-2026-20727 | Analyzed | 未確認 | CWE-476 | Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an un |
| CVE-2026-20728 | Undergoing Analysis | 未確認 | CWE-693 | Protection mechanism failure for some Intel Extension for TensorFlow software before version 2.15.0.3 within Ring 3: User Applications may allow an escalation of privilege. System |
| CVE-2026-20731 | Analyzed | 未確認 | CWE-119 | Improper buffer restrictions for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an au |
| CVE-2026-20734 | Awaiting Analysis | 未確認 | CWE-665 | Improper initialization in some firmware for some Intel(R) Active Management Technology (Intel(R) AMT), and some Intel(R) Standard Manageability may allow an information disclosure |
| CVE-2026-20737 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of priv |
| CVE-2026-20739 | Analyzed | 未確認 | CWE-754 | Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthe |
| CVE-2026-20741 | Analyzed | 未確認 | CWE-284 | Improper access control for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthe |
| CVE-2026-20745 | Analyzed | 未確認 | CWE-787 | Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticat |
| CVE-2026-20747 | Analyzed | 未確認 | CWE-754 | Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated use |
| CVE-2026-20749 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow an escalation of privilege. Network adversary with an unauthenticated use |
| CVE-2026-20752 | Analyzed | 未確認 | CWE-287 | Improper authentication for some Intel(R) PROSet/Wireless WiFi Software within Ring 0: Kernel may allow an information disclosure. System software adversary with a privileged user |
| CVE-2026-20755 | Undergoing Analysis | 未確認 | CWE-693 | Protection mechanism failure for some LLM Scaler software within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged u |
| CVE-2026-20760 | Awaiting Analysis | 未確認 | CWE-1260 | Improper handling of overlap between protected memory ranges in some microcode for some Intel(R) Processors within Ring 0: Hypervisor may allow an escalation of privilege. Authoriz |
| CVE-2026-20763 | Analyzed | 未確認 | CWE-682 | Incorrect calculation for some Intel(R) TDX Guest software before version 0.3.1 within Ring 3: User Applications may allow an escalation of privilege. System software adversary wit |
| CVE-2026-20765 | Analyzed | 未確認 | CWE-697 | Incorrect comparison for some Intel(R) TDX Guest software before version 0.3.1 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with |
| CVE-2026-20769 | Analyzed | 未確認 | CWE-754 | Improper conditions check for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authe |
| CVE-2026-20770 | Undergoing Analysis | 未確認 | CWE-693 | Protection mechanism failure for some Cluster Management Toolkit for Kubernetes software before version v0.8.5 within Ring 3: User Applications may allow an escalation of privilege |
| CVE-2026-20775 | Analyzed | 未確認 | CWE-248 | Uncaught exception for some Intel(R) TDX modules within Ring 0: Trust Domain may allow a denial of service. System software adversary with a privileged user combined with a high co |
| CVE-2026-20776 | Analyzed | 未確認 | CWE-754 | Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated use |
| CVE-2026-20778 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthen |
| CVE-2026-20780 | Analyzed | 未確認 | CWE-400 | Uncontrolled resource consumption for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adv |
| CVE-2026-20783 | Analyzed | 未確認 | CWE-754 | Improper conditions check in the firmware for the Intel(R) NPU Driver for all versions within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary |
| CVE-2026-20786 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticate |
| CVE-2026-20787 | Analyzed | 未確認 | CWE-476 | Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthen |
| CVE-2026-20789 | Analyzed | 未確認 | CWE-284 | Improper access control for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software advers |
| CVE-2026-20795 | Analyzed | 未確認 | CWE-119 | Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unau |
| CVE-2026-20799 | Undergoing Analysis | 未確認 | CWE-426 | Untrusted search path for some Battery Life Diagnostic Tool software before version 2.9.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged softwa |
| CVE-2026-20878 | Analyzed | 未確認 | CWE-476 | Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthen |
| CVE-2026-20885 | Analyzed | 未確認 | CWE-287 | Improper authentication in the Intel(R) TDX module for some Intel(R) platforms within Ring 0: Trust Domain may allow an information disclosure and escalation of privilege. System s |
| CVE-2026-20886 | Analyzed | 未確認 | CWE-787 | Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticat |
| CVE-2026-20890 | Analyzed | 未確認 | CWE-269 | Improper privilege management for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Privileged Process may allow an escalation of privilege. Unprivileged softw |
| CVE-2026-20891 | Analyzed | 未確認 | CWE-287 | Improper authentication for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software advers |
| CVE-2026-20898 | Analyzed | 未確認 | CWE-284 | Improper access control in the firmware for some in Alias Checking Trusted Module for some Intel(R) Xeon(R) processors may allow an escalation of privilege. Startup code and SMM ad |
| CVE-2026-20901 | Analyzed | 未確認 | CWE-20 | Improper input validation for some Intel(R) Xeon(R) processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined |
| CVE-2026-20903 | Undergoing Analysis | 未確認 | CWE-693 | Protection mechanism failure for some Intel(R) AI Containers before version v0.4.0 within Ring 3: User Applications may allow an escalation of privilege. System software adversary |
| CVE-2026-20906 | Analyzed | 未確認 | CWE-693 | Protection mechanism failure for some Intel(R) Neural Compressor software before version v3.6 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged so |
| CVE-2026-20908 | Analyzed | 未確認 | CWE-367 | Time-of-check time-of-use race condition for the Intel(R) NPU Driver for Windows for all versions within Ring 1: Device Drivers may allow a denial of service. Unprivileged software |
| CVE-2026-20913 | Analyzed | 未確認 | CWE-20 | Improper input validation for some Intel(R) Neural Compressor software before version v3.7 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged softw |
| CVE-2026-20917 | Awaiting Analysis | 未確認 | Exposure of sensitive information caused by incorrect data forwarding during transient execution for some Intel(R) Processors within Ring 0: Hypervisor and Kernel may allow informa | |
| CVE-2026-21058 | Analyzed | 未確認 | CWE-20 | Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege. |
| CVE-2026-21059 | Analyzed | 未確認 | CWE-926 | Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege. |
| CVE-2026-21060 | Analyzed | 未確認 | CWE-20 | Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to access data across multiple user profiles. |
| CVE-2026-21061 | Analyzed | 未確認 | CWE-20 | Improper input validation in Samsung Dialer prior to SMR Aug-2026 Release 1 allows remote attackers to access SIM related functions. User interaction is required for triggering thi |
| CVE-2026-21062 | Analyzed | 未確認 | CWE-939 | Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access clipboard data. |
| CVE-2026-21063 | Analyzed | 未確認 | CWE-926 | Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function. |
| CVE-2026-21064 | Analyzed | 未確認 | CWE-284 | Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability. |
| CVE-2026-21065 | Analyzed | 未確認 | CWE-20 | Out-of-bounds write in libcodec2secqcelpdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory. |
| CVE-2026-21066 | Analyzed | 未確認 | CWE-20 | Improper input validation in libcodec2_sec_flacdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory. |
| CVE-2026-21067 | Analyzed | 未確認 | Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory. | |
| CVE-2026-21068 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers to execute arbitrary code. |
| CVE-2026-21069 | Analyzed | 未確認 | CWE-681 | Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory. |
| CVE-2026-21070 | Analyzed | 未確認 | CWE-20 | Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensitive information. |
| CVE-2026-21071 | Analyzed | 未確認 | CWE-20 | Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory. |
| CVE-2026-21072 | Analyzed | 未確認 | CWE-20 | Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory. |
| CVE-2026-21073 | Analyzed | 未確認 | Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch arbitrary activity. | |
| CVE-2026-21074 | Awaiting Analysis | 未確認 | CWE-276 | Incorrect default permissions in Bixby prior to version 4.0.86.0 allows local attackers to execute arbitrary commands with Bixby privilege. |
| CVE-2026-21075 | Awaiting Analysis | 未確認 | CWE-939 | Improper authorization in handler for custom URL scheme in My Galaxy prior to version 6.3 allows remote attackers to access sensitive information. |
| CVE-2026-21076 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information. |
| CVE-2026-21077 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information. |
| CVE-2026-21078 | Analyzed | 未確認 | CWE-345 | Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity. |
| CVE-2026-21079 | Analyzed | 未確認 | CWE-311 | Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data. |
| CVE-2026-21080 | Analyzed | 未確認 | CWE-312 | Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data. |
| CVE-2026-21081 | Awaiting Analysis | 未確認 | CWE-926 | Improper export of android application components in SamsungPassAutofill prior to version 5.2.10.x allows local attackers to access sensitive information. User interaction is requi |
| CVE-2026-21082 | Analyzed | 未確認 | CWE-23 | Relative path traversal in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information. |
| CVE-2026-21083 | Analyzed | 未確認 | CWE-20 | Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data. |
| CVE-2026-21084 | Awaiting Analysis | 未確認 | CWE-284 | Improper access control in SmartThings prior to version 1.8.47.24 allows local attackers to access sensitive information. |
| CVE-2026-21269 | Modified | 未確認 | CWE-79 | ColdFusion is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form field |
| CVE-2026-21273 | Analyzed | 未確認 | CWE-20 | is affected by an Improper Input Validation vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain unauthorized |
| CVE-2026-21279 | Analyzed | 未確認 | CWE-20 | is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures |
| CVE-2026-21366 | Analyzed | 未確認 | CWE-190 | Memory corruption while processing a packet with a size close to the maximum allowed value. |
| CVE-2026-21387 | Undergoing Analysis | 未確認 | CWE-693 | Protection mechanism failure for some Intel(R) LLM Library for PyTorch within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a |
| CVE-2026-21399 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow for the Intel(R) Open Volume Kernel Library (Intel(R) Open VKL) library maintained by intel(R) before version 2.0.2 within Ring 3: User Applications may |
| CVE-2026-21400 | Analyzed | 未確認 | CWE-693 | Protection mechanism failure for some Intel(R) AI Reference Models before version v3.4.1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged softwar |
| CVE-2026-21548 | Deferred | 未確認 | CWE-20 | In nr modem, there is a possible improper input validation. This could lead to remote denial of service with System execution privileges needed. |
| CVE-2026-21549 | Deferred | 未確認 | CWE-20 | In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed |
| CVE-2026-21550 | Deferred | 未確認 | CWE-20 | In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed |
| CVE-2026-21551 | Deferred | 未確認 | CWE-20 | In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed |
| CVE-2026-21552 | Deferred | 未確認 | CWE-20 | In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed |
| CVE-2026-21553 | Deferred | 未確認 | CWE-20 | In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed |
| CVE-2026-21554 | Deferred | 未確認 | CWE-20 | In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed |
| CVE-2026-21555 | Deferred | 未確認 | CWE-20 | In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed |
| CVE-2026-21580 | Awaiting Analysis | 未確認 | CWE-79 | This Critical severity Stored XSS, PrivEsc (Privilege Escalation), and Security Misconfiguration vulnerability was introduced in versions 7.1.1, 7.4.0, 7.13.0, 7.17.0, 7.19.0, 8.0. |
| CVE-2026-21582 | Awaiting Analysis | 未確認 | CWE-287 | This High severity BASM (Broken Authentication & Session Management) vulnerability known as CVE-2026-21582 was introduced in version 7.2.1 of Crowd Data Center. This BASM (Broke |
| CVE-2026-21584 | Analyzed | 未確認 | CWE-285 | This High severity Improper Authorization vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center. This Improper Autho |
| CVE-2026-21751 | Deferred | 未確認 | CWE-1240 | HCL Hive is affected by a cryptographic primitive with a risky implementation which could allow an attacker unauthorized lateral compromise or widespread credential leakage if a si |
| CVE-2026-21752 | Deferred | 未確認 | CWE-1104 | HCL Hive is affected by a use of vulnerable third-party components which could allow an attacker unauthorized access or compromise of the system by exploiting publicly documented s |
| CVE-2026-21753 | Deferred | 未確認 | CWE-1104 | HCL Hive is affected by weak software supply chain governance, which could lead to the inclusion of vulnerable, unmaintained, or malicious third-party dependencies within the appli |
| CVE-2026-21754 | Deferred | 未確認 | CWE-1004 | HCL Hive is affected by multiple infrastructure and network configuration vulnerabilities, which could lead to unauthorized lateral movement, container breakout, and sensitive data |
| CVE-2026-21755 | Deferred | 未確認 | CWE-307 | HCL Hive is affected by a missing rate limit which could allow an attacker unauthorized access via brute-force or credential stuffing attacks, or cause a denial of service. |
| CVE-2026-21756 | Deferred | 未確認 | CWE-266 | HCL Hive is affected by a broken access control vulnerability which could allow an attacker or unauthorized user to introduce unverified, malicious, or broken code directly into pr |
| CVE-2026-21758 | Deferred | 未確認 | CWE-200 | HCL Hive is affected by an information disclosure vulnerability, which could lead to an attacker gathering sensitive information about the host environment. |
| CVE-2026-21759 | Deferred | 未確認 | CWE-215 | HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. Although no sensitive information (e.g., credentials, PII) wa |
| CVE-2026-21766 | Deferred | 未確認 | CWE-522, CWE-532 | The default login portlet in HCL Digital Experience and Digital Experience Compose insufficiently protects credentials. Under certain very specific use cases and specific configur |
| CVE-2026-21784 | Deferred | 未確認 | CWE-200 | HCL IntelliOps Event Management (IEM) is affected by missing or insecure Cross-Origin Security headers. This issue makes the application's environment and resources susceptible to |
| CVE-2026-21807 | Awaiting Analysis | 未確認 | CWE-121 | HCL BigFix Quantum Risk Analyzer binary lacks several critical, industry-standard hardening protections that could allow an attacker to cause a stack-based buffer overflow. |
| CVE-2026-21808 | Awaiting Analysis | 未確認 | CWE-532 | HCL BigFix Quantum Risk Analyzer generates highly detailed logging information by default which increases the risk of sensitive data leakage and can provide an attacker with intern |
| CVE-2026-21809 | Awaiting Analysis | 未確認 | CWE-209 | HCL BigFix Quantum Risk Analyzer has a certain validation process that provides overly descriptive error messages when it encounters malformed input which can allow an attacker to |
| CVE-2026-21810 | Awaiting Analysis | 未確認 | CWE-494, CWE-610 | HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and a lack of binary integrity which could allow an attacker to obtain sensitive information |
| CVE-2026-21827 | Awaiting Analysis | 未確認 | CWE-359 | HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to, caused by improper handl |
| CVE-2026-21832 | Deferred | 未確認 | HCL AION is affected by a vulnerability where indirect prompt injection can lead to HTML injection in rendered output. Injected markup may be displayed to users, potentially result | |
| CVE-2026-22056 | Awaiting Analysis | 未確認 | CWE-774 | StorageGRID (formerly StorageGRID Webscale) versions 11.5 and higher in a non-standard configuration and scenario are susceptible to a Denial of Service vulnerability. Successful e |
| CVE-2026-22072 | Deferred | 未確認 | CWE-20 | Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user tokens. |
| CVE-2026-22306 | Deferred | 未確認 | CWE-319, CWE-494, CWE-829 | Download of code without integrity check, inclusion of functionality from untrusted control sphere, and cleartext transmission of sensitive information vulnerability in Ozols Grup |
| CVE-2026-22651 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-22652 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-22653 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-22654 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-22655 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-22656 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-22657 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-22658 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-22681 | Deferred | 未確認 | CWE-918 | OpenViking before 0.3.4 contains a server-side request forgery vulnerability that allows authenticated low-privilege attackers to access internal network services by submitting arb |
| CVE-2026-2283 | Deferred | 未確認 | CWE-89 | The User Login History plugin for WordPress is vulnerable to SQL Injection via the 'blog_id' parameter in all versions up to, and including, 2.1.7. This is due to insufficient esca |
| CVE-2026-22887 | Analyzed | 未確認 | CWE-119 | Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with a |
| CVE-2026-2334 | Deferred | 未確認 | CWE-434 | An issue was discovered in vsDesk v14.0101. An authenticated attacker with administrative privileges can bypass client-side file validation in the "Import via CSV" component due to |
| CVE-2026-2346 | Deferred | 未確認 | CWE-639 | Authorization bypass through User-Controlled key vulnerability in Menulux Software Inc. Mobile App allows Software Integrity Attack. This issue affects Mobile App: through 12.05.2 |
| CVE-2026-23501 | Awaiting Analysis | 未確認 | CWE-78 | Dell RecoverPoint for VMs, versions 6.0.3 and 6.0.3.1, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high |
| CVE-2026-2357 | Deferred | 未確認 | CWE-79 | The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bt_bb_shortcode' shortcode in all versions up to, and including, 5.6.8 due |
| CVE-2026-23603 | Deferred | 未確認 | CWE-918 | Blind SSRF in OAuth2 avatar synchronization via unvalidated OIDC picture claim |
| CVE-2026-23675 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-23676 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-23677 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-23690 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-23691 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-23692 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-23765 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-2388 | Deferred | 未確認 | CWE-79 | The Reviews and Rating – Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.10. This is due to the wp_display( |
| CVE-2026-23922 | Analyzed | 未確認 | CWE-522 | The email media OAuth field 'Client secret' cannot be read after saving, but a Super Admin can leak it by setting a malicious 'Token endpoint'. Changes were made to reset the clien |
| CVE-2026-23929 | Analyzed | 未確認 | CWE-1321 | Prototype pollution vulnerability in searchParamsToObject() is leading to a persistent XSS in Maps. URL parameter processing was not filtering dangerous properties like __proto__, |
| CVE-2026-23930 | Analyzed | 未確認 | CWE-405 | An unauthenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend popup.testtriggerexpr action, |
| CVE-2026-23931 | Analyzed | 未確認 | CWE-203 | The frontend validatate.api.exists action can be exploited by authenticated users to extract plaintext user macro values leading to potential loss of confidentiality. |
| CVE-2026-23933 | Analyzed | 未確認 | CWE-259 | In Zabbix 7.4 the cryptographic key used for signing Frontend sessions has been erroneously written to the database seed. Currently the only known exploitation scenario is for depl |
| CVE-2026-23934 | Analyzed | 未確認 | CWE-405 | An authenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend validate.api.exists action, lead |
| CVE-2026-23935 | Analyzed | 未確認 | CWE-125 | A Zabbix administrator is able to read out of bounds memory by utilizing a flaw in script item/preprocessing (JavaScript) HttpRequest logic, leading to potential confidentiality lo |
| CVE-2026-23937 | Analyzed | 未確認 | CWE-203 | The Zabbix API host.get action can be exploited by authenticated users to extract a host's PSK key leading to potential loss of data integrity. |
| CVE-2026-23938 | Analyzed | 未確認 | CWE-248 | An authenticated administrator is able to crash Zabbix server or proxy by creating specifically crafted preprocessing/script item JavaScript scripts, leading to potential denial of |
| CVE-2026-24059 | Deferred | 未確認 | CWE-269 | The GET /api/v1/user/actions/runners/registration-token endpoint (and its owner- and repository-level equivalents) creates a new runner registration token if none exists, yet the A |
| CVE-2026-24076 | Analyzed | 未確認 | CWE-120 | Memory Corruption when processing registry values with incorrect types using a direct query method. |
| CVE-2026-24077 | Analyzed | 未確認 | CWE-191 | Information Disclosure when processing wireless network channel switch information with improperly formatted length fields. |
| CVE-2026-24078 | Analyzed | 未確認 | CWE-359 | Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling. |
| CVE-2026-24079 | Analyzed | 未確認 | CWE-306 | Cryptographic Issue while processing registration requests with malformed or missing authentication parameters. |
| CVE-2026-24080 | Analyzed | 未確認 | CWE-120 | Memory Corruption when handling malformed request parameters in the fingerprint TA. |
| CVE-2026-24083 | Analyzed | 未確認 | CWE-822 | Memory Corruption while processing IOCTL device driver requests with invalid arguments. |
| CVE-2026-24084 | Analyzed | 未確認 | CWE-1294 | Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities. |
| CVE-2026-24099 | Analyzed | 未確認 | CWE-416 | Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. System software adversary with an unauthenticated us |
| CVE-2026-2411 | Analyzed | 未確認 | CWE-863 | Zephyr's Bluetooth host declares a GATT characteristic as two consecutive attributes: a Characteristic Declaration whose permission is hard-coded to BT_GATT_PERM_READ, and a Charac |
| CVE-2026-24166 | Undergoing Analysis | 未確認 | CWE-321 | NVIDIA UFM Enterprise contains a vulnerability in the session management component, where an attacker could use a hard-coded cryptographic key to extract information. A successful |
| CVE-2026-24167 | Undergoing Analysis | 未確認 | CWE-77 | NVIDIA UFM Enterprise contains a vulnerability in the user management component, where an authenticated administrator could inject commands by sending a crafted API request. A succ |
| CVE-2026-24168 | Undergoing Analysis | 未確認 | CWE-77 | NVIDIA UFM Enterprise contains a vulnerability in the IBDiagnet API where an authenticated attacker with administrative privileges may cause command injection by sending crafted AP |
| CVE-2026-24169 | Undergoing Analysis | 未確認 | CWE-77 | NVIDIA UFM Enterprise contains a vulnerability in the plugin management API, where an authenticated user with low privileges could inject code by sending a specially crafted API re |
| CVE-2026-24170 | Undergoing Analysis | 未確認 | CWE-287 | NVIDIA UFM Enterprise contains a vulnerability in the web interface authorization component, where an authenticated user could cause improper authentication by sending specially cr |
| CVE-2026-24183 | Analyzed | 未確認 | CWE-250 | NVIDIA Cumulus Linux contains a vulnerability in the user management component, where an unprivileged user could use improper privilege management on the system. A successful explo |
| CVE-2026-24184 | Analyzed | 未確認 | CWE-120 | NVIDIA Cumulus Linux contains a vulnerability in the Link Layer Discovery Protocol (LLDP) daemon component, where an unauthenticated attacker on an adjacent network could cause buf |
| CVE-2026-24185 | Awaiting Analysis | 未確認 | CWE-288 | NVIDIA NVOS for network switches contains a vulnerability in the secure shell (SSH) server configuration component while PKA-only mode is enabled, where an administrator could inad |
| CVE-2026-24225 | Analyzed | 未確認 | CWE-125 | NVIDIA DGX Spark contains a vulnerability in the standalone MM firmware where an attacker could be able to cause an out-of-bounds read. A successful exploit of this vulnerability m |
| CVE-2026-24253 | Analyzed | 未確認 | CWE-787 | NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service an |
| CVE-2026-24254 | Analyzed | 未確認 | CWE-288 | NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerabilit |
| CVE-2026-24255 | Analyzed | 未確認 | CWE-1023 | NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash collision by submitting images that share an identical pixe |
| CVE-2026-24262 | Analyzed | 未確認 | CWE-787 | NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write. A successful exploit of this vulnerabil |
| CVE-2026-24263 | Analyzed | 未確認 | CWE-476 | NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause a NULL pointer dereference. A successful exploit of this vulner |
| CVE-2026-24301 | Analyzed | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-24329 | Awaiting Analysis | 未確認 | CWE-91 | A flaw was found in wildfly-core. A remote user authenticated as an administrative user can inject a malformed payload into the Inet Address field through the Management Model. Thi |
| CVE-2026-24330 | Awaiting Analysis | 未確認 | CWE-434 | A flaw was found in wildfly-core. A remote attacker, authenticated as a 'deployer' account, can import and deploy a malicious archive file from an untrusted source. This is achieve |
| CVE-2026-24438 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-24693 | Analyzed | 未確認 | CWE-693 | Protection mechanism failure for some Intel(R) oneCCL Bindings for PyTorch before version v2.8.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged |
| CVE-2026-24791 | Deferred | 未確認 | CWE-863 | Public-only tokens bypass private-resource restrictions on `/api/v1/user` self routes |
| CVE-2026-2487 | Deferred | 未確認 | CWE-79 | The Admin Custom Login plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.6.4 due to insufficient input sa |
| CVE-2026-24911 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an |
| CVE-2026-2497 | Deferred | 未確認 | CWE-89 | The Gallery by BestWebSoft plugin for WordPress is vulnerable to SQL Injection via the '_gallery_order_{post_id}' parameter array keys in all versions up to, and including, 4.7.9. |
| CVE-2026-25074 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-25194 | Awaiting Analysis | 未確認 | CWE-787 | Out-of-bounds write in the firmware for the Intel(R) Slim Bootloader may allow a denial of service. System software adversary with a privileged user combined with a low complexity |
| CVE-2026-25250 | Deferred | 未確認 | CWE-325 | EAZ EazyFix 12.9 allows a Security Feature Bypass related to a "Missing Cryptographic Step" associated with "Secure Boot disable." |
| CVE-2026-25288 | Analyzed | 未確認 | CWE-126 | Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size. |
| CVE-2026-25289 | Analyzed | 未確認 | CWE-121 | Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values. |
| CVE-2026-25292 | Analyzed | 未確認 | CWE-1286 | Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration. |
| CVE-2026-25403 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Ultimate Store Kit Elementor Addons <= 3.0.5 versions. |
| CVE-2026-25549 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-25652 | Analyzed | 未確認 | CWE-863 | is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain unauthorized r |
| CVE-2026-25703 | Awaiting Analysis | 未確認 | CWE-202, CWE-306, CWE-524 | NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to missing authentication and cached data containing sensitive information. |
| CVE-2026-26035 | Analyzed | 未確認 | CWE-287 | An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2 |
| CVE-2026-26211 | Deferred | 未確認 | CWE-79 | Ekushey Project Manager CRM stores the administrator-configured system name and writes it to the login page without output encoding. The value is emitted in three places on that pa |
| CVE-2026-26229 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-26348 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-26349 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-26445 | Deferred | 未確認 | CWE-770 | stomper 5e2741e is vulnerable to Denial of Service. A malicious client can send partial STOMP frames and keep the TCP connections open, which, combined with the broker s use of edg |
| CVE-2026-26446 | Deferred | 未確認 | CWE-703 | Stomper 5e2741e is vulnerable to Denial of Service. When a broker sends data to a client whose TCP connection was already closed by the peer, the server process receives SIGPIPE an |
| CVE-2026-26447 | Deferred | 未確認 | CWE-416 | Stomper 5e2741e is vulnerable to Use-After-Free. When a single client repeatedly issues SUBSCRIBE commands for the same destination over one connection and then closes that connect |
| CVE-2026-26448 | Deferred | 未確認 | CWE-416 | Stomper 5e2741e is vulnerable to Use-After-Free. When a client sends multiple CONNECT frames on the same TCP connection, and subsequently another client (or a later connection) sen |
| CVE-2026-26449 | Deferred | 未確認 | CWE-476 | In Stomper 5e2741e when a client sends a SEND frame missing the destination header field, the server triggers a null pointer dereference (or access to invalid memory) while process |
| CVE-2026-26452 | Deferred | 未確認 | CWE-20 | ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 lcontains a vulnerability in the option parsing logic that causes a segmentation fault when processing COAP messages containing inval |
| CVE-2026-26453 | Deferred | 未確認 | CWE-476 | ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a null pointer dereference vulnerability in the coap_server_handle_session() function when processing COAP messages containi |
| CVE-2026-26456 | Deferred | 未確認 | CWE-362, CWE-476 | A null pointer dereference vulnerability exists in the server-side session management logic of ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5. The issue is caused by a race conditi |
| CVE-2026-26457 | Deferred | 未確認 | CWE-476 | ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a null pointer dereference vulnerability in the coap_dump_msg() function when processing COAP messages containing options wi |
| CVE-2026-26459 | Deferred | 未確認 | CWE-787 | ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a vulnerability in the option parsing logic that causes a segmentation fault when processing malformed COAP messages with in |
| CVE-2026-26897 | Deferred | 未確認 | CWE-200 | An issue in EcoOnline EHS (com.airsweb.v10) application for Android, version 0.2.499 allows a remote attacker to obtain sensitive information and execute arbitrary code via the And |
| CVE-2026-26899 | Deferred | 未確認 | CWE-78 | An issue was discovered in luci-app-https-dns-proxy on OpenWrt PR #15 (< 2026-01-17). The setInitAction function in /usr/libexec/rpcd/luci.https-dns-proxy allows authenticated user |
| CVE-2026-27302 | Analyzed | 未確認 | CWE-863 | Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker c |
| CVE-2026-27330 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Mobile App for WooCommerce <= 0.4.62 versions. |
| CVE-2026-27345 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Taxi Booking Manager for WooCommerce <= 2.0.3 versions. |
| CVE-2026-27364 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Style Kits <= 2.6.5 versions. |
| CVE-2026-27365 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PublishPress PublishPress Series allows Stored XSS. This issue affects Publis |
| CVE-2026-27380 | Deferred | 未確認 | CWE-502 | Editor PHP Object Injection in Car Rental Manager <= 1.3.9 versions. |
| CVE-2026-27462 | Deferred | 未確認 | CWE-204 | Combodo iTop is a web based IT service management tool. Prior to 3.2.3, iTop returns different responses for valid/invalid usernames depending on multiple factors in the reset pass |
| CVE-2026-27463 | Deferred | 未確認 | CWE-200 | Combodo iTop is a web based IT service management tool. Prior to 3.2.3, the HTML title attribute of the logo in the login page contains the complete iTop version. This issue has be |
| CVE-2026-27490 | Deferred | 未確認 | CWE-330, CWE-331 | Combodo iTop is a web based IT service management tool. Prior to 3.2.3, inline images that are accessible without being authenticated are protected by a weak 24-bit pseudo-random s |
| CVE-2026-27535 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Solace Extra <= 1.6.0 versions. |
| CVE-2026-27536 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in MailChimp Subscribe Forms <= 4.3.3 versions. |
| CVE-2026-27537 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Popup by Supsystic <= 1.11.2 versions. |
| CVE-2026-27538 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in WP Directory Kit <= 1.5.4 versions. |
| CVE-2026-27539 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Welcart e-Commerce <= 2.11.31 versions. |
| CVE-2026-27543 | Deferred | 未確認 | CWE-266 | Unauthenticated Privilege Escalation in MStore API <= 4.20.0 versions. |
| CVE-2026-27544 | Deferred | 未確認 | CWE-94 | Unauthenticated Remote Code Execution (RCE) in QA Analytics <= 5.2.0.0 versions. |
| CVE-2026-27765 | Analyzed | 未確認 | CWE-20 | Improper input validation for some vLLM Hardware Plugin for Intel(R) Gaudi(R) software before version 0.16.0 within Ring 3: User Applications may allow a denial of service. Authori |
| CVE-2026-27852 | Deferred | 未確認 | CWE-400 | An attacker that can send mail to a user can craft a message whose headers contain a very large number of email addresses or MIME parameters, which causes excessive memory usage wh |
| CVE-2026-27871 | Awaiting Analysis | 未確認 | CWE-327 | Cwe-327 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Johnson Controls TL280 allows Cryptanalytic Attack. This issue affects TL280: before 5.63. |
| CVE-2026-27875 | Awaiting Analysis | 未確認 | CWE-316 | Cleartext Storage of Sensitive Information in Memory vulnerability in Johnson Controls Simplex Incident Manager / Autocall Fire Administrator may allow an attcker to Retrieve Embed |
| CVE-2026-27999 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Tourfic <= 2.23.1 versions. |
| CVE-2026-28001 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in WP Directory Kit <= 1.5.4 versions. |
| CVE-2026-28002 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arraytics Booktics allows Blind SQL Injection. This issue affects Booktics: f |
| CVE-2026-28003 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Maspik – Spam blacklist <= 2.9.1 versions. |
| CVE-2026-28004 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.25 versions. |
| CVE-2026-28005 | Deferred | 未確認 | CWE-862 | Unauthenticated Privilege Escalation in Kadence WooCommerce Email Designer <= 1.5.19 versions. |
| CVE-2026-28008 | Deferred | 未確認 | CWE-290 | Unauthenticated Broken Authentication in OAuth Single Sign On – SSO (OAuth Client) <= 7.0.0 versions. |
| CVE-2026-28082 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.13.1 versions. |
| CVE-2026-28111 | Deferred | 未確認 | CWE-266 | Contributor Privilege Escalation in Forminator <= 1.56.0 versions. |
| CVE-2026-28139 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Ajax Search Lite <= 4.14.4 versions. |
| CVE-2026-28140 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in JetFormBuilder <= 3.6.4.1 versions. |
| CVE-2026-28141 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in NextGEN Gallery <= 4.2.3 versions. |
| CVE-2026-28142 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Web Directory Free <= 1.7.13 versions. |
| CVE-2026-28143 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Forminator <= 1.56.0 versions. |
| CVE-2026-28146 | Deferred | 未確認 | CWE-22 | Contributor Arbitrary File Download in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 2.0.14 versions. |
| CVE-2026-28147 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Exploiting Incorrectly Configured Access Control |
| CVE-2026-28148 | Deferred | 未確認 | CWE-347 | Unauthenticated Bypass Vulnerability in Headless Single Sign On <= 1.6 versions. |
| CVE-2026-28149 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Headless Single Sign On <= 1.6 versions. |
| CVE-2026-28150 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Golo Framework < 1.7.5 versions. |
| CVE-2026-28151 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Tonda < 2.6 versions. |
| CVE-2026-28152 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Tonda Core < 2.6 versions. |
| CVE-2026-28153 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Notification Master – Real-Time WordPress Notifications With Email, SMS, Webhooks & More <= 1.7.1 versions. |
| CVE-2026-28154 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in snstheme Samex - Clean, Minimal Shop WooCommerce WordPress Theme and snstheme |
| CVE-2026-28155 | Deferred | 未確認 | CWE-639 | Unauthenticated Insecure Direct Object References (IDOR) in Do Lasso <= 358 versions. |
| CVE-2026-28156 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in Do Lasso <= 358 versions. |
| CVE-2026-28157 | Deferred | 未確認 | CWE-35 | Subscriber Path Traversal in Do Lasso <= 358 versions. |
| CVE-2026-28158 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Do Lasso <= 358 versions. |
| CVE-2026-28159 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Service Finder Booking <= 6.2 versions. |
| CVE-2026-28161 | Deferred | 未確認 | CWE-266 | Subscriber Privilege Escalation in Service Finder Booking <= 6.2 versions. |
| CVE-2026-28162 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Events Made Easy <= 3.2.5 versions. |
| CVE-2026-28163 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in myCred New User Approve allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects New User Approve: from n |
| CVE-2026-28164 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in HashThemes Easy Elementor Addons allows Cross Site Request Forgery. This issue affects Easy Elementor Addons: from n/a through 2 |
| CVE-2026-28165 | Deferred | 未確認 | CWE-266 | Unauthenticated Privilege Escalation in Digits <= 9.2 versions. |
| CVE-2026-28166 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Tourmaster <= 5.4.9 versions. |
| CVE-2026-28167 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Super Forms allows Path Traversal. This issue affects Super Forms: from n/a through |
| CVE-2026-28168 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in CubeWP <= 1.1.30 versions. |
| CVE-2026-28169 | Deferred | 未確認 | CWE-497 | Unauthenticated Sensitive Data Exposure in YITH WooCommerce Zoom Magnifier <= 2.52.0 versions. |
| CVE-2026-28170 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Blog Floating Button <= 1.4.20 versions. |
| CVE-2026-28171 | Deferred | 未確認 | CWE-22 | Unauthenticated Arbitrary File Deletion in WooCommerce File Approval <= 10.7 versions. |
| CVE-2026-28172 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in Tracking Code Manager <= 2.6.0 versions. |
| CVE-2026-28173 | Deferred | 未確認 | CWE-862 | Customer Arbitrary Content Deletion in WP Event SOlution <= 4.1.19 versions. |
| CVE-2026-28174 | Deferred | 未確認 | CWE-201 | Customer Sensitive Data Exposure in WP Event SOlution <= 4.1.18 versions. |
| CVE-2026-28175 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Visitors Traffic Real Time Statistics <= 8.11 versions. |
| CVE-2026-28176 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Booking Activities <= 1.18.4 versions. |
| CVE-2026-28177 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Popup Maker <= 1.23.0 versions. |
| CVE-2026-28178 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Powerkit <= 3.1.0 versions. |
| CVE-2026-28179 | Deferred | 未確認 | CWE-79 | Shop manager Cross Site Scripting (XSS) in FiboSearch <= 1.33.0 versions. |
| CVE-2026-28180 | Deferred | 未確認 | CWE-639 | Unauthenticated Insecure Direct Object References (IDOR) in Mercado Pago payments for WooCommerce <= 8.9.0 versions. |
| CVE-2026-28181 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in AcyMailing SMTP Newsletter <= 10.11.1 versions. |
| CVE-2026-28182 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in AcyMailing SMTP Newsletter <= 10.11.1 versions. |
| CVE-2026-28183 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in PublishPress PublishPress Capabilities capability-manager-enhanced allows Privilege Escalation.This issue affects PublishPress Capab |
| CVE-2026-28184 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-28185 | Deferred | 未確認 | CWE-345 | Unauthenticated Broken Authentication in Log in with Google <= 1.4.2 versions. |
| CVE-2026-28186 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Travelfic Toolkit <= 1.5.1 versions. |
| CVE-2026-28187 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Knowledge Base for Documentation, FAQs with AI Assistance <= 17.211.0 versions. |
| CVE-2026-28188 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Hydra Booking <= 1.2.2 versions. |
| CVE-2026-28189 | Deferred | 未確認 | CWE-22 | Unauthenticated Arbitrary File Deletion in Participants Database <= 2.7.8.4 versions. |
| CVE-2026-28190 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in ProLancer Element <= 1.4.8 versions. |
| CVE-2026-28191 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in ThemeOne The Grid allows Privilege Escalation. This issue affects The Grid: from n/a through 2.8.0. |
| CVE-2026-28192 | Deferred | 未確認 | CWE-434 | Unauthenticated Arbitrary File Upload in Piotnet Addons For Elementor Pro <= 7.1.67 versions. |
| CVE-2026-28533 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-28534 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-28567 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in WP Sort Order <= 1.3.5 versions. |
| CVE-2026-28568 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Quill Forms <= 5.7.1 versions. |
| CVE-2026-28569 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in SSL Zen <= 4.7.43 versions. |
| CVE-2026-28570 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Vavo Core <= 2.3.0 versions. |
| CVE-2026-28571 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in FormyChat <= 2.15.7 versions. |
| CVE-2026-28672 | Analyzed | 未確認 | CWE-77 | Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Ranger. This issue affects Apache Ranger: from 0.6 through 2.8. |
| CVE-2026-28700 | Awaiting Analysis | 未確認 | CWE-427 | Uncontrolled search path for some EquiTriton before version f5ddbb5 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a pr |
| CVE-2026-28707 | Awaiting Analysis | 未確認 | CWE-693 | Protection mechanism failure for some LLM-on-Ray before version 1.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a pr |
| CVE-2026-28729 | Awaiting Analysis | 未確認 | CWE-190 | Integer overflow in the UEFI firmware for the Intel(R) Slim Bootloader may allow an information disclosure. System software adversary with an authenticated user combined with a low |
| CVE-2026-28757 | Analyzed | 未確認 | CWE-693 | Protection mechanism failure for some Intel(R) Workload Services Framework software within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adv |
| CVE-2026-28984 | Modified | 未確認 | CWE-119, CWE-416 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, vi |
| CVE-2026-28998 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-28999 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-29010 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-29011 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-29012 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-29024 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-29025 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-29026 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-29027 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-29028 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-29029 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-29030 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-29031 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-29032 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-29033 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-29035 | Awaiting Analysis | 未確認 | CWE-787 | CivetWeb (commit 4a4f0c95) contains a heap and stack buffer overflow vulnerability in the read_websocket() function that allows unauthenticated remote attackers to corrupt memory b |
| CVE-2026-29036 | Awaiting Analysis | 未確認 | CWE-706 | cJSON versions 1.5.0 through 1.7.19 contain an incorrectly-resolved name or reference vulnerability in the decode_pointer_inplace() function within cJSON_Utils.c that allows unauth |
| CVE-2026-2916 | Deferred | 未確認 | CWE-200 | The Jeg Kit for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.1 via the `enqueue_scripts()` method in `cl |
| CVE-2026-29517 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-2996 | Deferred | 未確認 | CWE-20 | The Advanced Product Fields (Product Addons) for WooCommerce plugin for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 1.6.21. This is d |
| CVE-2026-29988 | Deferred | 未確認 | CWE-319 | A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affected firmware versions allows an unauthenti |
| CVE-2026-3002 | Deferred | 未確認 | CWE-79 | The Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the multiple blocks in all versions up to, a |
| CVE-2026-30045 | Deferred | 未確認 | CWE-190 | An integer overflow in the /nnrf-disc/v1/nf-instances component of open5gs v2.7.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted HTTP/2 GET request. |
| CVE-2026-30046 | Deferred | 未確認 | CWE-617 | A reachable assertion vulnerability in the NUDM-UECM interface of Open5GS v2.7.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted DELETE request. |
| CVE-2026-30047 | Deferred | 未確認 | CWE-617 | A reachable assertion vulnerability in the /nsmf-pdusession/v1/sm-contexts component of Open5GS v2.7.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted D |
| CVE-2026-30050 | Deferred | 未確認 | CWE-770 | An issue in the ModifyAMFEventSubscriptionProcedure function (processor/event_exposure.go) of free5gc v4.1.0 allows attackers to cause a Denial of Service (DoS) via supplying a cra |
| CVE-2026-30051 | Deferred | 未確認 | CWE-770 | An issue in the CreateUEContextProcedure function (/v1/ue-contexts/{supi}) of free5gc v4.1.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted PUT request |
| CVE-2026-30056 | Deferred | 未確認 | CWE-476 | A NULL pointer dereference in the AMF NGAP Dispatcher component of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via supplying crafted NGAP messages during the |
| CVE-2026-30057 | Deferred | 未確認 | CWE-770 | An issue in the CreateUEContext handler component of free5gc v4.1.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted request. |
| CVE-2026-30058 | Deferred | 未確認 | CWE-20 | Improper Input Validation in the HTTPModifySubscription handler of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input. |
| CVE-2026-30059 | Deferred | 未確認 | CWE-770 | An issue in the NAS decoder component of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted Registration Request message. |
| CVE-2026-30060 | Deferred | 未確認 | CWE-770 | An issue in free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) when parsing crafted SUCI data during UE registration. |
| CVE-2026-30062 | Deferred | 未確認 | CWE-770 | An issue in the NGAP handler of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted NAS PDU. |
| CVE-2026-30063 | Deferred | 未確認 | CWE-770 | An issue in the NF Discovery endpoint of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted snssais query. |
| CVE-2026-30064 | Deferred | 未確認 | CWE-20 | Improper input validation in the buildFilter function (processor/processor.go) of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input. |
| CVE-2026-30067 | Deferred | 未確認 | CWE-770 | An issue in the complexQueryFilterSubprocess function in the NRF Discovery service of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input. |
| CVE-2026-30068 | Deferred | 未確認 | CWE-20 | Improper input validation in the HandleUpdate function (/sbi/parameter_provision.go) of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input. |
| CVE-2026-30069 | Deferred | 未確認 | CWE-476 | A NULL pointer dereference in the UDMC registration handler component of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via supplying crafted payload. |
| CVE-2026-30070 | Deferred | 未確認 | CWE-770 | An issue in the HandleGetSharedData function of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input. |
| CVE-2026-30071 | Deferred | 未確認 | CWE-770 | An issue in the RechargePut function of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input. |
| CVE-2026-30072 | Deferred | 未確認 | CWE-476 | A NULL pointer dereference in the CDR processing path of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via supplying crafted payload. |
| CVE-2026-30073 | Deferred | 未確認 | CWE-770 | An issue in the NssaiAvailabilitySubscriptionCreate component of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. |
| CVE-2026-30250 | Deferred | 未確認 | CWE-79 | Cross-site scripting vulnerability in the user documentation field in Beta Systems Software AG ANOW! Automate v.3.3.1.90 allows a remote attacker to execute arbitrary code |
| CVE-2026-3035 | Analyzed | 未確認 | CWE-288 | GitLab has remediated an issue in GitLab EE affecting all versions from 11.3 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authentica |
| CVE-2026-30512 | Deferred | 未確認 | CWE-250 | A local privilege escalation vulnerability exists in the Restricted Access (Kiosk) Mode implementation of Scheidt & Bachmann entervo HMI prior to V2 R5 P0 M5. The vulnerability aff |
| CVE-2026-30612 | Deferred | 未確認 | CWE-494 | An issue in Time4 Popcorn for Windows <= 6.2.1.18 and Time4Popcorn for MacOS <= 6.2.1.17 and Time4Popcorn for Android <= 3.5.0.173 allows a remote attacker to execute arbitrary cod |
| CVE-2026-30819 | Deferred | 未確認 | CWE-79 | Combodo iTop is a web based IT service management tool. Prior to 3.2.3, iTop has a reflected Cross-Site Scripting (XSS) vulnerability in its dashboard revert functionality with the |
| CVE-2026-30826 | Deferred | 未確認 | CWE-79 | Combodo iTop is a web based IT service management tool. Prior to 3.2.3, there is a Reflected Cross-Site Scripting (XSS) vulnerability in the testing OQL query functionality. This i |
| CVE-2026-30864 | Deferred | 未確認 | CWE-79 | Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, iTop is vulnerable to Reflected Cross-Site Scripting (XSS) in the dashboard revert functionality. This issue |
| CVE-2026-30865 | Deferred | 未確認 | CWE-79 | Combodo iTop is a web based IT service management tool. Prior to 3.2.3, there is a Reflected Cross-Site Scripting (XSS) vulnerability in the dashboard save functionality. This issu |
| CVE-2026-30866 | Deferred | 未確認 | CWE-200, CWE-306 | Combodo iTop is a web based IT service management tool. Prior to 3.2.3, unauthenticated users can access uploaded sensitive via sniffed url. This issue has been fixed in version 3. |
| CVE-2026-30890 | Deferred | 未確認 | CWE-79 | Combodo iTop is a web based IT service management tool. Prior to 3.2.3, there is a Reflected Cross-Site Scripting (XSS) vulnerability in the synchro import script. This issue has b |
| CVE-2026-3129 | Deferred | 未確認 | CWE-79 | The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via crafted `<img>` tag attributes in all versions up to, and including, 7.7. This is due to a |
| CVE-2026-3141 | Deferred | 未確認 | CWE-862 | The FormGent plugin for WordPress is vulnerable to unauthorized arbitrary file deletion due to a missing capability check on the /wp-json/formgent/responses/attachments REST API en |
| CVE-2026-31803 | Deferred | 未確認 | CWE-79 | Combodo iTop is a web based IT service management tool. Prior to 3.2.3, 3.2.3, there is a Reflected Cross-Site Scripting (XSS) vulnerability in pages/tagadmin.php. This issue has b |
| CVE-2026-31880 | Deferred | 未確認 | CWE-79 | Combodo iTop is a web based IT service management tool. Prior to 3.2.3, there is a Reflected Cross-Site Scripting (XSS) vulnerability in the universal search. This issue has been f |
| CVE-2026-31936 | Deferred | 未確認 | CWE-862 | Combodo iTop is a web based IT service management tool. Prior to 3.2.3, users can access to unauthorized object information through the search operation. This issue has been fixed |
| CVE-2026-32227 | Analyzed | 未確認 | CWE-89 | SQL Injection vulnerability vulnerability in Apache Ranger. This issue affects . Users are recommended to upgrade to version 2.9.0, which fixes the issue. |
| CVE-2026-32257 | Deferred | 未確認 | CWE-79 | Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework. Prior to 1.2.13, custom CSS supplied through the Brand Settings Styles field by a |
| CVE-2026-32258 | Deferred | 未確認 | CWE-79 | Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework. From 1.2.10 through 1.2.12, authenticated backend users with the backend.manage_ed |
| CVE-2026-32327 | Analyzed | 未確認 | CWE-674 | A bug in APR-util version 1.6.3 (and earlier) allows a stack recursion attack against any library consumer which parses XML from untrusted sources and uses the apr_xml_quote_elem() |
| CVE-2026-32333 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Mayosis Core <= 5.4.7 versions. |
| CVE-2026-3235 | Deferred | 未確認 | CWE-639 | The WP Data Access plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.5.68 via the 'check_app_access' function due to mi |
| CVE-2026-32444 | Deferred | 未確認 | CWE-94 | Contributor Remote Code Execution (RCE) in Cwicly <= 1.4.4 versions. |
| CVE-2026-3245 | Awaiting Analysis | 未確認 | CWE-502 | A deserialization vulnerability in PRISMAproduction Version 6.5 or earlier that may lead to arbitrary code execution. |
| CVE-2026-32463 | Deferred | 未確認 | CWE-434 | Contributor Arbitrary File Upload in Sync Post With Other Site <= 1.9.3 versions. |
| CVE-2026-32464 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Theme Test Drive <= 2.9.1 versions. |
| CVE-2026-32465 | Deferred | 未確認 | CWE-502 | Customer PHP Object Injection in Essential Real Estate <= 5.3.3 versions. |
| CVE-2026-32466 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in Gravity Forms Bookings premium <= 2.1 versions. |
| CVE-2026-32467 | Deferred | 未確認 | CWE-918 | Subscriber Server Side Request Forgery (SSRF) in [Aotuman] Grab WeChat Articles <= 2.0.1 versions. |
| CVE-2026-32468 | Deferred | 未確認 | CWE-497 | Unauthenticated Sensitive Data Exposure in Duitku Payment Gateway <= 2.11.14 versions. |
| CVE-2026-32469 | Deferred | 未確認 | CWE-290 | Unauthenticated Bypass Vulnerability in CAPTCHA 4WP <= 7.6.0 versions. |
| CVE-2026-32470 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in FundEngine <= 1.7.9 versions. |
| CVE-2026-32471 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in ProLancer Element <= 1.4.8 versions. |
| CVE-2026-32472 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Online Contact Widget <= 1.3.0 versions. |
| CVE-2026-32473 | Deferred | 未確認 | CWE-918 | Unauthenticated Server Side Request Forgery (SSRF) in PDF Smart Viewer for Elementor <= 1.0.4 versions. |
| CVE-2026-32474 | Deferred | 未確認 | CWE-434 | Contributor Arbitrary File Upload in Templatiq <= 0.2.5 versions. |
| CVE-2026-32475 | Deferred | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue affects Elementor Pro: from n/a through 4.2.1. |
| CVE-2026-32476 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Brave Conversion Engine (PRO) <= 0.8.6 versions. |
| CVE-2026-32477 | Deferred | 未確認 | CWE-22 | Unauthenticated Arbitrary File Deletion in ShopBuilder Pro – Elementor WooCommerce Builder Addons <= 2.2.0 versions. |
| CVE-2026-32478 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in WP Project Manager Pro <= 4.0.1 versions. |
| CVE-2026-32479 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Visitor Traffic Real Time Statistics Pro <= 11.17 versions. |
| CVE-2026-32481 | Deferred | 未確認 | CWE-288 | Unauthenticated Broken Authentication in Ezoic <= 2.22.11 versions. |
| CVE-2026-32547 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in BP Better Messages <= 2.15.22 versions. |
| CVE-2026-32548 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in SureCart <= 4.6.2 versions. |
| CVE-2026-32549 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in ThumbPress < 6.5 versions. |
| CVE-2026-32550 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in Kadence Shop Kit <= 3.0.6 versions. |
| CVE-2026-32551 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DiviNext Woo Essential allows SQL Injection. This issue affects Woo Essential |
| CVE-2026-32552 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in YITH WooCommerce Membership Premium <= 2.33.0 versions. |
| CVE-2026-32553 | Deferred | 未確認 | CWE-918 | Unauthenticated Server Side Request Forgery (SSRF) in OttoKit <= 1.1.35 versions. |
| CVE-2026-32554 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in WooBeWoo Product Filter Pro <= 3.1.8 versions. |
| CVE-2026-32555 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Boost <= 2.0.4 versions. |
| CVE-2026-32556 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Boost <= 2.0.4 versions. |
| CVE-2026-32558 | Deferred | 未確認 | CWE-266 | Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress <= 8.9.1 versions. |
| CVE-2026-32559 | Deferred | 未確認 | CWE-434 | Subscriber Arbitrary File Upload in UltimateAI <= 3.1.0 versions. |
| CVE-2026-32560 | Deferred | 未確認 | CWE-98 | Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator <= 1.4 versions. |
| CVE-2026-32561 | Deferred | 未確認 | CWE-266 | Subscriber Privilege Escalation in Booking Hub <= 1.3.0 versions. |
| CVE-2026-32563 | Deferred | 未確認 | CWE-502 | Subscriber PHP Object Injection in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions. |
| CVE-2026-32564 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions. |
| CVE-2026-32566 | Deferred | 未確認 | CWE-266 | Unauthenticated Privilege Escalation in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions. |
| CVE-2026-32593 | Deferred | 未確認 | CWE-89 | Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, the backend Filter widget is vulnerable to SQL injection throu |
| CVE-2026-32637 | Deferred | 未確認 | CWE-22 | Velero is an open source tool for backing up, restoring, and migrating Kubernetes cluster resources and persistent volumes. Prior to 1.18.1, an attacker who compromises the backup |
| CVE-2026-32639 | Deferred | 未確認 | CWE-289 | Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, the CMS section's Theme Editor AJAX handlers did not enforce p |
| CVE-2026-32657 | Awaiting Analysis | 未確認 | CWE-61 | Dell AppSync Version 4.6.0.0, Dell Metro Node Version 8.0.0, Dell UCC Edge Version 3.0.1, Dell VxRail Version 8.0.322, Dell PowerMax Version 10.3.0, Dell Unity Version 5.4, Dell Po |
| CVE-2026-32677 | Analyzed | 未確認 | CWE-22 | Path traversal for some gaudi-container-runtime before version 1.24.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an |
| CVE-2026-32788 | Analyzed | 未確認 | CWE-427 | Uncontrolled search path for some Approximate Bayesian Inference Framework before version on commit #484c949 within Ring 3: User Applications may allow an escalation of privilege. |
| CVE-2026-32791 | Analyzed | 未確認 | CWE-426 | Untrusted search path for some Intel(R) Performance Counter Monitor (Intel(R) PCM) before version tag 202604 within Ring 3: User Applications may allow an escalation of privilege. |
| CVE-2026-32802 | Awaiting Analysis | 未確認 | CWE-269 | Dell PowerPath, version 7.2 through to 8.0 SP1, contains an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this |
| CVE-2026-32835 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-33047 | Deferred | 未確認 | CWE-862 | Combodo iTop is a web based IT service management tool. Prior to 3.2.3, an object can be locked by a user who is not assigned write permissions. This issue has been fixed in versio |
| CVE-2026-33181 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-33942. Reason: This candidate is a duplicate of CVE-2026-33942. Notes: All CVE users should ref | |
| CVE-2026-33240 | Deferred | 未確認 | CWE-79 | Combodo iTop is a web based IT service management tool. Prior to 3.2.3, there was a Reflected Cross-Site Scripting (XSS) vulnerability in the foreign key search criteria API. This |
| CVE-2026-33263 | Deferred | 未確認 | CWE-403 | When mail_max_userip_connections is set (default 10) and reached, submission-login can crash with epoll() panic caused by file descriptor handling issues. If running in high-securi |
| CVE-2026-33333 | Deferred | 未確認 | CWE-209 | Combodo iTop is a web based IT service management tool. Prior to 3.2.3, there is sensitive information disclosure in the error messages. This issue has been fixed in version 3.2.3. |
| CVE-2026-33437 | Awaiting Analysis | 未確認 | CWE-79 | Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.0.0, the Get Info workflow in app/core/src/main/resources/templates/se |
| CVE-2026-33591 | Deferred | 未確認 | CWE-288 | A vulnerability in Wapt Server before version 2.6.1.17813 allows a remote unauthenticated attacker to bypass security restriction using a specially crafted packet and retrieve a v |
| CVE-2026-33604 | Deferred | 未確認 | CWE-655 | An attacker that can get Dovecot to relay a message, for example through Sieve redirect or submission relay, can use a crafted line ending in the message body to bypass the outboun |
| CVE-2026-33605 | Deferred | 未確認 | CWE-400 | An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating. If running in high-security mode (default for commun |
| CVE-2026-33606 | Deferred | 未確認 | CWE-93 | Mail content stored by a user can be crafted so that it is interpreted as dsync protocol commands when an administrator later runs dsync with the stream protocol, for example durin |
| CVE-2026-33607 | Deferred | 未確認 | CWE-400 | An attacker that has valid credentials can use IMAP LIST command to consume CPU. This can cause degradation or denial of service for IMAP. Monitor system for abnormal CPU usage and |
| CVE-2026-33818 | Awaiting Analysis | 未確認 | CWE-400 | Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures. |
| CVE-2026-33921 | Awaiting Analysis | 未確認 | CWE-1188 | The Windows installer deployed Npcap leaving its access restriction option at the insecure default value, so the driver was accessible to every local user of the host instead of be |
| CVE-2026-33922 | Awaiting Analysis | 未確認 | CWE-22 | A path traversal vulnerability was discovered in the Offline archives functionality of the local web interface due to insufficient validation of an input parameter. A local user wi |
| CVE-2026-3415 | Deferred | 未確認 | CWE-776 | The XML and schema validation functionalities within the SchemaValidator Mediator process XML input as part of validation flows. Under certain conditions, the XML parser allows the |
| CVE-2026-34175 | Analyzed | 未確認 | CWE-427 | Uncontrolled search path for some Hardware-Aware-Automated-MachineLearning NA before version 45cd723 within Ring 3: User Applications may allow an escalation of privilege. Unprivil |
| CVE-2026-3418 | Deferred | 未確認 | CWE-434 | The System REST API accepts user-supplied file uploads without enforcing sufficient validation on the file type or destination, allowing files to be written to arbitrary server-acc |
| CVE-2026-34191 | Analyzed | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Portable Runtime Utility via apr_dbd_oracle provider. This issue affec |
| CVE-2026-3423 | Deferred | 未確認 | CWE-79 | The Envira Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the gallery 'description' configuration field in all versions up to, and including, 1.12.4 |
| CVE-2026-3424 | Deferred | 未確認 | CWE-94 | The The kk Star Ratings – Rate Post & Collect User Feedbacks plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.4.10.3. Thi |
| CVE-2026-34265 | Awaiting Analysis | 未確認 | CWE-787 | SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to exploit logical errors in DIAG protocol parsing, resulting in memory corruption. This vulnerability coul |
| CVE-2026-3430 | Deferred | 未確認 | CWE-89 | The Creative Mail WordPress plugin from 1.6.5 to 1.6.9 does not sanitize and escape a parameter before using in an SQL statement, leading to an unauthenticated SQL injection when t |
| CVE-2026-34398 | Awaiting Analysis | 未確認 | CWE-95 | FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, src/Mod/BIM/bimcommands/BimProjectManager.py in the BIM Project Manager Load Template |
| CVE-2026-34399 | Awaiting Analysis | 未確認 | CWE-95 | FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, FreeCAD's BIM Workbench contains an eval() call on untrusted data from SVG template fi |
| CVE-2026-34423 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-34491 | Awaiting Analysis | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Johnson Controls Metasys 14 and Johnson Controls Metasys 15 allows Cross Site |
| CVE-2026-34492 | Awaiting Analysis | 未確認 | CWE-73 | External control of file name or path vulnerability in Johnson Controls Airwall allows : File Manipulation. This issue affects Airwall: before 4.1. |
| CVE-2026-34501 | Analyzed | 未確認 | CWE-122 | Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility redis client. This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3. Users are |
| CVE-2026-34502 | Analyzed | 未確認 | CWE-122 | Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client This issue affects Apache Portable Runtime Utility: from 1.3.0 through 1.6.3. |
| CVE-2026-34616 | Analyzed | 未確認 | CWE-125 | DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to dis |
| CVE-2026-34620 | Analyzed | 未確認 | CWE-787 | DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds write vulnerability that could lead to application denial-of-service. An attacker could leverage this vulne |
| CVE-2026-34635 | Analyzed | 未確認 | CWE-321 | is affected by a Use of Hard-coded Cryptographic Key vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to by |
| CVE-2026-34674 | Analyzed | 未確認 | CWE-122 | Substance3D - Sampler versions 5.1.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the curr |
| CVE-2026-34741 | Deferred | 未確認 | CWE-306 | Combodo iTop is a web based IT service management tool. Prior to 3.2.3, authentication bypass allows unauthenticated remote attackers to execute arbitrary PHP files from the env-pr |
| CVE-2026-34789 | Awaiting Analysis | 未確認 | CWE-94 | FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, src/App/PropertyPythonObject.cpp in PropertyPythonObject::Restore() passes the attacker-contr |
| CVE-2026-34836 | Deferred | 未確認 | CWE-862 | Combodo iTop is a web based IT service management tool. Prior to 3.2.3, improper access control in ajax.render.php and ajax.document.php allows for document access without checking |
| CVE-2026-34884 | Analyzed | 未確認 | CWE-918 | SSRF via set_skywalking_url Tool and GraphQL expression injection vulnerability in Apache SkyWalking MCP. This issue affects Apache SkyWalking MCP: 0.1.0. Users are recommend |
| CVE-2026-34948 | Deferred | 未確認 | CWE-200 | Combodo iTop is a web based IT service management tool. Prior to 3.2.3, only classes present in the SELECT clause are protected by the silos access check in OQL. This issue has bee |
| CVE-2026-34949 | Deferred | 未確認 | CWE-306 | Combodo iTop is a web based IT service management tool.Prior to 3.2.3, an unauthenticated user could delete the .readonly file on iTop instances — a file created during the setup p |
| CVE-2026-34959 | Deferred | 未確認 | CWE-20 | Adminer 4.6.0 before 5.5.0 prepends the client-supplied X-Forwarded-Prefix header to $_SERVER["REQUEST_URI"] with no trusted-proxy check and no validation of the prefix value. An a |
| CVE-2026-34964 | Deferred | 未確認 | CWE-918 | Adminer before 5.5.0 contains a server-side request forgery vulnerability in the login form's server field validator, which only inspects leading integers for privileged ports and |
| CVE-2026-34966 | Deferred | 未確認 | CWE-918 | Gitea prior to 1.27.0 contains a server-side request forgery vulnerability that allows authenticated attackers to bypass SSRF protections by exploiting HTTP fetch operations in mig |
| CVE-2026-34967 | Deferred | 未確認 | CWE-73 | Adminer versions 5.3.0 through 5.4.2 with the sql-log plugin enabled contain an arbitrary file write vulnerability in the ns parameter of plugins/sql-log.php. An authenticated user |
| CVE-2026-34968 | Deferred | 未確認 | CWE-22 | Adminer before 5.4.3 contains an arbitrary file deletion vulnerability in SQLite mode where the database-list drop action fails to validate file extensions before deletion. An auth |
| CVE-2026-35005 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-35006 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-35026 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-35027 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-35028 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-35163 | Deferred | 未確認 | CWE-80 | OctoPrint provides a web interface for controlling consumer 3D printers. Prior to 1.11.8 and 2.0.0rc3, Suppressed Command notification popups use PNotify rendering for printer-cont |
| CVE-2026-35219 | Deferred | 未確認 | CWE-918 | Budibase is an open-source low-code platform. Prior to 3.41.3, automation steps in packages/server/src/automations/steps/outgoingWebhook.ts, packages/server/src/automations/steps/z |
| CVE-2026-35445 | Deferred | 未確認 | CWE-285 | Winter CMS is a content management system built on the Laravel PHP framework. In versions prior to 1.2.13, the backend did not validate the handler name submitted through the form |
| CVE-2026-35502 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data for some Intel(R) Extension for PyTorch before version 2.8.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged s |
| CVE-2026-35868 | Deferred | 未確認 | CWE-20 | A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of LB-link Router AC2100_AZ3 V1.0.4. This flaw occurs due to insufficien |
| CVE-2026-35869 | Deferred | 未確認 | CWE-20 | A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of LB-link Router AC450M V4.0.0. This flaw occurs due to insufficient va |
| CVE-2026-36102 | Deferred | 未確認 | CWE-269 | An issue in the inviteController.js component in Bluewave Labs Checkmate <=3.3.0 allows remote authenticated administrators to escalate privileges to superadmin via the role parame |
| CVE-2026-3627 | Analyzed | 未確認 | CWE-89 | IBM Concert 1.0.0 through 2.3.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, |
| CVE-2026-3639 | Deferred | 未確認 | CWE-79 | The PPWP – Password Protect Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `ppwp` shortcode attributes in all versions up to, and includin |
| CVE-2026-36851 | Deferred | 未確認 | CWE-22 | Path traversal vulnerability in UnPoller 2.33.0 password field allows arbitrary file read and network exfiltration. |
| CVE-2026-3686 | Awaiting Analysis | 未確認 | CWE-770 | IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 is vulnerable to a denial of service due to improper limitation of resources. |
| CVE-2026-37003 | Deferred | 未確認 | CWE-94 | Agno up to and including 2.5.8 is vulnerable to Remote Code Execution (RCE) via prompt injection. The PythonTools and ShellTools components pass unsanitized, LLM-generated argument |
| CVE-2026-37004 | Deferred | 未確認 | CWE-1336 | BerriAI litellm <=1.82.4 is vulnerable to Server-Side Template Injection (SSTI), which allows unauthenticated remote attackers to execute arbitrary OS commands via a crafted dotpro |
| CVE-2026-37006 | Deferred | 未確認 | CWE-287 | A vulnerability in the WebSocket endpoint of gpt-researcher v0.14.7 and before allows an unauthenticated remote attacker to achieve code execution via malicious Model Context Proto |
| CVE-2026-37007 | Deferred | 未確認 | CWE-22 | A vulnerability in FileWriterTool in crewai-tools <= 1.10.2rc1 allows a remote attacker to achieve code execution via malicious path traversal sequences in the filename argument. |
| CVE-2026-37009 | Deferred | 未確認 | CWE-89 | A SQL injection vulnerability in NL2SQLTool in crewai-tools v1.10.2rc1 allows a remote attacker to execute arbitrary SQL commands via an unsanitized sql_query argument. |
| CVE-2026-37012 | Deferred | 未確認 | CWE-798 | A vulnerability in pentestgpt/core/langfuse.py in PentestGPT 1.0.0 allows remote attackers to disclose sensitive user telemetry data via hardcoded API credentials. |
| CVE-2026-37064 | Deferred | 未確認 | CWE-203 | User enumeration in /vfm-admin/ajax/usr-check.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to enumerate the application users via sending a specially c |
| CVE-2026-37065 | Deferred | 未確認 | CWE-552 | Veno File Manager Project 4.4.9 is vulnerable to Arbitrary File Deletion in /vfm-admin/index.php?section=translations&action=update&remove=. |
| CVE-2026-37066 | Deferred | 未確認 | CWE-22 | Path traversal leading to Arbitrary File Read in /vfm-admin/index.php and /vfm-admin/ajax/streamvid.php in Veno File Manager Project 4.4.9 allows and authenticated attacker with su |
| CVE-2026-37067 | Deferred | 未確認 | CWE-284 | Incorrect access control in /vfm-admin/admin-panel/view/save-cvs.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to extract all application logs from a de |
| CVE-2026-37068 | Deferred | 未確認 | CWE-22 | Arbitrary file write in /vfm-admin/index.php?section=translations&action=update in Veno File Manager Project 4.4.9 allows an authenticated user with the role of super administrator |
| CVE-2026-37069 | Deferred | 未確認 | CWE-200 | Absolute Path Disclosure in /vfm-admin/assets/zipstream/grandt/relativepath/RelativePath.Example1.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to know |
| CVE-2026-37070 | Deferred | 未確認 | CWE-284 | Incorrect access control in /vfm-admin/ajax/streamvid.php in Veno File Manager Project in 4.4.9 allows an authenticated attacker to read any uploaded files by other users as long a |
| CVE-2026-37071 | Deferred | 未確認 | CWE-269 | Arbitrary File Rename Leading to Privilege Escalation in Actions::renameFile() function in Veno File Manager Project 4.4.9 allows an authenticated attacker with 'reanme' permission |
| CVE-2026-37072 | Deferred | 未確認 | CWE-284 | Veno File Manager Project Veno File Manager Project 4.4.9 is vulnerable to Incorrect Access Control in admin-head-updates.php. |
| CVE-2026-37073 | Deferred | 未確認 | CWE-284 | Incorrect access control in /vfm-admin/ajax/sendfiles.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to send emails from the configured SMPT server on th |
| CVE-2026-37171 | Deferred | 未確認 | CWE-863 | A lack of tenant separation in SuperTokens Inc. SuperTokens Core v6.0.0 to v11.4.0 allows an authenticated party in one tenant to access sessions, data, and endpoints of another te |
| CVE-2026-37198 | Deferred | 未確認 | CWE-190 | An integer overflow in the SMF component of Open5GS v2.7.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted GTP packet. |
| CVE-2026-37236 | Deferred | 未確認 | CWE-639 | grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X-HTTP-Method-Override header in ServeMux.ServeHTTP without restricting allowed method |
| CVE-2026-37237 | Analyzed | 未確認 | CWE-400 | vLLM up to and including 0.17.0 allows remote attackers to cause a Denial of Service via memory exhaustion. The AsyncMediaIO.fetch_audio and AsyncMediaIO.fetch_image functions in m |
| CVE-2026-37710 | Deferred | 未確認 | CWE-79 | Cross Site Scripting vulnerability in Omeka S v.4.2.0 allows a remote attacker to execute arbitrary code via the site navigation custom URL function |
| CVE-2026-37736 | Deferred | 未確認 | CWE-770 | An issue in the JsonSanitizer.sanitize() component of OWASP json-sanitizer v1.2.3 allows attackers to cause a Denial of Service (DoS) via a crafted input. |
| CVE-2026-37751 | Deferred | 未確認 | CWE-78 | An OS command injection vulnerability in the killSessionSync function (lib/agent-runtime.ts) of 23blocks-OS ai-maestro v0.24.17 allows attackers to execute arbitrary commands via a |
| CVE-2026-38093 | Deferred | 未確認 | CWE-22 | file_picker (aka flutter_file_picker) for Flutter, all versions through 10.3.10, is vulnerable to path traversal (CWE-22) in its Android implementation. The openFileStream() method |
| CVE-2026-38165 | Deferred | 未確認 | CWE-94 | A Server-Side Template Injection (SSTI) vulnerability in the Velocity template engine configuration of xdocreport v0.9.2 to v2.2.0 allows attackers to execute arbitrary code via a |
| CVE-2026-38343 | Awaiting Analysis | 未確認 | CWE-190 | An integer overflow in the libavfilter/vf_scale.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted video file. |
| CVE-2026-38344 | Deferred | 未確認 | CWE-476 | A NULL pointer dereference in the get_min_buffer_size function (/libswscale/slice.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplyin |
| CVE-2026-38345 | Deferred | 未確認 | CWE-369 | A Division-by-Zero vulnerability in the ff_sws_init_single_context function (/libswscale/utils.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) |
| CVE-2026-38346 | Awaiting Analysis | 未確認 | CWE-190 | An integer overflow in the yuv2planeX_8_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafte |
| CVE-2026-38347 | Deferred | 未確認 | CWE-122 | A heap overflow in the ff_sws_alphablendaway function (libswscale/alphablend.c) of FFmpeg git-master commit 722a217 allows attackers to cause a Denial of Service (DoS) via a crafte |
| CVE-2026-38348 | Awaiting Analysis | 未確認 | CWE-190 | An integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted image file. |
| CVE-2026-38349 | Awaiting Analysis | 未確認 | CWE-190 | An integer overflow in the hScale16To19_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafte |
| CVE-2026-3835 | Deferred | 未確認 | CWE-285 | The Prevent Direct Access – Protect WordPress Files plugin for WordPress is vulnerable to unauthorized access of protected files due to insufficient token validation in the `get_ad |
| CVE-2026-38350 | Awaiting Analysis | 未確認 | CWE-190 | An integer overflow in the target_sws_fuzzer() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a cra |
| CVE-2026-38444 | Deferred | 未確認 | CWE-79 | osTicket v1.18.3 is vulnerable to Stored Cross-Site Scripting (XSS) via the email From-header display name. The value is extracted without sanitization in include/class.mailparse.p |
| CVE-2026-38446 | Deferred | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability exists in osTicket 1.18.3 due to improper sanitization of the thread entry title field. User-controlled input in the title is stor |
| CVE-2026-38447 | Deferred | 未確認 | CWE-331 | osTicket 1.18.3 generates API keys using a predictable construction based on MD5 hashing. The use of MD5, combined with predictable inputs such as the current timestamp and client |
| CVE-2026-38465 | Deferred | 未確認 | CWE-79 | A Stored XSS vulnerability in the donor avatar mouse-over text feature in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote authenticated |
| CVE-2026-38466 | Deferred | 未確認 | CWE-79 | A Stored XSS vulnerability in the torrent remaster custom title feature in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote authenticated |
| CVE-2026-38467 | Deferred | 未確認 | CWE-89 | A SQL injection vulnerability in the tags manager in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote authenticated users with users_mod |
| CVE-2026-38468 | Deferred | 未確認 | CWE-89 | A SQL injection vulnerability in the country-code lookup endpoint in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote authenticated users |
| CVE-2026-38469 | Deferred | 未確認 | CWE-79 | A Stored XSS vulnerability in the custom bonus title feature in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote authenticated users to i |
| CVE-2026-38470 | Deferred | 未確認 | CWE-284 | A Broken access control vulnerability in the API user endpoint in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446449 allows unprivileged, authenticated u |
| CVE-2026-38472 | Deferred | 未確認 | CWE-79 | A Stored XSS vulnerability in forum reward comments in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote attackers to inject arbitrary Jav |
| CVE-2026-38473 | Deferred | 未確認 | CWE-79 | A Stored XSS vulnerability in the subtitle deletion flow in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote authenticated users to injec |
| CVE-2026-38474 | Deferred | 未確認 | CWE-284 | GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446449 suffers from a Broken access control vulnerability in the IP lock manager, which allows remote authent |
| CVE-2026-38577 | Deferred | 未確認 | CWE-798 | Insecure hardcoded credentials in the Admin account of Tenda HG21 V4.0.0-260302 allows attackers to gain root access. |
| CVE-2026-38636 | Deferred | 未確認 | CWE-400 | An issue in the seekdir() function (/dirent/mod.rs) of relibc commit 61f42d allows attackers to cause a Denial of Service (DoS) via a crafted input. |
| CVE-2026-38638 | Deferred | 未確認 | CWE-400 | An issue in the with_argv function (/unistd/mod.rs) of relibc commit 61f42d allows attackers to cause a Denial of Service (DoS) via a crafted input. |
| CVE-2026-38725 | Deferred | 未確認 | CWE-79 | xipblog module v2.0.1 and before for PrestaShop allows unauthenticated remote attackers to inject arbitrary JavaScript via the name and content parameters in ajax.php. The input is |
| CVE-2026-38819 | Deferred | 未確認 | CWE-401 | Multiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive portal network to exhaust all available memory on the device within minutes. |
| CVE-2026-38820 | Deferred | 未確認 | CWE-78 | openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /opennds_preauth/ endpoint because o |
| CVE-2026-38821 | Deferred | 未確認 | CWE-122 | A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on the captive portal network to crash the openNDS daemon (denial |
| CVE-2026-38822 | Deferred | 未確認 | CWE-78 | In openNDS before 11.0.0, the client_params.sh script, invoked by the openNDS daemon to serve the authenticated client status page, is vulnerable to OS command injection through cr |
| CVE-2026-3883 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-39070 | Deferred | 未確認 | CWE-79 | WordPress plugin (Bit Assist) before 1.7.2 is affected by Stored Cross-Site Scripting in Call-To-Action feature. An authenticated attacker with the privileged role (admin) can expl |
| CVE-2026-39071 | Deferred | 未確認 | CWE-79 | WordPress plugin (Spiffy Plugin) before 5.0.9 is affected by Stored Cross-Site Scripting in Event Title field. An authenticated attacker with the lowest privileged role (contributo |
| CVE-2026-39113 | Deferred | 未確認 | CWE-122 | Buffer Overflow vulnerability in SQLite affected version source snapshots/builds containing Fossil check-in 8bdc0d485e3ad0c7a1e818da66f106951d496b05cbe61d12c2c448f2f24b6d5d (Git mi |
| CVE-2026-39254 | Deferred | 未確認 | CWE-120 | Buffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to execute arbitrary code via the libSSEdevice.dylib, CxAudioHidDevice::DeviceGetDescript |
| CVE-2026-39255 | Deferred | 未確認 | CWE-120 | Buffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to execute arbitrary code via the libSSEdevice.dylib, dup_wcs components |
| CVE-2026-39275 | Deferred | 未確認 | CWE-79 | Cross Site Scripting vulnerability in Cockpit CMS v.2.13.5 and before allows a remote attacker to execute arbitrary code via the item.php, field-select.js and tags.js components |
| CVE-2026-39452 | Analyzed | 未確認 | CWE-693 | Protection mechanism failure for some Intel(R) Transfer Learning Tool before version v0.7 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged softwa |
| CVE-2026-39909 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-39914 | Deferred | 未確認 | CWE-862 | TIM Flow before 26.0.6 contains an improper authorization vulnerability that allows any authenticated user to submit arbitrary SQL queries to a privileged dashboard Excel export en |
| CVE-2026-39915 | Deferred | 未確認 | CWE-113 | TIM Flow before 26.0.6 contains a CRLF injection vulnerability that allows remote attackers to inject arbitrary HTTP headers and response body content by embedding unsanitized carr |
| CVE-2026-39923 | Deferred | 未確認 | CWE-324 | Flarum before 1.8.16 contains a password reset token expiry bypass vulnerability that allows unauthenticated attackers to reuse expired password reset tokens by submitting them dir |
| CVE-2026-39924 | Deferred | 未確認 | CWE-613 | Flarum before 1.8.16 contains an improper session invalidation vulnerability that allows attackers who hold a valid session token to retain full account access after a victim chang |
| CVE-2026-39925 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-39931 | Analyzed | 未確認 | CWE-434 | OpenEMR through 8.2.0 contains an authenticated SQL injection vulnerability in the backup configuration import feature that allows administrators with admin or super ACL privileges |
| CVE-2026-39932 | Analyzed | 未確認 | CWE-95 | OpenEMR through 8.2.0 contains a remote code execution vulnerability in the document category tree component (library/classes/Tree.class.php) that allows authenticated administrato |
| CVE-2026-39944 | Awaiting Analysis | 未確認 | CWE-327 | Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the RADOS Gateway (RGW) protects STS session |
| CVE-2026-39975 | Deferred | 未確認 | CWE-94 | Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, unauthenticated users could delete the .readonly file on iTop instances, leading to code execution. This fil |
| CVE-2026-40013 | Deferred | 未確認 | CWE-124 | An attacker that has valid credentials can submit a Sieve script containing an extreme numeric literal, which causes an out-of-bounds write when the ManageSieve service compiles th |
| CVE-2026-40014 | Deferred | 未確認 | CWE-400 | An attacker that can send mail to a user can craft a message header that makes the IMAP THREAD command consume CPU disproportionate to the size of the message. When a mail client i |
| CVE-2026-40015 | Deferred | 未確認 | CWE-125 | An attacker that has valid credentials can open many connections to the imap-hibernate service and send invalid commands, which can intermittently cause an out-of-bounds read and c |
| CVE-2026-40017 | Deferred | 未確認 | CWE-400 | An attacker that can send mail to a user can craft a message header whose values are chosen to collide in an internal hash table, which makes the IMAP THREAD command consume CPU di |
| CVE-2026-40018 | Deferred | 未確認 | CWE-89 | None None None No publicly available exploits are known. |
| CVE-2026-40019 | Deferred | 未確認 | CWE-400 | An unauthenticated attacker can send a truncated quoted argument to the ManageSieve login process, which makes it spin in an infinite loop consuming CPU. This can cause degradation |
| CVE-2026-40126 | Deferred | 未確認 | CWE-79 | OutSystems Service Center is vulnerable to a DOM-based Cross-Site Scripting (XSS) attack that can be exploited by a low-privileged attacker via the upload of a file with a maliciou |
| CVE-2026-40130 | Awaiting Analysis | 未確認 | CWE-121 | SAP SAPSPrint Service has memory corruption vulnerabilities in the handling of certain commands. An unauthenticated attacker could send specially crafted requests that trigger a bu |
| CVE-2026-40144 | Awaiting Analysis | 未確認 | CWE-125 | A memory-corruption vulnerability exists in a kernel-mode component of BeyondTrust Endpoint Privilege Management (Windows deployments) prior to version 26.1.2. Insufficient validat |
| CVE-2026-40145 | Awaiting Analysis | 未確認 | CWE-1220 | A vulnerability exists in the interaction between a Endpoint Privilege Management (Windows Deployment) support utility and the agent's tamper protection controls. Under certain con |
| CVE-2026-40203 | Deferred | 未確認 | CWE-200 | When IMAP compression is enabled, the same compression state is reused across responses in a session, so response sizes depend on both attacker-supplied mail and other mail in the |
| CVE-2026-40204 | Deferred | 未確認 | CWE-284 | None None None No publicly available exploits are known. |
| CVE-2026-40205 | Deferred | 未確認 | CWE-287 | An attacker that holds an OAuth2 token granting only part of the required scopes can authenticate, because when more than one scope is required in the configuration, the remote tok |
| CVE-2026-40345 | Deferred | 未確認 | CWE-674 | deepmerge-ts is a typescript library providing functionality to deep merging of javascript objects. Prior to 8.0.0, the deepmerge, deepmergeCustom, deepmergeInto, and deepmergeInto |
| CVE-2026-40375 | Analyzed | 未確認 | CWE-862 | Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network. |
| CVE-2026-40463 | Deferred | 未確認 | CWE-284 | WaveSuite is affected by an insufficient role-based access control vulnerability in the CPB Log Files feature. Successful exploitation allows an authenticated low-privilege user to |
| CVE-2026-40464 | Deferred | 未確認 | CWE-79 | NSP is vulnerable to a stored XSS due to insufficient validation or encoding of user-controlled input in a workflow application. An authenticated attacker with access to the workfl |
| CVE-2026-40465 | Deferred | 未確認 | CWE-601 | NSP is vulnerable to an open redirect due to insufficient server-side validation of the URL (or redirect) parameter. |
| CVE-2026-40506 | Deferred | 未確認 | CWE-22 | OpenEMR before 8.2.0 contains a path traversal vulnerability in the standard_tables_manage.php interface where the db GET parameter is passed without validation to temp_dir_cleanup |
| CVE-2026-40507 | Deferred | 未確認 | CWE-79 | OpenEMR before 8.3.0 contains a reflected cross-site scripting vulnerability in the patient portal template import handler. The templateHtml GET parameter is reflected into the pag |
| CVE-2026-40508 | Deferred | 未確認 | CWE-79 | OpenEMR before 8.3.0 contains a stored cross-site scripting vulnerability in the patient portal template import handler that allows authenticated attackers with Forms Administratio |
| CVE-2026-40509 | Deferred | 未確認 | CWE-352 | OpenEMR before 8.3.0 contains a cross-site request forgery vulnerability in the DICOM viewer. The web_path GET parameter in the DICOM viewer page is embedded unsanitized as a URL w |
| CVE-2026-40512 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-40526 | Deferred | 未確認 | CWE-22 | Volmarg Personal Management System contains a path traversal vulnerability that allows authenticated attackers to read arbitrary files by supplying absolute filesystem paths to the |
| CVE-2026-40541 | Undergoing Analysis | 未確認 | CWE-79 | An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in extract domain in Synology Chat Server before 2.4.5-22148 allows remote aut |
| CVE-2026-40717 | Analyzed | 未確認 | CWE-59 | Dell Monitor driver, version 1.0.0.0, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could po |
| CVE-2026-40877 | Deferred | 未確認 | CWE-502, CWE-94 | Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, iTop is vulnerable to PHP object injection in the user preference functionality, which can lead to remote co |
| CVE-2026-40920 | Analyzed | 未確認 | CWE-20, CWE-269, CWE-287 | Privilege Escalation via URL Parameter is reported in Apache Ranger versions <= 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes this issue. |
| CVE-2026-41012 | Awaiting Analysis | 未確認 | CWE-295 | Traffic interception vulnerability in BOSH Director vCenter CPI allows attackers positioned between BOSH Director and vCenter to impersonate vCenter REST API and capture administra |
| CVE-2026-41262 | Deferred | 未確認 | CWE-863 | Fleet is an open-source device management platform built on osquery. In versions prior to 4.85.0, the global policy read endpoint (GET /api/latest/fleet/policies/{policy_id}) fails |
| CVE-2026-41424 | Analyzed | 未確認 | CWE-863 | Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.9.0 until 4.10.4 and 4.14.6, PUT /security/users/{user_id} in api/api/controlle |
| CVE-2026-41447 | Deferred | 未確認 | CWE-426 | FirmaCheck for Windows before 1.3.16 contains a DLL hijacking vulnerability that allows local attackers to execute arbitrary code by placing a crafted openssl.cnf file in the unval |
| CVE-2026-41449 | Deferred | 未確認 | CWE-78 | UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the _run_command function that allows attackers to execute arbitrary comman |
| CVE-2026-41450 | Deferred | 未確認 | CWE-78 | UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the _command_collector function where foreach command output lines are subs |
| CVE-2026-41451 | Deferred | 未確認 | CWE-78 | UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the user substitution logic within parse_artifact.sh where usernames and ho |
| CVE-2026-41452 | Deferred | 未確認 | CWE-306 | Krayin CRM 2.2.4 contains a missing authentication vulnerability in the installer middleware that allows unauthenticated remote attackers to overwrite the primary administrator acc |
| CVE-2026-41453 | Deferred | 未確認 | CWE-89 | Krayin CRM before 2.2.4 contains a blind SQL injection vulnerability in the leads DataGrid that allows authenticated users with leads access to inject arbitrary SQL into a HAVING c |
| CVE-2026-41707 | Analyzed | 未確認 | CWE-294 | Authentication Bypass by Capture-replay vulnerability in Spring Spring Security allows Spring Security's DPoPProofJwtDecoderFactory contains a cache-based replay attack vulnerabili |
| CVE-2026-41861 | Awaiting Analysis | 未確認 | CWE-22 | Path Traversal in BOSH-Ecosystem / BOSH allows an IaaS-metadata attacker to make the agent write a root-owned file with partially attacker-controlled body to any path ending in .ne |
| CVE-2026-41921 | Awaiting Analysis | 未確認 | CWE-79 | Koha before 26.05.02, 25.11.07, and 25.05.13 contains a stored cross-site scripting vulnerability in the purchase suggestion handler that allows authenticated staff users to inject |
| CVE-2026-42007 | Deferred | 未確認 | CWE-416 | An attacker that has valid credentials can use a Sieve script with the editheader extension to trigger a use-after-free in the mail editing code, and to write memory contents beyon |
| CVE-2026-42008 | Deferred | 未確認 | CWE-287 | Forwarding information received from a host listed as a trusted proxy is not kept separate from Dovecot's own authentication fields, so a value sent by that host can be injected as |
| CVE-2026-42018 | Analyzed | 掲載 | CWE-287 | JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources. |
| CVE-2026-42142 | Deferred | 未確認 | CWE-862 | TypeBot is a chatbot builder tool. Prior to version 3.17.0, the `handleGetSheets` API handler (`POST /api/sheets/getSheets`) does not validate workspace membership, allowing any au |
| CVE-2026-42162 | Deferred | 未確認 | CWE-22 | Mahara before 25.04.5 and 26.04.0 is vulnerable to artefacts being accessible to others under certain circumstances when the file path to an artefact in a page is manipulated. |
| CVE-2026-42163 | Deferred | 未確認 | CWE-284 | Mahara before 25.04.5 and 26.04.0 is vulnerable to unauthorized access to internal accounts via Learning Tools Interoperability (LTI) under certain circumstances. This applies to L |
| CVE-2026-42164 | Deferred | 未確認 | CWE-200 | Mahara before 25.04.5 and 26.04.0 is vulnerable in the Text block/section functionality when a call is crafted in a certain way that allows it to recall the backed-up content from |
| CVE-2026-42169 | Modified | 未確認 | CWE-131 | A heap-buffer-overflow vulnerability exists in the APNG (Animated PNG) file loader of GIMP. This flaw occurs when the `fcTL` width exceeds the `IHDR` width, leading to pixel data b |
| CVE-2026-42170 | Analyzed | 未確認 | CWE-131 | A heap-based buffer overflow vulnerability exists in the GIMP DDS (DirectDraw Surface) file parser. When a crafted DDS file declares a D3D9 pixel format but sets a lower bits-per-p |
| CVE-2026-42391 | Deferred | 未確認 | CWE-400 | An unauthenticated attacker can send an IMAP ID command with a very large number of parameters before logging in, which causes memory and CPU usage to grow disproportionately. The |
| CVE-2026-42392 | Deferred | 未確認 | CWE-200 | An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returned to the client. Pro |
| CVE-2026-42393 | Deferred | 未確認 | CWE-200 | The comparison used for the doveadm password and API key is not fully timing safe and can reveal the length of the configured secret. An attacker with access to the same network as |
| CVE-2026-42395 | Deferred | 未確認 | CWE-400 | A host listed as a trusted proxy can send forwarding information containing a NUL byte, which crashes the login process on the following login attempt. The login process is termina |
| CVE-2026-4244 | Deferred | 未確認 | CWE-862 | The Post Duplicator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `duplicate_post()` function in all versions up |
| CVE-2026-4245 | Deferred | 未確認 | CWE-863 | The Post Duplicator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.0.11. This is due to the `duplicate_post_permissions()` permi |
| CVE-2026-4246 | Deferred | 未確認 | CWE-79 | The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 's' parameter of the Advanced Search REST endpoint in all versions up to, and includin |
| CVE-2026-42537 | Analyzed | 未確認 | CWE-20, CWE-94 | Remote Code Execution via JDBC URL Injection in Apache Ranger <= 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue. |
| CVE-2026-42931 | Deferred | 未確認 | CWE-770 | Denial of Service via Unbounded io.ReadAll in NPM Package Tag Endpoint |
| CVE-2026-42976 | Analyzed | 未確認 | CWE-306 | Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally. |
| CVE-2026-43606 | Awaiting Analysis | 未確認 | CWE-208 | Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analysis or electromagnetic |
| CVE-2026-43621 | Awaiting Analysis | 未確認 | CWE-863 | Simple Machines Forum (SMF) through 2.1.7, fixed in commit 6f0dc61, contains an authorization state-confusion vulnerability in the profile loader that allows authenticated low-priv |
| CVE-2026-43622 | Analyzed | 未確認 | CWE-415, CWE-762 | llama.cpp builds b1886 through b7445 contain a double free vulnerability in the LLaMA-Android JNI wrapper where new_1batch() allocates memory using malloc() while free_1batch() dea |
| CVE-2026-43627 | Analyzed | 未確認 | CWE-190, CWE-680 | llama.cpp builds b1283 through b9058 contain an integer overflow vulnerability in the llama_batch_init() function where unchecked multiplications in malloc() calls can wrap past IN |
| CVE-2026-43628 | Analyzed | 未確認 | CWE-125, CWE-191 | llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read vulnerability in the DRY sampler that allows unauthenticated attackers to trigger a heap bu |
| CVE-2026-43629 | Analyzed | 未確認 | CWE-190, CWE-787 | llama.cpp builds b4882 through b9058 contain a heap buffer overflow vulnerability in the KV cache state restore path where the state_read_data() function computes write size withou |
| CVE-2026-43630 | Modified | 未確認 | CWE-125, CWE-209 | llama.cpp builds b4882 before b8487 contain an out-of-bounds read vulnerability in the recurrent memory state restore path that allows attackers with write access to the slot save |
| CVE-2026-43631 | Analyzed | 未確認 | CWE-362, CWE-416 | llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in the vocab pointer of llama-server when the --sleep-idle-seconds feature is enabled, allow |
| CVE-2026-43632 | Analyzed | 未確認 | CWE-367, CWE-416 | llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in llama-server affecting six tokenization endpoints (/tokenize, /detokenize, /infill, /appl |
| CVE-2026-43657 | Analyzed | 未確認 | CWE-269 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.5 and iPadOS 26.5. A malicious app may be able to enumerate installed apps. |
| CVE-2026-43667 | Modified | 未確認 | CWE-617 | A reachable assertion was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5 |
| CVE-2026-43670 | Analyzed | 未確認 | CWE-693 | A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iP |
| CVE-2026-43678 | Analyzed | 未確認 | CWE-20, CWE-770 | An unauthenticated remote peer can crash any NIOWebSocket-based server (including Vapor and Hummingbird) with a single 11-byte frame sent after a completed WebSocket handshake, dro |
| CVE-2026-43679 | Analyzed | 未確認 | CWE-284 | This issue was addressed with improved permissions checking. This issue is fixed in watchOS 26.4. An attacker with physical access to a locked Apple Watch may be able to view user |
| CVE-2026-4378 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Akilli Ticaret Software Technologies Ltd. E-Commerce Pack allows Stored XSS. |
| CVE-2026-43794 | Modified | 未確認 | CWE-119 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tah |
| CVE-2026-43795 | Modified | 未確認 | CWE-119 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visio |
| CVE-2026-43798 | Analyzed | 未確認 | CWE-121 | A single crafted SSH message gives an unauthenticated network attacker an out-of-bounds stack write of attacker-controlled length and content against any application built on swift |
| CVE-2026-43961 | Awaiting Analysis | 未確認 | CWE-94 | A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the quoted context during mark/unmark operations, a |
| CVE-2026-43971 | Awaiting Analysis | 未確認 | CWE-116 | Improper Encoding or Escaping of Output vulnerability in ninenines cowlib allows Link header directive smuggling via unescaped special characters in cow_link:link/1. cow_link:do_l |
| CVE-2026-43980 | Deferred | 未確認 | CWE-79 | Malla is a web analyzer for Meshtastic networks based on MQTT data. Prior to commit 4086e2b5f61615a813b70b25bc76095083552135, code names (long_name, short_name) received via MQTT a |
| CVE-2026-44252 | Analyzed | 未確認 | CWE-863 | Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.5, Wazuh Manager allows a low-privilege read-only API user with |
| CVE-2026-44253 | Analyzed | 未確認 | CWE-770, CWE-789 | Wazuh is a free and open source platform used for threat prevention, detection, and response. From 3.9.0 until 4.14.5 and 5.0.0-beta2, the Wazuh cluster protocol in framework/wazuh |
| CVE-2026-44254 | Analyzed | 未確認 | CWE-131, CWE-787 | Wazuh is a free and open source platform used for threat prevention, detection, and response. From 1.0.0 until 4.14.6 and 5.0.0-beta2, HandleSecureMessage() in src/remoted/secure.c |
| CVE-2026-44255 | Analyzed | 未確認 | CWE-208 | Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.6 and 5.0.0-beta2, AuthenticationManager.check_user() in framewo |
| CVE-2026-44256 | Analyzed | 未確認 | CWE-117 | Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.4.0 until 4.14.6 and 5.0.0-beta2, api/api/middlewares.py decodes the Basic auth |
| CVE-2026-4431 | Deferred | 未確認 | CWE-862 | The Easy Post Submission plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `create_post()` function in all versions u |
| CVE-2026-44401 | Deferred | 未確認 | CWE-79 | Typemill CMS version 2.x contains a persistent cross-site scripting vulnerability in the Markdown parser extension that allows authenticated users with theme-configuration access t |
| CVE-2026-44416 | Analyzed | 未確認 | CWE-470, CWE-94 | Remote Code Execution via Arbitrary Class Instantiation in plugin-schema-registry component in Apache Ranger <= 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixe |
| CVE-2026-44472 | Deferred | 未確認 | CWE-287 | Saleor is an e-commerce platform. From 2.10.0rc1 until 3.21.67, 3.22.63, and 3.23.22, the account activation flow treats email verification as sufficient proof of account ownership |
| CVE-2026-44476 | Deferred | 未確認 | CWE-1390, CWE-287 | Doorkeeper is an OAuth 2 provider for Ruby on Rails. In version 1.9.0, an attacker who knows only a dynamically registered client's client_id, which is public information, can auth |
| CVE-2026-44517 | Awaiting Analysis | 未確認 | CWE-22 | Buildah is a tool that facilitates building OCI images. From 1.38.1 until 1.43.2 and 1.44.0, TempDirForURL in define/types.go does not securely confine Git repository subdirectorie |
| CVE-2026-44605 | Awaiting Analysis | 未確認 | CWE-190 | A flaw was found in the RPM Package Manager (RPM). A local user could be affected by a heap buffer overflow vulnerability when processing a specially crafted NDB database file. Thi |
| CVE-2026-44629 | Deferred | 未確認 | CWE-922 | Improper access control to the Synergis Softwire installation folder. This vulnerability affects Streamvault all-in-one appliances (SV-100E and SV-300E series) and Synergis Softwir |
| CVE-2026-44630 | Awaiting Analysis | 未確認 | CWE-400, CWE-789 | Improper validation of length fields in the Apache IoTDB RPC service may allow a remote unauthenticated attacker to cause a denial of service. By sending a crafted malformed Thrift |
| CVE-2026-44725 | Deferred | 未確認 | CWE-345, CWE-672 | EMQX is a scalable and reliable MQTT broker for AI, IoT, IIoT, and connected vehicles. Prior to versions 5.8.11, 5.9.3, 5.10.4, 6.0.3, 6.1.2, and 6.2.1, the plugin-install REST API |
| CVE-2026-44741 | Deferred | 未確認 | CWE-89 | Pimcore's Admin Classic Bundle provides a Backend UI for Pimcore. Versions prior to 2.3.6 and 1.7.18 have a SQL injection vulnerability in Pimcore's translation grid date filter — |
| CVE-2026-44758 | Awaiting Analysis | 未確認 | CWE-94 | SAP Manufacturing Integration and Intelligence (MII) allows an attacker with high privileges to submit specially crafted input to certain affected functionality, which is processed |
| CVE-2026-44762 | Awaiting Analysis | 未確認 | CWE-1021 | SAP Data Services Management Console allows an overly permissive Content Security Policy (CSP) configuration and lacks certain restrictive directives, which could enable an authent |
| CVE-2026-44763 | Awaiting Analysis | 未確認 | CWE-22 | SAP Manufacturing Integration and Intelligence allows a privileged attacker to exploit insufficient file path validation in certain functions using specially crafted input. Exploit |
| CVE-2026-44764 | Awaiting Analysis | 未確認 | CWE-862 | Due to a Missing Authorization Check vulnerability in SAP Manufacturing Integration and Intelligence, an unauthenticated attacker could send crafted requests to the Cost Servlet us |
| CVE-2026-44765 | Awaiting Analysis | 未確認 | CWE-862 | Due to a Missing Authorization Check vulnerability in SAP Manufacturing Integration and Intelligence, an unauthenticated remote attacker could access scheduling-related application |
| CVE-2026-44829 | Deferred | 未確認 | CWE-22 | Gotenberg is a Docker-powered stateless API for PDF files. In 8.32.0 and earlier, filename handling in pkg/modules/api/context.go uses filepath.Base on Linux, which does not treat |
| CVE-2026-44845 | Deferred | 未確認 | CWE-1336 | JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17, an authenticated administrator with Applet Host management and d |
| CVE-2026-44846 | Deferred | 未確認 | CWE-863 | JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17, a user with the users.invite_user permission can submit an exist |
| CVE-2026-44901 | Analyzed | 未確認 | CWE-502 | Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.6 and 5.0.0-beta2, AffectedItemsWazuhResult.merge() in framework |
| CVE-2026-44945 | Awaiting Analysis | 未確認 | CWE-441, CWE-497 | A privilege escalation vulnerability exists in Rancher's impersonation middleware (pkg/auth/requests/impersonate.go). An authenticated Rancher user with the default user global ro |
| CVE-2026-44964 | Awaiting Analysis | 未確認 | CWE-441 | In versions of the Datadog Android application prior to v545-5.9.2, OnCallNotificationActivity is declared exported with no permission guard. A co-installed application can launch |
| CVE-2026-44965 | Awaiting Analysis | 未確認 | CWE-926 | In versions of the Datadog Android application prior to v545-5.9.2, six App Widget configuration activities (IncidentWidgetActivity, MonitorSavedViewWidgetActivity, OnCallShiftsWid |
| CVE-2026-45018 | Deferred | 未確認 | CWE-78 | Chainlit is a Python framework for building production-ready conversational AI applications. From 2.4.0rc0 until 2.12.0, Chainlit deployments with features.mcp.enabled set to true |
| CVE-2026-45019 | Deferred | 未確認 | CWE-918 | Chainlit is a Python framework for building production-ready conversational AI applications. From 2.4.0rc0 until 2.12.0, Chainlit deployments with features.mcp.enabled set to true |
| CVE-2026-45084 | Awaiting Analysis | 未確認 | CWE-476 | OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Versions 3.4.0 through 3.6.5 contain a denial of service vulnerability in the presence module. When the prese |
| CVE-2026-45099 | Awaiting Analysis | 未確認 | CWE-22 | Terragrunt is a flexible orchestration tool that allows Infrastructure as Code written in OpenTofu or Terraform to scale. Prior to 1.0.4, Terragrunt trusts paths decoded from a dow |
| CVE-2026-45100 | Awaiting Analysis | 未確認 | CWE-120 | OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Versions 3.4.0-beta through 3.6.5 and 4.0.0-beta contain a buffer overflow in the {s.b64encode} string transf |
| CVE-2026-45103 | Awaiting Analysis | 未確認 | CWE-190 | OpenSIPS is a Session Initiation Protocol (SIP) server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the TCP message framing layer parses the Content-Length header usin |
| CVE-2026-45115 | Deferred | 未確認 | CWE-79 | MyBB is free and open source forum software. Prior to 1.8.40, the Buddy/Ignore component does not sanitize usernames correctly, allowing attackers to perform JavaScript code inject |
| CVE-2026-45116 | Deferred | 未確認 | CWE-79 | MyBB is free and open source forum software. Prior to 1.8.40, the user datahandler does not properly validate checkbox and multiselect profile field types, resulting in stored Java |
| CVE-2026-45117 | Deferred | 未確認 | CWE-94 | MyBB is free and open source forum software. From 1.8.13 until 1.8.40, the installer module does not properly escape user-supplied database configuration values written to the conf |
| CVE-2026-45118 | Deferred | 未確認 | CWE-83 | MyBB is free and open source forum software. Prior to 1.8.40, the Contact module does not validate a redirect URL or protocol correctly, resulting in an open redirect and reflected |
| CVE-2026-45119 | Deferred | 未確認 | CWE-352 | MyBB is free and open source forum software. Prior to 1.8.40, the Admin CP UTF-8 Conversion module does not validate certain requests correctly, allowing same-site attackers to alt |
| CVE-2026-45120 | Deferred | 未確認 | CWE-639 | MyBB is free and open source forum software. Prior to 1.8.40, the calendar module does not verify private event status consistently, allowing users with viewing and moderation perm |
| CVE-2026-45121 | Deferred | 未確認 | CWE-863 | MyBB is free and open source forum software. Prior to 1.8.40, the calendar module does not check permissions consistently when listing calendars, allowing authenticated users to ac |
| CVE-2026-45122 | Deferred | 未確認 | CWE-863 | MyBB is free and open source forum software. Prior to 1.8.40, the calendar module does not validate moderation permissions for the destination calendar when moving events. A user w |
| CVE-2026-45123 | Deferred | 未確認 | CWE-918 | MyBB is free and open source forum software. Prior to 1.8.40, the remote requests feature does not correctly handle IPv6 addresses, resulting in a server-side request forgery vulne |
| CVE-2026-45124 | Deferred | 未確認 | CWE-862 | MyBB is free and open source forum software. Prior to 1.8.40, the Mod CP Report Center does not check permissions consistently, allowing moderators without report-management permis |
| CVE-2026-45125 | Deferred | 未確認 | CWE-93 | MyBB is free and open source forum software. Prior to 1.8.40, the Email User controller does not sanitize sender names correctly, resulting in mail header injection. member.php?act |
| CVE-2026-45126 | Deferred | 未確認 | CWE-352 | MyBB is free and open source forum software. Prior to 1.8.40, the Admin CP Security Questions module does not validate the anti-CSRF token correctly, allowing same-site attackers t |
| CVE-2026-45127 | Deferred | 未確認 | CWE-352 | MyBB is free and open source forum software. Prior to 1.8.40, the ACP Mass Mail module does not validate certain requests correctly, allowing same-site attackers to create draft en |
| CVE-2026-45128 | Deferred | 未確認 | CWE-352 | MyBB is free and open source forum software. Prior to 1.8.40, the ACP Users View Manager module does not validate requests correctly, allowing same-site attackers to change a victi |
| CVE-2026-45129 | Deferred | 未確認 | CWE-352 | MyBB is free and open source forum software. Prior to 1.8.40, the Admin CP Recovery Codes module does not validate requests correctly, allowing same-site attackers to rotate a vict |
| CVE-2026-45198 | Deferred | 未確認 | CWE-822 | Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from non-secure memory. |
| CVE-2026-45199 | Deferred | 未確認 | CWE-823 | Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory. Sof |
| CVE-2026-45201 | Deferred | 未確認 | CWE-1284 | Software installed and run as a non-privileged user may conduct improper GPU system calls to pass invalid log2 page size when allocating physical pages leading to OOB read and/or w |
| CVE-2026-45202 | Deferred | 未確認 | CWE-415 | Software installed and run as a non-privileged user may conduct GPU system calls which cause GPU memory leaks and possible kernel heap corruption. Scenario caused by memory free |
| CVE-2026-45204 | Deferred | 未確認 | CWE-476 | Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger OOB access and kernel null pointer dereference in an error path. Null pointe |
| CVE-2026-45271 | Deferred | 未確認 | CWE-835 | Picotls is a TLS protocol library that allows users select different crypto backends based on their use case. Picotls implements its own ASN.1 validation helper, which is used by t |
| CVE-2026-45272 | Deferred | 未確認 | CWE-829, CWE-94 | MyBooks is an enhanced and easy-to-use personal ebook management web server also known as Talebook. In 3.41.2 and earlier, the AdminSettings.post handler in webserver/handlers/admi |
| CVE-2026-45273 | Deferred | 未確認 | CWE-862 | MyBooks is an ebook management web server also known as Talebook. In 3.41.2 and earlier, the AdminSettings.post handler for POST /api/admin/settings in webserver/handlers/admin.py |
| CVE-2026-45274 | Deferred | 未確認 | CWE-602 | MyBooks is anebook management web server also known as Talebook. In 3.41.2 and earlier, the SignUp.post handler for POST /api/user/sign_up in webserver/handlers/user.py does not en |
| CVE-2026-45378 | Deferred | 未確認 | CWE-200 | Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.32.0.rc2, the identity-document verification admin UI embeds |
| CVE-2026-45404 | Deferred | 未確認 | CWE-362, CWE-667 | OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 0.11.0 through 1.44.0, the OpenTracing bridge's bridgeSpan contains an unsynchronized extraBaggageItems map |
| CVE-2026-45414 | Deferred | 未確認 | CWE-639, CWE-863 | Decidim is a participatory democracy framework. Prior to 0.31.5 and in 0.32.0.rc1 before 0.32.0.rc2, JWT-backed API authentication is not bound to the organization selected by the |
| CVE-2026-45415 | Deferred | 未確認 | CWE-862 | Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.32.0.rc2, the /admin/csv_census/census_logs record-management |
| CVE-2026-45532 | Deferred | 未確認 | CWE-22 | DataEase is an open source data visualization and analysis tool. Versions prior to 2.10.23 have a path traversal vulnerability. The root cause is that on Windows, the `FILE_SEPARAT |
| CVE-2026-45537 | Awaiting Analysis | 未確認 | CWE-120 | OpenSIPS is a Session Initiation Protocol (SIP) server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the construct_uri() function concatenates multiple URI components ( |
| CVE-2026-45538 | Awaiting Analysis | 未確認 | CWE-121 | OpenSIPS is a Session Initiation Protocol (SIP) server implementation. In versions 4.0.0 and prior, processing a SIP message with a header name longer than 255 bytes causes a stack |
| CVE-2026-45572 | Deferred | 未確認 | CWE-94 | Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.32.0.rc2, an administrator with landing-page editing privileg |
| CVE-2026-45573 | Deferred | 未確認 | CWE-918 | Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.32.0.rc2, when VAPID delivery is enabled, the notification su |
| CVE-2026-4559 | Deferred | 未確認 | CWE-79 | The Image Photo Gallery Final Tiles Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'delay' shortcode attribute in all versions up to, and including, |
| CVE-2026-4560 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-4561 | Deferred | 未確認 | CWE-79 | The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form response message post meta fields (e.g., 'text_subscribed', 'text_ |
| CVE-2026-45618 | Deferred | 未確認 | CWE-94 | LiquidJS is a Shopify/GitHub Pages compatible template engine. Prior to version 10.26.0, it is possible to execute arbitrary code with crafted templates. Version 10.26.0 patches th |
| CVE-2026-45694 | Deferred | 未確認 | CWE-79 | LibreNMS is a network monitoring system. In versions up to and including 26.4.0, the Proxmox application view is vulnerable to reflected cross-site scripting through the user-suppl |
| CVE-2026-45698 | Deferred | 未確認 | CWE-191 | Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the deletedir() func |
| CVE-2026-45699 | Deferred | 未確認 | CWE-191 | Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the copydir() funct |
| CVE-2026-45705 | Awaiting Analysis | 未確認 | CWE-125 | OpenSIPS is a Session Initiation Protocol (SIP) server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the find_line_delimiter() function in the multipart body parser per |
| CVE-2026-45725 | Deferred | 未確認 | CWE-73 | compliance-trestle is a tooling platform for managing compliance as code. Prior to versiions 3.12.2 and 4.0.3, the compliance-trestle library's remote fetching cache mechanism (HTT |
| CVE-2026-45733 | Deferred | 未確認 | CWE-693, CWE-79, CWE-83 | Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. Prior to 0.103.0, the #iconClass label value is returned |
| CVE-2026-45734 | Deferred | 未確認 | CWE-837 | MyBB is free and open source forum software. Prior to 1.8.40, the built-in CAPTCHA does not consistently enforce single-use semantics, allowing remote attackers to bypass CAPTCHA c |
| CVE-2026-45741 | Deferred | 未確認 | CWE-184, CWE-918 | Gotenberg is a Docker-powered stateless API for PDF files. In 8.32.0 and earlier, the IsPublicIP function in pkg/gotenberg/outbound.go does not reject the 2002::/16 6to4 prefix, th |
| CVE-2026-45742 | Deferred | 未確認 | CWE-362 | Gotenberg is a Docker-powered stateless API for PDF files. From 8.10.0 until 8.33.0, the newContext function in pkg/modules/api/context.go starts one errgroup.Go goroutine for each |
| CVE-2026-45774 | Deferred | 未確認 | CWE-22 | compliance-trestle is a tooling platform for managing compliance as code. Prior to versions 3.12.2 and 4.0.3, the compliance-trestle library's profile import mechanism resolves `tr |
| CVE-2026-45790 | Deferred | 未確認 | CWE-269 | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.6, Dokploy's organization.inviteMember tRPC procedure in apps/dokploy/server/api/routers/organization.t |
| CVE-2026-45791 | Deferred | 未確認 | CWE-613 | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.6, Dokploy's user.update procedure in apps/dokploy/server/api/routers/user.ts updates account.password |
| CVE-2026-45798 | Analyzed | 未確認 | CWE-121, CWE-170 | Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.5.0 until 4.14.6 and 5.0.0-beta2, compare_wazuh_versions() in src/shared/versio |
| CVE-2026-45808 | Deferred | 未確認 | CWE-863 | OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, OpenBao's namespaces provide multi-tenant separation. A tenant who intentionally leaks l |
| CVE-2026-45809 | Awaiting Analysis | 未確認 | CWE-121 | OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Versions prior to 3.6.6 and 4.0.0-rc1 contain a denial of service vulnerability in the watcherinfo generation |
| CVE-2026-45819 | Deferred | 未確認 | CWE-705, CWE-755 | baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, causi |
| CVE-2026-46334 | Awaiting Analysis | 未確認 | CWE-20, CWE-476 | OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Versions prior to 3.6.6 and 4.0.0-rc1 contain a denial of service vulnerability in the SDP bandwidth-line par |
| CVE-2026-46343 | Analyzed | 未確認 | CWE-22 | Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.6 and 5.0.0-beta2, WazuhCommon.end_receiving_file() in framework |
| CVE-2026-46345 | Deferred | 未確認 | CWE-22, CWE-36, CWE-73 | compliance-trestle is a tooling platform for managing compliance as code. Prior to versions 3.12.2 and 4.0.3, the `-o/--output` argument in `trestle author jinja` allows writing fi |
| CVE-2026-46355 | Deferred | 未確認 | CWE-287 | BigBlueButton is an open-source virtual classroom. Prior to 3.0.23, BigBlueButton exposed /bigbluebutton/api/handleJoinExistingUser through bigbluebutton-web/grails-app/controllers |
| CVE-2026-46358 | Deferred | 未確認 | CWE-532 | OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, OpenBao's inline auth functionality incorrectly redacted audit log entries, resulting in |
| CVE-2026-46369 | Deferred | 未確認 | CWE-193, CWE-294 | Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Through 1.5.0, the validity store uses a strict lower-bound comparis |
| CVE-2026-46370 | Deferred | 未確認 | CWE-200, CWE-89 | Fleet is an open-source device management platform built on osquery. In versions up to and including 4.84.1, the labels host-listing endpoint (GET /api/v1/fleet/labels/{id}/hosts) |
| CVE-2026-46371 | Deferred | 未確認 | CWE-200, CWE-89 | Fleet is an open-source device management platform built on osquery. In versions up to and including 4.84.1, the Apple MDM commands listing endpoint (GET /api/v1/fleet/mdm/apple/co |
| CVE-2026-46380 | Deferred | 未確認 | CWE-918 | compliance-trestle is a tooling platform for managing compliance as code. Prior to versions 3.12.2 and 4.0.3, the HTTPSFetcher._do_fetch() method passes a user-supplied URL directl |
| CVE-2026-46382 | Deferred | 未確認 | CWE-918 | The Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, a user-supplied private/local URI can be made to be fetched wi |
| CVE-2026-46405 | Deferred | 未確認 | CWE-770 | OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, in OpenBao's Kerberos auth method on the `GET` handler, or when an `Authorization: Negot |
| CVE-2026-46409 | Deferred | 未確認 | CWE-306, CWE-346, CWE-352, CWE-94, CWE-942 | OpenYak is a local-first agent runtime for reliable tool-using models, with a desktop workspace built on top. Prior to version 1.1.3, the OpenYak desktop backend binds an HTTP API |
| CVE-2026-46439 | Deferred | 未確認 | CWE-1336, CWE-94 | compliance-trestle is a tooling platform for managing compliance as code. Versions prior to 3.12.2 and 4.0.3 have a Server-Side Template Injection (SSTI) vulnerability exists in th |
| CVE-2026-46482 | Deferred | 未確認 | CWE-636 | ### Impact The registration component does not validate the text-based _Security Question_ CAPTCHA correctly, allowing attackers to bypass the challenge via a specially crafted val |
| CVE-2026-46533 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-46534 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-46535 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-46536 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-46537 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-46581 | Analyzed | 未確認 | CWE-22, CWE-641, CWE-94 | In Eclipse Mojarra versions 2.3 and following, URL handing in `DefaultFaceletFactory` does not properly sanitize and/or block remote URLs, allowing an attacker to specify a URL to |
| CVE-2026-46603 | Awaiting Analysis | 未確認 | CWE-789 | VP8L decoding in golang.org/x/image/vp8l can allocate an excessive amount of memory when processing a crafted VP8L image containing many unused Huffman tree groups. This allows a r |
| CVE-2026-46670 | Deferred | 未確認 | CWE-89 | YesWiki is a wiki system written in PHP. Prior to version 4.6.4, an unauthenticated SQL injection in the Bazar form-import path (`FormManager::create()`) allows any unauthenticate |
| CVE-2026-46682 | Deferred | 未確認 | CWE-89 | BigBlueButton is an open-source virtual classroom. Prior to 3.0.23, BigBlueButton allowed authenticated moderators to inject SQL through the meetingId and userId values used by ref |
| CVE-2026-46688 | Deferred | 未確認 | CWE-601 | The Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, an unauthenticated request can be made to redirect the user to |
| CVE-2026-4671 | Deferred | 未確認 | CWE-400 | justhtml before 1.18.0 contains multiple low-severity denial-of-service issues in CSS selector handling and linkification. Applications that evaluate attacker-controlled selector s |
| CVE-2026-46712 | Deferred | 未確認 | CWE-639 | Misskey is an open source, federated social media platform. Versions 2025.3.2 and later, but prior to 2026.5.4, contain a vulnerability where a lack of proper permission checks all |
| CVE-2026-46713 | Deferred | 未確認 | CWE-347 | Misskey is an open source, federated social media platform. Versions 12.37.0 and later, but prior to 2026.5.4, contain a vulnerability in the JSON-LD signature validation and compa |
| CVE-2026-46714 | Deferred | 未確認 | CWE-674 | Misskey is an open source, federated social media platform. IVersions 8.63.0 and later, but prior to 2026.5.4, contain a vulnerability that can cause the Misskey web client to slow |
| CVE-2026-46731 | Analyzed | 未確認 | CWE-290 | Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with local acc |
| CVE-2026-4703 | Deferred | 未確認 | CWE-502 | The WS Form LITE – Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.10.80 via deserialization of |
| CVE-2026-47079 | Awaiting Analysis | 未確認 | CWE-838 | Inappropriate Encoding for Output Context vulnerability in joshnuss xml_builder (XmlBuilder module) allows Content Spoofing, Cross-site Scripting. This vulnerability is associated |
| CVE-2026-47080 | Awaiting Analysis | 未確認 | CWE-91 | XML Injection vulnerability in joshnuss xml_builder (XmlBuilder module) allows Content Spoofing, XML Injection. This vulnerability is associated with program files lib/xml_builder |
| CVE-2026-47127 | Deferred | 未確認 | CWE-862 | Ghostfolio is an open source wealth management software. Prior to version 3.4.0, Ghostfolio's Stripe checkout success-URL handler at `GET /api/v1/subscription/stripe/callback?check |
| CVE-2026-47185 | Deferred | 未確認 | CWE-79, CWE-863 | Frappe is a full-stack web application framework. Prior to 16.18.0, the Workspace Save API accepts a controlled workspace identifier from any authenticated user without enforcing w |
| CVE-2026-47187 | Deferred | 未確認 | CWE-59 | SSHFS is a network filesystem client for connecting to SSH servers. Prior to version 3.7.6, a rogue SFTP server can return absolute symlink targets or relative targets containing p |
| CVE-2026-47191 | Deferred | 未確認 | CWE-347 | kas is a setup tool for bitbake based projects. Prior to version 5.3, when relying solely on a git commit ID (SHA-1 or SHA-256) to qualify if a checkout of a repository is equivale |
| CVE-2026-47192 | Deferred | 未確認 | CWE-347 | kas is a setup tool for bitbake based projects. Starting in version 4.8 and prior to version 5.3, kas checks out and processes repositories regarding configuration includes prior t |
| CVE-2026-47194 | Deferred | 未確認 | CWE-346 | Frappe is a full-stack web application framework. Prior to 15.108.0 and 16.18.3, temporary magic login link generation can use an attacker-controlled request Host header, allowing |
| CVE-2026-47211 | Deferred | 未確認 | CWE-426 | Ouroboros is a local-first runtime for AI coding agents that records their actions and applies user-defined policies to constrain behavior. In versions prior to 0.39.0, if a user c |
| CVE-2026-47226 | Deferred | 未確認 | CWE-639, CWE-862 | Admidio is an open-source user management solution. Prior to version 5.0.10, an authenticated Admidio member with upload rights on any one folder can permanently delete files from |
| CVE-2026-47227 | Deferred | 未確認 | CWE-639, CWE-863 | Admidio is an open-source user management solution. `modules/categories.php` checks that the supplied `type` parameter (`ANN`, `EVT`, `ROL`, `USF`, …) corresponds to a module the a |
| CVE-2026-47228 | Deferred | 未確認 | CWE-352 | Admidio is an open-source user management solution. `modules/registration.php` mode `send_login` regenerates a random password for `user_uuid_assigned`, stores its bcrypt hash in ` |
| CVE-2026-47229 | Deferred | 未確認 | CWE-352 | Admidio is an open-source user management solution. Prior to version 5.0.10, `modules/sso/clients.php` validates an `adm_csrf_token` on every state-changing branch except `enable`. |
| CVE-2026-47230 | Deferred | 未確認 | CWE-639, CWE-863 | Admidio is an open-source user management solution. Prior to version 5.0.10, `modules/documents-files.php` mode `file_rename_save` shares the same root-cause shape as the cross-fol |
| CVE-2026-47231 | Deferred | 未確認 | CWE-639, CWE-863 | Admidio is an open-source user management solution. Prior to version 5.0.10, `modules/documents-files.php` gates state-changing modes by checking that the actor has `hasUploadRight |
| CVE-2026-47232 | Deferred | 未確認 | CWE-352 | Admidio is an open-source user management solution. Prior to version 5.0.10, the sensitive `mode=export` action in `modules/sso/keys.php` exports a PKCS#12 bundle containing the co |
| CVE-2026-47233 | Deferred | 未確認 | CWE-1281, CWE-862 | Admidio is an open-source user management solution. Version 5.0.9 added a missing `isAdministratorInventory()` gate to `case 'item_delete':` in `modules/inventory.php`. The same fi |
| CVE-2026-47234 | Deferred | 未確認 | CWE-200, CWE-532 | Admidio is an open-source user management solution. Prior to version 5.0.10, when debug logging is enabled, `Session::setCookie()` logs full cookie values and `Session::start()` lo |
| CVE-2026-47243 | Deferred | 未確認 | CWE-22, CWE-36 | Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. Prior to 3.31.0, the runtime-rs |
| CVE-2026-47245 | Deferred | 未確認 | CWE-252 | MyBB is free and open source forum software. Prior to 1.8.40, the User CP Buddy/Ignore List component does not validate reciprocal buddy-list updates correctly. The usercp.php?acti |
| CVE-2026-47249 | Deferred | 未確認 | CWE-400 | Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.18, the P2P resolver request handling logic is vulnerable to hash-array amplification. A connecte |
| CVE-2026-47285 | Analyzed | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-47299 | Analyzed | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in Azure Monitor Agent allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-47359 | Analyzed | 未確認 | CWE-78 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache CloudStack's NAS backup provider plugin. The addBackupRepository |
| CVE-2026-47361 | Awaiting Analysis | 未確認 | CWE-926 | In versions of the Datadog Android application prior to v541-5.9.2, BubbleChatActivity is exported with no permission guard and accepts a SEND intent with a caller-supplied convers |
| CVE-2026-47362 | Awaiting Analysis | 未確認 | CWE-922 | In versions of the Datadog Android application prior to v554-5.9.4, two Room-backed SQLite databases store sensitive content in plaintext: LocalNotificationDatabase (notification t |
| CVE-2026-47363 | Awaiting Analysis | 未確認 | CWE-926 | In versions of the Datadog Android application prior to v541-5.9.2, the exported launcher activity AppActivity accepts an attacker-supplied session (including OAuth tokens) from In |
| CVE-2026-47364 | Awaiting Analysis | 未確認 | CWE-200 | In versions of the Datadog Android application prior to v545-5.9.2, the app tags Crashlytics data with the user's Datadog UUID, with no user-facing opt-out. Impact: The Datadog |
| CVE-2026-47487 | Analyzed | 未確認 | CWE-22 | NVIDIA Triton Inference Server for Linux contains a vulnerability where a user could cause files outside the model repository to be read, written to, or modified by providing a pat |
| CVE-2026-4757 | Awaiting Analysis | 未確認 | CWE-732 | A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privilege escalation. This flaw can only be exploited after authentic |
| CVE-2026-47606 | Analyzed | 未確認 | CWE-36 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. A successful exploit might lead to code execution and in |
| CVE-2026-47612 | Analyzed | 未確認 | CWE-22 | NVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause improper limitation of a pathname to a restricted directory. A successfu |
| CVE-2026-47613 | Analyzed | 未確認 | CWE-918 | NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause improper limitation of a pathname to a restricted directory by supplying a crafted local path in a mult |
| CVE-2026-47614 | Analyzed | 未確認 | CWE-918 | NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery. A successful exploit of this vulnerability might lead to information discl |
| CVE-2026-47615 | Analyzed | 未確認 | CWE-918 | NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery by supplying a crafted URL in a multimodal request. A successful exploit of |
| CVE-2026-47616 | Analyzed | 未確認 | CWE-918 | NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery. A successful exploit of this vulnerability |
| CVE-2026-47617 | Analyzed | 未確認 | CWE-918 | NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery via DNS rebinding. A successful exploit of |
| CVE-2026-47618 | Analyzed | 未確認 | CWE-918 | NVIDIA Dynamo for Linux contains a vulnerability in the Rust multimodal media fetcher where an attacker could cause server-side request forgery. A successful exploit of this vulner |
| CVE-2026-47619 | Analyzed | 未確認 | CWE-1357 | NVIDIA Dynamo for Linux examples and recipes contain a vulnerability where an attacker could cause a system failure. A successful exploit of this vulnerability might lead to code e |
| CVE-2026-47620 | Analyzed | 未確認 | CWE-362 | NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA manager singleton initialization. A successful exploit of this vulnerabi |
| CVE-2026-47621 | Analyzed | 未確認 | CWE-367 | NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA manager singleton initialization. A successful exploit of this vulnerabi |
| CVE-2026-47622 | Analyzed | 未確認 | CWE-209 | NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause the generation of error messages that contain sensitive information. A successful exploit of this vul |
| CVE-2026-47623 | Analyzed | 未確認 | CWE-502 | NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to denial of |
| CVE-2026-47624 | Analyzed | 未確認 | CWE-693 | NVIDIA DGX Spark contains a vulnerability in UEFI where a Attacker may cause a/an CWE-693 by privileged local user. A successful exploit of this vulnerability may allow an attacker |
| CVE-2026-47626 | Analyzed | 未確認 | CWE-787 | NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write. A successful exploit of this vulnerabil |
| CVE-2026-47627 | Analyzed | 未確認 | CWE-22 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path traversal. A successful exploit might lead to denial of service. |
| CVE-2026-47628 | Analyzed | 未確認 | CWE-770 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an allocation of resources without limits. A successful exploit might lead to denial |
| CVE-2026-47629 | Analyzed | 未確認 | CWE-20 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause improper input validation. A successful exploit might lead to denial of service. |
| CVE-2026-47630 | Analyzed | 未確認 | CWE-36 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. A successful exploit might lead to code execution. |
| CVE-2026-47659 | Deferred | 未確認 | CWE-22, CWE-918 | Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's `/$result` e |
| CVE-2026-47660 | Deferred | 未確認 | CWE-522, CWE-918 | Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's bulk-submit |
| CVE-2026-47661 | Deferred | 未確認 | CWE-22 | Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's `/$result` e |
| CVE-2026-47662 | Deferred | 未確認 | CWE-20, CWE-522, CWE-918 | Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's typed CRUD/s |
| CVE-2026-47663 | Deferred | 未確認 | CWE-285 | Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's typed CRUD/s |
| CVE-2026-47664 | Deferred | 未確認 | CWE-20, CWE-345, CWE-918 | Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, the `$import-pnp` opera |
| CVE-2026-47665 | Deferred | 未確認 | CWE-79 | Penpot is an open-source design and prototyping platform. In versions up to and including 2.14.3, Penpot is vulnerable to stored cross-site scripting through file comments, whose c |
| CVE-2026-47666 | Deferred | 未確認 | CWE-79 | Penpot is an open-source design and prototyping platform. In versions up to and including 2.14.3, Penpot is vulnerable to stored cross-site scripting through custom font family nam |
| CVE-2026-47682 | Awaiting Analysis | 未確認 | CWE-22 | CVAT is an open source interactive video and image annotation tool for computer vision. In versions 1.6.0 through 2.64.0, an attacker with write access to a cloud storage that's be |
| CVE-2026-47683 | Deferred | 未確認 | CWE-770 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, the bufferAllocLimit enforcement in lib/setup-sandbox.js does not cover Buffer.concat(list, totalLength) or Buffer.fr |
| CVE-2026-47686 | Deferred | 未確認 | CWE-693 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, handleException() in lib/setup-sandbox.js sanitizes SuppressedError.error, SuppressedError.suppressed, and AggregateE |
| CVE-2026-47698 | Deferred | 未確認 | CWE-913 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, lib/bridge.js and lib/setup-sandbox.js fail to block stacked indirection through Function.prototype.call around dange |
| CVE-2026-47699 | Deferred | 未確認 | CWE-22, CWE-59 | Confidential Containers Guest Components provides guest tools and components for confidential container workloads. From 0.16.0 until 0.20.0, a crafted OCI image layer can make imag |
| CVE-2026-47702 | Deferred | 未確認 | CWE-312 | TypeBot is a chatbot builder tool. In version 3.16.1, API tokens (bearer credentials used to authenticate against the builder API) are stored in the database as cleartext strings. |
| CVE-2026-47704 | Deferred | 未確認 | CWE-639 | TypeBot is a chatbot builder tool. Prior to version 3.17.0, an authenticated user who has read access to any typebot can resume a waiting webhook session that belongs to a differen |
| CVE-2026-47705 | Deferred | 未確認 | CWE-1236 | TypeBot is a chatbot builder tool. Version 3.16.1 has a CSV injection vulnerability in the result export functionality. The application does not sanitize or escape user-supplied in |
| CVE-2026-47717 | Deferred | 未確認 | CWE-201 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. In fuxa-server version 1.3.0, the GET /api/project endpoint exposes sensitive project configuration data t |
| CVE-2026-47718 | Deferred | 未確認 | CWE-287, CWE-862 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. When `secureEnabled=true`, FUXA `1.3.0-2773` still allows guest and invalid-token requests to read project |
| CVE-2026-47719 | Deferred | 未確認 | CWE-918 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Prior to 1.3.2, the DEVICE_WEBAPI_REQUEST and DEVICE_PROPERTY Socket.IO handlers in server/runtime/index.j |
| CVE-2026-47720 | Deferred | 未確認 | CWE-89 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Prior to 1.3.2, the TDengine DAQ storage connector's escapeTdString function in server/runtime/storage/tde |
| CVE-2026-47721 | Deferred | 未確認 | CWE-862 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Prior to 1.3.2, POST /api/scheduler and DELETE /api/scheduler in server/api/scheduler/index.js do not cons |
| CVE-2026-47727 | Analyzed | 未確認 | CWE-1336, CWE-94 | Trilium is an open-source hierarchical note-taking application. In versions prior to 0.104.0, the default-on "Safe import" filter fails to neutralize the shareTemplate relation bec |
| CVE-2026-47735 | Deferred | 未確認 | CWE-200, CWE-22, CWE-918 | Arc is an open, SQL-native time-series database for telemetry. Prior to version 26.06.1, Arc's user-SQL validator (`internal/api/query.go:ValidateSQLRequest`) blocked only `read_pa |
| CVE-2026-47746 | Deferred | 未確認 | CWE-367 | Misskey is an open source, federated social media platform. Versions 12.37.0 and later, but prior to 2026.5.4, are vulnerable to timing attacks during JSON-LD signature validation |
| CVE-2026-47753 | Deferred | 未確認 | CWE-476 | Incus is a system container and virtual machine manager. Prior to version 7.1.0, `(*backend).CreateInstanceFromBackup` in `internal/server/storage/backend.go` contains a nil-pointe |
| CVE-2026-47754 | Deferred | 未確認 | CWE-22, CWE-862 | Metacat is data repository software that helps researchers preserve, share, and discover data. Versions 2.x through 2.19.1 and all 1.x versions contain an unauthenticated path trav |
| CVE-2026-47763 | Deferred | 未確認 | CWE-61 | pdm is a Python package and dependency manager supporting the latest PEP standards. In versions prior to 2.27.0, pdm writes several project-local state or configuration files witho |
| CVE-2026-47764 | Deferred | 未確認 | CWE-22 | pdm is a Python package and dependency manager supporting the latest PEP standards. Versions prior to 2.27.0 are vulnerable to path traversal through write_to_fs. InstallDestinatio |
| CVE-2026-47765 | Deferred | 未確認 | CWE-862 | Frappe is a full-stack web application framework. Prior to 15.110.0 and 16.20.0, the restore and bulk_restore endpoints do not apply the appropriate document permission checks, all |
| CVE-2026-47766 | Deferred | 未確認 | CWE-61 | crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs `/dev` directory without `O_NOFOLLOW` |
| CVE-2026-47781 | Deferred | 未確認 | CWE-829, CWE-94 | PDM is a Python package and dependency manager. In versions up to and including 2.26.9, PDM automatically loads project-local plugins from a .pdm-plugins directory during initializ |
| CVE-2026-47827 | Awaiting Analysis | 未確認 | CWE-77 | Command Injection in BOSH CLI tool on windows in Cloud Foundry allows a remote attacker to execute arbitrary shell commands via command injection vulnerabilities |
| CVE-2026-47834 | Analyzed | 未確認 | Spring Data JPA's Sort validation can be bypassed when parameters containing crafted payload are accepted from untrusted sources. Spring Data JPA 4.1.0 Spring Data JPA 4.0.0 - 4.0. | |
| CVE-2026-47836 | Analyzed | 未確認 | CWE-367 | The base directory (spring.cloud.config.server.svn.basedir) used by the Spring Cloud Config Server to clone SVN repositories to is susceptible to time-of-check-time-of-use (TOCTOU) |
| CVE-2026-47837 | Analyzed | 未確認 | CWE-306 | Missing Authentication for Critical Function vulnerability in Spring Spring Cloud Config allows Webhook requests to Spring Cloud Config Server's /monitor endpoint are not validated |
| CVE-2026-47841 | Analyzed | 未確認 | CWE-863 | An application using Spring Security's WebAuthn support may be vulnerable to user verification bypass when using a distributed HTTP session store. Spring Security 7.1.0 Spring Secu |
| CVE-2026-47842 | Analyzed | 未確認 | CWE-326 | Applications using AesBytesEncryptor with the two-argument constructor or when passing a null IV generator and CBC as the encryption mode encrypt data with AES/CBC using a null (al |
| CVE-2026-47843 | Analyzed | 未確認 | In specific scenarios involving multiple clients with different DNS resolver configurations, Reactor Netty may incorrectly reuse a previously configured DNS resolver. Reactor Netty | |
| CVE-2026-47844 | Analyzed | 未確認 | In specific scenarios, the Reactor Netty HTTP Server may leak exception details across unrelated requests. In order for this to happen, the server must be configured with Brave Tra | |
| CVE-2026-47845 | Analyzed | 未確認 | CWE-290 | In specific scenarios, Reactor Netty HTTP Server may incorrectly evaluate the remote IP address when HAProxy Protocol is enabled. In order for this to happen, the application must |
| CVE-2026-47848 | Analyzed | 未確認 | CWE-601 | In specific scenarios involving WebSocket handshake redirects to a different origin, the Reactor Netty WebSocket client may leak credentials. In order for this to happen, the HTTP |
| CVE-2026-47849 | Analyzed | 未確認 | CWE-915 | Spring Data REST does not guard identifier (@Id) and version (@Version) properties against mutation via RFC 6902 JSON Patch (application/json-patch+json) requests. Spring Data REST |
| CVE-2026-47850 | Analyzed | 未確認 | CWE-915 | Spring Data REST does not preserve the persisted version (@Version) property of an aggregate root when handling an HTTP PUT against an immutable target type. Spring Data REST 5.1.0 |
| CVE-2026-47851 | Analyzed | 未確認 | CWE-674 | Analyzing a PDF with a deeply nested or cyclic table of contents can cause a StackOverflowError in the ingestion thread. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI 1.0.0 - 1 |
| CVE-2026-47852 | Analyzed | 未確認 | CWE-377 | A local attacker on a multi-user host can pre-create the deterministic cache path and plant a malicious ONNX model file. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI 1.0.0 - 1 |
| CVE-2026-47856 | Analyzed | 未確認 | CWE-502 | Spring Integration's JSON to object conversion uses the json__TypeId__ header to choose the deserialization target type, and resolves that header value to a class with ClassUtils.f |
| CVE-2026-47857 | Analyzed | 未確認 | CWE-190 | In Reactor Core, applications that use the Flux.windowTimeout operator with fairBackpressure enabled are vulnerable to a Denial of Service (DoS) condition. Reactor Core 3.8.0 - 3.8 |
| CVE-2026-47859 | Analyzed | 未確認 | CWE-770 | RFC6587SyslogDeserializer, used by the Spring Integration syslog TCP inbound adapter to decode RFC 6587 / RFC 5424 frames, trusts the sender-supplied octet count of an octet-counte |
| CVE-2026-47860 | Analyzed | 未確認 | CWE-835 | An attacker who can publish to a queue consumed by an application that has enabled message decompression can crash the consumer JVM with a single ~1 MB message. Spring AMQP 4.1.0 S |
| CVE-2026-47861 | Analyzed | 未確認 | CWE-918 | An unauthenticated remote attacker who can send a single UDP packet to a Spring Integration UDP inbound adapter can cause the server to emit an outbound UDP datagram to an arbitrar |
| CVE-2026-47862 | Analyzed | 未確認 | CWE-22 | An attacker who can set the file_name header on a message reaching a ZipTransformer with ZipResultType.FILE (the default) can cause the resulting .zip archive to be written to an a |
| CVE-2026-47863 | Analyzed | 未確認 | CWE-835 | In Reactor Core, applications that use the Flux.bufferTimeout operator with fairBackpressure enabled are vulnerable to a Denial of Service (DoS) condition. Reactor Core 3.8.0 - 3.8 |
| CVE-2026-47864 | Analyzed | 未確認 | CWE-502 | SerializingHttpMessageConverter deserializes the body of incoming HTTP requests with a raw java.io.ObjectInputStream and no class filtering. Any request with Content-Type applicati |
| CVE-2026-47874 | Analyzed | 未確認 | CWE-770 | The vulnerability occurs when a client sends HTTP/1.1 pipelined requests over a single connection, causing the Reactor Netty HTTP server to consume an excessive amount of memory. R |
| CVE-2026-47875 | Analyzed | 未確認 | CWE-502 | Applications that deserialize execution contexts with Jackson2ExecutionContextStringSerializer are vulnerable to a deserialization attack if they use an untrusted data source for t |
| CVE-2026-47877 | Analyzed | 未確認 | CWE-79 | Spring Security Authorization Server's default consent page renders user-controlled values without HTML entity encoding. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6 |
| CVE-2026-47878 | Analyzed | 未確認 | CWE-502 | DefaultExecutionContextSerializer, used by default in Spring Batch's JDBC job repository, passes Base64-decoded bytes directly to ObjectInputStream.readObject() without an ObjectIn |
| CVE-2026-47879 | Analyzed | 未確認 | CWE-918 | Spring Cloud Gateway JsonToGrpcGatewayFilterFactory allows arbitrary Spring Resource locations for defining the proto descriptor. Spring Cloud Gateway 5.0.0 - 5.0.2 Spring Cloud Ga |
| CVE-2026-47880 | Analyzed | 未確認 | CWE-20 | A producer who can publish to a JMS destination consumed by any Spring Integration JMS inbound component can set String JMS properties named replyChannel, errorChannel, or json__Ty |
| CVE-2026-47881 | Analyzed | 未確認 | CWE-400 | Spring Batch's FlatFileItemReader supports files where a single logical record spans multiple physical lines — for example, a CSV field that contains embedded newlines wrapped in q |
| CVE-2026-47883 | Analyzed | 未確認 | CWE-601 | UrlHandlerFilter can be vulnerable to an open redirect when configured with very broadly matching patterns. The issue applies to the filter variants in both Spring MVC and Spring W |
| CVE-2026-47884 | Analyzed | 未確認 | CWE-22 | Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/**" mapping that results in view rendering, and where the view name is not |
| CVE-2026-47885 | Undergoing Analysis | 未確認 | CWE-770 | The PartEventHttpMessageReader in Spring WebFlux does not enforce the maxPartSize limit when maxInMemorySize is set to -1. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6 |
| CVE-2026-47886 | Analyzed | 未確認 | CWE-400 | Applications that evaluate user-supplied Spring Expression Language (SpEL) expressions may be vulnerable to a Denial of Service (DoS) attack when the power operator (^) is used wit |
| CVE-2026-47887 | Analyzed | 未確認 | CWE-601 | A Spring MVC application that uses UrlFileNameViewController that is mapped with an end-of-path, and does not have a configured prefix is vulnerable to an open redirect. Spring Fra |
| CVE-2026-47888 | Analyzed | 未確認 | CWE-401 | A Spring RSocket application is exposed to a memory leak via a malformed SETUP frame. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 |
| CVE-2026-47889 | Analyzed | 未確認 | CWE-1275 | A WebFlux application running on the Jetty 12 Core reactive adapter serializes response cookies without the sameSite attribute. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2. |
| CVE-2026-47890 | Analyzed | 未確認 | CWE-93 | Spring MVC and WebFlux applications are vulnerable to stream corruption when using Server-Sent Events (SSE) with view fragments. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2 |
| CVE-2026-47891 | Analyzed | 未確認 | CWE-770 | A Spring WebFlux application that relies on the Aalto XML processor to parse XML input does not correctly enforce the maxInMemorySize limit. Spring Framework 7.0.0 - 7.0.8 Spring F |
| CVE-2026-47892 | Analyzed | 未確認 | CWE-863 | A WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request. Spring Framework 7.0.0 |
| CVE-2026-47893 | Analyzed | 未確認 | CWE-209 | A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason. Spring Framew |
| CVE-2026-47894 | Analyzed | 未確認 | Spring Cloud Config Server native environment repository allows exposure of configuration files outside of the configured repository path. Spring Cloud Config 5.0.0 - 5.0.4 Spring | |
| CVE-2026-47895 | Deferred | 未確認 | CWE-415 | In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but non-NULL encoding are not correctly cloned and trigger a doubl |
| CVE-2026-47922 | Analyzed | 未確認 | CWE-918 | CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue requires user intera |
| CVE-2026-4793 | Analyzed | 未確認 | CWE-276 | An incorrect default permissions vulnerability in Synology Assistant before 7.0.7-50095 allows local users to read or write arbitrary files and conduct denial-of-service during ins |
| CVE-2026-47940 | Analyzed | 未確認 | CWE-190 | Lightroom Classic is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of t |
| CVE-2026-48007 | Deferred | 未確認 | CWE-200 | Element Call is a native Matrix video conferencing application. Versions 0.5.17 through 0.19.3 report analytics data to a PostHog server, when configured to by a `posthog` key in c |
| CVE-2026-48024 | Analyzed | 未確認 | CWE-22 | Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.6 and 5.0.0-beta3, cluster.unmerge_info() in framework/wazuh/cor |
| CVE-2026-48026 | Deferred | 未確認 | CWE-79 | lakeFS is an open-source tool that transforms object storage into a Git-like repositories. Prior to version 1.81.1 of the open source edition and 1.84.0 of the enterprise edition, |
| CVE-2026-48031 | Deferred | 未確認 | CWE-798 | go-base is a Go RESTful API Boilerplate template with JWT Authentication, backed by PostgreSQL. In versions prior to 2026-05-18, the JWT signing secret is hardcoded to the known st |
| CVE-2026-48039 | Deferred | 未確認 | CWE-287 | Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads. Prior to version 1.0.109, `AuthInjectionMiddleware.dispatch()` at `http_auth_integration |
| CVE-2026-48046 | Deferred | 未確認 | CWE-494 | Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions prior to 2.5.0 contain an unvalidated auto-updater URL vulnerability that allows |
| CVE-2026-48047 | Deferred | 未確認 | CWE-24 | XWiki Platform WebJars API is a package for XWiki, a generic wiki platform. Starting with version 9.6-rc-1 and prior to versions 16.10.17, 17.4.9, and 17.10.3, a potential path tra |
| CVE-2026-48048 | Deferred | 未確認 | CWE-359 | XWiki Platform is a generic wiki platform. XWiki discovered that the patch for GHSA-5cf8-vrr8-8hjm was insufficient. Starting with version 6.2.1 and prior to versions 18.0.0RC1, 17 |
| CVE-2026-48050 | Deferred | 未確認 | CWE-200, CWE-306, CWE-400 | Arc is an open, SQL-native time-series database for telemetry. Versions prior to 26.06.1 register Go's `net/http/pprof` handlers at `/debug/pprof/*` via `app.Use(pprof.New())` in ` |
| CVE-2026-48053 | Deferred | 未確認 | CWE-918 | Kolibri is an offline-first education platform. Prior to version 0.19.4, several Kolibri API endpoints accept an unvalidated `baseurl` parameter and fetch attacker-controlled URLs |
| CVE-2026-48054 | Deferred | 未確認 | CWE-94 | OpenZeppelin Contracts Wizard is a web application to interactively build a contract out of components from OpenZeppelin Contracts. Versions prior to 0.10.9 generate a Hardhat test |
| CVE-2026-48056 | Deferred | 未確認 | CWE-20, CWE-749 | Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions prior to 2.5.0 improperly validate executable paths supplied to the run-downloa |
| CVE-2026-48061 | Deferred | 未確認 | CWE-644 | Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. In versions prior to 2.22.0, an attacker can bypass the allowed hosts validation by omitting the Host header |
| CVE-2026-48063 | Deferred | 未確認 | CWE-290, CWE-345, CWE-346 | Baileys is a cocket-based TS/JavaScript API for WhatsApp Web. In versions prior to both 6.7.22 and 7.0.0-rc12, any Baileys session can be sent a malicious payload via the placehol |
| CVE-2026-48071 | Deferred | 未確認 | CWE-307 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.4, the PIN-type challenge throttle uses `emailHash` |
| CVE-2026-48074 | Deferred | 未確認 | CWE-863 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.6, when a TENANT_ADMIN deletes an existing staff us |
| CVE-2026-48075 | Deferred | 未確認 | CWE-862 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.5, the `add-to-tunnel` endpoint creates a new appoi |
| CVE-2026-48076 | Deferred | 未確認 | CWE-863 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. The new-client booking flow in versions 1.0.1 and prior consists of thre |
| CVE-2026-48077 | Deferred | 未確認 | CWE-862 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.1.0, the GET handler at `/api/tenants/{id}/appointmen |
| CVE-2026-48078 | Deferred | 未確認 | CWE-200 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.5, the unauthenticated `/api/tenants/{id}/schedule` |
| CVE-2026-48079 | Deferred | 未確認 | CWE-613 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, when a user navigates to the `/logout` page, the |
| CVE-2026-48080 | Deferred | 未確認 | CWE-200 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, the `GET /api/tenants/{id}` endpoint returns the |
| CVE-2026-48081 | Deferred | 未確認 | CWE-79 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, a TENANT_ADMIN can store `javascript:` URLs in t |
| CVE-2026-48082 | Deferred | 未確認 | CWE-770 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.6, the bootstrap challenge endpoint at `/api/tenant |
| CVE-2026-48083 | Deferred | 未確認 | CWE-117 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, the `/api/log` endpoint accepts unauthenticated |
| CVE-2026-48084 | Deferred | 未確認 | CWE-307 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Versions prior to 1.0.2 don't throttle failed passphrase login attempts. |
| CVE-2026-48085 | Deferred | 未確認 | CWE-862 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.1, a fully provisioned OpenReception instance accep |
| CVE-2026-48086 | Deferred | 未確認 | CWE-269 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, a TENANT_ADMIN promotes themselves to platform-w |
| CVE-2026-48087 | Deferred | 未確認 | CWE-287 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, the registration handler at `POST /api/auth/regi |
| CVE-2026-48088 | Deferred | 未確認 | CWE-862 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.4, the route `POST /api/tenants/{tenantId}/staff/{s |
| CVE-2026-48093 | Deferred | 未確認 | CWE-79 | The Code Embed WordPress plugin prior to version 2.6.1 is vulnerable to stored Cross-Site Scripting (XSS) through the external URL embed feature in post content. The vulnerable cod |
| CVE-2026-48094 | Deferred | 未確認 | CWE-79 | The ShareOpenly WordPress plugin prior to version 1.2.1 contains a Cross-Site Scripting vulnerability caused by the absence of WordPress's `esc_url()` escaping function on the `$ur |
| CVE-2026-48097 | Deferred | 未確認 | CWE-476, CWE-78 | NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user's IP address. Versions prior to 2.0.0 have a command execution vulnerability d |
| CVE-2026-48098 | Deferred | 未確認 | CWE-250, CWE-78 | NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user's IP address. Versions prior to 2.0.0 execute privileged system commands using |
| CVE-2026-48099 | Deferred | 未確認 | CWE-22 | WsgiDAV is a generic and extendable WebDAV server based on WSGI. WsgiDAV 4.3.3 and prior can allow a WebDAV request path containing an encoded parent-directory segment to escape th |
| CVE-2026-48105 | Deferred | 未確認 | CWE-22, CWE-345, CWE-913 | Arc is an open, SQL-native time-series database for telemetry. Prior to version 26.06.1, Arc Enterprise's Raft FSM (`internal/cluster/raft/fsm.go:applyRegisterFile`) accepts attack |
| CVE-2026-48106 | Deferred | 未確認 | CWE-306, CWE-345, CWE-924 | Arc is an open, SQL-native time-series database for telemetry. Prior to version 26.06.1, Arc Enterprise's cluster replication receiver at `internal/cluster/replication/receiver.go` |
| CVE-2026-48113 | Awaiting Analysis | 未確認 | CWE-863 | Chisel is a TCP/UDP tunnel, transported over HTTP and secured via SSH. In versions prior to 1.11.5, authenticated clients can bypass --authfile ACL restrictions and tunnel traffic |
| CVE-2026-48115 | Deferred | 未確認 | CWE-285 | Misskey is an open source, federated social media platform. All Misskey servers running versions 2024.5.0 and later, but prior to 2026.5.4, contain a vulnerability in the Server An |
| CVE-2026-48120 | Deferred | 未確認 | CWE-74 | Kakoune is a code editor. Prior to version 2026.05.21, the bundled, enabled by default, `autorestore.kak` script can be exploited by malicious backup files leading to arbitrary kak |
| CVE-2026-48121 | Awaiting Analysis | 未確認 | CWE-943 | @langchain/langgraph-checkpoint-mongodb provides a LangGraph.js CheckpointSaver implementation that uses MongoDB for storage. Versions 1.3.0 and below are vulnerable to NoSQL injec |
| CVE-2026-48122 | Awaiting Analysis | 未確認 | CWE-78 | Ruby LSP is an implementation of the language server protocol for Ruby. Several workspace-level settings in the Ruby LSP VS Code extension prior to version 0.10.4 could override th |
| CVE-2026-48154 | Deferred | 未確認 | CWE-362 | GoRest is a Golang starter kit built with the Gin framework for prototyping and developing RESTful APIs. In versions prior to 1.12.2 nMemorySecret2FA contains a race condition due |
| CVE-2026-48158 | Deferred | 未確認 | CWE-506 | use-context-selector is a React useContextSelector hook in userland Between 2026-05-18 15:57:18 and 2026-05-19 15:24:34, the default branch contained malicious commits 9d8481a513b7 |
| CVE-2026-48159 | Deferred | 未確認 | CWE-506 | use-reducer-async is a React useReducer with async actions. Between 2026-05-18 16:29:52 and 2026-05-19 15:26:07, the default branch contained malicious commits da72edbde5705efcec6c |
| CVE-2026-48160 | Deferred | 未確認 | CWE-506 | react-tracked provides state usage tracking with Proxies. Between 2026-05-18 19:26:36 and 2026-05-19 15:22:45, the default branch contained malicious commits 6978272a7d6ca02225cb74 |
| CVE-2026-48161 | Deferred | 未確認 | CWE-506 | react18-use is a React 19 use hook shim. Between 2026-05-19 01:07:01 and 2026-05-19 15:20:43, the default branch contained malicious commits 7b79148d1495a2505f9277da295a98cf176f449 |
| CVE-2026-48162 | Analyzed | 未確認 | CWE-73 | Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.6 and 5.0.0-beta3, DistributedAPI.send_tmp_file() in framework/w |
| CVE-2026-48168 | Deferred | 未確認 | CWE-862 | PraisonAI is a multi-agent teams system. In versions prior to 4.6.40, the bundled Claude GitHub Actions workflow is vulnerable to command injection because it embeds an attacker-co |
| CVE-2026-48169 | Deferred | 未確認 | CWE-639, CWE-862 | PraisonAI is a multi-agent teams system. Versions prior to 0.1.4 of the PraisonAI Platform API have two authorization failures that together break workspace isolation. The service |
| CVE-2026-48170 | Deferred | 未確認 | CWE-1321 | `scim-patch`, a library to perform SCIM patch, prior to version 0.9.1 performs prototype pollution when applying a SCIM PATCH operation whose `value` object contains a key like `"_ |
| CVE-2026-48317 | Analyzed | 未確認 | CWE-95 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability that could result in arbitrary c |
| CVE-2026-48323 | Analyzed | 未確認 | CWE-1336 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in |
| CVE-2026-48326 | Analyzed | 未確認 | CWE-89 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary cod |
| CVE-2026-48330 | Analyzed | 未確認 | CWE-89 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary cod |
| CVE-2026-48331 | Analyzed | 未確認 | CWE-918 | Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not requir |
| CVE-2026-48333 | Analyzed | 未確認 | CWE-863 | Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain |
| CVE-2026-48362 | Analyzed | 未確認 | CWE-78 | ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution |
| CVE-2026-48375 | Analyzed | 未確認 | CWE-863 | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in an application denial-of-service. A low-privileged attacker could exploit this vulnerability |
| CVE-2026-48376 | Analyzed | 未確認 | CWE-116 | is affected by an Improper Encoding or Escaping of Output vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability |
| CVE-2026-48381 | Analyzed | 未確認 | CWE-89 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary cod |
| CVE-2026-48384 | Analyzed | 未確認 | CWE-20 | ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker with high privileges could exploit this vuln |
| CVE-2026-48385 | Analyzed | 未確認 | CWE-78 | ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in a Security feature bypass |
| CVE-2026-48386 | Analyzed | 未確認 | CWE-327 | ColdFusion is affected by a Use of a Broken or Risky Cryptographic Algorithm vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulner |
| CVE-2026-48387 | Analyzed | 未確認 | CWE-190 | CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnera |
| CVE-2026-48397 | Analyzed | 未確認 | CWE-502 | Lightroom Classic is affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. An attacker cou |
| CVE-2026-48399 | Analyzed | 未確認 | CWE-657 | Adobe Campaign Classic (ACC) is affected by a Violation of Secure Design Principles vulnerability that could result in a Security feature bypass. An attacker could leverage this vu |
| CVE-2026-48404 | Analyzed | 未確認 | CWE-787 | Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r |
| CVE-2026-48405 | Analyzed | 未確認 | CWE-787 | Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r |
| CVE-2026-48406 | Analyzed | 未確認 | CWE-787 | Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r |
| CVE-2026-48407 | Analyzed | 未確認 | CWE-787 | Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r |
| CVE-2026-48408 | Analyzed | 未確認 | CWE-787 | Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r |
| CVE-2026-48409 | Analyzed | 未確認 | CWE-787 | Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r |
| CVE-2026-48410 | Analyzed | 未確認 | CWE-787 | Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r |
| CVE-2026-48411 | Analyzed | 未確認 | CWE-863 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerab |
| CVE-2026-48412 | Analyzed | 未確認 | CWE-863 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability |
| CVE-2026-48413 | Analyzed | 未確認 | CWE-79 | Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form f |
| CVE-2026-48414 | Analyzed | 未確認 | CWE-79 | Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form f |
| CVE-2026-48415 | Analyzed | 未確認 | CWE-863 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability t |
| CVE-2026-48416 | Analyzed | 未確認 | CWE-863 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass secur |
| CVE-2026-48417 | Analyzed | 未確認 | CWE-121 | Substance3D - Sampler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of t |
| CVE-2026-48418 | Analyzed | 未確認 | CWE-787 | Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this iss |
| CVE-2026-48419 | Analyzed | 未確認 | CWE-787 | Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this iss |
| CVE-2026-48420 | Analyzed | 未確認 | CWE-787 | Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this iss |
| CVE-2026-48421 | Analyzed | 未確認 | CWE-787 | Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this iss |
| CVE-2026-48422 | Analyzed | 未確認 | CWE-122 | Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th |
| CVE-2026-48423 | Analyzed | 未確認 | CWE-122 | Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th |
| CVE-2026-48424 | Analyzed | 未確認 | CWE-122 | Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th |
| CVE-2026-48425 | Analyzed | 未確認 | CWE-122 | Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th |
| CVE-2026-48426 | Analyzed | 未確認 | CWE-787 | Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this is |
| CVE-2026-48427 | Analyzed | 未確認 | CWE-787 | Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this is |
| CVE-2026-48428 | Analyzed | 未確認 | CWE-122 | Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of t |
| CVE-2026-48429 | Analyzed | 未確認 | CWE-476 | Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability t |
| CVE-2026-48430 | Analyzed | 未確認 | CWE-122 | Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of t |
| CVE-2026-48431 | Analyzed | 未確認 | CWE-122 | Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of t |
| CVE-2026-48432 | Analyzed | 未確認 | CWE-122 | Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of t |
| CVE-2026-48433 | Analyzed | 未確認 | CWE-122 | Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of t |
| CVE-2026-48434 | Analyzed | 未確認 | CWE-400 | CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerabi |
| CVE-2026-48435 | Analyzed | 未確認 | CWE-191 | CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit this |
| CVE-2026-48436 | Analyzed | 未確認 | CWE-20 | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to b |
| CVE-2026-48437 | Analyzed | 未確認 | CWE-295 | CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerabilit |
| CVE-2026-48438 | Analyzed | 未確認 | CWE-476 | CAI Content Credentials is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability |
| CVE-2026-48439 | Analyzed | 未確認 | CWE-400 | CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerabi |
| CVE-2026-48440 | Analyzed | 未確認 | CWE-122 | ColdFusion is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions |
| CVE-2026-48441 | Analyzed | 未確認 | CWE-22 | Lightroom Classic is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An a |
| CVE-2026-48442 | Analyzed | 未確認 | CWE-22 | CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Arbitrary file system |
| CVE-2026-48443 | Analyzed | 未確認 | CWE-400 | CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerabi |
| CVE-2026-48444 | Analyzed | 未確認 | CWE-190 | CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnera |
| CVE-2026-48445 | Analyzed | 未確認 | CWE-190 | CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnera |
| CVE-2026-48446 | Analyzed | 未確認 | CWE-22 | CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read |
| CVE-2026-48447 | Analyzed | 未確認 | CWE-863 | Lightroom Classic is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploi |
| CVE-2026-48483 | Deferred | 未確認 | CWE-918 | TypeBot is a chatbot builder tool. Prior to version 3.17.0, Typebot's WhatsApp status forwarding feature stores a workspace-configured webhook forwarding URL and later POSTs WhatsA |
| CVE-2026-48494 | Deferred | 未確認 | CWE-639 | TypeBot is a chatbot builder tool. In version 3.16.1, an authenticated user who has read access to any typebot can resume a WhatsApp preview webhook session that belongs to a diffe |
| CVE-2026-48495 | Deferred | 未確認 | CWE-862 | TypeBot is a chatbot builder tool. Prior to version 3.17.0, the Google Sheets OAuth callback decodes a base64-encoded JSON `state` parameter and trusts the embedded `workspaceId`, |
| CVE-2026-48508 | Deferred | 未確認 | CWE-863 | Lemur manages TLS certificate creation. Prior to 1.9.1, StrictRolePermission and AuthorityCreatorPermission in lemur/auth/permissions.py call flask_principal.Permission.__init__() |
| CVE-2026-48528 | Deferred | 未確認 | CWE-287, CWE-89 | Metacat is data repository software that helps researchers preserve, share, and discover data. Metacat versions 2.0.0 through 3.4.0 contain an unauthenticated SQL injection vulnera |
| CVE-2026-48548 | Deferred | 未確認 | CWE-352 | Nagios Core before 4.5.12 contains a cross-site request forgery vulnerability in cmd.cgi where the CSRF protection mechanism passes validation when the NagFormId cookie is absent. |
| CVE-2026-48549 | Awaiting Analysis | 未確認 | CWE-352 | Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 contains a CSRF vulnerability in cmd.cgi. When no Cookie header is present, the double-submit cookie protection can be bypas |
| CVE-2026-48550 | Awaiting Analysis | 未確認 | CWE-79 | Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to reflected cross-site scripting in cmd.cgi via the NagFormId parameter. An unauthenticated remote attacker |
| CVE-2026-48551 | Awaiting Analysis | 未確認 | CWE-352 | Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 contain a cross-site request forgery protection bypass via a self-supplied double-submit cookie. An attacker can supply matc |
| CVE-2026-48552 | Awaiting Analysis | 未確認 | CWE-79 | Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to DOM-based cross-site scripting in jsonquery.js. Unencoded JSON string values reflected from stored fields |
| CVE-2026-48553 | Awaiting Analysis | 未確認 | CWE-78 | Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 are vulnerable to authenticated remote code execution via custom-variable macro injection through the Nagios Remote Data Pro |
| CVE-2026-48554 | Awaiting Analysis | 未確認 | CWE-78 | Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to authenticated remote code execution via unfiltered NOTIFICATION-family macro substitution through the com_ |
| CVE-2026-48590 | Awaiting Analysis | 未確認 | CWE-91 | XML Injection vulnerability in joshnuss xml_builder (XmlBuilder module) allows Content Spoofing, XML Injection. This vulnerability is associated with program files lib/xml_builder |
| CVE-2026-48702 | Awaiting Analysis | 未確認 | CWE-770 | Rekor is a software supply chain transparency log. Starting in version 0.3.0 and prior to version 1.5.2, the `Package.Unmarshal()` function in `pkg/types/alpine/apk.go` decompresse |
| CVE-2026-48711 | Deferred | 未確認 | CWE-88 | SSHFS is a network filesystem client for connecting to SSH servers. From version 1.4 until 3.7.6, SSHFS accepts a bracketed mount source such as [-oProxyCommand=CMD]:/path and find |
| CVE-2026-48744 | Deferred | 未確認 | CWE-285 | Saleor is an e-commerce platform. From 3.14.67 until 3.21.67, 3.22.63, and 3.23.22, a broken authorization check in saleor/permission/utils.py can incorrectly authorize unauthentic |
| CVE-2026-48749 | Deferred | 未確認 | CWE-73 | Incus is a system container and virtual machine manager. Prior to version 7.2.0, a specially crafted image can be used to read or create/write arbitrary files on the host; possibly |
| CVE-2026-48750 | Deferred | 未確認 | CWE-73 | Incus is a system container and virtual machine manager. Prior to version 7.2.0, the `record-output` parameter of the `/instances/$name/exec` endpoint stores the output of the comm |
| CVE-2026-48751 | Deferred | 未確認 | CWE-862 | Incus is a system container and virtual machine manager. Prior to version 7.2.0, instance snapshots ignore the `restricted.containers.lowlevel=block` setting; allowing for arbitrar |
| CVE-2026-48752 | Deferred | 未確認 | CWE-73 | Incus is a system container and virtual machine manager. Prior to version 7.2.0, a specially crafted image or instance backup can be used to read or create/write arbitrary files on |
| CVE-2026-48753 | Deferred | 未確認 | CWE-73 | Incus is a system container and virtual machine manager. Prior to version 7.1.0, the S3 protocol upload endpoint is vulnerable to path traversal and allows creation of arbitrary fi |
| CVE-2026-48754 | Deferred | 未確認 | CWE-476 | Incus is a system container and virtual machine manager. Prior to version 7.1.0, `(*backend).createDependentVolumesFromBackup` in `internal/server/storage/backend.go` contains a cl |
| CVE-2026-48755 | Deferred | 未確認 | CWE-20 | Incus is a system container and virtual machine manager. Prior to version 7.1.0, improper validation of user-provided backup compression algorithm leads to argument injection in th |
| CVE-2026-48756 | Deferred | 未確認 | CWE-476 | Incus is a system container and virtual machine manager. Prior to version 7.1.0, `(*backend).CreateCustomVolumeFromBackup` in `internal/server/storage/backend.go` contains an ungua |
| CVE-2026-48762 | Deferred | 未確認 | CWE-918 | TypeBot is a chatbot builder tool. Prior to version 3.16.0, the OpenAI "Create Transcription" action handler fetches a user-supplied audio URL using `fetch()` without applying the |
| CVE-2026-48763 | Deferred | 未確認 | CWE-862 | TypeBot is a chatbot builder tool. Versions prior to 3.17.0 expose a deprecated public upload endpoint at `GET /api/v1/typebots/{typebotId}/blocks/{blockId}/storage/upload-url` tha |
| CVE-2026-48765 | Deferred | 未確認 | CWE-639 | TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege read collaborator to extract a workspace OAuth `credentialsId` from a readable bot configuration a |
| CVE-2026-48766 | Deferred | 未確認 | CWE-200 | TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege guest member of a workspace to exfiltrate stored OpenAI-compatible API keys by invoking the OpenAI |
| CVE-2026-48767 | Deferred | 未確認 | CWE-200 | TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege guest member of a workspace to obtain a live Google Sheets OAuth access token for that workspace b |
| CVE-2026-48769 | Deferred | 未確認 | CWE-20 | Incus is a system container and virtual machine manager. Prior to version 7.2.0, an arbitrary file write exists in the Incus client when a malicious image server returns a crafted |
| CVE-2026-48771 | Deferred | 未確認 | CWE-200 | ishankportfolio is a portfolio website. Prior to version 1.0.1, contact form submissions could potentially be exposed due to improperly secured client-side database configuration a |
| CVE-2026-48786 | Deferred | 未確認 | CWE-200 | Fleet is an open-source device management platform built on osquery. In versions prior to 4.87.0, the target search endpoint (POST /api/latest/fleet/targets) returned unmasked team |
| CVE-2026-4879 | Analyzed | 未確認 | CWE-862 | GitLab has remediated an issue in GitLab EE affecting all versions from 16.0 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allo |
| CVE-2026-48790 | Deferred | 未確認 | CWE-276, CWE-732 | Turso CLI is the command line interface (CLI) to the open-source database Turso. Versions prior to 1.0.26 persist the user's Turso platform JWT to `settings.json` using Viper's def |
| CVE-2026-48791 | Deferred | 未確認 | CWE-347 | sigstore-java is a sigstore java client for interacting with sigstore infrastructure. Version 2.0.0 erroneously removed verification of the integrated (Rekor entry) time) against t |
| CVE-2026-48796 | Deferred | 未確認 | CWE-22 | CefSharp provides .NET bindings for the Chromium Embedded Framework for Windows Forms and Windows Presentation Foundation applications. Prior to version 148.0.90, CefSharp/SchemeHa |
| CVE-2026-48798 | Awaiting Analysis | 未確認 | CWE-22, CWE-73 | SSH.NET is a Secure Shell (SSH) library for .NET. In 2025.1.0 and earlier, ScpClient.Download(string directoryName, DirectoryInfo directoryInfo) trusts file and directory names ret |
| CVE-2026-48802 | Deferred | 未確認 | CWE-770 | python-engineio is a Python implementation of the Engine.IO realtime client and server. Prior to version 4.13.2, an attacker can cause the creation of unnecessary background thread |
| CVE-2026-48804 | Awaiting Analysis | 未確認 | CWE-770 | python-socketio is a Python implementation of the Socket.IO realtime client and server. The python-socketio server stores binary `EVENT` and `ACK` messages in memory while it waits |
| CVE-2026-48809 | Deferred | 未確認 | CWE-770 | python-engineio is a Python implementation of the Engine.IO realtime client and server. Versions prior to 4.13.2 have two specific configurations of the python-engineio server in w |
| CVE-2026-48813 | Deferred | 未確認 | CWE-74 | Flawfinder is a a static analysis tool for finding vulnerabilities in C/C++ source code. Versions prior to 2.0.20 have an improper input neutralization issue leading to output mani |
| CVE-2026-48834 | Analyzed | 未確認 | CWE-400 | Improper Handling of Length Parameter Inconsistency vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.1. Unauthenticated attackers can cause a denial |
| CVE-2026-48911 | Analyzed | 未確認 | CWE-306 | Insufficient Verification of Data Authenticity vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.1. A missing authorization check in the external-logi |
| CVE-2026-48912 | Analyzed | 未確認 | CWE-639 | Improper Input Validation vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.1. A missing ownership check in the avatar-cleanup logic allows any authe |
| CVE-2026-48996 | Analyzed | 未確認 | CWE-79, CWE-94 | Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter does not sanitize note titles, and the |
| CVE-2026-49003 | Deferred | 未確認 | CWE-287 | Attackers can exploit command injection vulnerabilities to delete core system runtime files, causing the monitoring module to crash and become paralyzed; simultaneously, they can o |
| CVE-2026-49004 | Deferred | 未確認 | CWE-89 | The built-in PostgreSQL service on the mobile device suffers from misconfiguration flaws and command injection vulnerabilities. This service listens on a specific port, runs with r |
| CVE-2026-49005 | Deferred | 未確認 | CWE-916 | The root password hash of the device can be obtained through unencrypted information in the firmware. |
| CVE-2026-49006 | Deferred | 未確認 | CWE-321 | By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to TLS transmission. |
| CVE-2026-49007 | Deferred | 未確認 | CWE-798 | By accessing unencrypted information in the device firmware, an attacker can obtain the initial login credentials for the device's web interface. |
| CVE-2026-49008 | Deferred | 未確認 | CWE-321 | By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to the integrity verification of a specific application function on the devi |
| CVE-2026-49050 | Analyzed | 未確認 | CWE-863 | General user can mint admin access tokens via /access-tokens This issue affects Apache DolphinScheduler: before 3.4.2. Users are recommended to upgrade to version 3.4.2, whic |
| CVE-2026-49089 | Analyzed | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). A query expression accepted by a connec |
| CVE-2026-49096 | Analyzed | 未確認 | CWE-248 | Uncaught Exception (CWE-248) in Kibana Cases can lead to denial of service via Input Data Manipulation (CAPEC-153). Malformed link syntax stored in a case comment was not rejected |
| CVE-2026-49114 | Analyzed | 未確認 | CWE-22, CWE-367, CWE-59 | In ONNX before 1.21.0, the 'save_external_data' function builds the external-data file path from the model's external_data location field and opens it for writing without 'O_NOFOLL |
| CVE-2026-49131 | Awaiting Analysis | 未確認 | CWE-79 | OPNsense before 26.1.9 contains a stored cross-site scripting vulnerability that allows authenticated attackers with firewall rule management privileges to inject arbitrary HTML or |
| CVE-2026-49132 | Awaiting Analysis | 未確認 | CWE-79 | OPNsense before 26.1.9 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary HTML or JavaScript by embedding payloads in the |
| CVE-2026-49163 | Analyzed | 未確認 | CWE-22 | Improper limitation of a pathname to a restricted directory ('path traversal') in Application Insights Profiler allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-49179 | Analyzed | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an unauthorized attacker to execute code over a network. |
| CVE-2026-49217 | Deferred | 未確認 | CWE-306 | Mailu is a mail server as a set of Docker images. Prior to version 2024.06.52, a missing authorization check in the Mailu admin REST API allows any unauthenticated attacker to remo |
| CVE-2026-49221 | Deferred | 未確認 | CWE-639 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend digital asset operations allow a low-privile |
| CVE-2026-49222 | Deferred | 未確認 | CWE-639 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend product question operations allow a low-priv |
| CVE-2026-49223 | Deferred | 未確認 | CWE-639 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend product review operations allow a low-privil |
| CVE-2026-49224 | Deferred | 未確認 | CWE-639 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend post revision operations allow a low-privile |
| CVE-2026-49225 | Deferred | 未確認 | CWE-639 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend product revision operations allow a low-priv |
| CVE-2026-49226 | Deferred | 未確認 | CWE-639 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend post operations allow a low-privileged Autho |
| CVE-2026-49227 | Deferred | 未確認 | CWE-639 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend comment operations allow a low-privileged Au |
| CVE-2026-49228 | Deferred | 未確認 | CWE-639 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend product operations allow a low-privileged Ve |
| CVE-2026-49244 | Deferred | 未確認 | CWE-22 | SFTPGo is an open source, event-driven file transfer solution. From 2.2.0 until 2.7.3, the public web-client partial ZIP download endpoint for a browsable share validates client-su |
| CVE-2026-49245 | Deferred | 未確認 | CWE-79 | SFTPGo is an open source, event-driven file transfer solution. From 2.2.0 until 2.7.3, the inline query parameter on browsable-share file downloads and authenticated user-file down |
| CVE-2026-49253 | Deferred | 未確認 | CWE-22 | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.11.11, electerm uses remote-supplied filenames directly with path.join() while |
| CVE-2026-49255 | Deferred | 未確認 | CWE-78 | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.11.11, electerm constructs operating system commands in src/app/lib/fs.js by in |
| CVE-2026-49262 | Deferred | 未確認 | CWE-367, CWE-918 | In the Aimeos Pagible content management system prior to version 0.10.4, the administrative proxy route (`cmsproxy`) is vulnerable to a Server-Side Request Forgery (SSRF) attack vi |
| CVE-2026-49263 | Awaiting Analysis | 未確認 | CWE-197 | Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's WebAssembly backend accepts attacker-controlled raw WASM instruction bytes through the public `cs_dis |
| CVE-2026-49282 | Awaiting Analysis | 未確認 | CWE-125, CWE-129, CWE-191 | Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's public `cs_insn_name()` API forwards caller-supplied instruction IDs directly to the selected archite |
| CVE-2026-49283 | Deferred | 未確認 | CWE-295 | The SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. Prior to versions 4.19.3, 4.20.2, 5.0.6, and 6.2.1, the HTTPArtifact::receive() flow can treat an |
| CVE-2026-49289 | Deferred | 未確認 | CWE-400 | The SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. In 4.19.2 and 4.20.2, the library permits attacker-controlled XPath transforms while processing XM |
| CVE-2026-49301 | Deferred | 未確認 | CWE-200 | Permission control vulnerability in the Gallery module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-49302 | Deferred | 未確認 | CWE-200 | Permission control vulnerability in the notification service module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-49303 | Deferred | 未確認 | CWE-264 | Permission control vulnerability in the notification module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-49304 | Deferred | 未確認 | CWE-264 | Permission control vulnerability in the device key management module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-49305 | Deferred | 未確認 | CWE-755 | Permission control vulnerability in the Wi-Fi enhancement module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-49306 | Deferred | 未確認 | CWE-416 | UAF vulnerability in the time and time zone module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-49307 | Deferred | 未確認 | CWE-200 | Permission control vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-49308 | Deferred | 未確認 | CWE-264 | Permission control vulnerability in the clipboard module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-49331 | Awaiting Analysis | 未確認 | CWE-345 | A flaw was found in openshift/oauth-proxy. On paths configured to bypass authentication (skip-auth-regex), the proxy forwards client-supplied identity headers (X-Forwarded-User, X- |
| CVE-2026-49343 | Deferred | 未確認 | CWE-400, CWE-772 | Klever-Go is the Go implementation of the Klever blockchain protocol. In versions prior to 1.7.18, the account-data trie syncers are vulnerable to a resource-exhaustion flaw that l |
| CVE-2026-49349 | Deferred | 未確認 | CWE-522 | regclient is a Docker and OCI Registry Client in Go. Prior to version 0.11.5, credentials for a registry may be inadvertently leaked to external servers. A prerequisite for this at |
| CVE-2026-4936 | Analyzed | 未確認 | CWE-331 | IBM PowerVM Hypervisor Platform KeyStore (PKS) and virtual TPM FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 use persistent storage key se |
| CVE-2026-49360 | Deferred | 未確認 | CWE-73 | Recce is a data-validation toolkit for enhanced dbt (data build tool) PR review. Prior to version 1.50.0, OSS server deployments that expose the server to an untrusted network with |
| CVE-2026-4937 | Analyzed | 未確認 | CWE-331 | IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H2 could allow a local attacker with administrative privileges to decryp |
| CVE-2026-49391 | Deferred | 未確認 | CWE-79 | Frappe is a full-stack web application framework. Prior to 16.19.0 and 15.109.0, Data Import does not escape imported column headers before rendering previews and results, allowing |
| CVE-2026-49392 | Analyzed | 未確認 | CWE-20, CWE-89 | Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.6.0 until 4.14.6 and 5.0.0-beta3, DB::getFile() and DB::searchFile() in src/sys |
| CVE-2026-49415 | Analyzed | 未確認 | CWE-367 | During execve(2) of a SUID binary, the new virtual address space is installed before the process credentials are updated. During this window, a process running as the same user ca |
| CVE-2026-49418 | Analyzed | 未確認 | CWE-416 | When msync(MS_INVALIDATE) is called on a mapping of an unmanaged device object, the physical pages in the mapping range are marked invalid but remain in the pager's page list. A s |
| CVE-2026-49419 | Analyzed | 未確認 | CWE-911 | When the JAIL_AT_DESC flag is specified, kern_jail_set() and kern_jail_get() released the reference to the caller's current prison before looking up the jail descriptor. If the de |
| CVE-2026-49420 | Analyzed | 未確認 | CWE-121 | The RTSP handler in libalias rewrote outgoing packets into a fixed-length stack buffer without checking whether the rewritten data fit in the buffer, or whether the result fit back |
| CVE-2026-49421 | Analyzed | 未確認 | CWE-273 | The kernel function that implements unlinkat(2) and funlinkat(2) validated the AT_RESOLVE_BENEATH flag but failed to pass it through to the underlying path lookup. The flag was si |
| CVE-2026-49422 | Analyzed | 未確認 | CWE-416 | The RACK setsockopt(2) handler drops the connection lock in order to copy option data from userspace, then reacquires the lock. After reacquiring, it verifies that the TCP stack h |
| CVE-2026-49423 | Analyzed | 未確認 | CWE-908 | When building the iovec array for a received TLS 1.2 CBC record, ktls_ocf_tls_cbc_decrypt() incremented the iovec index for every mbuf in the chain, including mbufs that were skipp |
| CVE-2026-49424 | Analyzed | 未確認 | CWE-908 | The Linux waitid() implementation translates a FreeBSD siginfo_t struct into a stack-declared Linux siginfo_t. It did not first zero the stack struct. An unprivileged user may ob |
| CVE-2026-49425 | Analyzed | 未確認 | CWE-908 | The compat32 kevent() handler translates a 64-bit kevent struct into a stack- declared 32-bit struct. It did not first zero the stack struct. An unprivileged user may observe a s |
| CVE-2026-49426 | Analyzed | 未確認 | CWE-223, CWE-224 | When auditing a system call executed via ptrace(PT_SC_REMOTE), the kernel passed the return value of an internal setup function to AUDIT_SYSCALL_EXIT() rather than the actual resul |
| CVE-2026-49427 | Analyzed | 未確認 | CWE-826 | Pages belonging to largepage shared memory objects were not explicitly wired. When sendfile(2) transmitted such an object with the SF_NOCACHE flag, it freed the underlying pages a |
| CVE-2026-49428 | Analyzed | 未確認 | CWE-915 | Certain system calls, such open(2) with the O_TRUNC flag set, and fspacectl(2), could incorrectly free memory in largepage objects. These operations are not permitted on largepage |
| CVE-2026-49429 | Analyzed | 未確認 | CWE-122 | The ZFS_IOC_USERSPACE_MANY ioctl, used by zfs-userspace(8), truncated a 64-bit output buffer size to a 32-bit integer for the kernel allocation, but used the original 64-bit size a |
| CVE-2026-49430 | Analyzed | 未確認 | CWE-122 | The ZFS_IOC_RECV_NEW ioctl, in the heal receive path, similarly truncated a 64-bit payload size to a 32-bit integer for allocation, then used the original 64-bit size as the length |
| CVE-2026-49431 | Analyzed | 未確認 | CWE-863 | The ZFS_IOC_SET_PROP ioctl, used by zfs-set(8), incorrectly validated the calling user such that an unprivileged user is able to set metadata on a dataset indicating that the datas |
| CVE-2026-49435 | Awaiting Analysis | 未確認 | CWE-121 | Keysight IxChariot Endpoint and associated products contain a stack-based buffer overflow. An unauthenticated remote attacker can send a specially crafted packet and execute arbitr |
| CVE-2026-49436 | Deferred | 未確認 | CWE-79 | LinkAce is a self-hosted archive to collect website links. Prior to version 2.5.7, the Bulk Link API endpoint (`POST /api/v2/bulk/links`) accepts URLs without any format validation |
| CVE-2026-49441 | Analyzed | 未確認 | CWE-73 | Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.3.0 until 4.14.6 and 5.0.0-beta3, the non-merged branch of process_files_from_w |
| CVE-2026-49452 | Deferred | 未確認 | CWE-74 | WeasyPrint helps web developers to create PDF documents. Prior to 69.0, WeasyPrint embeds unescaped HTML presentational-hint attribute values into CSS in weasyprint/css/__init__.py |
| CVE-2026-49457 | Deferred | 未確認 | CWE-295, CWE-297 | erlang_quic is a pure Erlang QUIC implementation. Prior to version 1.4.4, the QUIC client did not authenticate the server during the TLS 1.3 handshake. The CertificateVerify signat |
| CVE-2026-49466 | Deferred | 未確認 | CWE-79 | Draft List is a WordPress plugin to manage and promote unpublished content. Versions 2.6.3 and below are vulnerable to stored Cross-Site Scripting (XSS) in the `[drafts]` shortcode |
| CVE-2026-49467 | Deferred | 未確認 | CWE-303, CWE-304 | Pingvin Share X is a secure and easy self-hosted file sharing platform. A vulnerability in versions 1.5.0 through 1.18.0 allow an attacker to bypass password verification when mana |
| CVE-2026-49473 | Deferred | 未確認 | CWE-436, CWE-863 | @cedar-policy/authorization-for-expressjs is an open-source Express.js middleware that integrates Cedar authorization into Express applications by mapping HTTP requests to Cedar ac |
| CVE-2026-49478 | Deferred | 未確認 | CWE-918 | Fulcio is a certificate authority for issuing code signing certificates for an OpenID Connect (OIDC) identity. Versions through 1.8.5 improperly follow cross-host redirects and att |
| CVE-2026-49481 | Deferred | 未確認 | CWE-78 | UpSnap is a wake on lan web app. Versions prior to 5.4.0 have an OS command injection vulnerability in the UpSnap’s device management functionality due to the presence of unsafe sh |
| CVE-2026-49500 | Awaiting Analysis | 未確認 | CWE-272 | Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacke |
| CVE-2026-49746 | Deferred | 未確認 | CWE-823 | Software installed and run as a non-privileged user may conduct improper GPU system calls to cause OOB read kernel memory access and in certain cases cause GPU UAF of arbitrary pag |
| CVE-2026-49809 | Analyzed | 未確認 | CWE-89 | Dell PowerProtect Cyber Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low priv |
| CVE-2026-49816 | Analyzed | 未確認 | CWE-502 | Dell Command Update (DCU), versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit |
| CVE-2026-49817 | Analyzed | 未確認 | CWE-502 | Dell Command Update (DCU), versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit |
| CVE-2026-49819 | Deferred | 未確認 | CWE-269, CWE-306, CWE-78, CWE-862 | UpSnap is a wake on lan web app. Versions 4.4.1 through 5.3.5 are vulnerable to a missing-authentication / privilege-escalation chain in `pb.HandlerInitSuperuser` (`backend/pb/hand |
| CVE-2026-49820 | Deferred | 未確認 | CWE-601 | Probo is a self-hostable governance, risk, and compliance (GRC) platform built for engineering and security teams. Probo's `saferedirect` package validates redirect URLs used acros |
| CVE-2026-49825 | Awaiting Analysis | 未確認 | CWE-184, CWE-79 | lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.1, link attributes in ``lxml.html.defs.link_attrs`` were missing ``xlink:href``, which can be use |
| CVE-2026-49826 | Awaiting Analysis | 未確認 | CWE-601 | Concourse is a container-based automation system written in Go. Prior to version 8.2.3, an attacker is able to craft and send a user a URL that will redirect the user from the Conc |
| CVE-2026-49827 | Deferred | 未確認 | CWE-20, CWE-306, CWE-434 | WebErpMesv2 is a Resource Management and Manufacturing execution system Web for industry. Versions 1.19 and prior allow any self-registered user to upload arbitrary PHP files throu |
| CVE-2026-49845 | Analyzed | 未確認 | CWE-94 | SQL injection in Hive Metastore direct SQL partition-name resolution in Apache Hive before 4.2.1 on all platforms allows authenticated users with access to Hive Metastore APIs to r |
| CVE-2026-49849 | Deferred | 未確認 | CWE-434 | xShop is an open-source shop developed in Laravel. An Unrestricted File Upload vulnerability in xShop version 3.0.3 allows an authenticated administrator to upload executable files |
| CVE-2026-49856 | Deferred | 未確認 | CWE-918 | @jshookmcp/jshook is an MCP server that gives AI agents tools for JavaScript analysis and security research. In version 0.3.1, he network domain has a central SSRF authorization po |
| CVE-2026-49857 | Deferred | 未確認 | CWE-918 | auth-fetch-mcp is an MCP server that lets AI assistants fetch content from authenticated web pages. Version 3.0.1 implements SSRF protection in `assertSafeUrl()` (`src/security.ts` |
| CVE-2026-49864 | Deferred | 未確認 | CWE-79 | wetty provides terminal access in browser over http/https. Prior to version 3.0.4, the wetty client decodes a base64 filename from the file-download escape sequence and interpolate |
| CVE-2026-49870 | Analyzed | 未確認 | CWE-770 | Snipe-IT is an IT asset/license management system. Prior to 8.6.1, POST /two-factor has no rate limiting, lockout, or attempt counter, allowing an attacker with valid credentials t |
| CVE-2026-49976 | Analyzed | 未確認 | CWE-863 | Snipe-IT is an IT asset/license management system. Prior to 8.6.1, a user with the import permission can use CSV update mode to overwrite the email address of a non-admin user and |
| CVE-2026-49986 | Deferred | 未確認 | CWE-829 | The Cortex MCP server (`neuro-cortex-memory`), a cross-platform persistent memory MCP, prior to version 3.17.1 treats the `CLAUDE_PROJECT_DIR` environment variable — automatically |
| CVE-2026-49989 | Deferred | 未確認 | CWE-863 | CrateDB is a distributed SQL database. Prior to versions 6.2.8 and 6.3.2, any authenticated user can read or delete any blob whose SHA-1 digest they know, and can plant new blobs u |
| CVE-2026-49996 | Deferred | 未確認 | CWE-601 | SecureDrop Client is a desktop app for journalists to securely communicate with sources and handle submissions on the SecureDrop Workstation. Prior to version 1.3.1, a malicious Se |
| CVE-2026-50027 | Deferred | 未確認 | CWE-306 | mcp-memory-service is a semantic memory layer for AI applications. Prior to 10.67.1, all HTTP routes under /api/documents/* in mcp-memory-service are served without any authenticat |
| CVE-2026-50029 | Deferred | 未確認 | CWE-697 | js-toml is a TOML parser for JavaScript, Prior to version 1.1.2, the interpreter checks whether a key already exists in a parser-built container with `if (object[key])` instead of |
| CVE-2026-50058 | Analyzed | 未確認 | CWE-125 | A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7). The affected applications contains a |
| CVE-2026-50059 | Analyzed | 未確認 | CWE-787 | A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7). The affected applications contains a |
| CVE-2026-5006 | Awaiting Analysis | 未確認 | CWE-639 | A vulnerability was identified in HashiCorp Vault and Vault Enterprise (“Vault”) such that an authenticated attacker may manipulate an identity value referenced by a templated poli |
| CVE-2026-50060 | Analyzed | 未確認 | CWE-416 | A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7). The affected applications contain a |
| CVE-2026-50061 | Analyzed | 未確認 | CWE-416 | A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7). The affected applications contain a |
| CVE-2026-50062 | Analyzed | 未確認 | CWE-125 | A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7). The affected applications contains a |
| CVE-2026-50063 | Analyzed | 未確認 | CWE-125 | A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7). The affected applications contains a |
| CVE-2026-50064 | Analyzed | 未確認 | CWE-787 | A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7). The affected applications contains a |
| CVE-2026-50105 | Deferred | 未確認 | CWE-200, CWE-862 | RSS/Atom feed handlers bypass API-token scope & public-only confinement (incomplete fix of #37698) |
| CVE-2026-50112 | Analyzed | 未確認 | CWE-78, CWE-918 | SSRF via Metalink Mirror URL Resolution: An authenticated tenant can register a template pointing to an attacker-controlled metalink file containing internal targets. The Secondar |
| CVE-2026-50126 | Deferred | 未確認 | CWE-125, CWE-476 | Adaguc-server is an open source geographical information system to visualize, combine, compare and share real-time meteorological, climatological and remote sensing data via OGC st |
| CVE-2026-50138 | Deferred | 未確認 | CWE-284 | goshs is a SimpleHTTPServer written in Go. Prior to version 2.1.0, when `goshs` is launched with WebDAV enabled (`-w`), the mode-restriction flags `--read-only`, `--upload-only`, a |
| CVE-2026-50139 | Deferred | 未確認 | CWE-362 | goshs is a SimpleHTTPServer written in Go. Prior to version 2.1.0, `ShareHandler` reads the share token's `DownloadLimit` under `RLock`, releases the lock, serves the file, then re |
| CVE-2026-50142 | Deferred | 未確認 | CWE-190, CWE-770 | libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.0, a crafted HEIF sequence accepted by heif_context_read_from_memory() with the msf1 sequence bra |
| CVE-2026-50143 | Deferred | 未確認 | CWE-918 | The Apify MCP server enables AI agents to extract data from websites using ready-made scrapers, crawlers, and automation tools available on the Apify Store. Prior to 0.10.11, getAc |
| CVE-2026-50149 | Deferred | 未確認 | CWE-295 | Contour is a Kubernetes ingress controller using Envoy proxy. In versions 1.23.0 through 1.33.4, when an `HTTPProxy` is configured with incompatible combination of both `.spec.virt |
| CVE-2026-50152 | Awaiting Analysis | 未確認 | CWE-285 | Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the Monitor subscription handler fails to pro |
| CVE-2026-50159 | Awaiting Analysis | 未確認 | CWE-94 | Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Prior to 10.9.8 and 11.16.1, Mermaid is vulnerable to CSS injection via sibl |
| CVE-2026-50161 | Deferred | 未確認 | CWE-190, CWE-787 | libre is a generic library for real-time communications with asynchronous input and output support. Prior to 4.8.1, the websock_decode() function in src/websock/websock.c contains |
| CVE-2026-50167 | Deferred | 未確認 | CWE-639 | Kurrier is a modern, self-hosted workspace for email, calendar, contacts, and storage. Prior to 1.2.4, Kurrier API endpoints for listing and retrieving webhook and identity resourc |
| CVE-2026-50173 | Deferred | 未確認 | CWE-863 | Flow-Like is a platform for building end-to-end use cases. Prior to version 1.0.4, `GET /api/v1/apps/{app_id}/invoke/presign` grants Azure Blob Storage SAS credentials with write a |
| CVE-2026-50186 | Deferred | 未確認 | CWE-22 | 4gaBoards is a boards system for realtime project management. Prior to 3.3.8, 4gaBoards allows an authenticated project manager to supply traversal sequences in the filename parame |
| CVE-2026-50187 | Awaiting Analysis | 未確認 | CWE-94 | Oh My Zsh is a community-driven framework for managing Zsh configuration. Prior to 2026-05-28, the dotenv plugin in plugins/dotenv/dotenv.plugin.zsh passes ZSH_DOTENV_FILE to sourc |
| CVE-2026-50190 | Deferred | 未確認 | CWE-79 | Shaarli is a personal bookmarking service. Versions prior to 0.16.3 are vulnerable to stored XSS in `application/front/controller/visitor/BookmarkListController.php`. The `permalin |
| CVE-2026-50191 | Deferred | 未確認 | CWE-287, CWE-288 | 4gaBoards is a boards system for realtime project management. Prior to 3.3.8, 4gaBoards is vulnerable to pre-account takeover when registrationEnabled, localRegistrationEnabled, an |
| CVE-2026-50192 | Deferred | 未確認 | CWE-200, CWE-522 | Kerberos Agent is an open source video (surveillance) management agent. Prior to version 3.6.26, the Kerberos Hub upload path sends the agent's Hub credentials in the custom `X-Ker |
| CVE-2026-50198 | Deferred | 未確認 | CWE-639 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.1, an authenticated user can edit their own inactive subscription and set replacement_su |
| CVE-2026-50199 | Deferred | 未確認 | CWE-863 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.1, endpoints/currency/update_exchange.php loads the first Fixer/API Layer credential glo |
| CVE-2026-50222 | Analyzed | 未確認 | CWE-200, CWE-862 | Missing Authorization, Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's Userdata reference APIs. Several userdata-related APIs in Ap |
| CVE-2026-50236 | Awaiting Analysis | 未確認 | CWE-918 | An authenticated SSRF flaw was found in the OpenShift Console Dev Console webhook helpers. User-supplied target URLs are fetched server-side without validation, with path neutraliz |
| CVE-2026-50237 | Awaiting Analysis | 未確認 | CWE-918 | A Server-Side Request Forgery and supply chain flaw was found in the OpenShift Console Helm catalog proxy. A namespace tenant can plant a ProjectHelmChartRepository with an arbitra |
| CVE-2026-50278 | Deferred | 未確認 | CWE-125, CWE-190, CWE-704 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions prior to 2.3.2.1 have a `CIccEmbedIO::Read8()` size_t underflow. The issue ari |
| CVE-2026-50288 | Deferred | 未確認 | CWE-918 | SpecifyJS is a declarative TypeScript user interface framework. Prior to version 0.2.136, when `new URL()` throws a parse error, the `assertSecureUrl` function returned without thr |
| CVE-2026-50290 | Deferred | 未確認 | CWE-79 | SpecifyJS is a declarative TypeScript user interface framework. Prior to version 0.2.136, CSS value sanitization stripped `expression(` and `url(javascript:` using simple regex, bu |
| CVE-2026-50472 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50481 | Analyzed | 未確認 | CWE-471 | Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-50515 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network. |
| CVE-2026-50516 | Modified | 未確認 | CWE-306 | Incorrect authorization in Microsoft Azure Kubernetes Service allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-50523 | Analyzed | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute code locally. |
| CVE-2026-50538 | Deferred | 未確認 | CWE-122, CWE-787 | LibVNCClient is a library for easy implementation of a VNC client. In versions 0.9.12 through 0.9.15, a malicious (or man-in-the-middle) VNC server can force a connecting `libvnccl |
| CVE-2026-50540 | Deferred | 未確認 | CWE-20, CWE-22 | Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. Prior to version 4.0.0, kata-run |
| CVE-2026-50544 | Deferred | 未確認 | CWE-379, CWE-732 | NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a latent gap exists on a default install, the file at `src/platform |
| CVE-2026-50550 | Analyzed | 未確認 | CWE-863 | Snipe-IT is an IT asset/license management system. Prior to 8.5.0, a user who can edit other users can reset a superadmin's two-factor authentication through app/Http/Controllers/A |
| CVE-2026-50561 | Deferred | 未確認 | CWE-287 | Yuxi is a large-model-based intelligent knowledge base and knowledge graph agent development platform. Prior to version 0.6.2, the project's authentication mechanism contains a fla |
| CVE-2026-50575 | Deferred | 未確認 | CWE-294, CWE-345, CWE-672 | BetterDesk is a remote desktop management solution. BetterDesk versions through 2.3.0 improperly invalidate deleted device identities, allowing an unauthenticated client to replay |
| CVE-2026-50576 | Deferred | 未確認 | CWE-113 | ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration does no |
| CVE-2026-50577 | Deferred | 未確認 | CWE-323 | ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration leaves |
| CVE-2026-50578 | Deferred | 未確認 | CWE-295 | ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration disable |
| CVE-2026-50601 | Deferred | 未確認 | CWE-798 | A security vulnerability has been identified in the Planet9 desktop application where a hardcoded read-only API key permitted unauthorized access to internal repositories. An attac |
| CVE-2026-50602 | Deferred | 未確認 | CWE-732 | A security vulnerability has been identified in Planet9 due to incorrect file permissions assigned to an application executable used by the Planet9 background service. The service |
| CVE-2026-5062 | Deferred | 未確認 | CWE-89 | The PrettyLinks – Affiliate Links, Link Branding, Link Tracking, Marketing and Stripe Payments Plugin plugin for WordPress is vulnerable to SQL Injection via the 's' (search) param |
| CVE-2026-50719 | Deferred | 未確認 | CWE-284, CWE-347, CWE-474 | The Ingenic T41, and probably also T32, T40, and A1 SoC boot ROMs parse and execute an attacker-controlled init table from the SPL header before checking the secure boot state and |
| CVE-2026-50720 | Deferred | 未確認 | CWE-347 | The Ingenic T31 SoC boot ROM flash-boot verification path compares only a single 32-bit word of the RSA signature output against a single 32-bit word of the SHA-256 payload digest, |
| CVE-2026-50749 | Analyzed | 未確認 | CWE-863 | Improper Authorization vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.1. Any authenticated user can reject arbitrary pending edit-revisions without |
| CVE-2026-50768 | Deferred | 未確認 | CWE-434 | File Upload vulnerability in T-Systems International GmbH ImageMaster Version: 9.14.2.8.1 allows a remote attacker to execute arbitrary code via the add attachments feature in the |
| CVE-2026-50769 | Deferred | 未確認 | CWE-89 | The CRM+ application before and including version 2025.6 from Brainformatik is vulnerable to SQL Injection (time-based) vulnerability. The check conflict endpoint index.php?module= |
| CVE-2026-50770 | Deferred | 未確認 | CWE-269 | An issue in Squirro Cognitive Search before v.3.14.2 allows a remote attacker to escalate privileges via a crafted request. |
| CVE-2026-50771 | Deferred | 未確認 | CWE-79 | Cross Site Scripting vulnerability in Squirro Cognitive Search < 3.14.2 allows a remote attacker to execute arbtirary code via the Email Notification, Create Evaluation Sets and HT |
| CVE-2026-50772 | Deferred | 未確認 | CWE-94 | An issue in Squirro Cognitive Search < 3.14.2 allows a remote attacker to execute arbitrary code via a crafted payload to the password reset function. |
| CVE-2026-50773 | Deferred | 未確認 | CWE-427 | An issue in CGM Germany - CompuGroup Medical CGM ISIS MED 2510.1.0.20 allows a remote attacker to execute arbtirary code via a crafted .dll file. |
| CVE-2026-50774 | Deferred | 未確認 | CWE-269 | An issue in GAPTEQ Designer v.3.5 allows a remote attacker to escalate privileges via the Company Manger role. |
| CVE-2026-50775 | Deferred | 未確認 | CWE-918 | A blind SSRF attack in DataHub v.1.5.0.1 allows a remote attacker to execute arbitrary code via the server retrieving an image from a crafted URL, and it fails to return the conten |
| CVE-2026-50776 | Deferred | 未確認 | CWE-22 | Directory Traversal vulnerability in Pronis Loisirs Billetterie CSE - < 04/2026 allows a remote attacker to obtain sensitive information and execute arbitrary code. |
| CVE-2026-5092 | Deferred | 未確認 | CWE-79 | The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customapi action handler in versions up to, and includi |
| CVE-2026-5093 | Deferred | 未確認 | CWE-862 | The GreenShift – Animation and Page Builder Blocks plugin for WordPress is vulnerable to unauthorized modification of data in versions up to, and including, 12.8.9. This is due to |
| CVE-2026-5096 | Deferred | 未確認 | CWE-918 | The Everest Forms plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.4.4. This is due to the `load_previous_field_value()` me |
| CVE-2026-5097 | Deferred | 未確認 | CWE-89 | The wpForo Forum plugin for WordPress is vulnerable to SQL Injection via the 'referer' parameter in all versions up to, and including, 2.4.17. This is due to insufficient escaping |
| CVE-2026-50979 | Deferred | 未確認 | CWE-77 | A command injection vulnerability in the 'advanced/curl' component of Osbil Technology oPanel v1.19.50 and earlier allows authenticated attackers to execute arbitrary shell command |
| CVE-2026-50980 | Deferred | 未確認 | CWE-79 | Cross-Site Scripting (XSS) vulnerability in the DNS lookup/management component of oPanel before v1.20.25 allows remote attackers to execute arbitrary JavaScript and perform sessio |
| CVE-2026-5108 | Deferred | 未確認 | CWE-79 | The Super Progressive Web Apps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `superpwa_settings[offline_message_txt]` setting in all versions up to, and |
| CVE-2026-51106 | Deferred | 未確認 | CWE-400, CWE-502 | An issue in TokTok qTox v1.18.4 allows a local attacker to cause a denial of service via the src/persistence/serialize.cpp component |
| CVE-2026-51144 | Deferred | 未確認 | CWE-79 | Cross Site Scripting vulnerability in Soliton Systems MailZen Management Protal v.2.62, v.2.63 allows a remote attacker to execute arbitrary code via the Role Name, First Name, Las |
| CVE-2026-51152 | Deferred | 未確認 | CWE-918 | Server-side request forgery (SSRF) in the /har/test endpoint in QD 20220208 through 20250803. Fetcher.build_request() in libs/fetcher.py constructs an httpclient.HTTPRequest from u |
| CVE-2026-51153 | Deferred | 未確認 | CWE-79 | Stored Cross-Site Scripting (XSS) in TaskRunHandler.post() in web/handlers/task.py in QD 20220208 through 20250803. When a task is run via /task/<taskid>/run, the handler renders t |
| CVE-2026-5116 | Deferred | 未確認 | CWE-79 | The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.0.5. This is due to insufficie |
| CVE-2026-51190 | Deferred | 未確認 | CWE-78 | The "s init" command in Serverless-Devs @serverless-devs/s <= 3.1.11 passes unsanitized user input to child_process.spawn() with shell: true. A URL ending in ".git" bypasses the on |
| CVE-2026-5134 | Deferred | 未確認 | CWE-89 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Loca Software Informatics Technology Ltd. Co. CMS allows SQL Injection. This |
| CVE-2026-51346 | Deferred | 未確認 | CWE-89 | SQL Injection vulnerability in StudIP 6.0.x before 6.0.3 and 5.4.x before 5.4.12 allows a remote attacker to execute arbitrary code and obtain sensitive information via the store() |
| CVE-2026-51366 | Deferred | 未確認 | CWE-89 | SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the api_vedo/chat endpoint and the utente_chat param |
| CVE-2026-51367 | Deferred | 未確認 | CWE-639 | An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to obtain sensitive information via the api_vedo/chat endpoint and the utente_chat parameter |
| CVE-2026-51368 | Deferred | 未確認 | CWE-502 | An issue in Beijing Tongtech Co., Ltd tongweb v.7.0.24 in the Spring HttpInovkerServiceExporter component allows a remote attacker to execute arbitrary code via a crafted request t |
| CVE-2026-51376 | Deferred | 未確認 | CWE-444 | An issue in BitChat for iOS v1.15.0 allows a remote attacker to cause a denial of service via an unauthenticated MESSAGE packet into the mesh gossip cache |
| CVE-2026-51400 | Analyzed | 未確認 | CWE-401 | An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vms_fixfilename() function within file vim/src/os_vms.c |
| CVE-2026-51401 | Analyzed | 未確認 | CWE-94 | An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vms_fixfilename() function within file vim/src/os_vms.c |
| CVE-2026-5158 | Deferred | 未確認 | CWE-79 | The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'inputPlaceHolder' parameter in |
| CVE-2026-51583 | Deferred | 未確認 | CWE-918 | An issue in usememos through v0.30.0 allows a remote authenticated attacker to perform Server-Side Request Forgery (SSRF) via the Webhook validation mechanism in internal/webhook/v |
| CVE-2026-51584 | Deferred | 未確認 | CWE-287 | An issue in usememos v0.27.1 allows a remote attacker to achieve account takeover via the ssoCredentials branch of the SignIn handler in server/router/api/v1/auth_service.go, becau |
| CVE-2026-51610 | Deferred | 未確認 | CWE-284 | Incorrect access control in the RebootSystem function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to arbitrarily force an immediate reboot via sending a c |
| CVE-2026-51611 | Deferred | 未確認 | CWE-284 | Incorrect access control in the startSlaveReboot function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to arbitrarily force a reboot via sending a crafted |
| CVE-2026-51613 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getDeviceInfo function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain device identification details via sending a c |
| CVE-2026-51614 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getAccessDeviceCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain access-device policy and client state in |
| CVE-2026-51615 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getLanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain LAN addressing and DHCP configuration information |
| CVE-2026-51616 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getWanIeCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain LAN addressing and DHCP configuration informati |
| CVE-2026-51617 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getSysStatusCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain sensitive information such as operation mod |
| CVE-2026-51618 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getWizardCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain setup wizard and onboarding configuration info |
| CVE-2026-51619 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getOnlineClient function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain online client information via sending a cra |
| CVE-2026-51620 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getNetInfoCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain network topology and interface configuration |
| CVE-2026-51621 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getInitCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain sensitive device configuration information via s |
| CVE-2026-51622 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getWanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain WAN configuration data via sending a crafted POST |
| CVE-2026-51623 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getDdnsStatus function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain DDNS runtime status and public IP information |
| CVE-2026-51624 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getStationMacByIp function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain a client MAC address via sending a crafte |
| CVE-2026-51625 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getWiFiEasyCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain sensitive information such as SSIDs and Wi-F |
| CVE-2026-51626 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getWiFiWpsCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain WPS configuration, including the current PIN, |
| CVE-2026-51627 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getIptvCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain IPTV and IGMP configuration information via send |
| CVE-2026-51628 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getGenerateWiFiWpsPin function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to generate and retrieve a new WPS PIN via send |
| CVE-2026-51629 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getStaticDhcpRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain static DHCP reservation rules via sendin |
| CVE-2026-51630 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getDdnsCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain DDNS configuration, including domain, username, |
| CVE-2026-51631 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getStaticDhcpRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain WPS runtime status via sending a crafted |
| CVE-2026-51632 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getWiFiAdvancedCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain advanced wireless settings via sending a |
| CVE-2026-51633 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getWiFiEasyGuestCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain simplified guest Wi-Fi configuration, i |
| CVE-2026-51634 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getWiFiBasicCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain core wireless settings, including SSIDs and |
| CVE-2026-51635 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getWiFiScheduleCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain Wi-Fi scheduling rules via sending a cra |
| CVE-2026-51636 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getWiFiAclRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain Wi-Fi ACL rules via sending a crafted POST |
| CVE-2026-51637 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getMeshPortalTable function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain mesh portal table information via sendin |
| CVE-2026-51638 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getWiFiGuestCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain guest Wi-Fi configuration information via s |
| CVE-2026-51639 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getApWiFiSchCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain AP-specific Wi-Fi scheduling rules via send |
| CVE-2026-51640 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getMeshNeighborTable function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain mesh neighbor information via sending |
| CVE-2026-51641 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getWiFiMeshConfig function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain mesh configuration and runtime state info |
| CVE-2026-51642 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getMeshRoutingTable function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain mesh routing information via sending a |
| CVE-2026-51643 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getNtpCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain NTP configuration and current time data via sendi |
| CVE-2026-51644 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getCrpcConfig function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain cloud remote-control status and URL informati |
| CVE-2026-51645 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getPasswordCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain the administrative username via sending a cr |
| CVE-2026-51646 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getParentalRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain parental-control rules via sending a craft |
| CVE-2026-51647 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getCrpcCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain cloud remote-control status and URL information |
| CVE-2026-51648 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getWanInfo function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain WAN information returned by the endpoint via sen |
| CVE-2026-51649 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getDiagnosisCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain diagnostic configuration and ping log conte |
| CVE-2026-51650 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getRemoteCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain remote-management enablement and port informat |
| CVE-2026-51651 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getSmartQosCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain Smart QoS configuration and rules via sendin |
| CVE-2026-51652 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getUPnPCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain UPnP enablement and parsed port-mapping informat |
| CVE-2026-51653 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getStorageCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain storage feature state information via sending |
| CVE-2026-51654 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getScheduleCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain schedule or scheduled-reboot configuration i |
| CVE-2026-51655 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getMacFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain MAC filter rules via sending a crafted PO |
| CVE-2026-51656 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getVpnPassCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain VPN pass-through and WAN ping filter settings |
| CVE-2026-51657 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getSyslogCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain syslog-related configuration via sending a cra |
| CVE-2026-51658 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getDmzCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain DMZ configuration information via sending a craft |
| CVE-2026-51659 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getUrlFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain DMZ configuration information via sending |
| CVE-2026-51660 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain IP and port filtering rules via sendin |
| CVE-2026-51661 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getPortForwardRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain port-forwarding rules via sending a cra |
| CVE-2026-51662 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getCloudSrvCheckStatus function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain cloud firmware check status informat |
| CVE-2026-51663 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getWiFiApcliScan function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to trigger wireless scans and retrieve AP-client sca |
| CVE-2026-51664 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getTelnetCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain Telnet service enablement status information v |
| CVE-2026-51665 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getTracerouteCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain traceroute diagnostic logs via sending a c |
| CVE-2026-51666 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setWizardCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reconfigure WAN, Wi-Fi, and device initialization sta |
| CVE-2026-51667 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getWiFiIpMacTable function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain Wi-Fi client MAC-to-IP mappings via sendi |
| CVE-2026-51668 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setLanguageCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to modify language configuration via sending a crafted |
| CVE-2026-51669 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getPairCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain pairing and mesh-slave configuration via sending |
| CVE-2026-51670 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getSlaveUpdate function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to query slave upgrade status and affect upgrade bookk |
| CVE-2026-51671 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getCloudDownloadStatus function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain cloud firmware download state inform |
| CVE-2026-51672 | Deferred | 未確認 | CWE-284 | Incorrect access control in the getRoamingCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain the roaming enablement flag via sending a cra |
| CVE-2026-51673 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setNtpCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter time synchronization settings via sending a crafte |
| CVE-2026-51674 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setScheduleCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to configure forced reboot tasks via sending a crafted |
| CVE-2026-51675 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setWanIeCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reconfigure uplink settings via sending a crafted POST |
| CVE-2026-51676 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setAccessDeviceCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter access-device policies via sending a craf |
| CVE-2026-51677 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setUPnPCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change UPnP service state via sending a crafted POST re |
| CVE-2026-51678 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setSyslogCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter logging behavior via sending a crafted POST req |
| CVE-2026-51679 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setPasswordCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change the administrator account via sending a craf |
| CVE-2026-51680 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setLedCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to modify LED behavior via sending a crafted POST request t |
| CVE-2026-51681 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setRemoteCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to expose WAN-side administration via sending a crafted |
| CVE-2026-51683 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setLanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter LAN network configuration via sending a crafted PO |
| CVE-2026-51684 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setStorageCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter the storage-related service state via sending |
| CVE-2026-51686 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setWiFiEasyCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reconfigure or disable wireless networks via sendin |
| CVE-2026-51687 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setWiFiEasyGuestCf function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to create or weaken guest wireless access via send |
| CVE-2026-51688 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setWiFiSignalCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reduce wireless power or cause a Denial of Servic |
| CVE-2026-51689 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setUpgradeFW function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to trigger firmware-upgrade workflow changes via sending |
| CVE-2026-51690 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setWanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter upstream provisioning and connectivity via sending |
| CVE-2026-51691 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setUploadSetting function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to manipulate the upload or flash workflow via sendi |
| CVE-2026-51692 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setWiFiGuestCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to establish or weaken guest wireless access via send |
| CVE-2026-51693 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setVpnPassCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to weaken edge filtering via sending a crafted POST req |
| CVE-2026-51694 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setStaticDhcpRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to add or change static DHCP rules via sending a c |
| CVE-2026-51695 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setDdnsCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter dynamic DNS state via sending a crafted POST requ |
| CVE-2026-51696 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setPortForwardRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to expose internal services via sending a crafted |
| CVE-2026-51697 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setIptvCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter IPTV service configuration via sending a crafted |
| CVE-2026-51698 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setUrlFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter browsing policies via sending a crafted PO |
| CVE-2026-51699 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setDmzCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to expose an internal host via sending a crafted POST reque |
| CVE-2026-51700 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setWiFiAdvancedCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to degrade wireless behavior via sending a crafted |
| CVE-2026-51701 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setMacFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change device access control via sending a craft |
| CVE-2026-51702 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter firewall policies via sending a crafted |
| CVE-2026-51703 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setWiFiScheduleCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter when Wi-Fi is available via sending a cra |
| CVE-2026-51704 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setWiFiMeshConfig function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter mesh configurations via sending a crafted |
| CVE-2026-51705 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setWiFiMeshName function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to rename mesh entries via sending a crafted POST req |
| CVE-2026-51706 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setSmartQosCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to degrade traffic handling via sending a crafted POST |
| CVE-2026-51708 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setWiFiWpsCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change WPS availability via sending a crafted POST r |
| CVE-2026-51709 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setWiFiBasicCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reconfigure primary Wi-Fi settings via sending a c |
| CVE-2026-51710 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setParentalRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter parental-control behavior via sending a cra |
| CVE-2026-51711 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setWiFiWpsStart function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to open a wireless pairing window via sending a craft |
| CVE-2026-51712 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setApWiFiSchCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter wireless availability windows via sending a |
| CVE-2026-51713 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setManualDialCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to manipulate WAN dial state via sending a crafted P |
| CVE-2026-51714 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setRoamingCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter roaming behavior via sending a crafted POST re |
| CVE-2026-51715 | Deferred | 未確認 | CWE-284 | Incorrect access control in the delMacFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove MAC filter rules via sending a crafted PO |
| CVE-2026-51716 | Deferred | 未確認 | CWE-284 | Incorrect access control in the delPortForwardRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to delete port-forwarding rules via sending a cra |
| CVE-2026-51717 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setOpModeCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change the device operating mode via sending a crafte |
| CVE-2026-51718 | Deferred | 未確認 | CWE-284 | Incorrect access control in the delStaticDhcpRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove static DHCP reservations via sending a c |
| CVE-2026-51719 | Deferred | 未確認 | CWE-284 | Incorrect access control in the delUrlFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove URL filtering rules via sending a crafted |
| CVE-2026-51720 | Deferred | 未確認 | CWE-284 | Incorrect access control in the delIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove firewall filter rules via sending a cr |
| CVE-2026-51721 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setPairCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter the mesh pairing state via sending a crafted POST |
| CVE-2026-51722 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setWiFiRepeaterCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to repoint the device to an attacker-controlled up |
| CVE-2026-51723 | Deferred | 未確認 | CWE-284 | Incorrect access control in the UploadCustomModule function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to install a custom CGI module via sending a craft |
| CVE-2026-51724 | Deferred | 未確認 | CWE-284 | Incorrect access control in the delSmartQosCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove Smart QoS rules via sending a crafted POST r |
| CVE-2026-51725 | Deferred | 未確認 | CWE-284 | Incorrect access control in the NTPSyncWithHost function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change the device clock via sending a crafted POST |
| CVE-2026-51726 | Deferred | 未確認 | CWE-284 | Incorrect access control in the delParentalRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove parental-control rules via sending a craft |
| CVE-2026-51727 | Deferred | 未確認 | CWE-284 | Incorrect access control in the SystemSettings function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to retrieve administrative import and export endpoint |
| CVE-2026-51728 | Deferred | 未確認 | CWE-284 | Incorrect access control in the UploadFirmwareFile function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to upload a crafted firmware image via sending a c |
| CVE-2026-51729 | Deferred | 未確認 | CWE-284 | Incorrect access control in the delDevice function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to request deletion of a managed slave device via sending a |
| CVE-2026-51730 | Deferred | 未確認 | CWE-284 | Incorrect access control in the delWiFiAclRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove Wi-Fi ACL rules via sending a crafted POST |
| CVE-2026-51731 | Deferred | 未確認 | CWE-284 | Incorrect access control in the delVlanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove VLAN entries via sending a crafted POST request |
| CVE-2026-51732 | Deferred | 未確認 | CWE-284 | Incorrect access control in the delWiFiScheduleCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove Wi-Fi schedule entries via sending a cra |
| CVE-2026-51733 | Deferred | 未確認 | CWE-284 | Incorrect access control in the FirmwareUpgrade function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove Wi-Fi schedule entries via sending a crafte |
| CVE-2026-51734 | Deferred | 未確認 | CWE-284 | Incorrect access control in the informSlaveUpdate function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to trigger mesh slave update coordination via sendi |
| CVE-2026-51735 | Deferred | 未確認 | CWE-284 | Incorrect access control in the showSyslog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to retrieve recent system logs via sending a crafted POST |
| CVE-2026-51736 | Deferred | 未確認 | CWE-284 | Incorrect access control in the clearSyslog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to erase system logs via sending a crafted POST request t |
| CVE-2026-51737 | Deferred | 未確認 | CWE-284 | Incorrect access control in the clearTracerouteLog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to erase traceroute logs via sending a crafted POS |
| CVE-2026-51738 | Deferred | 未確認 | CWE-284 | Incorrect access control in the LoadDefSettings function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reset the device configuration and reboot the devi |
| CVE-2026-51739 | Deferred | 未確認 | CWE-284 | Incorrect access control in the CloudSrvVersionCheck function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to trigger cloud update checks via sending a cra |
| CVE-2026-51740 | Deferred | 未確認 | CWE-284 | Incorrect access control in the killProcess function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to terminate critical services via sending a crafted POST |
| CVE-2026-51775 | Deferred | 未確認 | CWE-89 | SQL injection vulnerability in Fastadmin v.1.6.1.20250430 allows an attacker to exectue arbitrary code via the application/common/controller/Backend.php component |
| CVE-2026-51977 | Deferred | 未確認 | CWE-321 | An issue in Trueview T18061 WiFi 3MP Robot Pan-Tilt Security Camera Version 1.0 allows a physically proximate attacker to escalate privileges via the RSA private key component |
| CVE-2026-52021 | Deferred | 未確認 | CWE-200 | An issue in code100xDevs 100xdevs CMS v.1.0 (2026-04-30) allows a remote attacker to obtain sensitive information via the src/middleware.ts, and src/app/api/mobile/search/route.ts |
| CVE-2026-52102 | Deferred | 未確認 | CWE-78 | An OS command injection vulnerability in the openmediavault-md plugin of OpenMediaVault v8.0.4-1 allows attackers to execute arbitrary commands as root via injecting shell metachar |
| CVE-2026-52103 | Deferred | 未確認 | CWE-94 | A zero-click remote code execution (RCE) vulnerability in the /Terminal/Notification.hs component of SimpleX Chat before v6.5 allows attackers to execute arbitrary commands in the |
| CVE-2026-5218 | Deferred | 未確認 | CWE-80 | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Softtr Informatics Technology Trading Limited Company E-Commerce Pack allows Cross-Si |
| CVE-2026-5224 | Deferred | 未確認 | CWE-312 | Cleartext storage of sensitive information vulnerability in Kriptok Crypto and Information Technologies Industry Trade Inc. Cryptosim allows Retrieve Embedded Sensitive Data. This |
| CVE-2026-52370 | Deferred | 未確認 | CWE-79 | A reflected cross-site scripting (XSS) vulnerability in the Forum posting function of O2OA v10 allows attackers to execute arbitrary Javascript in the context of the victim's brows |
| CVE-2026-52466 | Deferred | 未確認 | CWE-863 | Open Library Foundation VuFind v11.0.3 and v4.1 is vulnerable to toInorrect Access Control. The application fails to stop processing an incoming request in VuFind\Controller\Abstra |
| CVE-2026-52473 | Deferred | 未確認 | CWE-77 | An issue in Wgcloud 3.6.4 allows a remote attacker to escalate privileges via the content parameter is directly concatenated to the ProcessBuilder. |
| CVE-2026-52480 | Deferred | 未確認 | CWE-306 | An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the inetd service |
| CVE-2026-52481 | Deferred | 未確認 | CWE-200 | An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the tcp_actions() function |
| CVE-2026-52489 | Awaiting Analysis | 未確認 | CWE-120 | Buffer Overflow vulnerability in gpac 31becc9e08b88e525a4a62013a4000de1c0f8fd9 allows an attacker to execute arbitrary code via the svgNameToImplementationName() function |
| CVE-2026-52490 | Awaiting Analysis | 未確認 | CWE-94 | An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c |
| CVE-2026-52491 | Awaiting Analysis | 未確認 | CWE-190 | An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the libtiff/tools/thumbnail.c: main() component |
| CVE-2026-52492 | Awaiting Analysis | 未確認 | CWE-190 | An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster() function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based |
| CVE-2026-52520 | Deferred | 未確認 | CWE-79 | Emlog CMS <= 2.6.14 contains a stored cross-site scripting (XSS) vulnerability in the article publishing module (/admin/article.php). A remote authenticated attacker can inject arb |
| CVE-2026-52521 | Deferred | 未確認 | CWE-89 | A SQL injection vulnerability in Z-BlogPHP 1.7.5 allows authenticated attackers to execute arbitrary SQL commands via the id parameter in the CommentBat feature. |
| CVE-2026-52606 | Deferred | 未確認 | CWE-79 | A reflected cross-site scripting (XSS) vulnerability in reportico-web <= 8.1.0 allows remote attackers to execute arbitrary JavaScript in the web browser of a user by including a m |
| CVE-2026-52607 | Deferred | 未確認 | CWE-22 | A directory traversal vulnerability in reportico-web <= 8.1.0 allows remote attackers to expose or execute arbitrary php files on the web server by specifying the filename in the t |
| CVE-2026-52608 | Deferred | 未確認 | CWE-284 | An incorrect access control vulnerability in reportico-web <= 8.1.0 allows an unauthenticated attacker to inject arbitrary php code into the PreExecuteCode attribute of any report |
| CVE-2026-52609 | Deferred | 未確認 | CWE-79 | A reflected cross-site scripting (XSS) vulnerability in reportico-web <= 8.1.0 allows remote attackers to execute arbitrary JavaScript in the web browser of a user by including a m |
| CVE-2026-52610 | Deferred | 未確認 | CWE-22 | An arbitrary file write/directory traversal vulnerability in reportico-web <= 8.1.0 allows remote attackers to create or overwrite files anywhere on the filesystem subject to the p |
| CVE-2026-52681 | Deferred | 未確認 | CWE-1050 | Sieve CPU resource usage is tracked in the compiled script, so an attacker that has valid credentials can reset the accounting by repeatedly changing the active script. Compiled sc |
| CVE-2026-52687 | Deferred | 未確認 | CWE-400 | An attacker that has valid credentials can select a compression algorithm for the IMAP connection whose decompression state requires a large amount of memory, and open several such |
| CVE-2026-52723 | Deferred | 未確認 | CWE-295 | ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration perform |
| CVE-2026-52730 | Deferred | 未確認 | CWE-862 | Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing Authorization in Module::settingsF |
| CVE-2026-52731 | Deferred | 未確認 | CWE-248 | ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, an attacker authenticated to an enabled Zebra RPC endpoint can terminate zebrad by supplying a getblocktemplate Long |
| CVE-2026-52732 | Deferred | 未確認 | CWE-770 | ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, one unauthenticated P2P peer can monopolize all 25 MAX_INBOUND_CONCURRENCY slots in Zebra's inbound mempool download |
| CVE-2026-52733 | Deferred | 未確認 | CWE-459, CWE-672 | ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a natural or attacker-influenced chain fork can leave stale Sapling and Orchard note-commitment subtree roots in Zeb |
| CVE-2026-52734 | Deferred | 未確認 | CWE-401 | ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, an unauthenticated P2P peer can cause the mempool download pipeline to retain transactions after verification reache |
| CVE-2026-52735 | Deferred | 未確認 | CWE-684 | ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, Zebra can accept a block that zcashd rejects because the P2SH signature-operation counter undercounts redeem scripts |
| CVE-2026-52736 | Deferred | 未確認 | CWE-459 | ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a remote unauthenticated P2P peer can stall a Zebra node by racing an invalid block body against the valid canonical |
| CVE-2026-52737 | Deferred | 未確認 | CWE-345 | ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a malicious unauthenticated P2P peer can answer Zebra's outbound getblocks or FindBlocks request with a small two-ha |
| CVE-2026-52738 | Deferred | 未確認 | CWE-248 | ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a consensus-valid block containing a long chain of transparent self-spends to one address can permanently halt Zebra |
| CVE-2026-52739 | Deferred | 未確認 | CWE-248 | ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a malicious block producer can terminate zebrad by placing the same shielded transaction in a non-finalized parent b |
| CVE-2026-52776 | Deferred | 未確認 | CWE-184, CWE-918 | Compliance-trestle (Trestle) is a tooling platform for managing compliance as code. In versions before 3.12.4 and versions 4.0.0 through 4.0.3, the URLSecurityValidator that guards |
| CVE-2026-52792 | Deferred | 未確認 | CWE-69 | Algernon is a small self-contained pure-Go web server. Prior to 1.17.9, Algernon on Windows selects a file handler in engine/handlers.go by calling filepath.Ext() without first rej |
| CVE-2026-52793 | Deferred | 未確認 | CWE-287 | Froxlor is open source server administration software. Prior to 2.3.7, the API authentication path in lib/Froxlor/Api/FroxlorRPC.php and FroxlorRPC::validateAuth accepts an API key |
| CVE-2026-52817 | Deferred | 未確認 | CWE-88 | Linuxfabrik Monitoring Plugins provides monitoring plugins for Icinga, Nagios, and related systems. Prior to version 5.1.0, the shipped assets/sudoers/Debian.sudoers policy allowed |
| CVE-2026-52829 | Deferred | 未確認 | CWE-617, CWE-843 | ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, an unauthenticated IPv4 peer can deterministically terminate a synced Zebra node using the default Linux dual-stack |
| CVE-2026-52834 | Deferred | 未確認 | CWE-122, CWE-131, CWE-190 | jxl-oxide is a pure Rust implementation of a JPEG XL decoder. Prior to jxl-grid 0.6.2, decoding a crafted JPEG XL image on a 32-bit platform can overflow length calculations in Ali |
| CVE-2026-52854 | Deferred | 未確認 | CWE-79, CWE-80 | Maps is a MediaWiki extension that enables visualization of geographic data through dynamic embedded maps. Prior to version 12.1.3, the display_map parser function in the Leaflet s |
| CVE-2026-52872 | Deferred | 未確認 | CWE-22, CWE-73 | Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to 2.5.0, the downloadSubtitleFile utility in src/ipc/downloads.js, reached through |
| CVE-2026-52873 | Deferred | 未確認 | CWE-693, CWE-79 | Streambert is a cross-platform Electron Desktop App to stream and download video content. From version 2.5.0 until version 2.6.0, the wyzie-open-redeem IPC handler in index.js crea |
| CVE-2026-52875 | Deferred | 未確認 | CWE-22, CWE-73 | Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to 2.6.0, the perform-scheduled-backup IPC handler in src/ipc/storage.js takes setti |
| CVE-2026-52876 | Deferred | 未確認 | CWE-20, CWE-78 | Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to version 2.6.0, the open-path-at-time IPC handler in src/ipc/player.js accepts a r |
| CVE-2026-52877 | Deferred | 未確認 | CWE-20, CWE-749 | Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to version 2.6.0, the open-external IPC handler in src/ipc/downloads.js passes a ren |
| CVE-2026-52878 | Deferred | 未確認 | CWE-476 | Klever-Go is the Go implementation of the Klever blockchain protocol. Versions 1.7.14 through 1.7.17 are vulnerable to a nil-pointer panic triggered by a protobuf Transaction whose |
| CVE-2026-52879 | Deferred | 未確認 | CWE-400, CWE-770 | Klever-Go is the Go implementation of the Klever blockchain protocol. In versions 1.7.14 through 1.7.17, the direct-message ingress handler spawns a new goroutine for every incomin |
| CVE-2026-52880 | Deferred | 未確認 | CWE-400, CWE-770 | Klever-Go is the Go implementation of the Klever blockchain protocol. Versions from 1.7.14 through 1.7.17 are vulnerable to a remotely triggerable denial of service. Both REST APIs |
| CVE-2026-52886 | Awaiting Analysis | 未確認 | CWE-22 | Notepad++ is a free and open-source source code editor. Prior to 8.9.7, Notepad++ validates the backupFilePath attribute from session.xml with std::wstring::starts_with against the |
| CVE-2026-52889 | Deferred | 未確認 | CWE-1336 | Formie is a Craft CMS plugin for creating forms. Prior to 3.1.27, Formie can pass request-derived Hidden field defaults such as HTTP User Agent, Referer URL, Current URL, Current U |
| CVE-2026-5303 | Awaiting Analysis | 未確認 | CWE-367 | The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to privilege escalation. This vulnerability can only be exploited i |
| CVE-2026-5304 | Awaiting Analysis | 未確認 | CWE-1287 | An ACAP configuration file lacks input validation, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured t |
| CVE-2026-5336 | Deferred | 未確認 | CWE-1336, CWE-200 | The DataPress (Dataverse Integration) WordPress plugin before 2.91 does not properly restrict access to its template rendering feature and exposes the viewing user's data to it, al |
| CVE-2026-53413 | Awaiting Analysis | 未確認 | CWE-787 | Missing bounds check in the annotator function of Zoom Clients allows buffer over-write, which may allow a meeting participant to achieve remote code execution of another participa |
| CVE-2026-53414 | Awaiting Analysis | 未確認 | CWE-126 | Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting participant to conduct a denial of service on another participant |
| CVE-2026-53415 | Awaiting Analysis | 未確認 | CWE-416 | Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve remote code execution of another participant via network access. |
| CVE-2026-53416 | Awaiting Analysis | 未確認 | CWE-23 | Path traversal in Zoom VDI Client and Plugins may allow an authenticated user to conduct information disclosure via local access. |
| CVE-2026-53424 | Awaiting Analysis | 未確認 | CWE-294 | Authentication Bypass by Capture-replay vulnerability in dropbox samly allows an attacker to authenticate as the subject of a captured SAML assertion by resubmitting it. Samly.Hel |
| CVE-2026-53425 | Awaiting Analysis | 未確認 | CWE-345 | Insufficient Verification of Data Authenticity vulnerability in dropbox samly allows an attacker to establish an authenticated session using a SAML response the service provider ne |
| CVE-2026-53451 | Deferred | 未確認 | CWE-22, CWE-73, CWE-94 | Ground Station is a browser-based suite for satellite tracking, SDR reception, hardware control, and telemetry decoding. Prior to version 0.4.13, the unauthenticated save-waterfall |
| CVE-2026-53452 | Deferred | 未確認 | CWE-200, CWE-22 | Ground Station is a browser-based suite for satellite tracking, SDR reception, hardware control, and telemetry decoding. Prior to version 0.4.13, the unauthenticated configure-sdr |
| CVE-2026-53453 | Deferred | 未確認 | CWE-862 | Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio exposed administrator-intended backend API actions to any au |
| CVE-2026-53454 | Deferred | 未確認 | CWE-522 | Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio configured Git's credential.helper store when saving Git cre |
| CVE-2026-53455 | Deferred | 未確認 | CWE-78 | Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio generated a shell-based Git credential helper in custom_comp |
| CVE-2026-53456 | Deferred | 未確認 | CWE-522 | Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio terminal SSH key authentication in custom_components/bluepri |
| CVE-2026-53457 | Deferred | 未確認 | CWE-22 | Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, the legacy stateless terminal command execution path in custom_components/blu |
| CVE-2026-53458 | Deferred | 未確認 | CWE-209 | Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio backend API handlers in custom_components/blueprint_studio/b |
| CVE-2026-53468 | Deferred | 未確認 | CWE-79 | Typemill is a flat-file, Markdown-based content management system designed for informational documentation websites. Versions prior to 2.23.0 are vulnerable to stored HTML attribut |
| CVE-2026-53472 | Awaiting Analysis | 未確認 | CWE-79 | A flaw was found in migration-planner. Insufficient validation of the `AgentStatusUpdate.CredentialUrl` field allows an authenticated attacker to store a malicious `javascript:` UR |
| CVE-2026-53477 | Analyzed | 未確認 | CWE-367 | Dell Command Update (DCU), versions prior to 5.7.1, contain a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. A low privileged attacker with local access could pot |
| CVE-2026-53487 | Deferred | 未確認 | CWE-862 | Kite is a Kubernetes dashboard. Prior to version 0.12.3, authenticated Kite users with any role can request `/api/v1/overview` for a cluster that their roles do not permit by selec |
| CVE-2026-53497 | Deferred | 未確認 | CWE-200, CWE-359 | CrossWatch (CW) is a synchronization engine. Prior to version 0.9.21, GET /api/app-auth/status is accessible without authentication and returns the other_sessions array, which expo |
| CVE-2026-53499 | Deferred | 未確認 | CWE-346 | FORT Validator is a Resource Public Key Infrastructure (RPKI) relying-party validator that produces validated route-origin data. FORT Validator versions through 1.6.7 contain an or |
| CVE-2026-53507 | Deferred | 未確認 | CWE-1188, CWE-200, CWE-918 | oasdiff-action is a GitHub Action that detects breaking changes in OpenAPI specs and post a review on every pull request. Before version 0.0.51, the oasdiff actions resolved extern |
| CVE-2026-53508 | Deferred | 未確認 | CWE-693, CWE-73, CWE-918 | oasdiff is a command-line and Go package that compares and detects breaking changes in OpenAPI specs. From version 1.13.2 through version 1.18.0, oasdiff did not enforce --allow-ex |
| CVE-2026-53509 | Deferred | 未確認 | CWE-918 | CKAN MCP Server is a tool for querying CKAN open data portals. A known vulnerability CVE-2026-33060 indicated tools including ckan_package_search and sparql_query that accept a bas |
| CVE-2026-53524 | Deferred | 未確認 | CWE-409 | WeeChat (Wee Enhanced Environment for Chat) is a free chat client. In versions 4.3.0 through 4.9.0, the WeeChat relay module's WebSocket permessage-deflate decompression function r |
| CVE-2026-53525 | Deferred | 未確認 | CWE-208 | WeeChat (Wee Enhanced Environment for Chat) is a free chat client. In versions 0.3.1 through 4.9.0, the WeeChat relay authentication uses non-constant-time string comparison functi |
| CVE-2026-53527 | Deferred | 未確認 | CWE-269 | LeafWiki is a self-hosted wiki. Versions 0.1.0 through 0.10.0 have a privilege escalation vulnerability in the user update API. An authenticated user could update their own account |
| CVE-2026-53528 | Deferred | 未確認 | CWE-23 | LeafWiki is a self-hosted wiki. Versions 0.3.0 through 0.10.0 have a path traversal vulnerability in LeafWiki’s asset rename functionality. An authenticated user with editor permis |
| CVE-2026-53529 | Deferred | 未確認 | CWE-79 | LeafWiki is a self-hosted wiki. Prior to version 0.10.2, page titles returned by the search API could be rendered as raw HTML in the frontend. A user with editor or administrator p |
| CVE-2026-53530 | Deferred | 未確認 | CWE-1285, CWE-248, CWE-400 | RaTeX is a KaTeX-compatible math rendering engine written in Rust. Prior to version 0.1.11, the public parser entrypoint `ratex_parser::parse(&str)` panics on the 9-byte input `\ve |
| CVE-2026-53531 | Deferred | 未確認 | CWE-400, CWE-674 | RaTeX is a KaTeX-compatible math rendering engine written in Rust. Prior to version 0.1.11, RaTeX’s recursive-descent parser recurses one (or more) native stack frame per nesting l |
| CVE-2026-53532 | Deferred | 未確認 | CWE-617 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a crafted HTJ2K-co |
| CVE-2026-53533 | Deferred | 未確認 | CWE-77, CWE-93 | aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior to 5.1.1, SMTP.mail(), SMTP.rcpt(), SMTP.vrfy(), and SMTP.expn() send caller-supplied addresses without reject |
| CVE-2026-53541 | Deferred | 未確認 | CWE-20 | OliveTin gives access to predefined shell commands from a web interface. The `filterToDefinedArgumentsOnly` function in the executor is intended to discard any arguments not explic |
| CVE-2026-53542 | Deferred | 未確認 | CWE-78 | Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.3.2, the archive creation endpoint in src/backend/ssh/file- |
| CVE-2026-53545 | Deferred | 未確認 | CWE-78 | Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.3.2, the DELETE /ssh/tunnel/disconnect/:tunnelName teardown |
| CVE-2026-53546 | Deferred | 未確認 | CWE-639, CWE-862 | Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.3.2, the terminal WebSocket accepts a user-controlled hostC |
| CVE-2026-53547 | Deferred | 未確認 | CWE-862 | Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.3.2, the POST /database/export endpoint creates a user expo |
| CVE-2026-53548 | Deferred | 未確認 | CWE-285, CWE-639 | Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.6.1, the GET /host/db/host/:id/password endpoint in src/bac |
| CVE-2026-53549 | Deferred | 未確認 | CWE-918 | Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.3.2, the POST /host/db/proxy/test endpoint accepts the sing |
| CVE-2026-53552 | Deferred | 未確認 | CWE-639, CWE-863 | Goploy is an open-source automation deployment system. In versions 1.17.5 and prior, Project.AddFile, Project.EditFile, Project.RemoveFile, and Project.Edit in cmd/server/api/proje |
| CVE-2026-53553 | Deferred | 未確認 | CWE-200, CWE-22 | Goploy is an open-source automation deployment system. Prior to version 1.18.0, a severe path traversal vulnerability exists in its backend API endpoints, specifically /deploy/file |
| CVE-2026-53561 | Analyzed | 未確認 | CWE-287, CWE-305, CWE-345 | An improper authentication vulnerability in HiveServer2 SAML bearer-token validation in Apache Hive 4.0.0 through 4.2.0 (and later unreleased branches) on deployments using HTTP tr |
| CVE-2026-53569 | Deferred | 未確認 | CWE-862 | Frappe is a full-stack web application framework. In version 16.31.0 and earlier, the whitelisted toggle_like and mark_as_seen endpoints in frappe/desk/like.py and frappe/desk/doct |
| CVE-2026-53572 | Awaiting Analysis | 未確認 | CWE-74, CWE-89 | KEDA is a Kubernetes-based Event Driven Autoscaling component. Prior to 2.20.0, pkg/scalers/postgresql_scaler.go constructs libpq-style connection strings from tenant-controlled ho |
| CVE-2026-53578 | Analyzed | 未確認 | CWE-79, CWE-94 | Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and |
| CVE-2026-53579 | Analyzed | 未確認 | CWE-79, CWE-94 | Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and |
| CVE-2026-53580 | Analyzed | 未確認 | CWE-400, CWE-552, CWE-73 | Trilium is an open-source hierarchical note-taking application. In versions prior to 0.104.0, the automatic image-download feature accepts file:// URLs in a note's img tags and rea |
| CVE-2026-53583 | Awaiting Analysis | 未確認 | CWE-295, CWE-297 | libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to |
| CVE-2026-53584 | Awaiting Analysis | 未確認 | CWE-22 | libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to |
| CVE-2026-53585 | Awaiting Analysis | 未確認 | CWE-770 | libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to |
| CVE-2026-53586 | Awaiting Analysis | 未確認 | CWE-200, CWE-522, CWE-601 | libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to |
| CVE-2026-53587 | Awaiting Analysis | 未確認 | CWE-125, CWE-126, CWE-1284, CWE-20 | libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to |
| CVE-2026-53620 | Deferred | 未確認 | CWE-639 | GROWI contains a vulnerability with an authorization bypass through user-controlled key in the bookmark folder APIs. If this vulnerability is exploited, an authenticated attacker c |
| CVE-2026-53654 | Deferred | 未確認 | CWE-601 | Grav is a file-based Web platform. Prior to 3.8.5, the Login plugin twofa_cancel task accepts a client-controlled _redirect field without a nonce and allows an unauthenticated requ |
| CVE-2026-53656 | Awaiting Analysis | 未確認 | CWE-346, CWE-942 | FiftyOne is an open-source platform for refining high-quality datasets and visual AI models. Prior to 1.17.0, the FiftyOne App/API server in fiftyone/server/app.py and the /media r |
| CVE-2026-53759 | Deferred | 未確認 | CWE-377 | linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations. Prior to version 4.2.0, db_sqlite.py created SQLite databases at predic |
| CVE-2026-53762 | Deferred | 未確認 | CWE-916 | VeraCrypt provides disk encryption with strong security based on TrueCrypt. Prior to 1.26.29, non-default builds created with WOLFCRYPT=1 and WOLFCRYPT_BACKEND route SHA-256 and SH |
| CVE-2026-53783 | Awaiting Analysis | 未確認 | CWE-59, CWE-88 | rsync before 3.5.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the rrsync restricted shell wrapper that allows authenticated clients to escape |
| CVE-2026-53784 | Analyzed | 未確認 | CWE-59 | rsync before 3.5.0 contains a path traversal vulnerability that allows remote clients to access files outside the intended module root when use chroot is disabled and the module ro |
| CVE-2026-53785 | Awaiting Analysis | 未確認 | CWE-59 | rsync before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to write files outside the intended destination directory tree by crafting relative paths |
| CVE-2026-53786 | Analyzed | 未確認 | CWE-863 | rsync before 3.5.0 contains a filter rule bypass vulnerability that allows authenticated clients to override module-level filter restrictions by supplying malicious --filter merge |
| CVE-2026-53788 | Awaiting Analysis | 未確認 | CWE-93 | rsync before 3.5.0 contains a newline injection vulnerability in the name-converter uid/gid mapping interface that allows local attackers to forge protocol messages by creating use |
| CVE-2026-53789 | Analyzed | 未確認 | CWE-807 | rsync before 3.5.0 contains an improper path handling vulnerability that allows a malicious sender to expand the scope of --delete operations beyond the intended destination subtre |
| CVE-2026-53790 | Awaiting Analysis | 未確認 | CWE-78, CWE-88 | rsync before 3.5.0 contains multiple command and argument injection vulnerabilities that allow attackers to execute arbitrary commands by supplying malicious input through several |
| CVE-2026-53791 | Analyzed | 未確認 | CWE-290 | rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers to bypass IP-based access controls by sending a crafted PROXY p |
| CVE-2026-53792 | Awaiting Analysis | 未確認 | CWE-129, CWE-787 | rsync before 3.5.0 contains an out-of-bounds read vulnerability in the sender-side block matching logic that allows a malicious receiver to trigger memory access before the start o |
| CVE-2026-53793 | Awaiting Analysis | 未確認 | CWE-59 | rsync before 3.5.0 contains a path confinement bypass vulnerability that allows remote clients to escape the intended inner-module root confinement by constructing paths that resol |
| CVE-2026-53794 | Awaiting Analysis | 未確認 | CWE-1284 | rsync before 3.5.0 contains a logic error in --max-alloc handling that allows a sender or configuration setting --max-alloc=0 to disable allocation sanity checks entirely rather th |
| CVE-2026-53795 | Analyzed | 未確認 | CWE-59 | rsync before 3.5.0 contains an arbitrary file write vulnerability that allows attackers to write files outside the intended destination tree by specifying an absolute path via --te |
| CVE-2026-53796 | Awaiting Analysis | 未確認 | CWE-367, CWE-59 | rsync before 3.5.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the non-daemon receiver's destination directory handling that allows an attacker |
| CVE-2026-53797 | Analyzed | 未確認 | CWE-367, CWE-59 | rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's source tree traversal that allows an attacker who can manipulate a parent directory of the source |
| CVE-2026-53798 | Analyzed | 未確認 | CWE-704 | rsync before 3.5.0 contains a privilege confusion vulnerability in the name-converter subprocess uid/gid mapping that allows local attackers to cause transferred files to be owned |
| CVE-2026-53799 | Analyzed | 未確認 | CWE-367, CWE-59 | rsync before 3.5.0 contains a symlink race condition vulnerability that allows local attackers to cause rsync to apply arbitrary ACLs or extended attributes to unintended files by |
| CVE-2026-53800 | Analyzed | 未確認 | CWE-367, CWE-59 | rsync before 3.5.0 contains a symlink race condition vulnerability in the --remove-source-files feature that allows attackers with symlink creation access to cause arbitrary file d |
| CVE-2026-53801 | Analyzed | 未確認 | CWE-367, CWE-59 | rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's directory scanning logic that allows attackers to cause the sender to enumerate and transfer file |
| CVE-2026-53802 | Analyzed | 未確認 | CWE-61 | rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessible to the rsync daemon process by exploiting symlink following in input |
| CVE-2026-53803 | Analyzed | 未確認 | CWE-59 | rsync before 3.5.0 contains a symlink following vulnerability that allows local attackers to overwrite arbitrary files by placing a symlink at a predictable output path such as --l |
| CVE-2026-53804 | Deferred | 未確認 | CWE-78 | OTRS Community Edition contains an authenticated OS command injection vulnerability in the PGP encryption module that allows administrators to execute arbitrary operating-system co |
| CVE-2026-5388 | Deferred | 未確認 | CWE-20 | justhtml before 1.15.0 contains multiple security issues in URL sanitization helpers (clean_url_value/clean_url_in_js_string), HTML serialization, Markdown passthrough (html_passth |
| CVE-2026-5389 | Deferred | 未確認 | CWE-80 | justhtml versions before 1.13.0 contain a cross-site scripting vulnerability in the to_markdown() function when serializing attacker-controlled pre content. Attackers can place bac |
| CVE-2026-5391 | Deferred | 未確認 | CWE-79 | The LatePoint plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'btn_wrapper_classes' attribute of the 'latepoint_resources' shortcode in all versions up to |
| CVE-2026-53958 | Deferred | 未確認 | CWE-287, CWE-915 | 4gaBoards is a boards system for realtime project management. Prior to 3.3.9, 4gaBoards allows an authenticated user to modify ssoGoogleId, ssoGoogleEmail, ssoGithubId, ssoGithubUs |
| CVE-2026-53959 | Deferred | 未確認 | CWE-200 | 4gaBoards is a boards system for realtime project management. Prior to 3.3.9, 4gaBoards allows any authenticated user to enumerate account information for every user through GET /a |
| CVE-2026-53960 | Deferred | 未確認 | CWE-862 | Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, hidden or otherwise unviewable first-post content was leaked as an excerpt in |
| CVE-2026-53965 | Deferred | 未確認 | CWE-400, CWE-770 | The MCP PHP SDK (Composer package mcp/sdk) is the official Model Context Protocol SDK for PHP. In versions 0.5.0 through 0.7.0, the HTTP client transport reads a Server-Sent Events |
| CVE-2026-53970 | Deferred | 未確認 | CWE-494 | ZeroBrew version 0.3.1 and prior contains a missing integrity verification vulnerability in the Ruby compatibility shim that allows network attackers to execute arbitrary code by s |
| CVE-2026-53974 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-53975 | Deferred | 未確認 | CWE-78 | OpenChamber 1.11.7 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary shell commands by sending crafted POST requests |
| CVE-2026-53976 | Deferred | 未確認 | CWE-22 | OpenChamber 1.11.7 contains a path traversal vulnerability in the file-serving endpoints /api/fs/read, /api/fs/stat, and /api/fs/raw that allows unauthenticated remote attackers to |
| CVE-2026-53977 | Deferred | 未確認 | CWE-306 | OpenChamber 1.11.7 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to terminate the server process by sending a POST request to the /ap |
| CVE-2026-53983 | Deferred | 未確認 | CWE-918 | Ground Station prior to 0.6.0 contains an unauthenticated blind server-side request forgery vulnerability in the orbital-source configuration path that allows any unauthenticated S |
| CVE-2026-53984 | Deferred | 未確認 | CWE-306 | Ground Station prior to 0.6.0 contains an unauthenticated database-destruction and arbitrary-data-injection vulnerability in the Socket.IO server's database_backup event handler th |
| CVE-2026-53985 | Deferred | 未確認 | CWE-306 | Ground Station prior to 0.6.0 contains an unauthenticated denial-of-service vulnerability in the Socket.IO server's service_control event handler that allows any unauthenticated ne |
| CVE-2026-53991 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-53992 | Deferred | 未確認 | CWE-79 | ProjectSend r2029 contains a reflected cross-site scripting vulnerability in thumbnails-regenerate.php that allows remote attackers to inject arbitrary HTML and JavaScript by suppl |
| CVE-2026-53993 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-53996 | Awaiting Analysis | 未確認 | CWE-862 | NetBSD's hdaudio(4) driver in sys/dev/hdaudio/hdaudio.c contains a missing access control vulnerability that allows unprivileged local attackers to invoke the HDAUDIO_FGRP_SETCONFI |
| CVE-2026-54020 | Analyzed | 未確認 | CWE-367, CWE-918 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.11.0, Open WebUI resolved a hostname during URL validation and rejected private, lo |
| CVE-2026-54071 | Deferred | 未確認 | CWE-502 | BabelDOC is a document translation tool. Prior to 0.6.3, BabelDOC's vendored PDF parser in babeldoc/pdfminer/cmapdb.py deserializes untrusted pickle data when CMapDB._load_data() l |
| CVE-2026-54073 | Awaiting Analysis | 未確認 | CWE-693 | VeraCrypt provides disk encryption with strong security based on TrueCrypt. From 1.26.6 until 1.26.29, file-hosted hidden volume creation forces quick format and the FormatNoFs fun |
| CVE-2026-54083 | Analyzed | 未確認 | CWE-22 | Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. The ip-customblock active response script contains a path t |
| CVE-2026-54084 | Analyzed | 未確認 | CWE-476 | Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.0.0 through 4.14.6, a malicious or man-in-the-m |
| CVE-2026-54085 | Analyzed | 未確認 | CWE-88 | Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.2.0 through 4.14.6, multiple active response sc |
| CVE-2026-54113 | Analyzed | 未確認 | CWE-770 | Allocation of resources without limits or throttling in Windows Kernel allows an unauthorized attacker to deny service over a network. |
| CVE-2026-54123 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally. |
| CVE-2026-54134 | Awaiting Analysis | 未確認 | CWE-73 | OctoPrint provides a web interface for controlling consumer 3D printers. Prior to 1.11.8 and 2.0.0rc3, OctoPrint's custom Tornado upload handler and Flask with Werkzeug parse reque |
| CVE-2026-54136 | Deferred | 未確認 | CWE-863 | Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs. Prior to 1.715.0, a resource-scoped API token could read script contents |
| CVE-2026-54179 | Deferred | 未確認 | CWE-434, CWE-79 | backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 |
| CVE-2026-54183 | Analyzed | 未確認 | CWE-200 | Apache Airflow's secrets masker hides values stored under sensitive key names when they are displayed in the UI. The masker's recursion-depth limit did not descend into values nest |
| CVE-2026-54199 | Deferred | 未確認 | CWE-20 | Tobit Laboratories AG TeamDavid's Webbox is vulnerable to HTTP header injection through the request body in the application's link storing functionality (//ServerClient_celink.h |
| CVE-2026-54200 | Deferred | 未確認 | CWE-73 | Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a local file inclusion vulnerability in the send email, fax, SMS, etc. functionality. By specifying an '@@attach' comman |
| CVE-2026-54201 | Deferred | 未確認 | CWE-862 | Tobit Laboratories AG TeamDavid's Webbox does not enforce authentication or authorization checks when serving these log files. As a result, attackers can obtain sensitive error |
| CVE-2026-54202 | Deferred | 未確認 | CWE-36 | Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a path traversal vulnerability in the archive creation functionality. Because the archive path is user-controlled and i |
| CVE-2026-54203 | Deferred | 未確認 | CWE-200 | Memory Leak to an Unauthorized Actor vulnerability in Tobit Laboratories AG TeamDavid's Webbox allows reading of sensitive information. When accessing the URL “/.well-known/mta-sts |
| CVE-2026-54204 | Deferred | 未確認 | CWE-20, CWE-918 | Tobit Laboratories AG TeamDavid's Webbox 's search functionality accepts a “pathnameroot” parameter, which can be set to network locations using UNC paths (e.g., “\\Server\Share” |
| CVE-2026-54205 | Deferred | 未確認 | CWE-20, CWE-918 | Tobit Laboratories AG TeamDavid's Webbox 's link storing functionality (//ServerClient_celink.htm) accepts a “pathname” parameter, which can be set to network locations using UNC |
| CVE-2026-54206 | Deferred | 未確認 | CWE-20, CWE-918 | Tobit Laboratories AG TeamDavid's Webbox 's sending email, fax, SMS, etc. functionality accepts a @@INCLUDE command, which can be set to network locations using UNC paths (e.g., |
| CVE-2026-54207 | Deferred | 未確認 | CWE-20, CWE-918 | Tobit Laboratories AG TeamDavid's Webbox 's move archive functionality (“!ArcEntryMove”) accepts an arbitrary path, which can be set to network locations using UNC paths (e.g., “ |
| CVE-2026-54208 | Deferred | 未確認 | CWE-20, CWE-284 | Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to arbitrary file write, allowing an unauthenticated attacker to create or write into existing files on the ser |
| CVE-2026-54209 | Deferred | 未確認 | CWE-125 | Tobit Laboratories AG TeamDavid's Webbox application handles password changes using a function triggered by including the string "(editini)" in the file path, writing the new pas |
| CVE-2026-54210 | Deferred | 未確認 | CWE-787 | Tobit Laboratories AG TeamDavid's Webbox application implements various file upload functionalities that are vulnerable to a buffer overflow condition. By specifying an excessivel |
| CVE-2026-54211 | Deferred | 未確認 | CWE-787 | Tobit Laboratories AG TeamDavid's Webbox application’s endpoint “//serverClient_close.html” is vulnerable to a buffer overflow vulnerability in multiple form data parameters. By |
| CVE-2026-54212 | Deferred | 未確認 | CWE-787 | Tobit Laboratories AG TeamDavid's Webbox application implements an API endpoint that is vulnerable to a buffer overflow condition. By submitting a specially crafted JSON body, su |
| CVE-2026-54213 | Deferred | 未確認 | CWE-284 | Tobit Laboratories AG TeamDavid's Webbox application exposes a functionality that allows the server to be shut down when a specific endpoint (/internalRestart) is accessed. This |
| CVE-2026-54214 | Deferred | 未確認 | CWE-601 | Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to HTTP header injection through the “cType” URL parameter, which allows arbitrary modification of the Content- |
| CVE-2026-54215 | Deferred | 未確認 | CWE-601 | Tobit Laboratories AG TeamDavid's Webbox contains an open redirect vulnerability via the “replyUrl” parameter. An attacker can exploit this vulnerability to craft a URL within t |
| CVE-2026-54216 | Deferred | 未確認 | CWE-79 | Tobit Laboratories AG TeamDavid's Webbox application contains a reflected cross-site scripting (XSS) vulnerability. By sending a specially crafted link including an arbitrary pat |
| CVE-2026-54217 | Deferred | 未確認 | CWE-20 | Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to a stored XSS vulnerability. An attacker can send an email containing malicious JavaScript code. When a user |
| CVE-2026-54218 | Deferred | 未確認 | CWE-321 | Use of hard-coded cryptographic key vulnerability in Tobit Laboratories AG TeamDavid's Webbox. For users created locally in David, passwords are stored in various files using only |
| CVE-2026-54225 | Modified | 未確認 | CWE-770 | Apache CXF allows to control the maximum attachment size via the "attachment-max-size". Prior to Apache CXF 4.2.3 and 4.1.8 and 3.6.12, there was no default placed on this size, me |
| CVE-2026-5423 | Awaiting Analysis | 未確認 | CWE-302 | @neo4j/graphql library versions prior to 7.5.6 fail to verify the authenticity of a client-supplied, pre-decoded JWT object passed through GraphQL subscription connectionParams. As |
| CVE-2026-54245 | Deferred | 未確認 | CWE-89 | Fleet is an open-source device management platform built on osquery. In versions prior to 4.86.2, the Okta conditional access integration in Fleet Premium is vulnerable to SQL inje |
| CVE-2026-54256 | Deferred | 未確認 | CWE-284, CWE-639 | Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, the backend FileUpload form widget trusted an attacker-control |
| CVE-2026-54284 | Deferred | 未確認 | CWE-1333, CWE-407 | sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, TokenList construction and string conversion in sqlparse/sql.py repeatedly flatten nested token subtrees |
| CVE-2026-5430 | Analyzed | 掲載 | CWE-347 | The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows an attacker to craft a JWT with an unsupport |
| CVE-2026-54330 | Awaiting Analysis | 未確認 | CWE-347 | Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the Ceph Object Gateway (RGW) SigV4 handler d |
| CVE-2026-54336 | Deferred | 未確認 | CWE-22 | JumpServer is an open source bastion host and an operation and maintenance security audit system. From 4.8.0 until 4.10.17, an authenticated user with SFTP permission to an authori |
| CVE-2026-54338 | Awaiting Analysis | 未確認 | CWE-400 | JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. Prior to 5.5.0, invalid input to form-based login authenticators can place an unbounde |
| CVE-2026-54347 | Deferred | 未確認 | CWE-79 | Froxlor is open source server administration software. Prior to 2.3.8, DNS TXT record content accepted by lib/Froxlor/Api/Commands/DomainZones.php can contain HTML special characte |
| CVE-2026-54348 | Deferred | 未確認 | CWE-89 | Froxlor is open source server administration software. Prior to 2.3.8, the Admins.add and Admins.update endpoints in lib/Froxlor/Api/Commands/Admins.php accept an attacker-controll |
| CVE-2026-54356 | Deferred | 未確認 | CWE-862 | Budibase is an open-source low-code platform. Prior to 3.41.3, POST /api/attachments/:datasourceId/url in packages/server/src/api/routes/static.ts and packages/server/src/api/contr |
| CVE-2026-54385 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-54389 | Deferred | 未確認 | CWE-770 | Ghidra before 12.1.3 contains an uncontrolled resource consumption vulnerability in the PDB parser that allows attackers to terminate the Ghidra process by supplying a crafted PDB |
| CVE-2026-54416 | Deferred | 未確認 | CWE-434 | Pluck CMS through 4.7.21 restricts dangerous file uploads in its admin file-management feature using a fixed blacklist in data/inc/files.php ('.php','php3','php4','php5','php6','ph |
| CVE-2026-54418 | Deferred | 未確認 | CWE-862 | Leantime through 3.6.2 exposes the JSON-RPC methods leantime.rpc.TwoFA.TwoFA.getSetupData, saveSecret, verifyAndEnable, and disable2FA, which act on a caller-supplied userId parame |
| CVE-2026-54449 | Deferred | 未確認 | CWE-77 | LangBot is a global IM bot platform designed for LLMs. In version 4.10.7 and earlier, any authenticated user can add or change an STDIO MCP server configuration without an adequate |
| CVE-2026-54457 | Awaiting Analysis | 未確認 | CWE-552, CWE-918 | TensorZero is an open-source LLMOps platform that unifies an LLM gateway, observability, evaluation, optimization, and experimentation. Prior to 2026.6.0, the TensorZero Gateway /i |
| CVE-2026-54467 | Deferred | 未確認 | CWE-283 | On the Trusted Firmware-M (TF-M) 2 through 2.3.0 platform before 00d1b3e, mailbox initialization on PSOC64 and RP2350 accepts a non-secure, unvalidated, supplied pointer. |
| CVE-2026-54481 | Deferred | 未確認 | CWE-295 | Internal API HTTP client hardcodes InsecureSkipVerify:true with no config override (CWE-295) |
| CVE-2026-54489 | Analyzed | 未確認 | CWE-200 | Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) a Sensitive Information Disclosure vulnerability. An unauthenticated remote attac |
| CVE-2026-54491 | Deferred | 未確認 | CWE-918 | Koel is a free, open-source music streaming solution. Prior to 9.7.1, outbound podcast and radio fetch paths perform a point-in-time App\Helpers\Network::isPublicHost() or isSafeUr |
| CVE-2026-54492 | Deferred | 未確認 | CWE-918 | Koel is a free, open-source music streaming solution. Prior to 9.7.0, the Subsonic-compatible createPodcastChannel.view route accepts an authenticated user's private URL because ap |
| CVE-2026-54493 | Deferred | 未確認 | CWE-918 | Koel is a free, open-source music streaming solution. Prior to 9.7.0, the Subsonic-compatible createInternetRadioStation.view and updateInternetRadioStation.view routes accept an a |
| CVE-2026-54494 | Deferred | 未確認 | CWE-918 | Koel is a free, open-source music streaming solution. Prior to 9.7.1, App\Helpers\Network::isPublicHost() uses filter_var() with FILTER_FLAG_NO_PRIV_RANGE and FILTER_FLAG_NO_RES_RA |
| CVE-2026-54505 | Deferred | 未確認 | CWE-79 | TREK is a collaborative travel planner. Prior to 3.1.0, when the Journey add-on is enabled, TREK interpolates the unescaped activeSuggestion.title value into journey.frontpage.sugg |
| CVE-2026-54508 | Deferred | 未確認 | CWE-918 | TREK is a collaborative travel planner. Prior to 3.1.0, TREK validates only the initial URL before native redirect following in importGoogleList() and importNaverList() in server/s |
| CVE-2026-54509 | Deferred | 未確認 | CWE-862 | TREK is a collaborative travel planner. From 3.0.0 until 3.1.0, the GET /api/journeys/:id/share-link route in server/src/routes/journey.ts returns the result of getJourneyShareLink |
| CVE-2026-54511 | Deferred | 未確認 | CWE-117, CWE-93 | LogTape is an unobtrusive logging library. Prior to 1.3.11, 2.0.14, and 2.1.5, the @logtape/syslog package's escapeStructuredDataValue() function in packages/syslog/src/syslog.ts d |
| CVE-2026-54523 | Deferred | 未確認 | CWE-862 | Kyverno is a policy engine designed for cloud native platform engineering teams. From 1.18.0 until 1.18.2, the NamespacedMutatingPolicy CEL compiler exposes the generator library t |
| CVE-2026-54543 | Deferred | 未確認 | CWE-74 | Froxlor is open source server administration software. Prior to 2.3.8, the DomainZones.add API command in lib/Froxlor/Api/Commands/DomainZones.php accepts user-controlled record an |
| CVE-2026-54548 | Deferred | 未確認 | CWE-295 | kas is a setup tool for bitbake based projects. Prior to 5.4, internal SSH key setup triggered by SSH_PRIVATE_KEY or SSH_PRIVATE_KEY_FILE creates ~/.ssh/config when no user-specifi |
| CVE-2026-54550 | Deferred | 未確認 | CWE-22 | IzPack is a widely used tool for packaging applications on the Java platform as cross-platform installers. In 5.2.6 and earlier, UnpackerBase.unpack() in izpack-installer/src/main/ |
| CVE-2026-54552 | Deferred | 未確認 | CWE-273 | sh provides Python process launching. Prior to 2.2.4, the _uid option in sh.py performs an incomplete privilege drop on Linux and Unix-like systems. When sh runs from an elevated p |
| CVE-2026-54553 | Deferred | 未確認 | CWE-200, CWE-248, CWE-639 | Starlette-Admin is a fast, beautiful and extensible administrative interface framework for FastAPI and Starlette applications. Prior to 0.16.1, the list API does not validate user- |
| CVE-2026-54556 | Deferred | 未確認 | CWE-409 | Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, an unauthenticated HTTP/2 peer can cause an out-of-memory denial of service in the Ember backend with |
| CVE-2026-54569 | Deferred | 未確認 | CWE-862, CWE-95 | SENAITE.CORE is the core framework for the SENAITE laboratory information management system. From 2.0.0 to 2.6.0, the SENAITE.CORE JSON API permits unauthenticated remote code exec |
| CVE-2026-54570 | Deferred | 未確認 | CWE-80 | AngleSharp is a .NET library for parsing angle bracket based hyper-texts. Prior to 1.5.0, MathAnnotationXmlElement in AngleSharp/Mathml/Dom/Internal/MathAnnotationXmlElement.cs is |
| CVE-2026-54598 | Deferred | 未確認 | CWE-306 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.4, endpoints/db/migrate.php executes database schema migrations when called over HTTP wi |
| CVE-2026-54599 | Deferred | 未確認 | CWE-352 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.4, login.php generates an OIDC state nonce stored in $_SESSION['oidc_state'], but checks |
| CVE-2026-54600 | Deferred | 未確認 | CWE-287 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.4, endpoints/db/import.php has no authentication. The only guard is a user-table row cou |
| CVE-2026-54606 | Deferred | 未確認 | CWE-79 | SunEditor is a lightweight and powerful WYSIWYG editor in vanilla JavaScript with no dependencies. Prior to 3.1.4, the SunEditor Embed plugin in src/plugins/modal/embed.js parses a |
| CVE-2026-54614 | Deferred | 未確認 | CWE-470 | DebugKit provides a debugging toolbar for CakePHP applications. Prior to 4.10.3 and 5.2.4, the DebugKit MailPreview feature in src/Controller/MailPreviewController.php accepts a ro |
| CVE-2026-54616 | Deferred | 未確認 | CWE-125 | NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 1.0.88.0 until stable version 6.0.1698.0 and preview version 6.5.1742.0, the Lz4Decode func |
| CVE-2026-54622 | Awaiting Analysis | 未確認 | CWE-639 | django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. Prior to 5.0.8, the copy_plugins endpoint in cms/admin/placeholderadmin. |
| CVE-2026-54623 | Deferred | 未確認 | CWE-674, CWE-835 | django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. Prior to 5.0.8, the move_plugin endpoint in cms/admin/placeholderadmin.p |
| CVE-2026-54624 | Awaiting Analysis | 未確認 | CWE-285, CWE-862 | django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. Prior to 5.0.8, render_object_structure in cms/views.py renders cms/tool |
| CVE-2026-54625 | Deferred | 未確認 | CWE-349, CWE-524 | django CMS is a content management system powered by Django. Prior to 5.0.8 and in 5.1.0a1, the django CMS page cache in cms/cache/page.py ignores request headers declared by plugi |
| CVE-2026-54681 | Deferred | 未確認 | CWE-79 | DiscordChatExporter saves Discord chat logs to a file. Prior to 2.47.2, the VisitEmojiAsync method in DiscordChatExporter.Core/Exporting/HtmlMarkdownVisitor.cs interpolates emoji.N |
| CVE-2026-54682 | Deferred | 未確認 | CWE-79 | DiscordChatExporter saves Discord chat logs to a file. Prior to 2.47.2, HTML exports generated with markdown formatting disabled pass attacker-controlled content through FormatMark |
| CVE-2026-54687 | Analyzed | 未確認 | CWE-22 | n8n-nodes-sqlite3 is a node for operating a local SQLite database from n8n. Prior to 1.0.0, nodes/SqliteNode/v1/SqliteV1.node.ts exposes the db_path database file path as a node pa |
| CVE-2026-54713 | Deferred | 未確認 | CWE-1023 | CakePHP Queue is a queue-interop compatible queueing library. From 0.1.11 until 2.3.1, QueueManager::getUniqueId() generates identifiers for jobs with shouldBeUnique enabled from t |
| CVE-2026-54717 | Deferred | 未確認 | CWE-79 | Silverstripe CMS is an open source content management system. Prior to 6.2.1, page breadcrumbs in the CMS are vulnerable to cross-site scripting when viewed using the page list vie |
| CVE-2026-54718 | Deferred | 未確認 | CWE-1336 | Silverstripe Advanced Workflow is a highly configurable step-based workflow module. Prior to 6.4.5, 7.1.3, and 7.2.1, an attacker with permission to author the advanced workflow em |
| CVE-2026-54721 | Deferred | 未確認 | CWE-94 | Silverstripe UserForms provides a visual form builder for the Silverstripe CMS. From 6.0.0 until 6.4.9, 7.0.7, and 7.1.1, the userform email recipient subject field in the CMS acce |
| CVE-2026-54730 | Deferred | 未確認 | CWE-284, CWE-807 | authentik is an open-source identity provider. Prior to 2026.2.6 and 2026.5.5, the enterprise Google Chrome device-trust stages advance the flow without confirming that the out-of- |
| CVE-2026-54732 | Deferred | 未確認 | CWE-22 | libreoffice-convert is a Node.js module for converting office documents to different formats. Prior to 1.8.2, index.js uses the caller-controlled options.fileName value in path.joi |
| CVE-2026-54738 | Deferred | 未確認 | CWE-799 | Lemmy is a link aggregator and forum for the fediverse. Prior to 0.19.19 and 1.0.0-beta.1, actix-web ConnectionInfo::realip_remote_addr reads the first value of X-Forwarded-For as |
| CVE-2026-54739 | Deferred | 未確認 | CWE-204 | Lemmy is a link aggregator and forum for the fediverse. Prior to 0.19.19 and 1.0.0-beta.1, Lemmy's login endpoint in crates/api/api/src/local_user/login.rs returns different errors |
| CVE-2026-54740 | Deferred | 未確認 | CWE-862 | Lemmy is a link aggregator and forum for the fediverse. Prior to 0.19.19 and 1.0.0-alpha.18, a lower-ranked remote moderator can remove a higher-ranked moderator by sending a signe |
| CVE-2026-54741 | Deferred | 未確認 | CWE-862 | Lemmy is a link aggregator and forum for the fediverse. Prior to 0.19.19 and 1.0.0-alpha.18, Lemmy blocks new private messages from a sender after the recipient blocks that sender, |
| CVE-2026-54742 | Deferred | 未確認 | CWE-863 | Lemmy is a link aggregator and forum for the fediverse. From 0.19.18 until 0.19.19 and 1.0.0-alpha.20, a community moderator can feature or unfeature posts in other communities thr |
| CVE-2026-54743 | Deferred | 未確認 | CWE-79 | Lemmy is a link aggregator and forum for the fediverse. Prior to lemmy-ui 0.19.19-beta.1, LemmyNet/lemmy-ui renders Markdown in src/shared/markdown.ts for post bodies, comment bodi |
| CVE-2026-54745 | Deferred | 未確認 | CWE-284, CWE-918 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the Kubeflow Pipelines frontend exposes an unauthenticated serv |
| CVE-2026-54746 | Deferred | 未確認 | CWE-639, CWE-862 | Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. From 0.40.0 until 0.91.1, the Dispatcher gRPC service does not verify that a re |
| CVE-2026-54754 | Deferred | 未確認 | CWE-191, CWE-367, CWE-682 | Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, marketplace settlement in core/kapp/market/market.go reads MarketOrderData.ReferralPercentage |
| CVE-2026-54755 | Deferred | 未確認 | CWE-190 | Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, split-royalty fields decoded in core/kapp/builtInFunctions/utils.go can contain values greate |
| CVE-2026-54757 | Deferred | 未確認 | CWE-94 | Compliance-trestle (Trestle) is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions before 3.12.4 and versions 4.0.0 through 4.0.3, Trestle is v |
| CVE-2026-54758 | Awaiting Analysis | 未確認 | CWE-121, CWE-787 | Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the expandNppEnvironmentStrs function in PowerEditor/src/WinControls/StaticDialog/RunDlg/RunDlg.cpp copies a |
| CVE-2026-54766 | Deferred | 未確認 | CWE-285, CWE-863 | Vikunja is an open-source self-hosted task management platform. From 0.21.0 until 2.4.0, the project duplication operation in pkg/models/project_duplicate.go allows an authenticate |
| CVE-2026-54770 | Deferred | 未確認 | CWE-601 | WebOb provides objects for HTTP requests and responses. Prior to 1.8.11, Response._make_location_absolute() in src/webob/response.py checks a Location value for a URI scheme or lea |
| CVE-2026-54788 | Deferred | 未確認 | CWE-770 | dd-trace-rs provides Datadog application performance monitoring for Rust. From 0.1.0 until 0.3.3, datadog-opentelemetry/src/propagation/tracecontext.rs parses the W3C tracestate he |
| CVE-2026-54789 | Deferred | 未確認 | CWE-125, CWE-787 | mod_auth_openidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. Prior |
| CVE-2026-54793 | Analyzed | 未確認 | CWE-79 | Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privilege |
| CVE-2026-54794 | Analyzed | 未確認 | CWE-918 | Dell OpenManage Enterprise, versions prior to 4.7.0, contains a Server-Side Request Forgery (SSRF) vulnerability. An unauthenticated attacker with remote access could potentially e |
| CVE-2026-54795 | Analyzed | 未確認 | CWE-78 | Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low pri |
| CVE-2026-54796 | Analyzed | 未確認 | CWE-78 | Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high pr |
| CVE-2026-54874 | Analyzed | 未確認 | CWE-405 | Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires. Impact summary |
| CVE-2026-54876 | Awaiting Analysis | 未確認 | CWE-401 | Issue summary: A malicious TLS server can cause a memory leak in a TLS client that has enabled OCSP response checking by sending an OCSP response that contains no single response e |
| CVE-2026-54894 | Analyzed | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plu |
| CVE-2026-54920 | Deferred | 未確認 | CWE-190, CWE-824 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a reachable assert |
| CVE-2026-54981 | Analyzed | 未確認 | CWE-693, CWE-829 | Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally. |
| CVE-2026-54984 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally. |
| CVE-2026-55013 | Analyzed | 未確認 | CWE-427 | Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locally. |
| CVE-2026-55015 | Analyzed | 未確認 | CWE-427 | Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally. |
| CVE-2026-55059 | Deferred | 未確認 | CWE-787 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.12 and 3.4.13 contain |
| CVE-2026-55064 | Deferred | 未確認 | CWE-862 | Vikunja is an open-source self-hosted task management platform. From 2.3.0 until 2.4.0, a user with Write but not Admin permission on a shared child project can detach it from its |
| CVE-2026-55065 | Deferred | 未確認 | CWE-285, CWE-639 | Vikunja is an open-source self-hosted task management platform. From 0.24.6 until 2.4.0, DELETE /api/v1/projects/:project/views/:view permits an authenticated user to supply a view |
| CVE-2026-55066 | Deferred | 未確認 | CWE-639 | Vikunja is an open-source self-hosted task management platform. Prior to 2.4.0, POST /api/v1/projects/{project}/views/{view}/buckets/{bucket}/tasks accepts a body supplied task_id |
| CVE-2026-55067 | Deferred | 未確認 | CWE-639 | Vikunja is an open-source self-hosted task management platform. Prior to 2.4.0, POST /api/v1/projects/{project}/views/{view}/buckets/{bucket} allows the request body project_view_i |
| CVE-2026-55068 | Deferred | 未確認 | CWE-20 | free5GC is an open-source implementation of the 5G core network. In 4.2.2 and earlier, the NRF RegisterNFInstance handler at PUT /nnrf-nfm/v1/nf-instances/{nfInstanceID} accepts NF |
| CVE-2026-55085 | Deferred | 未確認 | CWE-79 | Etherpad is a real-time collaborative editor. Prior to 3.3.1, result.appendSpan in src/static/js/domline.ts interpolates the start attribute of a numbered list directly into an unq |
| CVE-2026-55086 | Deferred | 未確認 | CWE-377, CWE-59 | Etherpad is a real-time collaborative editor. Prior to 3.1.0, src/node/handler/ImportHandler.ts and src/node/handler/ExportHandler.ts derive temporary filenames from Math.random() |
| CVE-2026-55087 | Deferred | 未確認 | CWE-444, CWE-601, CWE-79 | Etherpad is a real-time collaborative editor. From 2.1.0 until 3.1.0, Etherpad uses the attacker-controlled x-proxy-path request header in src/node/hooks/express/admin.ts when subs |
| CVE-2026-55088 | Deferred | 未確認 | CWE-200, CWE-294 | Etherpad is a real-time collaborative editor. From 2.6.0 until 3.1.0, Etherpad's src/node/hooks/express/tokenTransfer.ts uses POST /tokenTransfer to store an author token for trans |
| CVE-2026-55089 | Deferred | 未確認 | CWE-863 | Etherpad is a real-time collaborative editor. From 2.1.0 until 3.1.0, Etherpad's src/node/handler/APIHandler.ts authorizes requests to /api/2/* in the authorization_code OAuth path |
| CVE-2026-55090 | Deferred | 未確認 | CWE-79 | Etherpad is a real-time collaborative editor. Prior to 3.3.0, getHTMLFromAtext in src/node/utils/ExportHtml.ts interpolates values from the exportHtmlAdditionalTagsWithData plugin |
| CVE-2026-55095 | Deferred | 未確認 | CWE-862 | OpenProject is open-source, web-based project management software. In version 17.5.1 and earlier, an authenticated non-admin project member can request the inplace-edit dialog for |
| CVE-2026-55099 | Deferred | 未確認 | CWE-400, CWE-407 | icalendar is an RFC 5545 compatible parser and generator of iCalendar files for Python. From 7.1.0 until 7.1.3, the Component equality method in src/icalendar/cal/component.py comp |
| CVE-2026-5510 | Deferred | 未確認 | CWE-79 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'give_form' shortcode in all versions up to, and inc |
| CVE-2026-55106 | Deferred | 未確認 | CWE-862 | authentik is an open-source identity provider. Prior to 2026.2.6 and 2026.5.5, a diagnostic action on the LDAP Source API does not enforce the object-level read-authorization filte |
| CVE-2026-55108 | Deferred | 未確認 | CWE-400, CWE-59 | KubeVela is an open source application delivery platform. Prior to 1.9.14, from 1.10.0-alpha.1 until 1.10.9, and from 1.11.0-alpha.1 until 1.11.0-alpha.4, the Terraform remote conf |
| CVE-2026-55162 | Deferred | 未確認 | CWE-918 | Lemur manages TLS certificate creation. Prior to 1.9.2, lemur/certificates/verify.py accepted CRL Distribution Point and OCSP responder URLs from uploaded certificate extensions an |
| CVE-2026-55163 | Deferred | 未確認 | CWE-863 | Lemur manages TLS certificate creation. Prior to 1.9.2, PUT /api/1/roles/ in lemur/roles/views.py:298 authorized updates with RoleMemberPermission(role_id), which allowed either an |
| CVE-2026-55164 | Deferred | 未確認 | CWE-256 | Lemur manages TLS certificate creation. Prior to 1.9.2, lemur.users.service.update assigned a replacement password directly to users.password, while lemur/users/models.py registere |
| CVE-2026-55165 | Deferred | 未確認 | CWE-347 | Lemur manages TLS certificate creation. Prior to 1.9.2, the JWT verifier in lemur/auth/service.py:130-137 used fetch_token_header to read header_data["alg"] from an unverified toke |
| CVE-2026-55166 | Deferred | 未確認 | CWE-285, CWE-639, CWE-918 | Lemur manages TLS certificate creation. Prior to 1.9.2, authenticated users could influence an ACME authority acme_url without an effective server-side destination restriction and |
| CVE-2026-55168 | Deferred | 未確認 | CWE-59, CWE-61 | Runtipi is a personal homeserver orchestrator. In 4.10.0 and earlier, Runtipi accepts symbolic links from an attacker-controlled backup archive and copies them into live applicatio |
| CVE-2026-55182 | Deferred | 未確認 | CWE-77 | LibreNMS is a network monitoring system. In versions from 21.6.0 up to 26.5.0, the Signal alert transport is vulnerable to command injection because the signal-cli path and the Rec |
| CVE-2026-55185 | Deferred | 未確認 | CWE-601 | Miniflux 2 is an open source feed reader. Prior to 2.3.1, IsRelativePath in internal/urllib/url.go accepts redirect targets containing backslashes because Go URL parsing treats the |
| CVE-2026-55191 | Analyzed | 未確認 | CWE-122, CWE-190 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP clients that negotiate RDPGFX AVC444 with an H.264 decoder backend calculate the intermedi |
| CVE-2026-55192 | Analyzed | 未確認 | CWE-125 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP H.264 decoder backends can return YUV planes sized from the bitstream without comparing th |
| CVE-2026-55193 | Analyzed | 未確認 | CWE-122 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP clients using TS Gateway accept a server-controlled max_xmit_frag value in libfreerdp/core |
| CVE-2026-55194 | Analyzed | 未確認 | CWE-122 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, rpc_client_recv_fragment in libfreerdp/core/gateway/rpc_client.c ensures the response reassembly s |
| CVE-2026-55215 | Awaiting Analysis | 未確認 | CWE-295, CWE-522 | MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to versions 3.3.3, 3.4.6, and 3.5.3, when ssl is enabled withou |
| CVE-2026-55220 | Deferred | 未確認 | CWE-502 | Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, Pimcore\Model\DataObject\ClassDefinition\Data\Hotspotimage::getDataFromRes |
| CVE-2026-55227 | Deferred | 未確認 | CWE-203 | Weblate is a web-based localization tool. In versions prior to 2026.7, several endpoints look up objects in a globally scoped manner rather than restricting the lookup to projects |
| CVE-2026-55228 | Deferred | 未確認 | CWE-639 | Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, the REST API did not properly enforce the scope of projec |
| CVE-2026-55241 | Deferred | 未確認 | CWE-400, CWE-770 | Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. Prior |
| CVE-2026-55245 | Deferred | 未確認 | CWE-918 | Bifrost is an enterprise AI gateway for routing requests to model providers. Prior to 1.5.17, the isPublicIP function in core/providers/utils/fetch.go, reached through FetchAndEnco |
| CVE-2026-55247 | Deferred | 未確認 | CWE-400 | plone.app.event provides the event content type for Plone. Prior to versions 5.2.4 and 6.0.1, the iCalendar import in src/plone/app/event/ical/importer.py accepts insufficiently re |
| CVE-2026-55248 | Deferred | 未確認 | CWE-400 | plone.app.portlets provides portlets and a Plone-specific user interface for plone.portlets. Prior to 5.0.8, 6.0.4, and 7.0.2, a member who can add an RSS portlet can set its feed |
| CVE-2026-55371 | Deferred | 未確認 | CWE-20, CWE-476 | OpenEXR is the reference implementation and specification for the EXR high-dynamic-range image file format, widely used in the motion picture industry. Versions 3.4.0 through 3.4.1 |
| CVE-2026-55373 | Deferred | 未確認 | CWE-190, CWE-400, CWE-835 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.12, and 3.4.13 contain |
| CVE-2026-55378 | Deferred | 未確認 | CWE-78 | JS Recon is a JavaScript enumeration and SAST tool. From 1.2.1-beta.1 until 1.3.1-beta.2, the PR Branch Checker workflow in .github/workflows/pr_checker.yml places github.head_ref |
| CVE-2026-55400 | Analyzed | 未確認 | CWE-190 | CVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57. Attackers with an authenticated session can send specially crafted traffic to a server in |
| CVE-2026-55401 | Analyzed | 未確認 | CWE-476 | CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure Access servers prior to 14.57. Attackers can send an unauthenticated packet to a Sec |
| CVE-2026-55402 | Analyzed | 未確認 | CWE-125 | CVE-2026-55402 is an out of bounds read vulnerability in Secure Access servers prior to version 14.57. Attackers with an ‘in the middle’ position can send specially crafted data |
| CVE-2026-55419 | Deferred | 未確認 | CWE-434 | Reachy Mini is an SDK for controlling Reachy Mini robots. Prior to 1.8.2, the Reachy Mini daemon exposes the /api/media/sounds/upload endpoint implemented by the upload_sound metho |
| CVE-2026-55425 | Deferred | 未確認 | CWE-213 | Graylog is a free and open log management platform. From 7.1.0 until 7.1.4 and 7.2.0-alpha.2, the System Catalog entity titles endpoint in graylog2-server/src/main/java/org/graylog |
| CVE-2026-55426 | Deferred | 未確認 | CWE-78 | linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations, and Linuxfabrik Monitoring Plugins uses those modules to run external m |
| CVE-2026-55468 | Deferred | 未確認 | CWE-280 | Wagtail is an open source content management system built on Django. Prior to versions 7.0.9, 7.3.4, 7.4.3, and 8.0rc2 on their respective release lines, the internal Pages admin A |
| CVE-2026-55482 | Analyzed | 未確認 | CWE-639 | Snipe-IT is an IT asset/license management system. Prior to 8.4.1, a non-superadmin can use app/Http/Controllers/Assets/BulkAssetsController.php update() to submit company_id direc |
| CVE-2026-55483 | Analyzed | 未確認 | CWE-862 | Snipe-IT is an IT asset/license management system. Prior to 8.6.0, an authenticated user with users.create permission can submit the admin permission while creating a user because |
| CVE-2026-55484 | Deferred | 未確認 | CWE-248, CWE-754 | ALOS HTTP is a Linux-first Go web framework and application server built around a custom networking stack. Prior to 0.0.0-20260617230736-314b6783e196, core/utils.go::sanitizeReques |
| CVE-2026-55485 | Deferred | 未確認 | CWE-200, CWE-269, CWE-863 | Piccolo Admin is an admin interface and content management system for Python, built on top of Piccolo. Prior to 1.14.0, piccolo_admin/endpoints.py uses superuser_validators to bloc |
| CVE-2026-55489 | Deferred | 未確認 | CWE-639 | BigBlueButton is an open-source virtual classroom. Prior to 3.0.29, BigBlueButton presenters could submit a presentationId through /api/graphql that identified a presentation belon |
| CVE-2026-55491 | Deferred | 未確認 | CWE-79 | BigBlueButton is an open-source virtual classroom. Prior to 3.0.29, BigBlueButton failed to escape meetingName in record-and-playback/screenshare/playback/index.html.erb when gener |
| CVE-2026-55509 | Deferred | 未確認 | CWE-89 | WsgiDAV is a generic and extendable WebDAV server based on WSGI. Prior to 4.3.5, the sample MySQLBrowserProvider in wsgidav/samples/mysql_dav_provider.py concatenates the record ke |
| CVE-2026-55511 | Awaiting Analysis | 未確認 | CWE-94 | Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs allows a user with SystemPrivilege.ControlArchiving to create a double-quoted StreamSQL column name that is |
| CVE-2026-55519 | Analyzed | 未確認 | CWE-285 | Snipe-IT is an IT asset/license management system. Prior to 8.4.1, an authenticated user with generic asset edit permission can delete files attached to assets outside the user's o |
| CVE-2026-55520 | Deferred | 未確認 | CWE-1333, CWE-400 | Protego is a pure-Python robots.txt parser with support for modern conventions. Prior to 0.6.2, protego._urlpattern._URLPattern._prepare_pattern_for_regex translates every asterisk |
| CVE-2026-55521 | Awaiting Analysis | 未確認 | CWE-862 | Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs omits authorization checks in IndexesApi.listPacketIndex, IndexesApi.listEventIndex, Cop1Api.disable, Cop1Ap |
| CVE-2026-55522 | Deferred | 未確認 | CWE-426, CWE-829, CWE-94 | PraisonAI is a multi-agent teams system. In versions 3.9.26 through 4.6.57 of praiseonai and 0.12.12 through 1.6.57 of praiseonaiagents, the workflow "include" feature is vulnerabl |
| CVE-2026-55523 | Deferred | 未確認 | CWE-918 | PraisonAI is a multi-agent teams system. In versions 1.5.128 through 1.6.57, the praisonaiagents.tools.web_crawl_tools.web_crawl() function is vulnerable to server-side request for |
| CVE-2026-55524 | Deferred | 未確認 | CWE-367, CWE-918 | PraisonAI is a multi-agent teams system. In versions prior to 1.6.58, the web_crawl tool performs its SSRF check only on the initially supplied URL, allowing the protection to be b |
| CVE-2026-55525 | Deferred | 未確認 | CWE-918 | PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, the web_crawl function validates only the initial URL before _crawl_with_httpx uses httpx.Client(follow_re |
| CVE-2026-55526 | Deferred | 未確認 | CWE-350, CWE-918 | PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, spider_tools._host_is_blocked() does not resolve ordinary hostnames before scrape_page fetches them. A hos |
| CVE-2026-55527 | Deferred | 未確認 | CWE-22, CWE-73 | PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, the FileMemory constructor joins unsanitized user_id into self.user_path. A caller supplying ../ or path s |
| CVE-2026-55528 | Deferred | 未確認 | CWE-306, CWE-862 | PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, AgentServer exposes ServerConfig.auth_token but AgentServer._create_app does not check it on any route. A |
| CVE-2026-55529 | Deferred | 未確認 | CWE-306, CWE-346 | PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the MCP HTTP Stream _validate_origin method accepts request_origin.startswith(allowed), so the attacker-controll |
| CVE-2026-55530 | Deferred | 未確認 | CWE-862 | PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, ast_grep_rewrite lacks the @require_approval decorator used by sibling mutation tools. With dry_run=False, |
| CVE-2026-55531 | Deferred | 未確認 | CWE-400, CWE-770 | PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the MCP HTTP Stream mcp_post handler creates a new _sessions entry for every initialize request but does not cal |
| CVE-2026-55532 | Deferred | 未確認 | CWE-346, CWE-352 | PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, MCP HTTP Stream _validate_origin uses request_origin.startswith(allowed), allowing the attacker-controlled local |
| CVE-2026-55533 | Deferred | 未確認 | CWE-287, CWE-306 | PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, create_auth_middleware() allows requests when auth=api-key lacks PRAISONAI_API_KEY or JWT authentication lacks P |
| CVE-2026-55534 | Deferred | 未確認 | CWE-306 | PraisonAI is a multi-agent teams system. From praisonai 4.6.34 until 4.6.58, praisonai serve agents accepts --api-key but _create_agents_app() does not authenticate POST /agents or |
| CVE-2026-55535 | Deferred | 未確認 | CWE-367, CWE-918 | PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the Jobs API validate_webhook_url() path fails open on socket.gaierror and does not bind the validated address t |
| CVE-2026-55536 | Deferred | 未確認 | CWE-284, CWE-625 | PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, Browser Server _handle_connection() checks Chrome extension origins with re.match() and the unanchored expressio |
| CVE-2026-55537 | Deferred | 未確認 | CWE-367, CWE-705, CWE-918 | PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, JobSubmitRequest.validate_webhook_url() accepts webhook_url when resolution raises socket.gaierror because the e |
| CVE-2026-55538 | Deferred | 未確認 | CWE-306 | PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.51, praisonai serve agents parses config["api_key"] but _create_agents_app() does not authenticate POST /agents or P |
| CVE-2026-55539 | Deferred | 未確認 | CWE-306 | PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.51, the Jobs API create_app function mounts /api/v1/runs without authentication. Any reachable caller can submit job |
| CVE-2026-55540 | Deferred | 未確認 | CWE-22 | PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.51, is_path_within_directory() uses os.path.abspath() rather than os.path.realpath() for the workspace boundary. A s |
| CVE-2026-55541 | Deferred | 未確認 | CWE-862 | PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, praisonai serve agents and praisonai serve unified parse --api-key but _create_agents_app() and _create_unified_ |
| CVE-2026-55545 | Awaiting Analysis | 未確認 | CWE-862 | Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs WebSocket subscription handlers fail to enforce the privileges required by equivalent REST endpoints. Packet |
| CVE-2026-55546 | Deferred | 未確認 | CWE-94 | QWED-MCP is a deterministic verification gateway for MCP. Prior to 0.2.1, verify_math_expression() in src/qwed_mcp/engines/math_engine.py passes attacker-controlled expression and |
| CVE-2026-55547 | Awaiting Analysis | 未確認 | CWE-285, CWE-862 | Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs omits SystemPrivilege.ControlAccess checks from IamApi.listRoles, IamApi.getRole, and IamApi.listPrivileges |
| CVE-2026-55549 | Awaiting Analysis | 未確認 | CWE-79 | Yamcs is a mission control framework. Prior to 5.9.4, Yamcs reflects an attacker-controlled redirect_uri parameter from GET /auth/authorize into yamcs-core/src/main/resources/auth/ |
| CVE-2026-55552 | Awaiting Analysis | 未確認 | CWE-22 | Yamcs is a mission control framework. Prior to 5.11.13, Yamcs StaticFileHandler.locateFile resolves an unauthenticated request path without using Path.normalize and Path.toAbsolute |
| CVE-2026-55553 | Deferred | 未確認 | CWE-200, CWE-201, CWE-522 | urllib is an HTTP client for Node.js that supports authentication, redirects, timeouts, and other request features. Prior to 4.9.1 and 2.44.1, urllib follows redirects through foll |
| CVE-2026-55557 | Deferred | 未確認 | CWE-22 | browse-mcp is a Playwright-based headless-browser MCP server for MCP-capable agents. Prior to 0.8.2, browser_download writes a fetched response body to join(save_dir, filename) wit |
| CVE-2026-55558 | Deferred | 未確認 | CWE-74 | aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior to 5.1.2, SMTPProtocol.start_tls in src/aiosmtplib/protocol.py consumes the server's 220 response and starts t |
| CVE-2026-55559 | Awaiting Analysis | 未確認 | CWE-1336, CWE-470, CWE-94 | Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs inserts templateArgs from POST /api/instances and PATCH /api/instances/{instance} into YAML through VarState |
| CVE-2026-55564 | Analyzed | 未確認 | CWE-125, CWE-193 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, the glyph_cache_get function in libfreerdp/cache/glyph.c checks whether index is greater than cach |
| CVE-2026-55565 | Awaiting Analysis | 未確認 | CWE-94 | Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs LikeExpression.fillCode_getValueReturn in yamcs-core/src/main/java/org/yamcs/yarch/streamsql/LikeExpression. |
| CVE-2026-55566 | Awaiting Analysis | 未確認 | CWE-79 | Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs processes attacker-controlled data from the /ext URL route in yamcs-web/src/main/webapp/projects/webapp/src/ |
| CVE-2026-55569 | Deferred | 未確認 | CWE-22, CWE-59 | aqua is a declarative command-line version manager written in Go. Prior to 2.60.1, pkg/unarchive/archives.go in the handler.HandleFile method calls os.Symlink with archives.FileInf |
| CVE-2026-55571 | Deferred | 未確認 | CWE-285, CWE-306 | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to 1.0.4, LiveViewConsumer.handle_mount sends a `{"type":"navig |
| CVE-2026-55580 | Deferred | 未確認 | CWE-78 | mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. Prior to 0.6.0, config.go initializes Security.Enabled to false, and when MCP_SHELL_SEC_CO |
| CVE-2026-55581 | Deferred | 未確認 | CWE-1188, CWE-183, CWE-78 | mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. Prior to 0.6.0, the default Docker security.yaml includes /bin/bash in allowed_executables |
| CVE-2026-55582 | Deferred | 未確認 | CWE-78 | mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. Prior to 0.6.0, the default security.yaml allows /usr/bin/git, while security.go omits ! f |
| CVE-2026-55584 | Deferred | 未確認 | CWE-290 | phpSysInfo is a customizable PHP script that displays system information. Prior to 3.4.6, the PSI_ALLOWED access-control check in read_config.php trusts attacker-controlled X-Forwa |
| CVE-2026-55585 | Deferred | 未確認 | CWE-94 | QWED is open-source AI verification infrastructure for deterministic verification of LLM outputs, tool calls, code, schemas, and agent state before production execution. Prior to 5 |
| CVE-2026-55586 | Deferred | 未確認 | CWE-119, CWE-787 | SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, a crafted CHM file can supply malformed LZX Huffman code lengths to make_decode_table in ext/CHMLib/lzx.c. In |
| CVE-2026-55588 | Deferred | 未確認 | CWE-400, CWE-674, CWE-835 | ORAS (OCI Registry As Storage) is a CLI and library for managing artifacts in OCI registries. In ORAS CLI versions up to and including 1.3.2, the recursive referrer traversal does |
| CVE-2026-55593 | Deferred | 未確認 | CWE-352 | Froxlor is open source server administration software. Prior to 2.3.8, the standalone lib/ajax.php entry point bypasses the centralized request validation in lib/init.php, and Ajax |
| CVE-2026-55609 | Deferred | 未確認 | CWE-73 | sublinear-time-solver is a Rust and WebAssembly library for solving asymmetric diagonally dominant systems in sublinear time. Prior to consciousness-explorer 1.1.2 and sublinear-ti |
| CVE-2026-55618 | Deferred | 未確認 | CWE-116 | eml_parser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to 3.0.2, the clean_found_ur |
| CVE-2026-55619 | Deferred | 未確認 | CWE-1124, CWE-770 | eml_parser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to 3.0.2, eml_parser.parser. |
| CVE-2026-55620 | Deferred | 未確認 | CWE-1124, CWE-770 | eml_parser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to 3.0.2, eml_parser.routing |
| CVE-2026-55621 | Deferred | 未確認 | CWE-284 | Incus is a system container and virtual machine manager. Prior to version 7.2.0, missing authorization checks exist for custom volume copying where an attacker knowing the name of |
| CVE-2026-55622 | Deferred | 未確認 | CWE-284 | Incus is a system container and virtual machine manager. Prior to version 7.2.0, missing authorization checks exist for instance copying where an attacker knowing the name of a pro |
| CVE-2026-55623 | Rejected | 未確認 | Rejected reason: This CVE is a duplicate of another CVE. | |
| CVE-2026-55624 | Deferred | 未確認 | CWE-670 | MintyItanium Lost-Auction is an auction plugin for Minecraft. Prior to commit 88c920b05042929db334ba06d57f052b42d6b3f8, players can take items like barrier blocks or duplicate item |
| CVE-2026-55634 | Deferred | 未確認 | CWE-89, CWE-94 | Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, the class-definition import endpoint /pimcore-studio/api/class/definition/ |
| CVE-2026-55637 | Deferred | 未確認 | CWE-346 | genieacs-mcp is an MCP server for GenieACS written in Go. Prior to 0.3.2, the Streamable HTTP transport in cmd/server/main.go creates an unauthenticated /mcp listener on the defaul |
| CVE-2026-55640 | Deferred | 未確認 | CWE-306 | Nextcloud MCP Server is a production-ready MCP server that connects AI assistants to a Nextcloud instance. Prior to 0.117.2, the POST /webhooks/nextcloud endpoint in nextcloud_mcp_ |
| CVE-2026-55642 | Deferred | 未確認 | CWE-306 | dbx is a cross-platform database client for databases. Prior to 0.5.51, dbx-web auth_middleware in crates/dbx-web/src/auth.rs passes every protected request to the handler chain wh |
| CVE-2026-55643 | Analyzed | 未確認 | CWE-863 | Snipe-IT is an IT asset/license management system. Prior to 8.6.3, a company-scoped user in FMCS floater mode can access users whose company_id is null because broad API queries an |
| CVE-2026-55648 | Analyzed | 未確認 | CWE-190 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, freerdp_image_copy_from_icon_data in libfreerdp/codec/color.c calculates nWidth multiplied by nHei |
| CVE-2026-55663 | Deferred | 未確認 | CWE-345 | mediasoup is a WebRTC video conferencing system. From version 3.20.0 until 3.20.6 for the npm package and from 0.22.0 until 0.22.5 for the Rust crate, mediasoup's built-in SCTP sta |
| CVE-2026-55673 | Deferred | 未確認 | CWE-78, CWE-88 | PowSyBl (Power System Blocks) is a framework to build power system oriented software. Prior to 7.2.2, UnixLocalCommandExecutor and WindowsLocalCommandExecutor concatenate command a |
| CVE-2026-55674 | Deferred | 未確認 | CWE-79 | Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, an unauthenticated attacker could send a single request with a crafted color_s |
| CVE-2026-55676 | Deferred | 未確認 | CWE-434 | Malcolm is a network traffic analysis tool suite. The file-upload component (FilePond PHP backend) accepts uploads at `POST /server/php/submit.php` and stores them in a directory s |
| CVE-2026-55678 | Deferred | 未確認 | CWE-284, CWE-287, CWE-306 | Arc is an open, SQL-native time-series database for telemetry. From 26.02.1 until 26.06.2, Arc Enterprise clustering accepts cluster join requests without authentication when clust |
| CVE-2026-55694 | Analyzed | 未確認 | CWE-639 | Snipe-IT is an IT asset/license management system. Prior to 8.6.3, a restricted user can request /api/v1/users/{target_id}/eulas to obtain another user's randomized EULA filename a |
| CVE-2026-55696 | Deferred | 未確認 | CWE-79, CWE-80 | PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Prior to 2.0.5, AttachmentViewer.setAttachment in js/privatebin.js uses getAttachmentMimeType t |
| CVE-2026-55703 | Analyzed | 未確認 | CWE-862 | Snipe-IT is an IT asset/license management system. Prior to 8.6.3, any activated account can request /maintenances/{id} and read maintenance records for assets in the same company |
| CVE-2026-55704 | Deferred | 未確認 | CWE-862 | Discourse is an open-source discussion platform. Prior o 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, users who were allowed to view a group’s activity, but were not permitted to se |
| CVE-2026-55707 | Deferred | 未確認 | CWE-863 | In OpenStack Neutron before 28.0.2, the subnetpool onboarding API does not verify ownership of the target subnets. An authenticated user can onboard subnets from another project's |
| CVE-2026-55733 | Analyzed | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Per |
| CVE-2026-55734 | Analyzed | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. T |
| CVE-2026-55735 | Analyzed | 未確認 | CWE-347 | Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in li |
| CVE-2026-55739 | Deferred | 未確認 | CWE-639 | Crater isolates data per company_id, and its Invoice/Estimate/Payment/Expense policies enforce both a Bouncer ability check and ->hasCompany(->company_id). CustomerPolicy's view/up |
| CVE-2026-55747 | Deferred | 未確認 | CWE-22 | The pocketflow-coding-agent cookbook example in The-Pocket/PocketFlow implements a helper as a thin os.path.join(workdir, p) wrapper with no canonicalization or containment check, |
| CVE-2026-55758 | Deferred | 未確認 | CWE-918 | CC: Tweaked is a mod for Minecraft which adds programmable computers, turtles, and more to the game. Prior to 1.120.0, the SSRF protection in projects/core/src/main/java/dan200/com |
| CVE-2026-55763 | Deferred | 未確認 | CWE-841 | Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, processPercentageRoyaltiesTransfer in core/kapp/accounts/accounts.go calls SubFromBalance aft |
| CVE-2026-55764 | Deferred | 未確認 | CWE-190 | Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, Klever-Go allows a mint-role holder to bypass a finite per-nonce MaxSupply on the semi-fungib |
| CVE-2026-55765 | Deferred | 未確認 | CWE-256, CWE-522 | CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.28.4 and 1.29.2, CloudNativePG embedded cleartext role passwords in ` |
| CVE-2026-55769 | Deferred | 未確認 | CWE-426 | CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.28.4 and 1.29.2, CloudNativePG opened superuser connections without p |
| CVE-2026-55779 | Deferred | 未確認 | CWE-79 | Silverstripe Versioned provides versioning for Silverstripe models. Prior to 3.2.1, RestoreAction::getRestoreMessage() in src/RestoreAction.php builds ArchiveAdmin restore notifica |
| CVE-2026-55784 | Deferred | 未確認 | CWE-362 | free5GC is an open-source implementation of the 5G core network. In version 1.4.4 and earlier, the AUSF component stores per-subscriber authentication state in a global sync.Map na |
| CVE-2026-55785 | Deferred | 未確認 | CWE-208, CWE-385, CWE-532 | free5GC is an open-source implementation of the 5G core network. Prior to 1.4.5, the AUSF component performs cryptographic authentication comparisons in internal/sbi/processor/ue_a |
| CVE-2026-55799 | Analyzed | 未確認 | CWE-94 | Remote Code Execution Vulnerability in GraalScriptEngineCreator in Apache Ranger <= 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue. |
| CVE-2026-55805 | Awaiting Analysis | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Stored XSS. This issue affects Drupal core versions: |
| CVE-2026-5581 | Deferred | 未確認 | CWE-862 | The Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to unauthorized arbitrary media deletion in all versions up to, and including, 1.1.8. This is due to missing |
| CVE-2026-55814 | Analyzed | 未確認 | CWE-306 | Missing Authentication in Apache Ranger Download APIs on versions <= 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes this issue. |
| CVE-2026-55834 | Deferred | 未確認 | CWE-601 | Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to services. From 2.6.0 until 2.9.0, frontend/src/routes/authorize/+page.ts reads the redirect_u |
| CVE-2026-55839 | Deferred | 未確認 | CWE-79 | Kestra is an open-source, event-driven orchestration platform. Prior to 1.3.24, Kestra's custom Markdown parser in ui/src/utils/markdown_plugins/link.ts allows a user with permissi |
| CVE-2026-55841 | Deferred | 未確認 | CWE-138 | Graylog is a free and open log management platform. Prior to Graylog Server versions 6.3.12, 7.0.7, and 7.1.2 and Graylog Forwarder version 7.3, the FortiGate key-value syslog pars |
| CVE-2026-55848 | Deferred | 未確認 | CWE-611 | mapfish-print is a component of MapFish for printing templated cartographic maps. Prior to 3.28.30, 3.30.32, 3.31.24, 3.33.16, and 4.0.5, MapFish Print accepts an attacker-controll |
| CVE-2026-55850 | Deferred | 未確認 | CWE-79 | Element Web is a Matrix web client built using the Matrix React SDK. Prior to 1.12.22, EmbeddedPage in apps/web/src/components/structures/EmbeddedPage.tsx renders homeserver-suppli |
| CVE-2026-55854 | Awaiting Analysis | 未確認 | CWE-319, CWE-522 | MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to 3.2.4, 3.3.3, 3.4.6, and 3.5.3, MariaDB Connector/Node.js ca |
| CVE-2026-55855 | Awaiting Analysis | 未確認 | CWE-116, CWE-89 | MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to 3.2.4, 3.3.3, 3.4.6, and 3.5.3, MariaDB Connector/Node.js pe |
| CVE-2026-55856 | Awaiting Analysis | 未確認 | CWE-522 | MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, when a Java application connects wit |
| CVE-2026-55857 | Awaiting Analysis | 未確認 | CWE-319, CWE-522 | MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, PAM dialog authentication can be coe |
| CVE-2026-55858 | Awaiting Analysis | 未確認 | CWE-838 | MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, the connector encodes and decodes pr |
| CVE-2026-55859 | Awaiting Analysis | 未確認 | CWE-116, CWE-838 | MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb encodes and decodes all character data under the a |
| CVE-2026-55860 | Awaiting Analysis | 未確認 | CWE-319, CWE-522 | MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb does not gate clear-text password authentication p |
| CVE-2026-55867 | Deferred | 未確認 | CWE-639 | Graylog is a free and open log management platform. From 6.2.0 until 6.3.12, 7.0.7, and 7.1.2, the DELETE /users/{userId}/tokens/{idOrToken} endpoint implemented by UsersResource.r |
| CVE-2026-55891 | Deferred | 未確認 | CWE-116 | PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Prior to 2.0.5, Request::getRequestUri() in lib/Request.php passes $_SERVER['REQUEST_URI'] thro |
| CVE-2026-55893 | Deferred | 未確認 | CWE-122 | Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c SH floating-point decoders such as opFADD, opFMUL, and opFSUB call set_reg() a |
| CVE-2026-55894 | Deferred | 未確認 | CWE-125 | Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c sh_disassemble() function computes an idx value from a raw 16-bit instruction |
| CVE-2026-55976 | Analyzed | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) in Avro SerDe schema resolution in Apache Hive before 4.2.1 allows an authenticated remote attacker with CREATE TABLE privilege to cause the Hive |
| CVE-2026-55978 | Deferred | 未確認 | CWE-284 | An improper access control vulnerability in CatchPulse could allow a non-administrative local attacker to connect to an unrestricted kernel filter communication port and bypass Cat |
| CVE-2026-55979 | Deferred | 未確認 | CWE-284 | An improper access control check in CatchPulse's named pipe communication interface could allow an attacker to invoke CatchPulse functions. This is limited to operations that enfor |
| CVE-2026-55980 | Deferred | 未確認 | CWE-121 | A denial-of-service vulnerability in CatchPulse could allow an attacker to conduct a stack buffer overrun attack, leading to a denial-of-service condition. |
| CVE-2026-55982 | Deferred | 未確認 | CWE-200 | OIDC userinfo Endpoint Returns Identity Claims Without Enforcing API Token Scopes |
| CVE-2026-55984 | Deferred | 未確認 | CWE-284 | Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service |
| CVE-2026-55986 | Deferred | 未確認 | CWE-284 | Email Management API Bypasses ManageCredentials Feature Restrictions |
| CVE-2026-55987 | Deferred | 未確認 | CWE-863 | OAuth2 sign-in reactivates an administrator-deactivated account on auth sources without refresh tokens (incomplete fix of #38009) |
| CVE-2026-55996 | Awaiting Analysis | 未確認 | CWE-770 | A denial-of-service vulnerability was identified in multiple TLS listeners in Rancher. Both the cattle-cluster-agent component running in downstream clusters and the Rancher server |
| CVE-2026-55997 | Awaiting Analysis | 未確認 | CWE-312 | Rancher issues long-lived registration tokens to authenticate nodes and agents joining a downstream cluster. These tokens were stored and exposed in plaintext with no expiration, s |
| CVE-2026-55998 | Awaiting Analysis | 未確認 | CWE-204 | The endpoint /v3/import/{token}_{clusterId}.yaml retrieves the cluster object before validating the token. When a valid cluster ID references a cluster that has private registry se |
| CVE-2026-56088 | Analyzed | 未確認 | CWE-89 | Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privilege |
| CVE-2026-56089 | Analyzed | 未確認 | CWE-35 | Dell ObjectScale, versions prior to 4.3.0.1, contain(s) a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, le |
| CVE-2026-56090 | Analyzed | 未確認 | CWE-427 | Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit thi |
| CVE-2026-56092 | Deferred | 未確認 | CWE-862 | The extension forces empty frontend-group and subpage-inheritance restrictions onto page records during indexer sub-requests, and this forged state was persisted into the shared ro |
| CVE-2026-56093 | Deferred | 未確認 | CWE-639 | The extension's frontend detail-view document lookup does not apply the current site's siteHash filter or frontend user access filter, unlike the regular search path. A visitor who |
| CVE-2026-56094 | Deferred | 未確認 | CWE-943 | The extension allows a request-provided additionalFilters parameter to register a named siteHash filter before the system's own siteHash filter is applied, and the query builder do |
| CVE-2026-56095 | Deferred | 未確認 | CWE-502 | The extension's indexer passed every field value returned by content object rendering through PHP's unserialize() function when transferring multi-value data for the SOLR_CLASSIFIC |
| CVE-2026-56096 | Deferred | 未確認 | CWE-943 | The extension passes the user-supplied search query parameter to Apache Solr without restricting advanced Solr query syntax such as wildcards, field selectors and range queries. A |
| CVE-2026-56100 | Deferred | 未確認 | CWE-862 | SpringBlade versions from 2.7.3 up to but not including 5.0.0 contain a privilege escalation vulnerability that allows authenticated attackers to create system administrator accoun |
| CVE-2026-56135 | Analyzed | 未確認 | CWE-122 | In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function build_inherited_id() in libntfs-3g/security.c that allows an attacker to corrupt heap memory in th |
| CVE-2026-56136 | Analyzed | 未確認 | CWE-125 | In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfs_ir_nill() in libntfs-3g/index.c that allows an attacker to read possibly confidential information in an ntfs-3g p |
| CVE-2026-56161 | Analyzed | 未確認 | CWE-284 | Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network. |
| CVE-2026-56162 | Analyzed | 未確認 | CWE-287 | Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-56174 | Analyzed | 未確認 | CWE-426 | Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally. |
| CVE-2026-56179 | Analyzed | 未確認 | CWE-346 | Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network. |
| CVE-2026-56380 | Deferred | 未確認 | CWE-200 | AVideo through commit 9c39d8c8 contains an information exposure vulnerability in feed/index.php that allows unauthenticated attackers to retrieve channel owner email addresses by s |
| CVE-2026-56443 | Deferred | 未確認 | CWE-863 | Token public-only scope bypassed on Limited-visibility owners (Repository + Package categories) — residual after CVE-2026-25714 / PR #37118 |
| CVE-2026-5651 | Deferred | 未確認 | CWE-89 | The Askeet plugin for WordPress is vulnerable to SQL Injection via the 'sql_query' parameter in multiple AJAX actions (askeet_execute_sql_query, askeet_export_all_results) in all v |
| CVE-2026-56547 | Deferred | 未確認 | CWE-184, CWE-20 | The Apple profile generated for the Apple built-in Mail, Calendar and Contacts account to synchronize with HCL Traveler requires the Logon Name and Mail Address to be embedded in t |
| CVE-2026-56608 | Analyzed | 未確認 | CWE-284 | HCL iControl is affected by Missing Access Control vulnerability. The application failed to enforce proper granular access controls, allowing users to access or view administrator- |
| CVE-2026-56609 | Analyzed | 未確認 | CWE-327 | HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability. It was observed that the application was using weak TLS versions such as TLS 1.0 and 1.1. These outdated p |
| CVE-2026-56619 | Awaiting Analysis | 未確認 | CWE-79 | HCL BigFix Mobile is vulnerable to Reflected Cross-Site Scripting (Reflected XSS) due to insufficient validation and output encoding of user-controlled input. |
| CVE-2026-56620 | Awaiting Analysis | 未確認 | CWE-209 | HCL BigFix Mobile is vulnerable to information disclosure due to improper handling of exceptions and verbose error reporting. |
| CVE-2026-56651 | Deferred | 未確認 | CWE-59 | Dool in versions up to 1.3.8 is vulnerable to symlink following when the "--devel" flag is used, as the application opens a log file without the "O_NOFOLLOW" flag. A local attacker |
| CVE-2026-56652 | Deferred | 未確認 | CWE-1236 | Dool in versions up to 1.3.8 is vulnerable to a CSV injection vulnerability when exporting data to a CSV file, as it fails to sanitize cell content beginning with special formula c |
| CVE-2026-56654 | Deferred | 未確認 | CWE-284 | Privilege Escalation via Access Token Scope Escalation in API |
| CVE-2026-56657 | Deferred | 未確認 | CWE-284 | Gitea SSH Key Parser Denial of Service |
| CVE-2026-56677 | Deferred | 未確認 | CWE-306, CWE-918 | 9Router is an AI router & token saver. In 0.5.4 and earlier, the POST /api/auth/oidc/test endpoint in src/app/api/auth/oidc/test/route.js passes the user-controlled issuerUrl param |
| CVE-2026-56684 | Awaiting Analysis | 未確認 | CWE-416 | Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's tlsProcessPendingData function iterates pending_list while an authenticated c |
| CVE-2026-56685 | Analyzed | 未確認 | CWE-78 | Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privilege |
| CVE-2026-56686 | Analyzed | 未確認 | CWE-78 | Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privilege |
| CVE-2026-56702 | Deferred | 未確認 | CWE-434 | Adminer versions before 5.4.3 contain an unrestricted file upload vulnerability in the AdminerFileUpload plugin that allows authenticated users to upload PHP files by exploiting a |
| CVE-2026-56703 | Deferred | 未確認 | CWE-94 | Adminer before 5.4.3 contains a remote code execution vulnerability in SQLite query handling where VACUUM INTO is not blocked despite ATTACH restrictions. Authenticated attackers c |
| CVE-2026-56704 | Deferred | 未確認 | CWE-79 | Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL serve |
| CVE-2026-56705 | Deferred | 未確認 | CWE-73 | Adminer before 5.4.3 fails to sanitize the server field before constructing a PDO DSN string, allowing unauthenticated attackers to inject ODBC parameters via semicolons. Attackers |
| CVE-2026-56706 | Deferred | 未確認 | CWE-330 | Adminer before 5.4.3 uses a CSRF token scheme that transmits both the XOR mask and the masked value in every token (format (rand XOR secret):rand), allowing anyone who observes a s |
| CVE-2026-56707 | Deferred | 未確認 | CWE-862 | Grav Flex Objects plugin versions 1.4.0 through 1.4.7 contain an authorization bypass vulnerability in the flex-objects shortcode that allows users with page-edit access to render |
| CVE-2026-56708 | Deferred | 未確認 | CWE-367 | Grav API plugin before 1.0.16 contains a server-side request forgery vulnerability in webhook delivery that allows attackers to bypass hostname validation by DNS rebinding. Attacke |
| CVE-2026-56709 | Deferred | 未確認 | CWE-350 | Grav before 3.9.2 fails to validate untrusted Host headers in the sendInvitationEmail() function when constructing token-bearing invitation links. Attackers can manipulate the Host |
| CVE-2026-56710 | Deferred | 未確認 | CWE-863 | Grav Login plugin versions before 1.0.16 fail to validate the target account's privilege level in the onApiUserListRowAction unlock handler. An attacker with api.users.write permis |
| CVE-2026-56713 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-56715 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-56716 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-56718 | Deferred | 未確認 | CWE-22 | AJCloud AJY IPC firmware prior to version 01.10715.11.37 contains a path traversal vulnerability in the jdbhttpd web service that allows unauthenticated remote attackers to read ar |
| CVE-2026-56720 | Deferred | 未確認 | CWE-862 | CamaleonCMS version 2.9.2 and earlier contains a missing authorization vulnerability in the admin users controller that allows any authenticated user to access any other user's pro |
| CVE-2026-56721 | Deferred | 未確認 | CWE-639 | CamaleonCMS version 2.9.2 and earlier contains a privilege escalation vulnerability via insecure direct object reference (IDOR) that allows authenticated low-privileged attackers t |
| CVE-2026-56750 | Deferred | 未確認 | CWE-284 | Gitea Remember-Me Token Theft Not Invalidating Attacker Session |
| CVE-2026-56755 | Deferred | 未確認 | CWE-284 | Denial of Service (CPU & Memory Exhaustion) via O(N^2) String Concatenation in Debian Package Upload |
| CVE-2026-56793 | Analyzed | 未確認 | CWE-287 | Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentiall |
| CVE-2026-56794 | Analyzed | 未確認 | CWE-23 | Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains a Relative Path Traversal vulnerability. A low privileged attacker with remote access could potentially e |
| CVE-2026-56796 | Analyzed | 未確認 | CWE-59 | Dell Command Update (DCU), versions prior to 5.7.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local ac |
| CVE-2026-56797 | Analyzed | 未確認 | CWE-367 | Dell Command Update (DCU), versions prior to 5.7.1, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. A low privileged attacker with local access could potentially |
| CVE-2026-5680 | Awaiting Analysis | 未確認 | CWE-770 | A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permessage-deflate negotiated. This could lead |
| CVE-2026-56818 | Analyzed | 未確認 | CWE-401, CWE-703 | Netty is an asynchronous, event-driven network application framework. Prior to 4.1.136.Final and 4.2.16.Final, the RedisArrayAggregator Redis codec clears retained partial aggregat |
| CVE-2026-56845 | Deferred | 未確認 | CWE-22 | An unauthenticated path traversal (LFI) vulnerability exists under /custom-sounds/ when CustomSounds storage is configured to FileSystem. By including ../ sequences in the request |
| CVE-2026-56846 | Awaiting Analysis | 未確認 | CWE-400 | A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSessionMemory and enable remote memory exhaustion. This vulnerability affects Node.js **24.x** |
| CVE-2026-56848 | Awaiting Analysis | 未確認 | CWE-416 | A flaw in Node.js HTTP/2 handling allows `nghttp2_session_mem_send()` to be called re-entrantly while `nghttp2_session_mem_recv()` is executing, resulting in a heap-use-after-free. |
| CVE-2026-56853 | Awaiting Analysis | 未確認 | CWE-770 | When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. ReadHeaderTimeout is unex |
| CVE-2026-56854 | Awaiting Analysis | 未確認 | CWE-863 | The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extend |
| CVE-2026-56858 | Awaiting Analysis | 未確認 | CWE-79 | Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS. |
| CVE-2026-56859 | Awaiting Analysis | 未確認 | CWE-770 | Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion. |
| CVE-2026-56860 | Awaiting Analysis | 未確認 | CWE-407 | Previously, resolving relative paths containing parent directory ('..') segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexi |
| CVE-2026-56862 | Awaiting Analysis | 未確認 | CWE-770 | Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can ke |
| CVE-2026-56864 | Awaiting Analysis | 未確認 | CWE-347 | A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. This attack allows for a coordinating GOPROXY and GOSUMDB to serve a |
| CVE-2026-56865 | Awaiting Analysis | 未確認 | CWE-347 | A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled module con |
| CVE-2026-56867 | Rejected | 未確認 | Rejected reason: reserved but not needed | |
| CVE-2026-56868 | Rejected | 未確認 | Rejected reason: reserved but not needed | |
| CVE-2026-56869 | Rejected | 未確認 | Rejected reason: reserved but not needed | |
| CVE-2026-56870 | Rejected | 未確認 | Rejected reason: reserved but not needed | |
| CVE-2026-56871 | Rejected | 未確認 | Rejected reason: reserved but not needed | |
| CVE-2026-56872 | Rejected | 未確認 | Rejected reason: reserved but not needed | |
| CVE-2026-56873 | Rejected | 未確認 | Rejected reason: reserved but not needed | |
| CVE-2026-56874 | Rejected | 未確認 | Rejected reason: reserved but not needed | |
| CVE-2026-56875 | Rejected | 未確認 | Rejected reason: reserved but not needed | |
| CVE-2026-5706 | Awaiting Analysis | 未確認 | CWE-130 | In Bluetooth Mesh SDK 6.1.4 and earlier, malformed extended advertisements can trigger out-of-bounds writes leading to stack corruption and remote code execution. These messages mu |
| CVE-2026-57104 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-57105 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network |
| CVE-2026-57170 | Deferred | 未確認 | CWE-1336, CWE-94 | Compliance-trestle (Trestle) is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions prior to 3.12.4 and 4.0.0 through 4.0.3, the custom Jinja2 i |
| CVE-2026-57171 | Deferred | 未確認 | CWE-22 | Compliance-trestle (Trestle) is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions before 3.12.4 and versions 4.0.0 through 4.0.3, the catalog- |
| CVE-2026-5723 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-57233 | Awaiting Analysis | 未確認 | CWE-22 | Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the WinGup decompress function joins untrusted ZIP entry names to unzipDestTo without canonical containment |
| CVE-2026-57262 | Awaiting Analysis | 未確認 | CWE-321 | A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). Affected products use a static, hardcoded AES master key to encrypt project files. This could allow a |
| CVE-2026-57263 | Awaiting Analysis | 未確認 | CWE-759 | A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). The project password feature in the affected products stores the password as an unsalted SHA-256 hash |
| CVE-2026-57279 | Deferred | 未確認 | CWE-79 | Cybozu Garoon contains a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed in the web browser of a user logged in to the p |
| CVE-2026-5738 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in BilPark Informatics Technologies Industry and Trade Inc. DoXBASE allows Cross |
| CVE-2026-57469 | Awaiting Analysis | 未確認 | CWE-352 | Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the web-based configuration backend of KUNBUS PiCtory in version 2.16.0 that allows a |
| CVE-2026-57471 | Awaiting Analysis | 未確認 | CWE-22 | Nozomi Networks Labs identified a CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the file management functionality of the X |
| CVE-2026-57472 | Awaiting Analysis | 未確認 | CWE-22 | Nozomi Networks Labs identified a CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the file management functionality of the X |
| CVE-2026-57485 | Deferred | 未確認 | CWE-200, CWE-522 | Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.9.0, the /api/v1/pipeline/handleData endpoint in app/core/src/main/jav |
| CVE-2026-57499 | Deferred | 未確認 | CWE-20, CWE-78 | Liman is open source server management software. Prior to 2.2.2 - 1103, an OS command injection vulnerability in the log rotation configuration endpoint allows an authenticated adm |
| CVE-2026-5751 | Deferred | 未確認 | CWE-79 | justhtml versions 1.13.0 and earlier contain a parser-differential / mutation cross-site scripting (mXSS) vulnerability when using a custom SanitizationPolicy that preserves foreig |
| CVE-2026-57580 | Deferred | 未確認 | CWE-436 | authentik is an open-source identity provider. Prior to 2026.2.6 and 2026.5.5, an inbound SAML Source configured with the non-default USERNAME_LINK or EMAIL_LINK user-matching mode |
| CVE-2026-57817 | Modified | 未確認 | CWE-20 | The OpenID Connect Core 1.0 specification mandates that the RP MUST validate the `c_hash` parameter when operating in the Hybrid Flow. If an Apache CXF RP is integrated with a non- |
| CVE-2026-57818 | Modified | 未確認 | CWE-367 | A race condition in JCacheCodeDataProvider allows an attacker to redeem a single authorization code multiple times via concurrent requests, resulting in the issuance of multiple di |
| CVE-2026-57819 | Modified | 未確認 | CWE-400 | Apache CXF allows to set a limit on the number of form parameters in a JAX-RS message via the "maxFormParameterCount" configuration option. However, no default limit is set which m |
| CVE-2026-57826 | Deferred | 未確認 | CWE-295 | An issue was discovered in openHiTLS 0.2.0 through 0.3.2. In the X.509 certificate chain verification, the basic constraints extension and CA flag processing of intermediate CAs ar |
| CVE-2026-57835 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-57858 | Deferred | 未確認 | CWE-79 | Cal.com Cal.diy versions 2.1.1 through 6.2.0 contain a stored cross-site scripting vulnerability in the BookingPageTagManager component that allows authenticated event owners to in |
| CVE-2026-57863 | Deferred | 未確認 | CWE-22 | Crater Invoice through 6.0.6 contains a path traversal vulnerability in the self-update API that allows authenticated company owners to write arbitrary files outside the intended e |
| CVE-2026-57886 | Deferred | 未確認 | CWE-639, CWE-862 | Cross-repository issue/comment attachment re-linking can expose private attachment content |
| CVE-2026-57894 | Deferred | 未確認 | CWE-918 | Repository Migration Follows Git HTTP Redirects After URL Allow/Block Validation, Enabling Internal Git Repository Exfiltration |
| CVE-2026-57897 | Deferred | 未確認 | CWE-200, CWE-863 | Cross-Repo Information Disclosure via Org-Level Actions Run/Job APIs |
| CVE-2026-57909 | Deferred | 未確認 | CWE-306, CWE-94 | A path traversal vulnerability in WatchGuard Agent allows a remote, unauthenticated attacker on an adjacent network to execute arbitrary code on an affected system. |
| CVE-2026-57910 | Deferred | 未確認 | CWE-306, CWE-347, CWE-494 | Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges. |
| CVE-2026-57944 | Deferred | 未確認 | CWE-352 | AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in channelToGallery.json.php that allows attackers to modify site-wide Gallery configuration by p |
| CVE-2026-57998 | Deferred | 未確認 | CWE-78 | better-npm-audit through 3.11.0, and the 4.0.0-rc.2 prerelease, builds its npm audit command by interpolating the user-supplied --registry option into a command string in src/handl |
| CVE-2026-5800 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Dayneks Software Industry and Trade Inc. E-Commerce Platform allows Reflected |
| CVE-2026-58001 | Deferred | 未確認 | CWE-352 | WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in objects/videoEditLight.php that lacks request authenticity checks and accepts GET request |
| CVE-2026-58002 | Deferred | 未確認 | CWE-345 | WWBN AVideo through commit 9c39d8c8b4c1f75540788d6b391740852ceb0732 contains an authorization bypass vulnerability in the Users_affiliations add.json.php endpoint that allows authe |
| CVE-2026-58003 | Deferred | 未確認 | CWE-352 | WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in the releaseVideoNow.json.php endpoint that lacks authenticity checks and accepts GET requ |
| CVE-2026-58041 | Awaiting Analysis | 未確認 | CWE-367 | A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSync#createTagStore() to continue executing a cached prepared statement after it has been |
| CVE-2026-58042 | Awaiting Analysis | 未確認 | CWE-400 | A flaw in Node.js can cause dns.resolveAny() Aborts the Node.js Process When a DNS Response Contains More Than 256 A Records. Repeated triggering of this condition can lead to d |
| CVE-2026-58044 | Awaiting Analysis | 未確認 | CWE-444 | A flaw in Node.js HTTP client can cause a request desynchronization for Node.js-based forwarding proxies that rebuild outbound headers from the visible `IncomingMessage` headers wh |
| CVE-2026-58045 | Awaiting Analysis | 未確認 | CWE-400 | A flaw in Node.js allows a spoofed `TypedArray` `byteLength` to trigger a reachable assertion in the synchronous `node:zlib` APIs, causing the entire process to crash. All 11 synch |
| CVE-2026-58059 | Analyzed | 未確認 | CWE-407 | In Bouncy Castle for Java before 1.85, Quadratic-time escaping when stringifying X.500 distinguished names. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and B |
| CVE-2026-58060 | Analyzed | 未確認 | CWE-789 | In Bouncy Castle for Java before 1.85, HSS public-key level count unbounded, enabling huge allocation on verify. This issue also affects Bouncy Castle for Java LTS before 2.73.12, |
| CVE-2026-58061 | Analyzed | 未確認 | CWE-354 | In Bouncy Castle for Java before 1.85, CCM-family modes write plaintext to caller buffer before tag check. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bo |
| CVE-2026-58062 | Analyzed | 未確認 | CWE-295 | In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate. This issue also affects Bouncy Castle for Java LTS before 2.73.12, |
| CVE-2026-58063 | Analyzed | 未確認 | CWE-770 | In Bouncy Castle for Java before 1.85, BCFKS keystore load honours unbounded KDF cost from untrusted file. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bo |
| CVE-2026-58067 | Awaiting Analysis | 未確認 | CWE-789 | A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to exhaust host memory and cause adenial of service. |
| CVE-2026-58070 | Awaiting Analysis | 未確認 | CWE-532 | A vulnerability that records guest OS processing credentials in cleartext in a support log on the guest, allowing a user with read access to that log to recover privileged account |
| CVE-2026-58071 | Awaiting Analysis | 未確認 | CWE-306 | A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to access the proxied appliance API asPortal Administrator during a short window after an adm |
| CVE-2026-58072 | Awaiting Analysis | 未確認 | CWE-22 | A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management server, which can lead to remotecode execution. |
| CVE-2026-58073 | Awaiting Analysis | 未確認 | CWE-288 | A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to impersonate a managed agent andobtain that agent's credentials. |
| CVE-2026-58074 | Awaiting Analysis | 未確認 | CWE-94 | A vulnerability allowing a high-privileged user to execute arbitrary code on the server. |
| CVE-2026-58075 | Awaiting Analysis | 未確認 | CWE-287 | A vulnerability allowing an unauthenticated attacker to read arbitrary files from the host, which can be further leveraged toescalate privileges locally. |
| CVE-2026-58076 | Modified | 未確認 | CWE-502 | Apache Airflow's serialization layer reconstructed exception nodes by calling `import_string()` on a class name taken from the serialized blob and instantiating it with arguments f |
| CVE-2026-58080 | Analyzed | 未確認 | CWE-862 | In Eclipse Milo versions 1.0.0 through 1.1.4, `OpcUaServerConfig.copy()` fails to preserve a configured `RoleMapper`. On servers that rely on role permissions and construct the run |
| CVE-2026-58081 | Analyzed | 未確認 | CWE-122 | Several encoding modules, including HZ, UTF-7, VIQR, and ZW, did not properly check the size of the caller-supplied output buffer before writing converted characters. An applicati |
| CVE-2026-58082 | Analyzed | 未確認 | CWE-121 | The ISO-2022 encoding module used a stack buffer sized to MB_LEN_MAX (6 bytes) for intermediate character output. Some ISO-2022 variants can require up to 10 bytes per character, |
| CVE-2026-58083 | Analyzed | 未確認 | CWE-416 | While the kernel was copying knotes during fork, a knote with a timer-based filter could fire and be enqueued on the kqueue's active list before the copy was complete. The copy ro |
| CVE-2026-58084 | Analyzed | 未確認 | CWE-908 | To retrieve the previous timer value, the kernel calls realtimer_gettime(), which obtains the current time for the timer's clock. For a timer using CLOCK_TAI this can fail when no |
| CVE-2026-58085 | Analyzed | 未確認 | CWE-347 | After dispatching a decrypt operation to OCF and receiving the result, the wg(4) driver failed to check whether the MAC verification step succeeded. The driver thus silently accep |
| CVE-2026-58086 | Analyzed | 未確認 | CWE-273 | As an inadvertent side effect of an unrelated code change, PRIV_KTRACE was always denied to a jailed root user. Tracing configured by a jailed root user was therefore not flagged |
| CVE-2026-58087 | Analyzed | 未確認 | CWE-125, CWE-191, CWE-787 | The GETALL and SETALL commands in semctl(2) recorded the number of semaphores in the target set, dropped the lock protecting the set, allocated a buffer sized for that count, and r |
| CVE-2026-58088 | Analyzed | 未確認 | CWE-362, CWE-787 | The ELF core dump code counted the number of dumpable VM map entries, allocated a buffer for the corresponding program headers, then iterated over the map a second time to populate |
| CVE-2026-58089 | Analyzed | 未確認 | CWE-273 | When a process calls execve(2) to execute a setuid or setgid image, hwpmc(4) is supposed to detach PMCs owned by unprivileged processes. An inverted check meant that this scenario |
| CVE-2026-58090 | Analyzed | 未確認 | CWE-416 | The SOCK_STREAM receive path in the unix socket implementation failed to fully detach control messages from the socket buffer before processing them. Some error paths would free t |
| CVE-2026-58091 | Analyzed | 未確認 | CWE-416 | The implementation of this ioctl attempts to acquire locks on all channels in a sync group. If locking a channel would block, it releases the sync group list lock and sleeps. Upo |
| CVE-2026-58092 | Analyzed | 未確認 | CWE-288 | In FreeBSD 15.0, the kernel structure used to represent user credentials changed: previously the primary group ID was stored in the first element of the array containing the list o |
| CVE-2026-58093 | Analyzed | 未確認 | CWE-362, CWE-416 | The TIOCSCTTY ioctl handler drops the tty lock in order to acquire the process tree lock. After reacquiring the tty lock, the handler did not revalidate the state of the terminal, |
| CVE-2026-58094 | Analyzed | 未確認 | CWE-367 | The FIOSSHMLPGCNF ioctl(2) operation configures the page size for a largepage shared memory object. This is intended to be used immediately after creating the object, before any m |
| CVE-2026-58095 | Analyzed | 未確認 | CWE-122 | mp_Enddisc() used incorrect length calculations when formatting endpoint discriminator addresses for display, allowing a received endpoint option to overflow a global result buffer |
| CVE-2026-58096 | Analyzed | 未確認 | CWE-130, CWE-787 | LcpDecodeConfig() did not validate the length of received endpoint discriminator options against the minimum required by RFC 1717. Undersized options would trigger an out-of-bound |
| CVE-2026-58097 | Analyzed | 未確認 | CWE-122, CWE-130 | mp_SetEnddisc() copied a user-supplied PSN endpoint value without length validation, allowing a buffer overflow via the ppp(8) command interface. A local user with access to the p |
| CVE-2026-58106 | Deferred | 未確認 | CWE-787 | CVE-2025-40843 https://github.com/advisories/GHSA-5xf2-f6ch-6p8r was fixed by replacing unchecked strcpy() with a bounded safe_strcpy() helper. At ldlogger-tool-gcc.c:129 the dest |
| CVE-2026-58107 | Deferred | 未確認 | CWE-409, CWE-770 | CodeChecker's massStoreRun processing path performs one-shot decompression of attacker-controlled, Base64-encoded zlib data without enforcing a maximum decompressed size. An aut |
| CVE-2026-58108 | Deferred | 未確認 | CWE-284 | The personal access token removal query selects from PersonalAccessTokenDB but filters on columns of Session, with no join between them. SQLAlchemy resolves that as an implicit cro |
| CVE-2026-58115 | Awaiting Analysis | 未確認 | CWE-306 | A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4.1 running Industrial OS with Node-RED installed). Affected devices do no |
| CVE-2026-58139 | Deferred | 未確認 | CWE-863 | The DuckDB AWS extension for DuckDB contains a security policy bypass vulnerability that allows any database user with SQL execution permissions to extract plaintext AWS credential |
| CVE-2026-58224 | Modified | 未確認 | CWE-353 | A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets contain |
| CVE-2026-58230 | Analyzed | 未確認 | CWE-601 | SAP Approuter does not sufficiently validate certain token content under specific configurations. An unauthenticated attacker could send a specially crafted token to cause sensitiv |
| CVE-2026-58231 | Awaiting Analysis | 未確認 | CWE-94 | SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation |
| CVE-2026-58235 | Awaiting Analysis | 未確認 | SAP NetWeaver Application Server Java (Adobe Document Service) uses outdated open source cryptographic and data transfer libraries that contain known vulnerabilities addressed in l | |
| CVE-2026-58236 | Awaiting Analysis | 未確認 | CWE-78 | SAP NetWeaver Application Server ABAP and ABAP Platform allow an attacker with high privileges to bypass missing security controls on an internal code path leading to operating sys |
| CVE-2026-58237 | Analyzed | 未確認 | CWE-862 | WebSocket of SAP Approuter does not perform sufficient authorization checks in certain functionality. An attacker with low privileges could exploit this to access restricted functi |
| CVE-2026-58238 | Analyzed | 未確認 | CWE-770 | SAP Approuter does not sufficiently handle certain requests under specific conditions. An unauthenticated attacker could send specially crafted input that causes the component to c |
| CVE-2026-58239 | Analyzed | 未確認 | CWE-807 | SAP Approuter does not sufficiently validate tenant context in inbound requests. An unauthenticated attacker could send specially crafted requests to spoof the tenant context under |
| CVE-2026-58241 | Awaiting Analysis | 未確認 | CWE-862 | SAP NetWeaver and ABAP Platform (Change and Transport System - Customer Transport Integration Wizard) allows a low-privileged user to modify configuration tables that control acces |
| CVE-2026-58243 | Awaiting Analysis | 未確認 | CWE-862 | SAP ABAP Development Tools does not perform necessary authorization checks for certain functionality, allowing an attacker with low privileges to execute unauthorized database oper |
| CVE-2026-58244 | Awaiting Analysis | 未確認 | CWE-862 | SAP Manufacturing Integration and Intelligence (MII) does not perform necessary authorization check on certain application function, allowing a low-privileged authenticated attacke |
| CVE-2026-58245 | Awaiting Analysis | 未確認 | CWE-798 | SAP Advanced Planning and Optimization (Model Mix Planning) contains a hardcoded credential within the source code of the application to perform authorization check to access certa |
| CVE-2026-58247 | Awaiting Analysis | 未確認 | CWE-908 | SAP ABAP Platform allows an unauthenticated user to send a specially crafted request to an internal component. This could disclose limited, non-sensitive data from previously used |
| CVE-2026-58248 | Awaiting Analysis | 未確認 | CWE-611 | SAP BusinessObjects Business Intelligence Platform (Web Intelligence) allows a low-privileged attacker to upload a specially crafted spreadsheet file containing malicious external |
| CVE-2026-58262 | Deferred | 未確認 | CWE-345, CWE-347 | Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, header signature verification counts the unused padding bits of the PubKeysBitmap toward the |
| CVE-2026-58301 | Analyzed | 未確認 | CWE-918 | When Apache Shiro is used with the Jakarta EE integration module, a low-privileged user can craft an HTTP request that causes the server to initiate a connection to an attacker-con |
| CVE-2026-58314 | Deferred | 未確認 | CWE-918 | Two SSRF findings in Gitea 1.26.2 |
| CVE-2026-58416 | Deferred | 未確認 | CWE-280, CWE-863 | Fork-PR Actions task can read a third private repository via the collaborative-owner branch (missing fork-PR guard) |
| CVE-2026-58417 | Deferred | 未確認 | CWE-284 | REST API exposes organization membership of private organizations to public |
| CVE-2026-58420 | Deferred | 未確認 | CWE-284 | Local File Inclusion via file:// URI in Migration Restore |
| CVE-2026-58425 | Deferred | 未確認 | CWE-200, CWE-863 | OAuth token introspection returns metadata of tokens issued to other clients (RFC 7662 section 4 violation) |
| CVE-2026-58427 | Deferred | 未確認 | CWE-200, CWE-863 | Private org member list leaked via /members API endpoint — incomplete fix for PR #38145 |
| CVE-2026-58428 | Deferred | 未確認 | CWE-424, CWE-434 | Release attachment extension allowlist bypass via web release edit form (variant of CVE-2025-68939) |
| CVE-2026-58429 | Deferred | 未確認 | CWE-1259, CWE-284 | Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints |
| CVE-2026-58431 | Deferred | 未確認 | CWE-863 | Public-only API token restriction is not enforced on team API routes |
| CVE-2026-58432 | Deferred | 未確認 | CWE-200, CWE-639, CWE-732, CWE-862 | Missing Authorization and Authorization Bypass Through User-Controlled Key and Incorrect Permission Assignment for Critical Resource and Exposure of Sensitive Information to an Una |
| CVE-2026-58433 | Deferred | 未確認 | CWE-862 | Team-repository linking endpoint bypasses the RepoAdminChangeTeamAccess organization setting |
| CVE-2026-58434 | Deferred | 未確認 | CWE-200, CWE-862 | Private Repository Metadata Remains Accessible After Access Revocation |
| CVE-2026-58435 | Deferred | 未確認 | CWE-266, CWE-639 | Gitea LFS Deploy-Key Privilege Escalation |
| CVE-2026-58436 | Deferred | 未確認 | CWE-1333, CWE-407 | ParseAcceptLanguage quadratic-time DoS via Locale middleware on unauthenticated requests |
| CVE-2026-58437 | Deferred | 未確認 | CWE-284 | Repository Visibility Manipulation via Git Push Options |
| CVE-2026-58438 | Deferred | 未確認 | CWE-862 | Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access |
| CVE-2026-58439 | Deferred | 未確認 | CWE-284 | Branch Protection Bypass via PR Retargeting Preserves Stale `official` Approval Flag |
| CVE-2026-58440 | Deferred | 未確認 | CWE-284 | Webhooks created by a collaborator keep firing after their repo access is revoked → ongoing real-time exfiltration of private repo content (incomplete revocation cleanup in `Delete |
| CVE-2026-58441 | Deferred | 未確認 | CWE-918 | SSRF in restore-repo via unsanitized pull_request.yml Head.CloneURL |
| CVE-2026-58442 | Deferred | 未確認 | CWE-200, CWE-918 | Repository migration SSRF via multi-answer DNS allow-list bypass |
| CVE-2026-58443 | Deferred | 未確認 | CWE-863 | Public-only repository tokens can update private PR head branches |
| CVE-2026-58444 | Deferred | 未確認 | CWE-863 | Personal access token scope enforcement bypass on the repository home page (`GET /{owner}/{repo}`) discloses private repository contents |
| CVE-2026-58445 | Deferred | 未確認 | CWE-203, CWE-639 | Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API |
| CVE-2026-58474 | Deferred | 未確認 | CWE-94 | whichllm before 0.5.16 contains a code injection vulnerability in the run and snippet commands that allows a remote attacker who controls a HuggingFace repository to achieve arbitr |
| CVE-2026-58507 | Deferred | 未確認 | CWE-284 | Private Repository Existence Disclosure via go-get Meta Endpoint |
| CVE-2026-58508 | Deferred | 未確認 | CWE-284 | Two SSRF vulnerabilities in Gitea migration/mirror (DNS rebinding + missing re-validation) |
| CVE-2026-58510 | Deferred | 未確認 | CWE-200, CWE-281, CWE-359 | GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public->private |
| CVE-2026-58511 | Deferred | 未確認 | CWE-200 | Webhook Authorization Header Returned in Plaintext via API |
| CVE-2026-5855 | Deferred | 未確認 | CWE-125 | Contiki-NG's LwM2M TLV parser lwm2m_tlv_read() in os/services/lwm2m/lwm2m-tlv.c ignores its caller-supplied buffer length argument and reads up to six bytes from the input buffer w |
| CVE-2026-5856 | Deferred | 未確認 | CWE-125 | Contiki-NG's DNS/mDNS resolver skip_name() in os/services/resolv/resolv.c walks DNS wire-format name labels with no packet-boundary check, and the caller in newdata() invokes it in |
| CVE-2026-58560 | Deferred | 未確認 | CWE-476 | Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-58561 | Deferred | 未確認 | CWE-476 | Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-58562 | Analyzed | 未確認 | CWE-862 | Dell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulner |
| CVE-2026-58564 | Analyzed | 未確認 | CWE-276 | Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit th |
| CVE-2026-58565 | Analyzed | 未確認 | CWE-862 | Dell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulner |
| CVE-2026-5857 | Deferred | 未確認 | CWE-787 | Contiki-NG's MQTT client parse_publish_vhdr() in os/net/app-layer/mqtt/mqtt.c sets topic_len_received=1 before checking topic_len against the 64-byte limit, so an over-length topic |
| CVE-2026-58574 | Analyzed | 未確認 | CWE-306 | Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface could |
| CVE-2026-58612 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-58616 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Copilot Chat (Microsoft Edge) allows an authorized attacker to disclose information o |
| CVE-2026-58639 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
| CVE-2026-58641 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally. |
| CVE-2026-58650 | Analyzed | 未確認 | CWE-639 | Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. |
| CVE-2026-58651 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2026-59085 | Analyzed | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in Apache CloudStack's webhook module, exploitable via webhook delivery requests. This issue affects Apache CloudStack: from 4.20. |
| CVE-2026-59086 | Awaiting Analysis | 未確認 | CWE-121 | A vulnerability has been identified in Simcenter Femap (All versions < V2606), Simcenter Nastran (All versions < V2606). The affected applications contain a stack overflow vulnerab |
| CVE-2026-59087 | Analyzed | 未確認 | CWE-787 | A flaw was found in the GIMP image manipulation program, specifically within its Seattle Filmworks file loader. A remote attacker could exploit this vulnerability by tricking a use |
| CVE-2026-59088 | Analyzed | 未確認 | CWE-190 | A flaw was found in GIMP. A signed integer overflow vulnerability exists in the `file-fli` plugin when processing FLI image files. This occurs due to an incorrect calculation durin |
| CVE-2026-59090 | Modified | 未確認 | CWE-191 | A flaw was found in GIMP's PSD file format plugin. This vulnerability, an unsigned integer underflow in the `block_rem` variable, occurs when a user opens a specially crafted `.psd |
| CVE-2026-59091 | Analyzed | 未確認 | CWE-787 | A flaw was found in GIMP's file format plugins, including those for PSD and PAA files. A remote attacker could exploit these vulnerabilities by tricking a user into opening a speci |
| CVE-2026-59109 | Deferred | 未確認 | CWE-20, CWE-89 | SQL injection in the Zalktis accounting application via trading-partner-controlled text fields in received electronic invoices. When importing a received e-invoice (UBL/PEPPOL) or |
| CVE-2026-59111 | Deferred | 未確認 | CWE-78 | Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Digitální a informační agentura (DIA) eObčanka-Identifikace on MacOS ena |
| CVE-2026-59112 | Deferred | 未確認 | CWE-347, CWE-754 | Improper verification of cryptographic signature and Improper Check for Unusual or Exceptional Conditions vulnerability in Estonian Information System Authority (RIA) libdigidocpp, |
| CVE-2026-59113 | Analyzed | 未確認 | CWE-862 | Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network. |
| CVE-2026-59115 | Analyzed | 未確認 | CWE-35 | '.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-59118 | Modified | 未確認 | CWE-285 | Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-59119 | Analyzed | 未確認 | CWE-276 | Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally. |
| CVE-2026-59122 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally |
| CVE-2026-59124 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker to execute code over a network. |
| CVE-2026-59125 | Analyzed | 未確認 | CWE-416 | Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-59126 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Event Logging Service allows an authorized attacker to elevate privileges loc |
| CVE-2026-59127 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-59128 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally. |
| CVE-2026-59130 | Modified | 未確認 | CWE-1303, CWE-200 | No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally. |
| CVE-2026-59131 | Modified | 未確認 | CWE-1303 | No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally. |
| CVE-2026-59132 | Analyzed | 未確認 | CWE-476 | Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network. |
| CVE-2026-59133 | Analyzed | 未確認 | CWE-250 | Execution with unnecessary privileges in Microsoft High Performance Computing (HPC) Pack allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-59134 | Analyzed | 未確認 | CWE-122, CWE-20 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-59135 | Analyzed | 未確認 | CWE-1390 | Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. |
| CVE-2026-59136 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally. |
| CVE-2026-59137 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally. |
| CVE-2026-59138 | Analyzed | 未確認 | CWE-476 | Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network. |
| CVE-2026-5917 | Deferred | 未確認 | CWE-78 | libgit2 versions before 1.8.7 and 1.9.0 before 1.9.7 built with the libssh2 SSH backend (USE_SSH=libssh2) contain a shell command injection vulnerability that allows remote attacke |
| CVE-2026-59183 | Deferred | 未確認 | CWE-190 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.1.0 through 3.2.10, 3.3.0 through 3.3. |
| CVE-2026-59184 | Deferred | 未確認 | CWE-416, CWE-787 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions before 3.2.11, 3.3.0 through 3.3.12, and 3. |
| CVE-2026-59186 | Deferred | 未確認 | CWE-122, CWE-190, CWE-787 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions before 3.2.11, 3.3.0 through 3.3.12, and |
| CVE-2026-59187 | Deferred | 未確認 | CWE-122, CWE-787 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions 3.3.0 through 3.3.12 and 3.4.0 thro |
| CVE-2026-59189 | Deferred | 未確認 | CWE-125 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In OpenEXRUtil versions 3.3.0 through 3.3.12 and 3.4 |
| CVE-2026-59230 | Analyzed | 未確認 | CWE-20 | Improper input validation vulnerability in Apache Camel. This issue affects Apache Camel: from 2.17.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The |
| CVE-2026-59233 | Deferred | 未確認 | CWE-639 | Missing Authorization in the permission management component in Roskus Prospero Flow CRM before 5.2.1 allows any authenticated user to grant any role, including their own, the comp |
| CVE-2026-59242 | Analyzed | 未確認 | CWE-502 | Apache Airflow's XCom `GET /api/v2/{...}/xcomEntries/{key}?deserialize=true` endpoint passed a string-literal payload through `BaseXCom.deserialize_value` without the `_check_forbi |
| CVE-2026-59244 | Modified | 未確認 | CWE-312 | Apache Airflow's secrets masker did not mask `var.json` Variable values whose value is a dict in the Rendered Templates UI — the dict value failed an `isinstance(str)` guard — so a |
| CVE-2026-59256 | Deferred | 未確認 | CWE-200 | WWBN AVideo through commit 9c39d8c8 contains an authorization bypass vulnerability where getToken() creates tokens without binding to user identity or purpose, and plugin/Gallery/v |
| CVE-2026-59270 | Analyzed | 未確認 | CWE-863 | Spring Security's embedded UnboundID LDAP server (UnboundIdContainer) unconditionally registers an administrative credential and binds its listener to all available network interfa |
| CVE-2026-59271 | Analyzed | 未確認 | CWE-209 | When the RabbitMQ management aliveness check fails, the configured admin password is embedded in cleartext in the thrown exception message. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4. |
| CVE-2026-59272 | Analyzed | 未確認 | CWE-297 | Any application shipping logs to RabbitMQ over TLS via the Log4j2 appender, relying on the documented default, is exposed to man-in-the-middle interception of every log event. Spri |
| CVE-2026-59274 | Analyzed | 未確認 | CWE-409 | The UnZipTransformer does not limit decompressed entry size or entry count when processing archives. Consequently, an attacker can send a zip archive that can exhaust JVM heap memo |
| CVE-2026-59275 | Analyzed | 未確認 | CWE-502 | A single hostile AMQP message can terminate the entire consumer JVM (System.exit(99)), not just the listener thread — full availability loss for every workload co-located in that p |
| CVE-2026-59276 | Analyzed | 未確認 | CWE-208 | Several components in Spring Security compare security-sensitive values using standard string equality (String.equals()) rather than a constant-time comparison. Because String.equa |
| CVE-2026-59277 | Analyzed | 未確認 | CWE-693 | Spring Security's InetAddressMatchers utility provides matchInternal() and matchExternal() builders for constructing an InetAddressMatcher that classifies a given IP address as bel |
| CVE-2026-59278 | Analyzed | 未確認 | CWE-918 | JsonKafkaHeaderMapper and DefaultKafkaHeaderMapper include java.net in their default trusted packages list. When these mappers are used — which is the default configuration for all |
| CVE-2026-59279 | Analyzed | 未確認 | CWE-770 | The MCP Streamable HTTP server transport (WebFlux and WebMvc variants) does not place any limit on the number of sessions it retains, and by default does not require clients to be |
| CVE-2026-59280 | Analyzed | 未確認 | CWE-22 | Applications using Spring Framework's FreeMarker integration may be vulnerable to a path traversal attack when a controller returns a view name derived from untrusted input and Fre |
| CVE-2026-59281 | Analyzed | 未確認 | CWE-79 | Spring MVC and WebFlux applications that obtain a data-binding Errors instance with HTML escaping enabled and then render field errors using the no-argument Errors.getFieldErrors() |
| CVE-2026-59282 | Analyzed | 未確認 | CWE-400 | Spring Framework applications that use Spring's data binding infrastructure to apply user-supplied property paths onto a target object may be vulnerable to a Denial of Service (DoS |
| CVE-2026-59283 | Analyzed | 未確認 | CWE-913 | Applications that evaluate Spring Expression Language (SpEL) expressions using SimpleEvaluationContext may be vulnerable to a safety guard bypass when the SpEL expression compiler |
| CVE-2026-59284 | Analyzed | 未確認 | CWE-915 | There is no allow list for property keys when Spring Cloud Commons writable /actuator/env is enabled. Spring Cloud Commons 5.0.0 - 5.0.2 Spring Cloud Commons 4.3.0 - 4.3.3 Spring C |
| CVE-2026-59285 | Modified | 未確認 | CWE-502 | Spring for GraphQL applications are vulnerable to Unsafe Deserialization when processing paginated GraphQL queries. Spring for GraphQL 2.0.0 - 2.0.4 |
| CVE-2026-59286 | Modified | 未確認 | CWE-494 | The GraphiQL page bundled with Spring for GraphQL loads JavaScript libraries from a public CDN, without Subresource Integrity checks. An attacker can inject malicious code in those |
| CVE-2026-59287 | Modified | 未確認 | CWE-770 | Spring for GraphQL is vulnerable to Denial of Service attacks when using the WebSocket client with keepAlive enabled. Spring for GraphQL 2.0.0 - 2.0.4 Spring for GraphQL 1.4.0 - 1. |
| CVE-2026-59288 | Modified | 未確認 | CWE-200 | The GraphiQL page bundled with Spring for GraphQL sends requests to the GraphQL endpoints of the application. An attacker can share a malicious URL so that the victim's browser mig |
| CVE-2026-59289 | Modified | 未確認 | CWE-770 | Spring for GraphQL's Spring Data pagination support resolves arguments of a scrollable query and forwards the client-supplied values to the underlying repository. An attacker can f |
| CVE-2026-59291 | Analyzed | 未確認 | CWE-918 | Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - |
| CVE-2026-59292 | Analyzed | 未確認 | CWE-732 | PropertiesPersistingMetadataStore, the default file-based ConcurrentMetadataStore, persists its state to ${java.io.tmpdir}/spring-integration/metadata-store.properties with world-r |
| CVE-2026-59293 | Analyzed | 未確認 | CWE-757 | Unless the application explicitly raises smbMinVersion, the jCIFS client will negotiate down to SMB1/CIFS, which lacks mandatory signing/encryption and is vulnerable to NTLM relay |
| CVE-2026-59294 | Analyzed | 未確認 | CWE-22 | ResourceCacheService.getCacheName() builds the on-disk filename by appending the URI fragment verbatim, without stripping path separators or .. sequences, and passes the result to |
| CVE-2026-59295 | Awaiting Analysis | 未確認 | It is possible for outbound HTTP requests using a Micrometer-instrumented client to cause a denial-of-service (DoS) condition due to an unbounded memory leak. Micrometer 1.17.0 Mic | |
| CVE-2026-59296 | Awaiting Analysis | 未確認 | CWE-74 | Using untrusted, non-normalized input as-is for metrics data (such as metric names, tag keys, or tag values) is a dangerous antipattern that general-purpose instrumentation should |
| CVE-2026-59297 | Analyzed | 未確認 | CWE-346 | Implementation of isSecure() call of ServerlessHttpServletRequest does not verify the actual scheme. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring |
| CVE-2026-59298 | Analyzed | 未確認 | CWE-20 | Potential for improper filtering of HTTP headers in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2 |
| CVE-2026-59299 | Analyzed | 未確認 | CWE-471 | Composition lookup can potentially poison base function in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2. |
| CVE-2026-59300 | Analyzed | 未確認 | CWE-532 | Potential for logging sensitive data in Spring Cloud Function AWS. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Sprin |
| CVE-2026-59301 | Analyzed | 未確認 | CWE-532 | Potential for logging sensitive data in Spring Cloud Function Azure. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 |
| CVE-2026-59302 | Analyzed | 未確認 | CWE-532 | Potential for logging sensitive data in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6 |
| CVE-2026-59303 | Analyzed | 未確認 | CWE-770 | Dynamic destination cache size is not properly bound in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6 |
| CVE-2026-59304 | Analyzed | 未確認 | CWE-843 | Improper caching of the original content type in Spring Cloud Stream Avro. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6 |
| CVE-2026-59305 | Analyzed | 未確認 | CWE-696 | Partition interceptor may be improperly added while sending message. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6 |
| CVE-2026-59306 | Analyzed | 未確認 | CWE-502 | Potential for deserialization of untrusted types in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6 |
| CVE-2026-59307 | Analyzed | 未確認 | CWE-502 | An operator who calls JdbcMessageStore.addAllowedPatterns(...) to restrict deserialization receives no protection at all when the store is a Spring-managed bean. Spring Integration |
| CVE-2026-59308 | Analyzed | 未確認 | CWE-668 | In Spring AI's Semantic Cache support, the context hash used to isolate cached responses between different system prompts could allow cached responses to be shared across unrelated |
| CVE-2026-59311 | Analyzed | 未確認 | CWE-59 | A local unprivileged user on the same host can redirect all Zip/UnZip transformer output into a directory of their choosing by pre-creating /tmp/ziptransformer as a symlink before |
| CVE-2026-59313 | Analyzed | 未確認 | CWE-93 | Spring MVC applications using the functional web framework are vulnerable to stream corruption when using Server-Sent Events (SSE). Spring Framework 7.0.0 - 7.0.8 Spring Framework |
| CVE-2026-59314 | Modified | 未確認 | CWE-113 | Applications that build a Content-Disposition header value from untrusted input may be vulnerable to HTTP response splitting when the input is a malicious file name. Spring Framewo |
| CVE-2026-59315 | Analyzed | 未確認 | CWE-400 | The Spring Cloud Config Monitor is susceptible to Denial of Service attacks via malicious payloads. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud |
| CVE-2026-59316 | Analyzed | 未確認 | CWE-79 | Spring Authorization Server's default consent page renders user-controlled values without HTML entity encoding. When using the DefaultConsentPage, an attacker can craft an OAuth2 a |
| CVE-2026-59317 | Analyzed | 未確認 | CWE-1284 | DeadLetterPublishingRecovererFactory reads the retry_topic-original-timestamp header from an inbound ConsumerRecord and passes its raw bytes directly to new BigInteger(header.value |
| CVE-2026-59318 | Analyzed | 未確認 | CWE-863 | In Spring AI's tool calling support, the per-request tool list is advertised to the model as a boundary but is not fully enforced when a tool call is dispatched. Under certain cond |
| CVE-2026-59319 | Analyzed | 未確認 | CWE-943 | RedisChatMemoryRepository.findByMetadata() builds RediSearch tag and text queries from caller-supplied metadata values without applying RediSearchUtil.escape(), unlike get(), clear |
| CVE-2026-59320 | Analyzed | 未確認 | CWE-772 | When a container-level ErrorHandler is configured (the mitigation for finding 221000), each delivery whose processing throws still permanently consumes one link credit. After initi |
| CVE-2026-59321 | Analyzed | 未確認 | CWE-362 | A single ScriptEngine instance is reused for every message on a script-backed channel. For JSR-223 engines that report THREADING=null (not thread-safe, e.g. the Kotlin kts engine), |
| CVE-2026-59322 | Analyzed | 未確認 | CWE-20 | The EmbeddedHeadersJsonMessageMapper defaults to an overly permissive header parsing posture in its constructor. When decodeNativeFormat processes raw byte payloads, it deserialize |
| CVE-2026-59323 | Awaiting Analysis | 未確認 | CWE-770 | An application using Micrometer Tracing with W3C baggage propagation in the Brave bridge is vulnerable to denial of service (DoS) due to unbounded object allocation when extracting |
| CVE-2026-59324 | Analyzed | 未確認 | CWE-362 | When an IntegrationFlow uses .fluxTransform() with an asynchronous/reordering fluxFunction that emits raw payloads, concurrent requests on the same FluxMessageChannel subscription |
| CVE-2026-59335 | Awaiting Analysis | 未確認 | CWE-178 | Improper handling of case sensitivity (CWE-178) in the identity zone authorization check in the Identity Zone Endpoint in Cloud Foundry UAA allows a remote authenticated attacker h |
| CVE-2026-5934 | Deferred | 未確認 | CWE-79 | The WP Rocket plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.21.0.1. This is due to insufficient input sanitization and outpu |
| CVE-2026-59354 | Analyzed | 未確認 | CWE-20 | In versions of Spring Security's OAuth2 Authorization Server module 7.0.0 through 7.0.4, when Dynamic Client Registration is explicitly enabled, the registration endpoint performs |
| CVE-2026-59355 | Analyzed | 未確認 | CWE-601 | In versions of Spring Authorization Server 1.5.0 through 1.5.7, the authorization endpoint performs insufficient validation of the request_uri parameter. An attacker can craft a re |
| CVE-2026-59499 | Deferred | 未確認 | CWE-200 | : Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions).. This issue affects Po |
| CVE-2026-59500 | Deferred | 未確認 | CWE-287 | : Improper Authentication vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator addon to Priority ERP |
| CVE-2026-59501 | Deferred | 未確認 | CWE-284 | : Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator addon to Priority ERP |
| CVE-2026-59502 | Deferred | 未確認 | CWE-203 | : Observable Discrepancy vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator addon to Priority ERP |
| CVE-2026-59503 | Deferred | 未確認 | CWE-200 | : Exposure of Sensitive Information to an Unauthorized Actor : Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Priority Portal Generator addon to |
| CVE-2026-59504 | Deferred | 未確認 | CWE-602 | : Client-Side Enforcement of Server-Side Security vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generat |
| CVE-2026-59505 | Deferred | 未確認 | CWE-284 | : Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator addon to Priority ERP |
| CVE-2026-59506 | Deferred | 未確認 | CWE-306 | : Missing Authentication for Critical Function vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator |
| CVE-2026-59507 | Deferred | 未確認 | CWE-798 | : Use of Hard-coded Credentials : Exposure of Sensitive Information to an Unauthorized Actor : Improper Access Control vulnerability in Priority Portal Generator addon to Priority |
| CVE-2026-5953 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ceviz Informatics Inc. Web Design allows Reflected XSS. This issue affects We |
| CVE-2026-5956 | Deferred | 未確認 | CWE-89 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Ankara Hosting Site Management Panel allows SQL Injection. This issue affects |
| CVE-2026-59561 | Deferred | 未確認 | CWE-78 | Sakura Editor provided by Sakura Editor Development Community contains an OS command injection vulnerability. If a victim user is directed to edit a file in a crafted directory, ar |
| CVE-2026-59564 | Awaiting Analysis | 未確認 | CWE-304 | An authentication bypass issue exists in communications between affected versions of the Zscaler Client Connector and the Zscaler Client Connector Portal. |
| CVE-2026-59565 | Awaiting Analysis | 未確認 | CWE-229 | A remotely exploitable buffer overflow bug can cause a local and kernel denial-of-service attack on affected versions of Zscaler Client Connector on Windows. |
| CVE-2026-59566 | Awaiting Analysis | 未確認 | CWE-229 | A locally exploitable buffer overflow bug can cause a local denial-of-service attack on affected versions of Zscaler Client Connector on Android and ChromeOS. |
| CVE-2026-59567 | Awaiting Analysis | 未確認 | CWE-280 | Multiple vulnerabilities on affected versions of Zscaler Client Connector allow local privilege escalation, giving an unprivileged user the ability to execute arbitrary code in a p |
| CVE-2026-59568 | Awaiting Analysis | 未確認 | CWE-20 | Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthenticated, unprivileged user the ability to execute arbitrary |
| CVE-2026-59638 | Analyzed | 未確認 | CWE-297 | In Bouncy Castle for Java before 1.85, JSSE hostname verifier CN-fallback enabled by default despite documented opt-in. This issue also affects Bouncy Castle for Java LTS before 2. |
| CVE-2026-59639 | Analyzed | 未確認 | CWE-347 | In Bouncy Castle for Java before 1.85, CMS verifySignatures returns true for SignedData with zero signers. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bo |
| CVE-2026-59640 | Analyzed | 未確認 | CWE-203 | In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle active on symmetric/session-key paths. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and |
| CVE-2026-59641 | Analyzed | 未確認 | CWE-345 | In Bouncy Castle for Java before 1.85, S/MIME validator trusts signer-asserted signingTime for path validation. This issue also affects Bouncy Castle for Java LTS before 2.73.12, a |
| CVE-2026-59642 | Analyzed | 未確認 | CWE-354 | In Bouncy Castle for Java before 1.85, CMS AuthenticatedData content not bound to MAC when authAttrs present. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and |
| CVE-2026-59643 | Analyzed | 未確認 | CWE-347 | In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affects Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 2.0. |
| CVE-2026-59644 | Analyzed | 未確認 | CWE-834 | In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender. |
| CVE-2026-59645 | Analyzed | 未確認 | CWE-674 | In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. This issue also affects Bouncy Castle for Java LTS before 2.7 |
| CVE-2026-59646 | Analyzed | 未確認 | CWE-789 | In Bouncy Castle for Java before 1.85, DTLS handshake reassembler allocates buffer from unchecked 24-bit length. This issue also affects Bouncy Castle for Java LTS before 2.73.12, |
| CVE-2026-59647 | Analyzed | 未確認 | CWE-770 | In Bouncy Castle for Java before 1.85, CRMF/CMP password-MAC honours unbounded iteration count. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle |
| CVE-2026-59648 | Analyzed | 未確認 | CWE-770 | In Bouncy Castle for Java before 1.85, OpenPGP Argon2 S2K honours attacker-chosen memory and passes. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy C |
| CVE-2026-59649 | Analyzed | 未確認 | CWE-789 | In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory. This issue also affects Bouncy Castle for Java LTS before 2.73.12, an |
| CVE-2026-59650 | Analyzed | 未確認 | CWE-20 | In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73.12. |
| CVE-2026-59651 | Analyzed | 未確認 | CWE-326 | In Bouncy Castle for Java before 1.85, BKS keystore accepts legacy version with 16-bit integrity MAC key. This issue also affects Bouncy Castle for Java LTS before 2.73.12. |
| CVE-2026-59652 | Analyzed | 未確認 | CWE-90 | In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper. |
| CVE-2026-59654 | Analyzed | 未確認 | CWE-772 | Missing Release of Resource after Effective Lifetime vulnerability in Apache CloudStack's scoped global configuration functionality. It affects different modules and plugins of the |
| CVE-2026-59655 | Analyzed | 未確認 | CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's OAuth authentication plugin while listing OAuth providers. This issue affects Apach |
| CVE-2026-59657 | Analyzed | 未確認 | CWE-312 | Cleartext Storage of Sensitive Information vulnerability in Apache CloudStack with AsyncJob storage in the database. This issue affects Apache CloudStack: from 4.0.0 through 4.20. |
| CVE-2026-59675 | Awaiting Analysis | 未確認 | CWE-770 | When API audit logging is enabled, the middleware reads the entire HTTP request body into memory without enforcing a size limit on login endpoints. Because the audit middleware is |
| CVE-2026-59682 | Awaiting Analysis | 未確認 | CWE-73 | Arbitrary file overwrite via SAVE_PROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3. |
| CVE-2026-59683 | Awaiting Analysis | 未確認 | CWE-73 | The OpenRGB network protocol allows to write attacker controlled strings into arbitrary file system paths (extension of CVE-2026-59682). This allows either a full system compromise |
| CVE-2026-59693 | Awaiting Analysis | 未確認 | CWE-754 | A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.233.16-7862), Desigo PXC3 (All versions < V01.21.233.16-7862), Desigo PXC4 (All versions < V02.21.194.36-2 |
| CVE-2026-59700 | Awaiting Analysis | 未確認 | CWE-125 | A vulnerability has been identified in Simcenter Femap (All versions < V2606.0001). The affected applications contains an out of bounds read vulnerability while parsing specially c |
| CVE-2026-59701 | Awaiting Analysis | 未確認 | CWE-125 | A vulnerability has been identified in Simcenter Femap (All versions < V2606.0001). The affected applications contains an out of bounds read vulnerability while parsing specially c |
| CVE-2026-59714 | Deferred | 未確認 | CWE-862 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.5 before 0.10.0, any authenticated user can overwrite the content of a message in a c |
| CVE-2026-59717 | Deferred | 未確認 | CWE-601, CWE-939 | Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.6.1, the Android Companion app is vulnerable to an open redirect. The app |
| CVE-2026-59763 | Deferred | 未確認 | CWE-284 | Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads |
| CVE-2026-59765 | Deferred | 未確認 | CWE-918 | SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud Metadata |
| CVE-2026-59769 | Deferred | 未確認 | CWE-798 | FA-50 all versions contain hard-coded credentials. An attacker, who knows the credentials and has access to the vessel's internal network, can operate the settings screen using th |
| CVE-2026-59780 | Analyzed | 未確認 | CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's LDAP authentication plugin while listing LDAP providers. LDAP configurati |
| CVE-2026-59781 | Analyzed | 未確認 | CWE-427 | When Zabbix Agent was installed on Windows into a custom installation directory, the installer did not verify whether the selected directory had secure access permissions. If the t |
| CVE-2026-59799 | Analyzed | 未確認 | CWE-269 | Improper Privilege Management vulnerability in Apache CloudStack's Two-factor authentication plugin allowing bypass of the two-factor authentication disable flow. This issue affec |
| CVE-2026-59808 | Deferred | 未確認 | CWE-306 | AVideo through commit 9c39d8c8 contains an authentication bypass vulnerability where deduplicateByEncoderQueueId() returns video_id_hash credentials for any video by encoder_queue_ |
| CVE-2026-59809 | Deferred | 未確認 | CWE-201 | SiYuan before v3.8.0 interpolates secret placeholders into the destination URL parameter of the http_request MCP tool, allowing attackers to exfiltrate stored secrets. An MCP clien |
| CVE-2026-59825 | Deferred | 未確認 | CWE-295 | Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.4.19 and from 4.5.0 until 4.5.12, Mastodon's app/models/concerns/user/ldap_authenticable.rb m |
| CVE-2026-59829 | Deferred | 未確認 | CWE-862 | Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.1, on sites with category group moderation enabled, the review queue could includ |
| CVE-2026-59893 | Deferred | 未確認 | CWE-1333 | sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, SQL_REGEX in sqlparse/keywords.py and the per-position loop in sqlparse/lexer.py repeatedly scan unmatche |
| CVE-2026-59894 | Deferred | 未確認 | CWE-94 | sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, sqlparse/filters/output.py fails to escape existing backslashes before quotes in sqlparse.format output_f |
| CVE-2026-59902 | Analyzed | 未確認 | CWE-400 | Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, io.netty.handler.codec.sctp.SctpMessageCompletionHandler limits incom |
| CVE-2026-59903 | Analyzed | 未確認 | CWE-524 | Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, io.netty.handler.codec.http.cors.CorsHandler setVaryHeader replaces a |
| CVE-2026-59909 | Analyzed | 未確認 | CWE-35 | Dell ObjectScale, versions prior to 4.3.0.1, contain(s) a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, le |
| CVE-2026-59910 | Analyzed | 未確認 | CWE-78 | Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privilege |
| CVE-2026-59911 | Analyzed | 未確認 | CWE-532 | Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Insertion of Sensitive Information into Log File vulnerability in the svc_tools. A low privileged attacker with local acc |
| CVE-2026-59912 | Analyzed | 未確認 | CWE-284 | Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.1005, contain an Improper Access Control vulnerability. A low privileged attacker with local access could po |
| CVE-2026-59913 | Analyzed | 未確認 | CWE-306 | Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.1005, contain a Missing Authentication for Critical Function vulnerability. A low privileged attacker with l |
| CVE-2026-59914 | Analyzed | 未確認 | CWE-284, CWE-290 | Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with local acc |
| CVE-2026-59915 | Awaiting Analysis | 未確認 | CWE-272 | Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with local access could potentially |
| CVE-2026-59916 | Analyzed | 未確認 | CWE-290 | Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vulnerability. A low privileged attacker with local access could pot |
| CVE-2026-59917 | Analyzed | 未確認 | CWE-284 | Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vulnerability. A low privileged attacker with local access could pot |
| CVE-2026-59940 | Deferred | 未確認 | CWE-502, CWE-843 | Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. Prior to 1.5.3, seroval.fromJSON() allows attacker-controlled JSON Pr |
| CVE-2026-59949 | Deferred | 未確認 | CWE-476 | yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.1, JNI-backed XXHash implementations fail to validate the byte array object and the off and len arguments in XXHash |
| CVE-2026-59981 | Deferred | 未確認 | CWE-125 | OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion picture industry. In versions through 3.2.10, 3.3.0 through 3.3.1 |
| CVE-2026-59982 | Deferred | 未確認 | CWE-190, CWE-787 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11, 3.3.0 through 3.3.12 |
| CVE-2026-59983 | Deferred | 未確認 | CWE-125 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11, 3.3.0 through 3.3.12 |
| CVE-2026-59984 | Deferred | 未確認 | CWE-787 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions 3.1.0 through 3.2.10, 3.3.0 through |
| CVE-2026-59985 | Deferred | 未確認 | CWE-125 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions 3.2.0 through 3.2.10, 3.3.0 through |
| CVE-2026-59989 | Deferred | 未確認 | CWE-1336, CWE-94 | Phalcon is a high-performance, full-stack PHP framework. In 5.15.0 and earlier, resolveFilter in phalcon/Mvc/View/Engine/Volt/Compiler.zep builds the join filter by inserting the r |
| CVE-2026-59992 | Deferred | 未確認 | CWE-639, CWE-862 | Tina is a headless content management system. Prior to next-tinacms-s3 23.0.4, next-tinacms-dos 23.0.4, next-tinacms-azure 14.0.4, and next-tinacms-cloudinary 26.0.4, the first-par |
| CVE-2026-60004 | Analyzed | 掲載 | CWE-94 | Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation. |
| CVE-2026-60007 | Analyzed | 未確認 | CWE-204 | In Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing returns distinguishable errors for invalid RSA PKCS#1 v1.5 padding and other authentication failures, allowi |
| CVE-2026-60009 | Analyzed | 未確認 | CWE-22, CWE-306, CWE-352, CWE-73 | In Eclipse Theia versions up to and including 1.73.1, the `@theia/filesystem` backend binds `POST /file-upload` in every filesystem-enabled deployment. The handler takes an attacke |
| CVE-2026-60011 | Awaiting Analysis | 未確認 | CWE-425 | Sharp and Toshiba Tec MFPs (multifunction printers) fail to properly authorize requests to directly access certain image data stored to the affected product. |
| CVE-2026-60023 | Analyzed | 未確認 | CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.1. Deleted or pending answers could be re |
| CVE-2026-60053 | Analyzed | 未確認 | CWE-613 | Insufficient Session Expiration vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.1. Administrative API keys remained usable after the owning administ |
| CVE-2026-60083 | Deferred | 未確認 | CWE-863 | SiYuan versions before v3.8.0 contain an incomplete path blocklist in the MCP file tool that fails to restrict access to sensitive workspace files protected by the HTTP API. Authen |
| CVE-2026-60084 | Deferred | 未確認 | CWE-22 | SiYuan versions before v3.7.4 contain an arbitrary file deletion vulnerability in the /api/search/removeTemplate endpoint that accepts an unvalidated path parameter passed directly |
| CVE-2026-60093 | Analyzed | 未確認 | CWE-23 | Relative path traversal vulnerability in Apache Camel Azure-Storage Datalake component This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from |
| CVE-2026-60106 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-60107 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-6017 | Deferred | 未確認 | CWE-306 | Firmware in KAON PG5298A and PG5298B routers allow an unauthenticated user to query a specific endpoint and acquire sensitive information such as a password to the administrative p |
| CVE-2026-6020 | Deferred | 未確認 | CWE-470 | The ShopLentor plugin for WordPress is vulnerable to arbitrary function execution via the woolentoropt/v1/custom-action REST API endpoint in all versions up to, and including, 3.3. |
| CVE-2026-60391 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitab |
| CVE-2026-60392 | Analyzed | 未確認 | CWE-502 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export SDK). The supported version that is affected is 8.5.8. Eas |
| CVE-2026-60393 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management). The supported version that is affected is 11.2.25.0.0 |
| CVE-2026-60412 | Analyzed | 未確認 | CWE-502 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploi |
| CVE-2026-60413 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploi |
| CVE-2026-60414 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploi |
| CVE-2026-60415 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and |
| CVE-2026-60589 | Awaiting Analysis | 未確認 | CWE-200 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affecte |
| CVE-2026-60590 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS). Supported versions that are affected are 19.8-19.8.5, 19.9-19.9 |
| CVE-2026-60591 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS). Supported versions that are affected are 19.8-19.8.5, 19.9-19.9 |
| CVE-2026-60592 | Analyzed | 未確認 | CWE-284 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDB Operator). Supported versions that are affected are 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1 |
| CVE-2026-60672 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and |
| CVE-2026-60679 | Analyzed | 未確認 | CWE-287 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and |
| CVE-2026-60680 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and |
| CVE-2026-60682 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Repository). The supported version that is affected is 11.2.25.0.000. Easily explo |
| CVE-2026-60693 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult |
| CVE-2026-60696 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and |
| CVE-2026-60698 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and |
| CVE-2026-60699 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and |
| CVE-2026-60702 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and |
| CVE-2026-60707 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Security). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily |
| CVE-2026-60715 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. E |
| CVE-2026-60716 | Modified | 未確認 | CWE-306 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. E |
| CVE-2026-60720 | Modified | 未確認 | CWE-306 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. E |
| CVE-2026-60721 | Modified | 未確認 | CWE-306 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. E |
| CVE-2026-60722 | Modified | 未確認 | CWE-306 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. E |
| CVE-2026-60726 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-60727 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. E |
| CVE-2026-60728 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0 |
| CVE-2026-60729 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily |
| CVE-2026-60730 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily |
| CVE-2026-60731 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily |
| CVE-2026-60733 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Diffic |
| CVE-2026-60737 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-60742 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.61-8.63. Difficult |
| CVE-2026-60748 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exp |
| CVE-2026-60751 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerabil |
| CVE-2026-60752 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerabil |
| CVE-2026-60753 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Installation). Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerabi |
| CVE-2026-60754 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerabil |
| CVE-2026-60757 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Search). Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability all |
| CVE-2026-60758 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel Artificial Intelligence product of Oracle Siebel CRM (component: AI). Supported versions that are affected are 25.12-26.6. Easily exploitable vulnerabi |
| CVE-2026-60759 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Internet Procurement Connector product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12. |
| CVE-2026-60765 | Analyzed | 未確認 | CWE-306, CWE-346 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.6. Difficult to exploit vulnerab |
| CVE-2026-60766 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). Supported versions that are affected are 17.0-26.6. Difficult to exploit vulnerability |
| CVE-2026-60767 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerabil |
| CVE-2026-60769 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult |
| CVE-2026-60779 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerabil |
| CVE-2026-60781 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable |
| CVE-2026-60782 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable |
| CVE-2026-6079 | Deferred | 未確認 | CWE-862 | The Material Dashboard plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on the amd_ajax_target_task_manager() fun |
| CVE-2026-60791 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Application Interface). Supported versions that are affected are 17.0-26.6. Easily exploitable |
| CVE-2026-60792 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.6. Difficult to exploi |
| CVE-2026-60796 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability al |
| CVE-2026-60797 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). Supported versions that are affected are 17.0-26.6. Difficult to exploit vulnerability |
| CVE-2026-60798 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Migration). Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerabilit |
| CVE-2026-60803 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.6. Difficult to exploit vulnerab |
| CVE-2026-60808 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing). Supported versions that are affected are 17.0-26.6. Difficult to exploit vu |
| CVE-2026-60820 | Analyzed | 未確認 | CWE-1284 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). Supported versions that are affected are 17.0-26.6. Difficult to exploit vulnerability |
| CVE-2026-60821 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.61-8.63. Easily exp |
| CVE-2026-60822 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Manager for Systems Infrastructure product of Oracle Enterprise Manager (component: Agent). Supported versions that are affected are 13.5 an |
| CVE-2026-60830 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerab |
| CVE-2026-60831 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). Supported versions that are affected are 8.61-8.63. Difficult |
| CVE-2026-60841 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Diffi |
| CVE-2026-60849 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Diffi |
| CVE-2026-60850 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easil |
| CVE-2026-60853 | Modified | 未確認 | CWE-200 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.19. Difficult to exploit vu |
| CVE-2026-60856 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Install and Packaging). Supported versions that are affected are 8.61-8.63. Difficu |
| CVE-2026-60858 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploit |
| CVE-2026-60860 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 14.1.2.0.0 and 12.2.1. |
| CVE-2026-60861 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 14.1.2.0.0 and 12.2.1. |
| CVE-2026-60865 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 14.1.2.0.0 and 12.2.1. |
| CVE-2026-60866 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). The supported version that is affected is 14.1.2.0.0. Easily ex |
| CVE-2026-60873 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Data Mover). Supported versions that are affected are 8.61-8.63. Difficult to explo |
| CVE-2026-60879 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Configuration Manager). Supported versions that are affected are 8.61-8.63. Easily |
| CVE-2026-60883 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PeopleCode). Supported versions that are affected are 8.61-8.63. Easily exploitable |
| CVE-2026-60884 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor). Supported versions that are affected are 8.61-8.63. Difficult to |
| CVE-2026-60889 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easil |
| CVE-2026-60895 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Diffi |
| CVE-2026-60902 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Tuxedo). Supported versions that are affected are 8.61-8.63. Difficult to exploit v |
| CVE-2026-60903 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60905 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60906 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60909 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60914 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easil |
| CVE-2026-60915 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17 and 4.0.0-4.4.1. Diffic |
| CVE-2026-60916 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-60921 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-60928 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploi |
| CVE-2026-60933 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60934 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60935 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60944 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60946 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-60947 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-60949 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60954 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60955 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60956 | Analyzed | 未確認 | CWE-284 | Vulnerability in the JD Edwards EnterpriseOne US Payroll product of Oracle JD Edwards (component: Payroll). The supported version that is affected is 9.2. Difficult to exploit vu |
| CVE-2026-60958 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-60961 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60967 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: nVision). Supported versions that are affected are 8.61-8.63. Easily exploitable vu |
| CVE-2026-60969 | Modified | 未確認 | CWE-200, CWE-284 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easil |
| CVE-2026-60970 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-60971 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-60975 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). Supported versions that are affected are 8.61 and 8.62. Difficult to ex |
| CVE-2026-60976 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita |
| CVE-2026-60977 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 a |
| CVE-2026-60980 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-60981 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 14.1.2.0.0 and 12.2.1.4.0. |
| CVE-2026-60983 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 14.1.2.0.0 and 12.2.1.4.0. |
| CVE-2026-60990 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. |
| CVE-2026-60991 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. |
| CVE-2026-60992 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. |
| CVE-2026-60993 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. |
| CVE-2026-60994 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. |
| CVE-2026-60995 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. |
| CVE-2026-60996 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Connectors and Connector Server). Supported versions that are affected are 1 |
| CVE-2026-60998 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Microsoft Active Directory). Supported versions that are affected are 12.2.1 |
| CVE-2026-61001 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-61002 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: B2B Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily expl |
| CVE-2026-61003 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). Supported versions that are affected are 12.2.1.4.0 and 14. |
| CVE-2026-61007 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-61008 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-61011 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-61016 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-61017 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-61018 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-61021 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-61022 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-61029 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-61032 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-61033 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-61034 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-61038 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-61040 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-61042 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-61045 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-61054 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-61058 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-61066 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. E |
| CVE-2026-61118 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. E |
| CVE-2026-61124 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. E |
| CVE-2026-61139 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Public Sector Financials (International) product of Oracle E-Business Suite (component: Authorization). Supported versions that are affected are 12.2.3 |
| CVE-2026-61177 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. E |
| CVE-2026-61193 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. D |
| CVE-2026-61198 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easil |
| CVE-2026-61199 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). The supported version that is affected is 14.1.2.0.0. Easily exploita |
| CVE-2026-61206 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploit |
| CVE-2026-61208 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. E |
| CVE-2026-61212 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. D |
| CVE-2026-61213 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. E |
| CVE-2026-61215 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. E |
| CVE-2026-61219 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. E |
| CVE-2026-61222 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. E |
| CVE-2026-61227 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. E |
| CVE-2026-61228 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. E |
| CVE-2026-61229 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. D |
| CVE-2026-61230 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. E |
| CVE-2026-61231 | Modified | 未確認 | CWE-269 | Vulnerability in the Oracle Virtual Directory product of Oracle Fusion Middleware (component: Virtual Directory Server). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-61241 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1. |
| CVE-2026-61248 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1. |
| CVE-2026-61258 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1. |
| CVE-2026-61259 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploit |
| CVE-2026-61265 | Analyzed | 未確認 | CWE-284 | Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Supported versions that are affected are 9.2.0.0 |
| CVE-2026-61268 | Analyzed | 未確認 | CWE-284 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). Supported versions that are affected are 9.2.0.0-9.2.26.4. |
| CVE-2026-61270 | Analyzed | 未確認 | CWE-284 | Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Supported versions that are affected are 9.2.0.0 |
| CVE-2026-61272 | Analyzed | 未確認 | CWE-284 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.0.0-9.2.26.4. Easily ex |
| CVE-2026-61273 | Analyzed | 未確認 | CWE-284 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.4. Eas |
| CVE-2026-61276 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploit |
| CVE-2026-6128 | Deferred | 未確認 | CWE-79 | The All-in-One WP Migration Unlimited Extension plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ai1wm_backups_path' parameter in all versions up to, and |
| CVE-2026-61281 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploit |
| CVE-2026-61284 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Application Config Console). Supported versions that are affected are |
| CVE-2026-61286 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management). Supported versions that are affected are 13.5 and |
| CVE-2026-61288 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-61290 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-61291 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-61293 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to e |
| CVE-2026-61295 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-61296 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Linear Asset Management). Supported versions that are affected are 12.2.3-12 |
| CVE-2026-61298 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Manager Install). Supported versions that are affected are |
| CVE-2026-61300 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 13.5 and 2 |
| CVE-2026-61302 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Pod Admin). Supported versions that are affected are 8.2.0.0.0 and 26 |
| CVE-2026-61305 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0 |
| CVE-2026-61306 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Production). Supported versions that are affected are 12.2.3-12 |
| CVE-2026-61307 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Common Application Objects). The supported version that is affec |
| CVE-2026-61308 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affec |
| CVE-2026-61313 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploit |
| CVE-2026-61317 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.6. Easily explo |
| CVE-2026-61318 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.6. Easily explo |
| CVE-2026-61319 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle U.S. Federal Financials product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. E |
| CVE-2026-61321 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.6. Easily explo |
| CVE-2026-61326 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.6. Easily explo |
| CVE-2026-61330 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.6. Easily explo |
| CVE-2026-61331 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components). Supported versions that are affected are 12.2.3-12.2.15. E |
| CVE-2026-61332 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.6. Easily explo |
| CVE-2026-61339 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.6. Easily explo |
| CVE-2026-61340 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2 |
| CVE-2026-61341 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.6. Easily explo |
| CVE-2026-61342 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to e |
| CVE-2026-61345 | Analyzed | 未確認 | CWE-476 | Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network. |
| CVE-2026-61346 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-61347 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally. |
| CVE-2026-61348 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2026-61349 | Analyzed | 未確認 | CWE-362, CWE-416 | Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-61350 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack. |
| CVE-2026-61352 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-61353 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-61355 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-61356 | Analyzed | 未確認 | CWE-306 | Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. |
| CVE-2026-61357 | Analyzed | 未確認 | CWE-416 | Use after free in Application Information Services allows an authorized attacker to elevate privileges locally. |
| CVE-2026-61358 | Analyzed | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-61359 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. |
| CVE-2026-61360 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally. |
| CVE-2026-61361 | Analyzed | 未確認 | CWE-416 | Use after free in Windows DHCP Client allows an authorized attacker to execute code locally. |
| CVE-2026-61363 | Analyzed | 未確認 | CWE-122, CWE-20 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-61364 | Analyzed | 未確認 | CWE-306 | Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. |
| CVE-2026-61365 | Analyzed | 未確認 | CWE-306 | Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. |
| CVE-2026-61366 | Analyzed | 未確認 | CWE-415 | Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally. |
| CVE-2026-61367 | Analyzed | 未確認 | CWE-306 | Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. |
| CVE-2026-61368 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information locally. |
| CVE-2026-61372 | Analyzed | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Jena Fuseki. This issue affects Apache Jena Fuseki: through 6.1.0. Users ar |
| CVE-2026-61387 | Analyzed | 未確認 | CWE-400, CWE-460, CWE-772 | In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe: if item creation fails with an unchecked error, the server-global reservation i |
| CVE-2026-61397 | Analyzed | 未確認 | CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's OAuth2 authentication plugin and Google OAuth integration. This issue affects Apach |
| CVE-2026-61398 | Analyzed | 未確認 | CWE-116 | Improper Encoding or Escaping of Output vulnerability in Apache CloudStack's UI while using Instance Reset Password functionality. This issue affects Apache CloudStack: from 4.15. |
| CVE-2026-61399 | Analyzed | 未確認 | CWE-116 | Improper Encoding or Escaping of Output vulnerability in Apache CloudStack's UI while using Lock User Functionality. This issue affects Apache CloudStack: from 4.20.0.0 through 4. |
| CVE-2026-61400 | Analyzed | 未確認 | CWE-77 | Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache CloudStack's run and get diagnostics functionality for the system VMs an |
| CVE-2026-61407 | Awaiting Analysis | 未確認 | CWE-698 | Dell Watchdog Timer Driver versions prior to 2.0.0.1 contain an Exposed IOCTL with Insufficient Access Control vulnerability. A low privileged attacker with local access could pote |
| CVE-2026-61419 | Analyzed | 未確認 | CWE-284 | Dell ThinOS 10, versions prior to 2605_10.2518, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnera |
| CVE-2026-61422 | Analyzed | 未確認 | CWE-918 | Authenticated pre-validation SSRF vulnerability in Apache CloudStack's template and ISO registration functionality. When registering a template or ISO, CloudStack makes a live HTT |
| CVE-2026-61466 | Modified | 未確認 | CWE-304 | In Apache CXF's OAuth2 Dynamic Client Registration endpoint, the authorization server accepts and stores the `scope` value supplied in the client registration request verbatim, wit |
| CVE-2026-6147 | Deferred | 未確認 | CWE-434 | The LightSync Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the rest_replace_media() function in all versions up to, and i |
| CVE-2026-61477 | Awaiting Analysis | 未確認 | CWE-93 | An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV reco |
| CVE-2026-61483 | Modified | 未確認 | CWE-674 | ** UNSUPPORTED WHEN ASSIGNED ** Uncontrolled Recursion vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan |
| CVE-2026-61484 | Modified | 未確認 | CWE-502 | ** UNSUPPORTED WHEN ASSIGNED ** Deserialization of Untrusted Data vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we d |
| CVE-2026-61485 | Rejected | 未確認 | Rejected reason: this attack requires control over the search index, which is considered fully trusted by Lucy. | |
| CVE-2026-61486 | Modified | 未確認 | CWE-121 | ** UNSUPPORTED WHEN ASSIGNED ** Stack-based Buffer Overflow vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not |
| CVE-2026-61514 | Deferred | 未確認 | CWE-306 | Puwell IP Camera firmware versions 2.x through 4.x contains an authentication bypass vulnerability that allows unauthenticated attackers to access device functions by sending proto |
| CVE-2026-61515 | Deferred | 未確認 | CWE-912 | Puwell IP Camera firmware versions 2.x through 4.x contains an unauthenticated command injection vulnerability that allows remote attackers to execute arbitrary operating system co |
| CVE-2026-61518 | Awaiting Analysis | 未確認 | CWE-89 | ISPConfig contains an authenticated SQL injection vulnerability in the Remote API. The primary_id parameter passed to delete and update API methods is concatenated directly into SQ |
| CVE-2026-61523 | Deferred | 未確認 | CWE-94 | WebsiteBaker CMS before 2.13.10 contains a code injection vulnerability in the Droplets editor that allows authenticated administrators to inject arbitrary PHP code by submitting m |
| CVE-2026-61524 | Deferred | 未確認 | CWE-434 | WebsiteBaker CMS before 2.13.10 contains an unrestricted file upload vulnerability in the module installation feature that allows authenticated administrators to achieve remote cod |
| CVE-2026-61539 | Deferred | 未確認 | CWE-95 | Xinference is an inference API for running open-source, speech, and multimodal models. In 2.5.0 and earlier, Xinference passes attacker-influenced Llama3 tool-call output to eval() |
| CVE-2026-61555 | Deferred | 未確認 | CWE-125 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11, 3.3.0 through 3.3.12 |
| CVE-2026-61556 | Awaiting Analysis | 未確認 | CWE-835 | LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. From 10.26.0 until 10.27.1, the strip_html filter in src/filters/html.ts can enter an infinite l |
| CVE-2026-61574 | Deferred | 未確認 | CWE-639, CWE-863 | authentik is an open-source identity provider. Prior to 2026.2.6 and 2026.5.5, the Remote Access Control endpoint list returns every configured endpoint to any authenticated user r |
| CVE-2026-61607 | Deferred | 未確認 | CWE-79 | Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content. Prior to 1.0.2, the Grav API plugin POST /api/v1/media pipeline in HandlesM |
| CVE-2026-61617 | Deferred | 未確認 | CWE-400, CWE-770 | Wings is the server control plane for the Pterodactyl game-server management panel. In versions up to and including 1.13.2, the SFTP write path does not enforce a server's disk quo |
| CVE-2026-61625 | Deferred | 未確認 | CWE-22 | VictoriaMetrics is a scalable solution for monitoring and managing time series data. Prior to 1.122.25, 1.136.12, and 1.146.0, vmrestore does not validate backup part path componen |
| CVE-2026-61632 | Awaiting Analysis | 未確認 | CWE-22 | PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. In versions up to and including 10.21.3, the b64 extension is vulnerable to a path traversal tha |
| CVE-2026-61634 | Awaiting Analysis | 未確認 | CWE-20 | The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, the AMQP connection tuning path records the |
| CVE-2026-61638 | Deferred | 未確認 | CWE-918 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.6, POST /endpoints/notifications/testemailnotifications.php accepts smtpaddress and smtp |
| CVE-2026-61639 | Deferred | 未確認 | CWE-22 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.6, POST /endpoints/db/restore.php calls ZipArchive::extractTo() without validating entry |
| CVE-2026-61640 | Deferred | 未確認 | CWE-918 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.6, Admin-configured OIDC token_url and user_info_url in includes/oidc/handle_oidc_callba |
| CVE-2026-61641 | Deferred | 未確認 | CWE-287 | Wallos is an open-source, self-hostable personal subscription tracker. From version 4.0.0 to before version 4.9.6, Wallos's OIDC login links an incoming OIDC identity to an existin |
| CVE-2026-61663 | Awaiting Analysis | 未確認 | CWE-639, CWE-862 | django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. Prior to 5.0.9, render_object_structure fails to authorize non-PageConte |
| CVE-2026-61666 | Awaiting Analysis | 未確認 | CWE-248 | websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.2, WebSocket::Driver.server() passes a malformed Host header to URI.parse in lib/websocket/http/re |
| CVE-2026-61690 | Deferred | 未確認 | CWE-409 | Grav is a file-based Web platform. Prior to 2.0.1, Grav ZipArchiver::extract() in system/src/Grav/Common/Filesystem/ZipArchiver.php passes archives to ZipArchive::extractTo() witho |
| CVE-2026-61696 | Deferred | 未確認 | CWE-116, CWE-74, CWE-79 | Forem is open source software for building communities. In versions before commit 92eacd16a82cf9007ba8e16a2258b42e3b53ca9c, a malicious value submitted through feedback_message[mes |
| CVE-2026-61704 | Deferred | 未確認 | CWE-918 | Link Preview JS extracts web links information. Prior to 4.0.4, the resolveDNSHost mitigation in index.ts validates one resolved IP address but fetches the original hostname, allow |
| CVE-2026-61711 | Deferred | 未確認 | CWE-20 | BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, a custom frontend could place an invalid Sec |
| CVE-2026-61712 | Deferred | 未確認 | CWE-770 | BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, BuildKit read attacker-controlled /etc/passw |
| CVE-2026-6176 | Deferred | 未確認 | CWE-79 | The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the aggregated review form submission in versions up to and including 5.1 |
| CVE-2026-6178 | Deferred | 未確認 | CWE-79 | The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via the theme's 'icon_box_2' shortcode in all versions up to, and including, 28.4 due to insufficient i |
| CVE-2026-61783 | Analyzed | 未確認 | CWE-200, CWE-863 | Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.14.0 through 4.14.6, an authenticated low-privi |
| CVE-2026-61790 | Deferred | 未確認 | CWE-284 | Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a team can require its members to configure two-factor au |
| CVE-2026-61792 | Deferred | 未確認 | CWE-22, CWE-59, CWE-693 | Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a project administrator can read files outside their repo |
| CVE-2026-61800 | Analyzed | 未確認 | CWE-22 | Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.4.0 through 4.14.6, a party holding the cluster |
| CVE-2026-61802 | Analyzed | 未確認 | CWE-200, CWE-522 | Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.14.0 through 4.14.6, a low-privilege API user c |
| CVE-2026-61807 | Analyzed | 未確認 | CWE-79 | Snipe-IT is an IT asset/license management system. Prior to 8.6.2, a stored manufacturer or supplier name passed as the table component $name becomes data-selected-count-id in reso |
| CVE-2026-61808 | Deferred | 未確認 | CWE-306 | LightRAG provides simple and fast retrieval-augmented generation. Through version 1.5.4, the LightRAG API server binds to all network interfaces with authentication disabled by def |
| CVE-2026-6181 | Awaiting Analysis | 未確認 | CWE-290 | The Device Configuration Framework is vulnerable to an authentication bypass flaw. This flaw can only be exploited after authenticating with a viewer-privileged service account. |
| CVE-2026-61824 | Deferred | 未確認 | CWE-116, CWE-79 | Defuddle cleans up HTML pages. Prior to 0.19.1, site extractors interpolate page-derived image alt and src values, og:image values, and video descriptions into HTML strings without |
| CVE-2026-61842 | Deferred | 未確認 | CWE-200 | Grav is a file-based Web platform. Prior to 2.0.2, the Grav Twig content sandbox permits grav.offsetGet('config') to return the raw configuration object and permits json_encode, pr |
| CVE-2026-61891 | Analyzed | 未確認 | CWE-200, CWE-22, CWE-306, CWE-36 | In Eclipse Theia versions up to and including 1.73.1, the `@theia/filesystem` backend exposes HTTP file-download endpoints (`GET /file`, `GET /files/`, `PUT /files/`) that convert |
| CVE-2026-61897 | Awaiting Analysis | 未確認 | CWE-273 | An Ubuntu-specific patch to AccountsService before 23.13.9-8ubuntu7 only partially drops privileges before launching language helper scripts. It changes the effective UID/GID to th |
| CVE-2026-61898 | Awaiting Analysis | 未確認 | CWE-78 | The Ubuntu-specific language helper scripts (save-to-pam-env, update-langlist) shipped with accountsservice before 23.13.9-8ubuntu7 treat the user-controlled LANGUAGE entry in ~/.p |
| CVE-2026-61899 | Analyzed | 未確認 | CWE-200 | Vulnerability in tapestry-core in Apache Tapestry 5.5.0+ on all platforms allows attackers to download clsspath assets via specially crafted URLs. Users are recommended to upgrade |
| CVE-2026-61918 | Analyzed | 未確認 | CWE-125, CWE-200 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-61920 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an authorized attacker to execute code over a network. |
| CVE-2026-61921 | Analyzed | 未確認 | CWE-125, CWE-200 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-61923 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-61924 | Analyzed | 未確認 | CWE-125, CWE-200 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-61925 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-61926 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-61927 | Analyzed | 未確認 | CWE-362, CWE-416 | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-61928 | Analyzed | 未確認 | CWE-312 | Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally. |
| CVE-2026-61929 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-61930 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-61932 | Analyzed | 未確認 | CWE-122, CWE-843 | Access of resource using incompatible type ('type confusion') in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-61933 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally. |
| CVE-2026-61934 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-61936 | Analyzed | 未確認 | CWE-862 | Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-61937 | Analyzed | 未確認 | CWE-122, CWE-190 | Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
| CVE-2026-61938 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-61939 | Analyzed | 未確認 | CWE-416 | Use after free in Winlogon allows an authorized attacker to elevate privileges locally. |
| CVE-2026-61959 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.24 versions. |
| CVE-2026-61960 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WP Full Stripe Free <= 8.5.0 versions. |
| CVE-2026-61961 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in EmbedPress <= 4.5.6 versions. |
| CVE-2026-61962 | Deferred | 未確認 | CWE-94 | Unauthenticated Arbitrary Code Execution in WP BASE Booking <= 6.3.0 versions. |
| CVE-2026-61963 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.38 versions. |
| CVE-2026-61964 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Ninja Tables <= 5.2.9 versions. |
| CVE-2026-61965 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in GeekyBot <= 1.2.6 versions. |
| CVE-2026-61966 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in WPJAM Basic <= 7.0.1 versions. |
| CVE-2026-61967 | Deferred | 未確認 | CWE-640 | Unauthenticated Privilege Escalation in miniorange otp verification <= 5.5.1 versions. |
| CVE-2026-61969 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Listdom <= 5.6.0 versions. |
| CVE-2026-61974 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.3.4 versions. |
| CVE-2026-61978 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Secure Card Gateway for ePay Paycenter (Piraeus Bank) <= 1.0.32 versions. |
| CVE-2026-61979 | Deferred | 未確認 | CWE-266 | Unauthenticated Privilege Escalation in SAML SP Single Sign On <= 5.4.3 versions. |
| CVE-2026-61980 | Deferred | 未確認 | CWE-22 | Unauthenticated Arbitrary File Download in OMGF Pro <= 5.2.7 versions. |
| CVE-2026-61982 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in SiteGuard WP Plugin <= 1.8.6 versions. |
| CVE-2026-61984 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in WPMobile.App <= 11.77 versions. |
| CVE-2026-61986 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.5 versions. |
| CVE-2026-62204 | Deferred | 未確認 | CWE-345 | SiYuan versions before v3.7.4 fail to validate that packageName matches the downloaded package content in bazaar install endpoints. Attackers with same-origin access can overwrite |
| CVE-2026-62243 | Awaiting Analysis | 未確認 | CWE-297 | Netty (io.netty:netty-handler) versions from 4.2.0.Final through 4.2.16.Final and versions through 4.1.136.Final disable TLS hostname verification on the SslProvider.OPENSSL client |
| CVE-2026-62249 | Deferred | 未確認 | CWE-200, CWE-285 | Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, an authenticated user with access to a project can retrie |
| CVE-2026-62283 | Deferred | 未確認 | CWE-639, CWE-862 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. Nezha versions 1.14.13 through 1.14.14 and 2.0.0 through 2.0.9 do not bind stream id |
| CVE-2026-62289 | Deferred | 未確認 | CWE-191, CWE-617 | libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted HEIF or AVIF file containing a clean aperture box can reduce an image dimension to zero |
| CVE-2026-62291 | Deferred | 未確認 | CWE-125, CWE-787 | libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted image sequence with a 2x2 primary plane and a 256x256 auxiliary alpha plane can cause a |
| CVE-2026-62292 | Deferred | 未確認 | CWE-125 | libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.1, a crafted uncompressed HEIF image using generic zlib unci full-item compression can crash an a |
| CVE-2026-62293 | Deferred | 未確認 | CWE-20, CWE-79 | HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11, the hidden scan command concatenates attacker-controlled I |
| CVE-2026-62295 | Deferred | 未確認 | CWE-20, CWE-400, CWE-674 | HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11, the JSON utility parser in org.hl7.fhir.utilities.json.par |
| CVE-2026-62296 | Deferred | 未確認 | CWE-20, CWE-400, CWE-674 | HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11, XhtmlParser.java imposes no maximum element nesting depth, |
| CVE-2026-62313 | Deferred | 未確認 | CWE-863 | Incus is a system container and virtual machine manager. Prior to version 7.3.0, project-level enforcement of `restricted.containers.privilege=isolated` can be trivially bypassed, |
| CVE-2026-62315 | Deferred | 未確認 | CWE-915 | Frappe is a full-stack web application framework. In version 16.31.0 and earlier, frappe.client.set_value in frappe/client.py checks a dictionary supplied through the fieldname par |
| CVE-2026-62316 | Deferred | 未確認 | CWE-200, CWE-346 | Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, ufo/client/mcp/http_servers/linux_mcp_server.py binds a FastMCP streama |
| CVE-2026-62317 | Deferred | 未確認 | CWE-1333 | Logto is the modern, open-source auth infrastructure for SaaS and AI apps. Prior to 1.41.0, Logto's email subaddressing blocklist in packages/core/src/libraries/sign-in-experience/ |
| CVE-2026-62326 | Deferred | 未確認 | CWE-400 | Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a user with the built-in "Edit source" role can store a m |
| CVE-2026-62354 | Analyzed | 未確認 | CWE-863 | Authorization handling for Parameter Context validation requests in Apache NiFi 1.10.0 through 2.10.0 allows clients with read access to submit proposed Parameter values. The propo |
| CVE-2026-62357 | Deferred | 未確認 | CWE-190 | Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.40.0, CMS.INITBYDIM and CMS.INITBYPROB accept dimensions whose width times depth times sizeo |
| CVE-2026-62377 | Deferred | 未確認 | CWE-617, CWE-908 | libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted HEIF sequence accepted by heif_context_read_from_memory() can leave the context with no |
| CVE-2026-62380 | Analyzed | 未確認 | CWE-626 | Netty (io.netty:netty-codec-socks) versions 4.2.0.Final through 4.2.16.Final and 4.1.x through 4.1.136.Final contain null byte, CRLF, and credential injection vulnerabilities in th |
| CVE-2026-62381 | Deferred | 未確認 | CWE-122 | luci-lib-px5g (LuCI) contains a heap-based buffer overflow in the native ASN.1 encoding routine asn1_add_obj (x509write.c) when signing a certificate with a 2040-bit RSA key. For a |
| CVE-2026-62382 | Deferred | 未確認 | CWE-863 | PasswordPusher versions v1.45.11 through v2.9.5 contain an improper authorization vulnerability in the push deletion logic. The ownership check compares @push.user against current_ |
| CVE-2026-62383 | Analyzed | 未確認 | CWE-22 | nltk versions before 3.10.2 contain a symlink-based arbitrary file read vulnerability in IPIPANCorpusReader methods that bypass nltk.pathsec validation entirely. Attackers can plac |
| CVE-2026-62384 | Analyzed | 未確認 | CWE-22 | NLTK versions before 3.10.2 contain a symlink-based sandbox bypass in FramenetCorpusReader that allows attackers to read arbitrary XML files outside the corpus root. Attackers can |
| CVE-2026-62385 | Analyzed | 未確認 | CWE-73 | NLTK versions before 3.10.0 contain a path traversal vulnerability in FramenetCorpusReader and NKJPCorpusReader that allows attackers to parse XML files outside the corpus root by |
| CVE-2026-62388 | Analyzed | 未確認 | CWE-1188 | NLTK versions before 3.10.0 default to ENFORCE=False in pathsec.py, causing all security validation functions to emit warnings instead of raising exceptions. Attackers can bypass p |
| CVE-2026-62416 | Awaiting Analysis | 未確認 | CWE-1188 | Network Scanner Tool and Network Scanner Tool Lite provided by Sharp Corporation, with the initial configuration, require no authentication and accept files unlimitedly. When the a |
| CVE-2026-62420 | Analyzed | 未確認 | CWE-863 | An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project security restrictions during cross-project instance migrations. When moving a |
| CVE-2026-62421 | Rejected | 未確認 | Rejected reason: Voluntarily withdrawn | |
| CVE-2026-62440 | Analyzed | 未確認 | CWE-284 | Improper Access Control vulnerability in Apache CloudStack's Kubernetes Service (CKS) plugin, allowing cross-tenant manipulation of the Kubernetes cluster while adding and removing |
| CVE-2026-62441 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploit |
| CVE-2026-62442 | Analyzed | 未確認 | CWE-284, CWE-346 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.6. Easily explo |
| CVE-2026-62446 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploit |
| CVE-2026-62448 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Component). Supported versions that are affected are 12.2.3-12.2.15. Easily exploit |
| CVE-2026-62449 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult |
| CVE-2026-62450 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-62452 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.6. Easily explo |
| CVE-2026-62454 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.6. Easily explo |
| CVE-2026-62455 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.6. Easily explo |
| CVE-2026-62457 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). The supported version that is affected is 11.2.25.0.000. Eas |
| CVE-2026-62458 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily ex |
| CVE-2026-62459 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to e |
| CVE-2026-62460 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploit |
| CVE-2026-62461 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to e |
| CVE-2026-62462 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily ex |
| CVE-2026-62463 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management). The supported version that is affected is 11.2.25.0.0 |
| CVE-2026-62467 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). The supported version that is affected is 11.2.25.0.000. Eas |
| CVE-2026-62471 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). The supported version that is affected is 11.2.25.0.000. Dif |
| CVE-2026-62475 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Diffic |
| CVE-2026-62477 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security). The supported version that is affected is 11.2.25.0.000. E |
| CVE-2026-62481 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). The supported version that is affected is 11.2.25.0.000. Dif |
| CVE-2026-62485 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). The supported version that is affected is 11.2.25.0.000. Eas |
| CVE-2026-62491 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploit |
| CVE-2026-62492 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security). The supported version that is affected is 11.2.25.0.000. D |
| CVE-2026-62499 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security). The supported version that is affected is 11.2.25.0.000. E |
| CVE-2026-62500 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). The supported version that is affected is 11.2.25.0.000. Eas |
| CVE-2026-62501 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). The supported version that is affected is 11.2.25.0.000. Dif |
| CVE-2026-62502 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). The supported version that is affected is 11.2.25.0.000. Eas |
| CVE-2026-62506 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security). The supported version that is affected is 11.2.25.0.000. E |
| CVE-2026-62509 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). The supported version that is affected is 11.2.25.0.000. Eas |
| CVE-2026-62510 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-62511 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-62512 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.6. Easily explo |
| CVE-2026-62520 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). The supported version that is affected is 11.2.25.0.000. Dif |
| CVE-2026-62522 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security). The supported version that is affected is 11.2.25.0.000. D |
| CVE-2026-62523 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security). The supported version that is affected is 11.2.25.0.000. E |
| CVE-2026-62526 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security). The supported version that is affected is 11.2.25.0.000. D |
| CVE-2026-62529 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploit |
| CVE-2026-62531 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management). The supported version that is affected is 11.2.25.0.0 |
| CVE-2026-62532 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploit |
| CVE-2026-62533 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to e |
| CVE-2026-62535 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-62536 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-62537 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-62538 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-62539 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-62540 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita |
| CVE-2026-62541 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-62543 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-62544 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-62545 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-62550 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-62551 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-62552 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-62553 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-62554 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-62555 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-62558 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-62564 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-62566 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-62568 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-62569 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-62570 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-62571 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploit |
| CVE-2026-62572 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-62573 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-62575 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-62576 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-62577 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-62578 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploit |
| CVE-2026-62579 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-6258 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-62580 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to e |
| CVE-2026-62581 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-62582 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploit |
| CVE-2026-62583 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-62584 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-62585 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Administration product of Oracle Siebel CRM (component: Data Archival). Supported versions that are affected are 25.12-26.6. Easily exploitable vul |
| CVE-2026-62586 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Administration product of Oracle Siebel CRM (component: Data Archival). Supported versions that are affected are 25.12-26.6. Easily exploitable vul |
| CVE-2026-62587 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Administration product of Oracle Siebel CRM (component: Data Archival). Supported versions that are affected are 25.12-26.6. Easily exploitable vul |
| CVE-2026-62588 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected are 25.12-26.6. Easily exploitable vul |
| CVE-2026-62589 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected are 25.12-26.6. Difficult to exploit v |
| CVE-2026-62590 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected are 25.12-26.6. Difficult to exploit v |
| CVE-2026-62591 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected are 25.12-26.6. Easily exploitable vul |
| CVE-2026-62592 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected are 25.12-26.6. Easily exploitable vul |
| CVE-2026-62593 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected are 25.12-26.6. Easily exploitable vul |
| CVE-2026-62594 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected are 25.12-26.6. Difficult to exploit v |
| CVE-2026-62595 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected are 25.12-26.6. Easily exploitable vul |
| CVE-2026-62596 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected are 25.12-26.6. Easily exploitable vul |
| CVE-2026-62598 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to e |
| CVE-2026-62599 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite (component: Third Party Data Integration). Supported versions that are affected are 12.2.3-12.2.15 |
| CVE-2026-6260 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-62600 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Sales product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable |
| CVE-2026-62601 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Sales product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable |
| CVE-2026-62602 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to e |
| CVE-2026-62603 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploit |
| CVE-2026-62604 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to e |
| CVE-2026-62605 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-62606 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to e |
| CVE-2026-62607 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Customer Care product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily expl |
| CVE-2026-62608 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. |
| CVE-2026-62609 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. |
| CVE-2026-62610 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. |
| CVE-2026-62611 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. |
| CVE-2026-62612 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. |
| CVE-2026-62613 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. |
| CVE-2026-62614 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. |
| CVE-2026-62615 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. |
| CVE-2026-62616 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. |
| CVE-2026-62617 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. |
| CVE-2026-62618 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. |
| CVE-2026-62619 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. |
| CVE-2026-62620 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. |
| CVE-2026-62621 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. |
| CVE-2026-62622 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. |
| CVE-2026-62623 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. |
| CVE-2026-62624 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. |
| CVE-2026-62625 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. |
| CVE-2026-62626 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. |
| CVE-2026-62627 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. |
| CVE-2026-62628 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. |
| CVE-2026-62629 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. |
| CVE-2026-62630 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. |
| CVE-2026-62631 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. |
| CVE-2026-62632 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. |
| CVE-2026-62633 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. |
| CVE-2026-62634 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. |
| CVE-2026-62635 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. |
| CVE-2026-62636 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. |
| CVE-2026-62637 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. |
| CVE-2026-62638 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. |
| CVE-2026-62639 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. |
| CVE-2026-62640 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. |
| CVE-2026-62666 | Deferred | 未確認 | CWE-639, CWE-862 | Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content. Prior to 1.0.6, Grav API plugin UsersController::createApiKey(), generate2f |
| CVE-2026-62667 | Deferred | 未確認 | CWE-862 | Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content. Prior to 1.0.6, the Grav API plugin ApiKeyManager::generateKey() stores a d |
| CVE-2026-62668 | Deferred | 未確認 | CWE-918 | Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content. Prior to 1.0.6, the Grav API plugin WebhookController.php accepts webhook U |
| CVE-2026-62669 | Deferred | 未確認 | CWE-287 | Grav Login Plugin adds login, basic ACL, and session wide messages to Grav. Prior to 3.8.11, the Grav Login plugin login.regenerate2FASecret task checks only that the pending-sessi |
| CVE-2026-62670 | Deferred | 未確認 | CWE-862 | Grav Flex Objects Plugin allows you to build custom collections of objects. Prior to 1.4.3, the Grav Flex Objects Admin Next API requireFlexPermission() method in classes/Api/FlexA |
| CVE-2026-62671 | Deferred | 未確認 | CWE-352 | Grav Login Plugin adds login, basic ACL, and session wide messages to Grav. Prior to 3.8.11, the Grav Login plugin login.regenerate2FASecret task accepts a top-level GET request th |
| CVE-2026-62672 | Deferred | 未確認 | CWE-1333 | Grav is a file-based Web platform. Prior to 2.0.4, Grav allowlists the regex_replace filter and function in system/config/security.yaml, and GravExtension::regexReplace() passes an |
| CVE-2026-62673 | Deferred | 未確認 | CWE-178 | Grav is a file-based Web platform. Prior to 2.0.4, the Grav .htaccess and webserver-configs/htaccess.txt security rules omit the Apache [NC] flag and therefore compare sensitive di |
| CVE-2026-62674 | Deferred | 未確認 | CWE-94 | Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, PUT /sessions/{session_id}/agent checks LEVEL_EDIT permission for a |
| CVE-2026-62675 | Deferred | 未確認 | CWE-94 | Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, multipart POST /v1/sessions accepts an authenticated user's agent bu |
| CVE-2026-62676 | Deferred | 未確認 | CWE-184 | Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, the shared shell-command parser in omnigent/policies/builtins/_shell |
| CVE-2026-62677 | Deferred | 未確認 | CWE-22 | Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, an authenticated user can upload a session-scoped agent bundle with |
| CVE-2026-62680 | Deferred | 未確認 | CWE-22, CWE-829, CWE-918 | Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.22.0, Orval resolves remote and local external $ref values with |
| CVE-2026-62681 | Deferred | 未確認 | CWE-116, CWE-1336, CWE-94 | Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.21.0, an unescaped backtick in an OpenAPI path is emitted into |
| CVE-2026-62682 | Deferred | 未確認 | CWE-116, CWE-1336, CWE-94 | Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.21.0, an unescaped backtick in servers[0].url is emitted into r |
| CVE-2026-62684 | Deferred | 未確認 | CWE-200, CWE-522 | File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.17, the Link storage struct i |
| CVE-2026-62688 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62690 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locall |
| CVE-2026-62692 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62693 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows MIDI Service Module allows an authorized attacker to elevate privileges local |
| CVE-2026-62695 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62696 | Analyzed | 未確認 | CWE-191 | Integer underflow (wrap or wraparound) in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62698 | Analyzed | 未確認 | CWE-197 | Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62699 | Modified | 未確認 | CWE-122, CWE-190 | Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally. |
| CVE-2026-62700 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62701 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62702 | Analyzed | 未確認 | CWE-476 | Null pointer dereference in Windows Graphics Kernel allows an unauthorized attacker to deny service over a network. |
| CVE-2026-62703 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally. |
| CVE-2026-62705 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locall |
| CVE-2026-62707 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62708 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack. |
| CVE-2026-62709 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally. |
| CVE-2026-62710 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62711 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62712 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62713 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62714 | Analyzed | 未確認 | CWE-125, CWE-191 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. |
| CVE-2026-62715 | Analyzed | 未確認 | CWE-125, CWE-191 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. |
| CVE-2026-62716 | Analyzed | 未確認 | CWE-125, CWE-191 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. |
| CVE-2026-62717 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62718 | Analyzed | 未確認 | CWE-125, CWE-191 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. |
| CVE-2026-62719 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62720 | Analyzed | 未確認 | CWE-125, CWE-191 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. |
| CVE-2026-62721 | Analyzed | 未確認 | CWE-1220 | Insufficient granularity of access control in User-Mode Power Service (UMPS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62722 | Modified | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Brokering File System allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62723 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62724 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62725 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62726 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62727 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally |
| CVE-2026-62728 | Analyzed | 未確認 | CWE-125, CWE-367 | Time-of-check time-of-use (toctou) race condition in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62729 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally |
| CVE-2026-62730 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Windows Wired AutoConfig Service allows an authorized attacker to disclose information locally. |
| CVE-2026-62732 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62733 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62734 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally |
| CVE-2026-62735 | Analyzed | 未確認 | CWE-122, CWE-190 | Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62736 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62737 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62738 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally. |
| CVE-2026-62739 | Analyzed | 未確認 | CWE-122, CWE-197 | Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62740 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Windows Imaging Component allows an authorized attacker to disclose information locally. |
| CVE-2026-62741 | Analyzed | 未確認 | CWE-122, CWE-191 | Integer underflow (wrap or wraparound) in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62742 | Analyzed | 未確認 | CWE-125, CWE-191 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. |
| CVE-2026-62743 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally. |
| CVE-2026-62745 | Analyzed | 未確認 | CWE-125, CWE-191 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. |
| CVE-2026-62746 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Windows Win32K allows an authorized attacker to disclose information locally. |
| CVE-2026-62747 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62748 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally |
| CVE-2026-62749 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62750 | Analyzed | 未確認 | CWE-187 | Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network. |
| CVE-2026-62751 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62752 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62753 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62754 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62755 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62757 | Analyzed | 未確認 | CWE-347 | Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-62758 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62761 | Analyzed | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62766 | Analyzed | 未確認 | CWE-415 | Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62768 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62769 | Analyzed | 未確認 | CWE-122, CWE-197 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62770 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62771 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62772 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62773 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62774 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62775 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to disclose information locally. |
| CVE-2026-62776 | Analyzed | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62777 | Analyzed | 未確認 | CWE-306 | Missing authentication for critical function in Windows License Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62778 | Analyzed | 未確認 | CWE-362, CWE-416 | Use after free in Windows DNS allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-62779 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62780 | Analyzed | 未確認 | CWE-362, CWE-416 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62781 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in RPC Runtime allows an unauthorized attacker to execute code over a network. |
| CVE-2026-62782 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows SMB Client allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-62783 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62784 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to execute code over a network. |
| CVE-2026-62785 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network. |
| CVE-2026-62786 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally. |
| CVE-2026-62787 | Analyzed | 未確認 | CWE-416 | Use after free in Windows DNS allows an authorized attacker to execute code over a network. |
| CVE-2026-62788 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62790 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network. |
| CVE-2026-62792 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a network. |
| CVE-2026-62793 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally. |
| CVE-2026-62795 | Analyzed | 未確認 | CWE-416 | Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network. |
| CVE-2026-62796 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. |
| CVE-2026-62797 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62798 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose information locally. |
| CVE-2026-62799 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62800 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network. |
| CVE-2026-62803 | Analyzed | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62807 | Analyzed | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62811 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62812 | Analyzed | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62814 | Analyzed | 未確認 | CWE-125, CWE-191 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. |
| CVE-2026-62815 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. |
| CVE-2026-62816 | Analyzed | 未確認 | CWE-122, CWE-190 | Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network. |
| CVE-2026-62817 | Analyzed | 未確認 | CWE-787 | Out-of-bounds write in Windows DNS allows an unauthorized attacker to execute code over an adjacent network. |
| CVE-2026-62818 | Analyzed | 未確認 | CWE-416 | Use after free in Active Directory Certificate Services (AD CS) allows an authorized attacker to execute code over a network. |
| CVE-2026-62819 | Analyzed | 未確認 | CWE-416 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine |
| CVE-2026-62820 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to execute code over a network. |
| CVE-2026-62822 | Analyzed | 未確認 | CWE-122, CWE-190 | Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network. |
| CVE-2026-62823 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network. |
| CVE-2026-62824 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-62827 | Analyzed | 未確認 | CWE-287 | Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-62829 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network |
| CVE-2026-62830 | Analyzed | 未確認 | CWE-862 | Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-62832 | Analyzed | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62834 | Analyzed | 未確認 | CWE-347 | Improper verification of cryptographic signature in Azure Data Factory allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-62836 | Analyzed | 未確認 | CWE-923 | Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-62837 | Analyzed | 未確認 | CWE-23 | Relative path traversal in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. |
| CVE-2026-62839 | Analyzed | 未確認 | CWE-522 | Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
| CVE-2026-62842 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-62857 | Deferred | 未確認 | CWE-918 | Fedify is a TypeScript library for building federated server apps powered by ActivityPub. From version 1.2.0 through the affected 1.9, 1.10, 2.0, 2.1, 2.2, and 2.3 maintenance line |
| CVE-2026-6286 | Deferred | 未確認 | CWE-79 | The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Stored Cross-Site Scripting via customer name fields in versions up to and including |
| CVE-2026-62861 | Deferred | 未確認 | CWE-639, CWE-862 | TypeBot is a chatbot builder tool. Prior to 3.18.0, any authenticated non-guest workspace member can remove another workspace's public custom domain and make typebots on that domai |
| CVE-2026-62862 | Deferred | 未確認 | CWE-307, CWE-330 | Typebot is an open-source chatbot builder. In self-hosted versions up to and including 3.17.1, the default passwordless email magic-link authentication is vulnerable to login-code |
| CVE-2026-62865 | Deferred | 未確認 | CWE-200, CWE-73 | Typebot is an open-source chatbot builder. In self-hosted versions prior to 3.18.0, the server-side Send Email integration block allows arbitrary reading of local files on the serv |
| CVE-2026-62867 | Deferred | 未確認 | CWE-88 | Incus is a system container and virtual machine manager. Prior to version 7.3.0, improper validation of user-provided `block.create_options` in storage volume configuration leads t |
| CVE-2026-62869 | Analyzed | 未確認 | CWE-345 | Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network. |
| CVE-2026-62870 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-62871 | Analyzed | 未確認 | CWE-122, CWE-787 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. |
| CVE-2026-62872 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-62873 | Analyzed | 未確認 | CWE-347 | Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-62876 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62877 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62878 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network. |
| CVE-2026-62880 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62881 | Analyzed | 未確認 | CWE-122, CWE-197 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62882 | Analyzed | 未確認 | CWE-522 | Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-62883 | Analyzed | 未確認 | CWE-122, CWE-197 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62885 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62886 | Analyzed | 未確認 | CWE-122, CWE-190 | Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally. |
| CVE-2026-62887 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. |
| CVE-2026-62888 | Analyzed | 未確認 | CWE-416 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62889 | Analyzed | 未確認 | CWE-415 | Double free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-62890 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally. |
| CVE-2026-62892 | Analyzed | 未確認 | CWE-416 | Use after free in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62893 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network. |
| CVE-2026-62894 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62896 | Analyzed | 未確認 | CWE-287 | Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-62897 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally. |
| CVE-2026-62898 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-62899 | Analyzed | 未確認 | CWE-444 | Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-62900 | Analyzed | 未確認 | CWE-212 | Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-62901 | Analyzed | 未確認 | CWE-606 | Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network. |
| CVE-2026-62902 | Analyzed | 未確認 | CWE-693, CWE-829, CWE-918 | Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-62904 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-62908 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62909 | Analyzed | 未確認 | CWE-252 | Uncaught exception in .NET allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62910 | Analyzed | 未確認 | CWE-99 | Improper control of resource identifiers ('resource injection') in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-62911 | Modified | 未確認 | CWE-294 | Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-62912 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to deny service over a network. |
| CVE-2026-62913 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network. |
| CVE-2026-62914 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network. |
| CVE-2026-62915 | Analyzed | 未確認 | CWE-862 | Missing authorization in Microsoft Exchange Server allows an authorized attacker to bypass a security feature over a network. |
| CVE-2026-62917 | Analyzed | 未確認 | CWE-20 | Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
| CVE-2026-62918 | Analyzed | 未確認 | CWE-347 | Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-62927 | Analyzed | 未確認 | CWE-863 | In Eclipse Milo versions 1.0.0 through 1.1.4, the Call service dispatches the original mixed batch to address-space handlers after calculating authorization, allowing an anonymous |
| CVE-2026-62940 | Deferred | 未確認 | CWE-862 | Incus is a system container and virtual machine manager. Prior to version 7.3.0, when migrating an instance to another cluster member, user-supplied configuration overrides (includ |
| CVE-2026-62941 | Deferred | 未確認 | CWE-863 | Incus is a system container and virtual machine manager. Prior to version 7.3.0, when copying an instance across projects, the project restriction check (`AllowInstanceCreation`) r |
| CVE-2026-62945 | Deferred | 未確認 | CWE-639 | TREK is a collaborative travel planner. Prior to 3.1.3, TREK file upload, update, and link actions accept attacker-controlled reservation_id, place_id, and assignment_id values wit |
| CVE-2026-62960 | Awaiting Analysis | 未確認 | CWE-200, CWE-610 | Git for Windows is the Windows port of Git. Prior to 2.55.0.windows.4, a malicious remote Git server can advertise a bundle URI that reaches transport_get_remote_bundle_uri(), fetc |
| CVE-2026-62982 | Deferred | 未確認 | CWE-78 | Glances is an open-source system cross-platform monitoring tool. From 4.5.2 until 4.5.6, _sanitize_mustache_dict() in glances/actions.py skips nested list and dictionary strings su |
| CVE-2026-62986 | Deferred | 未確認 | CWE-200, CWE-457, CWE-908 | OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion picture industry. In versions 3.3.0 through 3.3.12 and 3.4.0 thro |
| CVE-2026-62988 | Deferred | 未確認 | CWE-200 | Froxlor is open source server administration software. From 2.3.7 until 2.3.8, the Customers.get, Customers.listing, Admins.get, Admins.listing, Ftps.get, and Ftps.listing API comm |
| CVE-2026-62992 | Deferred | 未確認 | CWE-22, CWE-61 | Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prior to 5.8.2 (and 4.5.7 on the 4.x line), Security::_checkDir( |
| CVE-2026-62993 | Deferred | 未確認 | CWE-918 | Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prior to 4.5.7 and 5.8.2, depending on the release line, Smarty' |
| CVE-2026-62996 | Deferred | 未確認 | CWE-22 | Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. From 5.0.0 until 5.8.4, Smarty's stream: resource-name handling |
| CVE-2026-63003 | Deferred | 未確認 | CWE-639, CWE-862 | django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. Prior to 5.0.9, page duplication lacks an object-level authorization che |
| CVE-2026-63004 | Deferred | 未確認 | CWE-918 | Unleash is an open-source feature management platform. Prior to 7.5.2, 7.6.5, and 8.0.2, the addon and integration subsystem passes the operator-controlled parameters.url value fro |
| CVE-2026-63015 | Analyzed | 未確認 | CWE-400 | Uncontrolled Resource Consumption vulnerability in Apache InLong. Non-template responsible persons can view template information. This issue affects Apache InLong: from 2.0.0 befo |
| CVE-2026-63016 | Analyzed | 未確認 | CWE-400 | Uncontrolled Resource Consumption vulnerability in Apache InLong. Users could affect operational configuration or allow upload of non-official packages. This issue affects Apache |
| CVE-2026-63037 | Analyzed | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache InLong. This appears to allow SQL injection in the ORDER BY clause agai |
| CVE-2026-63038 | Analyzed | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache InLong. This allows an attacker to inject arbitrary SQL code through th |
| CVE-2026-63039 | Analyzed | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache InLong. This allows an attacker to inject the string value into the SQL |
| CVE-2026-63040 | Analyzed | 未確認 | CWE-552 | Files or Directories Accessible to External Parties vulnerability in Apache InLong. StreamSource performs no authorization check, any authenticated user can logically delete ALL st |
| CVE-2026-63041 | Analyzed | 未確認 | CWE-807 | Reliance on Untrusted Inputs in a Security Decision vulnerability in Apache APISIX. This vulnerability allows an attacker to escalate privilege or perform an authorization bypass |
| CVE-2026-63042 | Analyzed | 未確認 | CWE-552 | Files or Directories Accessible to External Parties vulnerability in Apache InLong. Any user who can authenticate to the manager can create, modify and delete Data Node definitions |
| CVE-2026-63043 | Analyzed | 未確認 | CWE-23 | Relative Path Traversal vulnerability in Apache InLong. Arbitrary file read from the Agent host filesystem. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are |
| CVE-2026-63044 | Analyzed | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in Apache InLong. Any authenticated user (no admin role required) can cause the InLong Manager server to make outbound HTTP reques |
| CVE-2026-63046 | Analyzed | 未確認 | CWE-88 | Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Apache InLong. Agent Installer's ModuleManager executes arbitrary shell commands |
| CVE-2026-63072 | Analyzed | 未確認 | CWE-787 | Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more |
| CVE-2026-63073 | Analyzed | 未確認 | CWE-134 | Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to `ERR_raise_data()`. Impact summary: A malic |
| CVE-2026-63074 | Analyzed | 未確認 | CWE-770 | Issue summary: The OpenSSL Certificate Management Protocol (CMP) caches additional certificates (extraCerts) sent in a CMP message, but never expunges them (for instance if they ar |
| CVE-2026-63075 | Analyzed | 未確認 | CWE-770 | Issue summary: When OpenSSL processes QUIC traffic from a peer that repeatedly sends ack-eliciting packets while not acknowledging ACK-only responses, the QUIC stack can retain ACK |
| CVE-2026-63076 | Analyzed | 未確認 | CWE-476 | Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before treating it as a PBMPa |
| CVE-2026-63083 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-63105 | Deferred | 未確認 | CWE-79 | ReadyEcommerce before 4.5.2 contains a stored cross-site scripting (XSS) vulnerability that allows authenticated customers to inject malicious HTML payloads through the chat and su |
| CVE-2026-63106 | Deferred | 未確認 | CWE-89 | ReadyEcommerce before 4.5.2 contains an unauthenticated SQL injection vulnerability in the product listing API where the rating parameter from the products endpoint is concatenated |
| CVE-2026-63117 | Analyzed | 未確認 | CWE-369 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, an authenticated RDP client can advertise DVI ADPCM with nBlockAlign equal to 8 and nChannels equa |
| CVE-2026-63123 | Deferred | 未確認 | CWE-352 | Tina is a headless content management system. Prior to 2.5.2, the TinaCMS CLI package's Vite dev server packages/@tinacms/cli/src/next/vite/cors.ts origin callback returns false fo |
| CVE-2026-63125 | Deferred | 未確認 | CWE-59, CWE-61 | Incus is a system container and virtual machine manager. Prior to version 7.3.0, an unprivileged, project-confined Incus user (a non-admin TLS/RBAC identity with `can_create_images |
| CVE-2026-63133 | Deferred | 未確認 | CWE-770 | Malcolm is a network traffic analysis tool suite. Prior to version 26.07.0, `safe-extract.py` extracts uploaded archives with no limit on entry count, directory depth, total entrie |
| CVE-2026-63134 | Awaiting Analysis | 未確認 | CWE-22 | Malcolm is a network traffic analysis tool suite. Prior to version 26.07.0, `safe-extract.py` protects file extraction with libarchive's secure flags, but creates directory entries |
| CVE-2026-63135 | Deferred | 未確認 | CWE-79 | YOURLS is a self-hosted, customizable URL shortener written in PHP. From 1.5.1 until 1.10.4, YOURLS stores the HTTP Referer header through yourls_get_referrer(), yourls_sanitize_ur |
| CVE-2026-63177 | Awaiting Analysis | 未確認 | CWE-863 | Malcolm is a network traffic analysis tool suite. Prior to version 26.07.0, role-based access control enforced in the Nginx OpenResty Lua layer evaluates the raw, unnormalized `ngx |
| CVE-2026-63178 | Deferred | 未確認 | CWE-639 | Onyx is an open-source AI platform. Prior to 4.3.0, Onyx Enterprise Edition's PATCH /manage/admin/user-group/{user_group_id} and POST /manage/admin/user-group/{user_group_id}/add-u |
| CVE-2026-63179 | Deferred | 未確認 | CWE-22 | Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, authenticated backend users can disclose arbitrary files reada |
| CVE-2026-63187 | Deferred | 未確認 | CWE-94 | Logto is the modern, open-source auth infrastructure for SaaS and AI apps. From 1.40.1 until 1.41.0, Logto's .github/workflows/commitlint.yml directly interpolated github.event.pul |
| CVE-2026-63188 | Deferred | 未確認 | CWE-22 | Logto is the modern, open-source auth infrastructure for SaaS and AI apps. Prior to 0.3.9, the Logto Tunnel npm package enabled createStaticFileProxy from packages/tunnel/src/comma |
| CVE-2026-63248 | Analyzed | 未確認 | CWE-862 | In Eclipse Milo versions 0.6.0 through 1.1.4, OPC UA server diagnostics nodes do not enforce access authorization. An anonymous client can enable diagnostics over a None/None endpo |
| CVE-2026-63252 | Analyzed | 未確認 | CWE-401 | In Eclipse Milo versions 0.6.0 through 1.1.4, UASC server transport handlers fail to release retained partial message chunks when a channel disconnects, allowing a remote unauthent |
| CVE-2026-63293 | Analyzed | 未確認 | CWE-59 | A link following vulnerability in LXD allows an attacker to achieve arbitrary file read and write operations on the host system. When importing or unpacking an image archive, LXD f |
| CVE-2026-63294 | Analyzed | 未確認 | CWE-59 | A link following vulnerability in LXD allows an attacker to achieve root command execution on the host system. During the import or unpacking of crafted image or backup archives, L |
| CVE-2026-63295 | Analyzed | 未確認 | CWE-863 | An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass project-level container isolation restrictions. When a project is configured with restrictio |
| CVE-2026-63296 | Analyzed | 未確認 | CWE-863 | An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project restrictions during instance migration. When migrating an instance to a targe |
| CVE-2026-63297 | Analyzed | 未確認 | CWE-367, CWE-863 | An authorization bypass vulnerability in LXD due to a timing flaw during configuration merging allows an authenticated attacker to bypass target project restrictions during cross-p |
| CVE-2026-63298 | Analyzed | 未確認 | CWE-78 | An improper neutralization of special elements vulnerability in LXD's NVIDIA instance configuration handling allows an authenticated attacker to inject arbitrary configuration dire |
| CVE-2026-63299 | Analyzed | 未確認 | CWE-770 | An authorization bypass vulnerability in LXD allows an authenticated user to bypass project-level disk and volume limits. Two related code paths fail to verify resource limits duri |
| CVE-2026-63300 | Analyzed | 未確認 | CWE-862 | An improper validation vulnerability in the instancePostMigration function in lxd/instance_post.go of LXD allows an authenticated attacker with can_create_instances permissions on |
| CVE-2026-63310 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-63311 | Analyzed | 未確認 | CWE-918 | NLTK before 3.10.0 (affected versions <= 3.9.4) contains a server-side request forgery (SSRF) vulnerability in the validate_network_url() function in nltk/pathsec.py. The _resolve_ |
| CVE-2026-63312 | Analyzed | 未確認 | CWE-22 | NLTK before 3.10.0 contains an arbitrary local file read vulnerability in StreamBackedCorpusView that bypasses pathsec.ENFORCE by calling builtins.open() directly instead of pathse |
| CVE-2026-63328 | Deferred | 未確認 | CWE-22 | Trivy is a security scanner. Prior to 0.72.0, plugin manifest metadata is used by pkg/plugin/manager.go to construct paths under ~/.trivy/plugins without confining plugin names to |
| CVE-2026-63335 | Awaiting Analysis | 未確認 | CWE-20 | The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.31.0, inbound AMQP command assembly in src/main/j |
| CVE-2026-63336 | Awaiting Analysis | 未確認 | CWE-295 | The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, com.rabbitmq.client.ConnectionFactory.useSs |
| CVE-2026-63337 | Awaiting Analysis | 未確認 | CWE-470 | The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, com.rabbitmq.tools.jsonrpc.ProcedureDescrip |
| CVE-2026-63343 | Deferred | 未確認 | CWE-73 | Incus is a system container and virtual machine manager. Prior to version 7.3.0, a malicious image containing a `metadata.yaml` symlink pointing to an arbitrary host path allows an |
| CVE-2026-63360 | Deferred | 未確認 | CWE-79 | LimeSurvey Community Edition 7.0.5+260623 contains an authenticated reflected Cross-Site Scripting vulnerability in the user activation confirmation endpoint. The action query para |
| CVE-2026-63361 | Deferred | 未確認 | CWE-79 | LimeSurvey Community Edition 7.0.5 contains an authenticated reflected cross-site scripting vulnerability in the HTML editor popup endpoint. The text and name query parameters are |
| CVE-2026-63379 | Awaiting Analysis | 未確認 | CWE-444 | Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent processes chunked HTTP trailers in http.c through evhttp_read_trailer and merges them into requ |
| CVE-2026-63380 | Awaiting Analysis | 未確認 | CWE-416, CWE-476 | Libevent is an event notification library. Prior to 2.2.2-alpha, libevent can dereference invalid list pointers in ws.c when evws_new_session enters its error path after evhttp_sta |
| CVE-2026-63381 | Awaiting Analysis | 未確認 | CWE-908 | Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a use-after-free in buffer.c when evbuffer_add_buffer_reference processes an output buffer |
| CVE-2026-63382 | Awaiting Analysis | 未確認 | CWE-444 | Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, the libevent evhttp parser in http.c inconsistently handles duplicate Transfer-Encoding headers, comma-s |
| CVE-2026-63383 | Awaiting Analysis | 未確認 | CWE-125 | Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent can read beyond a contiguous evbuffer region in event_tagging.c when decode_tag_internal reques |
| CVE-2026-63384 | Awaiting Analysis | 未確認 | CWE-190 | Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has an incorrect integer conversion in event_tagging.c when evtag_unmarshal_header uses evtag_d |
| CVE-2026-63385 | Awaiting Analysis | 未確認 | CWE-444 | Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has two HTTP parsing weaknesses in http.c. evhttp_decode_uri_internal decodes percent-encoded % |
| CVE-2026-63387 | Awaiting Analysis | 未確認 | CWE-121, CWE-193, CWE-787 | Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has an off-by-one stack buffer overflow in evdns.c when dnsname_to_labels formats a name-bearin |
| CVE-2026-63388 | Awaiting Analysis | 未確認 | CWE-617, CWE-787 | Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a heap out-of-bounds write in bufferevent_sock.c when bufferevent_socket_set_conn_address_ |
| CVE-2026-63403 | Deferred | 未確認 | CWE-248 | Faktory is a language-agnostic background job server. In versions prior to 1.10.0, the server is vulnerable to an unauthenticated denial of service in which a single malformed comm |
| CVE-2026-63404 | Deferred | 未確認 | CWE-377 | Faktory is a language-agnostic background job server. In versions prior to 1.10.0, the embedded Redis bootstrapper is vulnerable to an insecure temporary file flaw that lets a loca |
| CVE-2026-63407 | Deferred | 未確認 | CWE-942 | Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content. Prior to 1.0.0-rc.16, the Grav API plugin CorsMiddleware returns Access-Con |
| CVE-2026-63408 | Deferred | 未確認 | CWE-598 | Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content. Prior to 1.0.0-rc.16, the Grav API plugin JwtAuthenticator::extractBearerT |
| CVE-2026-63409 | Deferred | 未確認 | CWE-125 | Deskflow is a keyboard and mouse sharing app. From 1.17.0 until continuous build 1.26.0.296, a malicious Deskflow server can send an odd-length DSOP vector to ServerProxy::setOptio |
| CVE-2026-63421 | Deferred | 未確認 | CWE-20, CWE-480 | Keystone is a content management system for Node.js. Prior to 6.5.3, the findMany resolver in packages/core/src/lib/core/queries/resolvers.ts compares the signed take argument dire |
| CVE-2026-63423 | Awaiting Analysis | 未確認 | CWE-321 | During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise for Windows that could allow a local authe |
| CVE-2026-63424 | Analyzed | 未確認 | CWE-261 | During an internal security assessment, an improperly protected key was discovered in Lenovo Dock Manager that could allow a local authenticated user to escalate privileges. |
| CVE-2026-63425 | Analyzed | 未確認 | CWE-276 | During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Dock Manager that could allow a local authenticated user to execute |
| CVE-2026-63426 | Analyzed | 未確認 | CWE-59 | During an internal security assessment, a potential vulnerability was discovered in Lenovo Dock Manager that could allow an authenticated local user to perform an arbitrary file de |
| CVE-2026-63455 | Awaiting Analysis | 未確認 | CWE-306 | Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauthenticated remote attacker to bypass web authentication mechanisms and |
| CVE-2026-63456 | Awaiting Analysis | 未確認 | CWE-287 | Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauthenticated remote attacker to bypass web authentication mechanisms and |
| CVE-2026-63457 | Analyzed | 未確認 | CWE-400 | A potential denial of service vulnerability exists in HPE Integrated Lights-Out 6 (iLO 6) prior to v1.78. |
| CVE-2026-63462 | Deferred | 未確認 | CWE-674 | Unleash is an open-source feature management platform. Prior to 7.5.2, 7.6.5, and 8.0.2, the shared OpenAPI validation error path in src/lib/error/bad-data-error.ts passes a raw re |
| CVE-2026-63466 | Deferred | 未確認 | CWE-116 | Unleash is an open-source feature management platform. Prior to 8.0.3, FeatureEventFormatterMd.format in src/lib/addons/feature-event-formatter-md.ts assigns Mustache.escape to an |
| CVE-2026-63481 | Deferred | 未確認 | CWE-201 | Hurl is a command line tool that runs and tests HTTP requests defined in plain text files. In version 8.0.1 and earlier, the redirect handling in packages/hurl/src/http/client.rs s |
| CVE-2026-63490 | Deferred | 未確認 | CWE-22, CWE-23, CWE-552 | Handlebars.java provides logic-less and semantic Mustache templates with Java. Prior to 4.5.3, com.github.jknack.handlebars.springmvc.SpringTemplateLoader resolves attacker-influen |
| CVE-2026-63495 | Awaiting Analysis | 未確認 | CWE-400, CWE-770 | Libevent is an event notification library. From 2.2.0-alpha-dev until 2.2.2-alpha, the libevent WebSocket server in ws.c accumulates fragmented frames in evws->incomplete_frames wi |
| CVE-2026-63508 | Analyzed | 未確認 | CWE-306 | Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-63509 | Analyzed | 未確認 | CWE-23 | Relative path traversal in Microsoft Fabric allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-63512 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network. |
| CVE-2026-63513 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-63514 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-63515 | Analyzed | 未確認 | CWE-125, CWE-191 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-63516 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
| CVE-2026-63517 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-63518 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2026-63519 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-63520 | Analyzed | 未確認 | CWE-20 | Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. |
| CVE-2026-63521 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
| CVE-2026-63522 | Analyzed | 未確認 | CWE-732 | Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally. |
| CVE-2026-63524 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-63525 | Analyzed | 未確認 | CWE-197 | Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2026-63526 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-63527 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2026-63528 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
| CVE-2026-63529 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-63530 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
| CVE-2026-63531 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
| CVE-2026-63532 | Analyzed | 未確認 | CWE-122, CWE-190 | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-63533 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-63545 | Awaiting Analysis | 未確認 | CWE-459 | Sharp and Toshiba Tec MFPs (multifunction printers) caches data internally when printing, and leave them uncleared. They may be accessed later by other users. |
| CVE-2026-63563 | Awaiting Analysis | 未確認 | CWE-1188 | Sharp and Toshiba Tec MFPs (multifunction printers) for a certain market have been shipped with the user authentication feature disabled in the initial configuration. When used wit |
| CVE-2026-63586 | Deferred | 未確認 | CWE-78 | The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header withou |
| CVE-2026-63587 | Deferred | 未確認 | CWE-288 | The SMS control function of IE-SR-2TX-WL-4G devices can require a password for SMS commands via the 'Enable Password Authorization' setting. The device increments a retry counter o |
| CVE-2026-63621 | Analyzed | 未確認 | CWE-20, CWE-74 | Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Apache Camel Knative component The K |
| CVE-2026-63622 | Awaiting Analysis | 未確認 | CWE-59 | A flaw was found in libvirt. A local attacker, specifically a process running as the confined `swtpm` user, could exploit a symlink-following vulnerability in the `virFileChownFile |
| CVE-2026-63623 | Awaiting Analysis | 未確認 | CWE-732 | A flaw was found in libvirt. During storage volume clone or convert operations, newly created volume images were temporarily world-readable. This was caused by the `qemu-img` utili |
| CVE-2026-63632 | Awaiting Analysis | 未確認 | CWE-125 | Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.3.0 until 1.22.0, onnx.version_converter.convert_version() can perform an out- |
| CVE-2026-63633 | Analyzed | 未確認 | CWE-122 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, freerdp_dsp_decode_opus in libfreerdp/codec/dsp.c calls Stream_EnsureRemainingCapacity on context- |
| CVE-2026-63637 | Awaiting Analysis | 未確認 | CWE-943 | Dgraph is an open source distributed GraphQL database. Prior to 25.3.8, maybeQuoteArg in graphql/resolve/query_rewriter.go passes regexp filter strings into generated DQL without q |
| CVE-2026-63639 | Awaiting Analysis | 未確認 | CWE-416 | Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's RESTORE command accepts a malformed RDB stream payload that assigns one Pendi |
| CVE-2026-63640 | Deferred | 未確認 | CWE-200 | MagicMirror² is an open source modular smart mirror platform. Prior to 2.37.0, when hideConfigSecrets is enabled, the catch-all socket dispatcher in js/node_helper.js passes every |
| CVE-2026-63641 | Deferred | 未確認 | CWE-284 | MagicMirror² is an open source modular smart mirror platform. Prior to 2.37.0, MagicMirror applies ipWhitelist only as Express middleware, while the Socket.IO server in js/server.j |
| CVE-2026-63642 | Deferred | 未確認 | CWE-918 | MagicMirror² is an open source modular smart mirror platform. Prior to 2.37.0, checkArticleUrl in defaultmodules/newsfeed/node_helper.js accepts the CHECK_ARTICLE_URL notification |
| CVE-2026-63643 | Deferred | 未確認 | CWE-441, CWE-918 | MagicMirror² is an open source modular smart mirror platform. Prior to 2.37.0, the ADD_CALENDAR handler in defaultmodules/calendar/node_helper.js accepts an attacker-controlled URL |
| CVE-2026-63649 | Awaiting Analysis | 未確認 | CWE-183 | The Windows interactive service in OpenVPN 2.4.0 through 2.6.21 and 2.7_alpha1 through 2.7.5 allows local authenticated users to bypass the trusted configuration directory constrai |
| CVE-2026-63650 | Awaiting Analysis | 未確認 | CWE-115, CWE-295 | OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup field |
| CVE-2026-63652 | Analyzed | 未確認 | CWE-415 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, rdpsnd_server_recv_formats in channels/rdpsnd/server/rdpsnd_main.c frees context->client_formats o |
| CVE-2026-63654 | Deferred | 未確認 | CWE-352 | Frappe is a full-stack web application framework. In version 16.31.0 and earlier, the whitelisted frappe.model.workflow.bulk_workflow_approval endpoint in frappe/model/workflow.py |
| CVE-2026-63667 | Deferred | 未確認 | CWE-22 | ApostropheCMS is an open-source Node.js content management system. Prior to 3.6.2, the import-export module in packages/import-export/lib/formats/gzip.js constructs an attachment s |
| CVE-2026-63669 | Deferred | 未確認 | CWE-639, CWE-862 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.32.0, the page module's move() operation fails to enforce the destination parent's _create permission |
| CVE-2026-63670 | Deferred | 未確認 | CWE-79 | ApostropheCMS is an open-source Node.js content management system. Prior to 2.17.6, sanitizeHtml() can pass disallowed executable markup through packages/sanitize-html/index.js whe |
| CVE-2026-6368 | Awaiting Analysis | 未確認 | CWE-908 | Calling wordexp with WRDE_APPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the we_wordv member, which on subsequent calls |
| CVE-2026-63687 | Modified | 未確認 | CWE-345 | Apache CXF's JwtRequestCodeFilter copies all claims from a signed request JWT into the authorization parameter map without excluding security-sensitive parameters. A client that ca |
| CVE-2026-63693 | Awaiting Analysis | 未確認 | CWE-379 | Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit thi |
| CVE-2026-63700 | Analyzed | 未確認 | CWE-269 | Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Incorrect Default Permission vulnerability. A low privileged attacker with local access could potentially e |
| CVE-2026-63701 | Analyzed | 未確認 | CWE-269 | Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Improper Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could |
| CVE-2026-63702 | Analyzed | 未確認 | CWE-798 | Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Use of Hard-coded Credentials vulnerability. A low privileged attacker with local access could potentially e |
| CVE-2026-63722 | Deferred | 未確認 | CWE-306 | ICEcoder 8.1 contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary OS commands by chaining an authentication by |
| CVE-2026-63723 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-63725 | Deferred | 未確認 | CWE-78 | sysPass's FileBackupService::doBackupFiles() in lib/SP/Services/Backup/FileBackupService.php around line 388 builds a tar shell command by string-concatenating the backup directory |
| CVE-2026-63726 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-6373 | Deferred | 未確認 | CWE-497 | Exposure of sensitive system information to an unauthorized control sphere vulnerability in Zyxel Networks WAH7601 allows Web Application Fingerprinting. This issue affects WAH760 |
| CVE-2026-6374 | Deferred | 未確認 | CWE-798 | Use of Hard-coded Credentials vulnerability in Zyxel Networks WAH7601 allows Read Sensitive Constants Within an Executable. This issue affects WAH7601: through 20.07.2026. |
| CVE-2026-6387 | Awaiting Analysis | 未確認 | CWE-290 | A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute arbitrary code with elevated privileges. |
| CVE-2026-64201 | Analyzed | 未確認 | CWE-125, CWE-787 | There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation require |
| CVE-2026-64202 | Analyzed | 未確認 | CWE-125, CWE-787 | There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation require |
| CVE-2026-64203 | Analyzed | 未確認 | CWE-125, CWE-787 | There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation require |
| CVE-2026-64204 | Analyzed | 未確認 | CWE-787 | There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation require |
| CVE-2026-6426 | Awaiting Analysis | 未確認 | CWE-681 | A type mismatch vulnerability was found in QEMU's vhost inflight migration VMState handling. The destination buffer size is stored as a uint64_t but read by the VMS_VBUFFER load pa |
| CVE-2026-6453 | Deferred | 未確認 | CWE-89 | The CubeWP Framework plugin for WordPress is vulnerable to SQL Injection in all versions up to and including 1.1.30. This is due to insufficient input sanitization in the cubewp_re |
| CVE-2026-64561 | Received | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available Check for a "stale" page fault, i |
| CVE-2026-64562 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Hide shadow VMCS right after VMCLEAR free_nested() frees the shadow VMCS while vmcs01 still points |
| CVE-2026-64563 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: rhashtable: clear stale iter->p on table restart rhashtable_walk_start_check() has two restart paths when resu |
| CVE-2026-64564 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: sctp: don't free the ASCONF's own transport in DEL-IP processing sctp_process_asconf() caches the transport th |
| CVE-2026-64565 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data() The `ims_pcu_process_data()` processes inc | |
| CVE-2026-64566 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: propagate SKBFL_SHARED_FRAG in iptfs_skb_add_frags() When iptfs_skb_add_frags() copies frag refer | |
| CVE-2026-64567 | Received | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: btrfs: reject free space cache with more entries than pages When loading a v1 free space cache, __load_free_sp |
| CVE-2026-64568 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure ieee80211_set_unsol_bcast_probe_resp() | |
| CVE-2026-64569 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n On CONFIG_INET=n builds, mpls_valid_fib_dum | |
| CVE-2026-64570 | Received | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix fils_discovery double free on alloc failure ieee80211_set_fils_discovery() calls kfree_rcu |
| CVE-2026-64571 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: p54: validate RX frame length in p54_rx_eeprom_readback() p54_rx_eeprom_readback() copies the requested | |
| CVE-2026-64572 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: free fib_alias with kfree_rcu() on insert error path fib_table_insert() publishes new_fa into the l | |
| CVE-2026-64573 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: qca: fix NVM tag length underflow in TLV parser In the TLV_TYPE_NVM branch of qca_tlv_check_data() | |
| CVE-2026-64574 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: tear down new links on vif update error path When ieee80211_vif_update_links() adds new links |
| CVE-2026-64575 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: bpf: tcp: fix double sock release on batch realloc bpf_iter_tcp_batch() releases the current batch via bpf_ite |
| CVE-2026-64576 | Received | 未確認 | CWE-457 | In the Linux kernel, the following vulnerability has been resolved: nexthop: initialize extack in nh_res_bucket_migrate() nh_res_bucket_migrate() passes an uninitialized netlink_ |
| CVE-2026-64577 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: gtp: check skb_pull_data() return in gtp1u_send_echo_resp() gtp1u_send_echo_resp() ignores skb_pull_data()'s r | |
| CVE-2026-64578 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate compound request size before reading StructureSize2 When ksmbd validates a compound (chained) | |
| CVE-2026-64579 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert xfrm_hash_rebuild()'s first loop prea | |
| CVE-2026-64580 | Received | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() On the error path where in6_dev_g |
| CVE-2026-64581 | Received | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: xfrm: fix sk_dst_cache double-free in xfrm_user_policy() xfrm_user_policy() clears the socket dst cache with _ |
| CVE-2026-64582 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix a use-after-free problem in rxe_mmap rxe_mmap() removes a rxe_mmap_info struct from the pending_ |
| CVE-2026-64583 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown The Broadcom BDC UDC driver registe | |
| CVE-2026-64584 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_midi: cancel pending IN work before freeing the midi object The f_midi driver embeds a work ite | |
| CVE-2026-64585 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: can: esd_usb: kill anchored URBs before freeing netdevs esd_usb_disconnect() frees each CAN netdev with free_c | |
| CVE-2026-64586 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: drain bus_reset work on device removal brcmf_fw_crashed() and the debugfs "reset" entry both s |
| CVE-2026-64587 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: arc: emac: quiesce interrupts before requesting IRQ Normal RX/TX interrupts are enabled later, | |
| CVE-2026-64588 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix data races on ring->ready On weakly-ordered architectures, the store to fiq->ops can be reorde | |
| CVE-2026-64589 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix NULL-deref on adapter registration failure If adapter registration ever fails the release callb | |
| CVE-2026-64590 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning When CONFIG_DMA_API_DEBUG_SG is enabl | |
| CVE-2026-64591 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid WARNING in sva unbind path The Intel IOMMU driver allows SVA on devices even if they do not | |
| CVE-2026-64592 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Unconditionally sfence.vma for spurious fault Svvptc does not guarantee that it's safe to just retu | |
| CVE-2026-64593 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: do not trim a device which is not writeable [BUG] There is a bug report that btrfs/242 can randomly fai | |
| CVE-2026-64594 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: initialize reset_work at allocation time ffs_fs_kill_sb() unconditionally calls cancel_work | |
| CVE-2026-64595 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: hid-lenovo-go: cancel cfg_setup work in hid_go_cfg_remove() hid_go_cfg_probe() initialises drvdata.go_cfg | |
| CVE-2026-64596 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: libfs: set SB_I_NOEXEC and SB_I_NODEV by default in init_pseudo() Since commit 1e7ab6f67824 ("anon_inode: rewo | |
| CVE-2026-64597 | Received | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_close() replay A response-bearing attempt can return a replayable error a |
| CVE-2026-64598 | Received | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: smb/client: Fix error code in smb2_aead_req_alloc() The "*num_sgs" variable is a u32 so "ERR_PTR(*num_sgs)" do |
| CVE-2026-64599 | Received | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: crypto: amlogic - avoid double cleanup in meson_crypto_probe() When meson_allocate_chanlist() fails after a pa |
| CVE-2026-64601 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_urb corrupts anchor list on each resubmission In c | |
| CVE-2026-64602 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: spear: Initialize completion before requesting IRQ In the report from Jaeyoung Chung: "spear_adc_pr | |
| CVE-2026-64603 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: intel-hid: Protect ACPI notify handler against recursion Since commit e2ffcda16290 ("ACPI: OSL: | |
| CVE-2026-64604 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode When updating CR8 intercepts, get v | |
| CVE-2026-64629 | Awaiting Analysis | 未確認 | CWE-125 | A vulnerability has been identified in Parasolid V38.0 (All versions < V38.0.235), Parasolid V38.1 (All versions < V38.1.230). The affected applications contains an out of bounds r |
| CVE-2026-64630 | Awaiting Analysis | 未確認 | CWE-863 | A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link. |
| CVE-2026-64631 | Awaiting Analysis | 未確認 | CWE-89 | A vulnerability allowing a low-privileged user to inject SQL and extract database contents. |
| CVE-2026-64632 | Awaiting Analysis | 未確認 | CWE-522 | A vulnerability allowing a low-privileged user to capture the NTLM credentials of the Reporter service account. |
| CVE-2026-64633 | Awaiting Analysis | 未確認 | CWE-94 | A vulnerability allowing remote unauthenticated code execution on the agent host. |
| CVE-2026-64634 | Awaiting Analysis | 未確認 | CWE-269 | A vulnerability allowing local privilege escalation to the Reporter service context. |
| CVE-2026-64636 | Awaiting Analysis | 未確認 | CWE-89 | An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated user to read arbitrary data from the panel database. |
| CVE-2026-64637 | Awaiting Analysis | 未確認 | CWE-269 | Improper privilege management in the XML-RPC API of Plesk before 18.0.80, allows an authenticated reseller to obtain an administrative session for the root user account. |
| CVE-2026-64638 | Awaiting Analysis | 未確認 | CWE-79 | WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen. Via a specially crafted malicious third-party website hosted by an attacker, it is possibl |
| CVE-2026-64639 | Awaiting Analysis | 未確認 | CWE-266 | Incorrect database cloning process in Plesk from 18.0.52 before 18.0.79.6 and 18.0.80.2 allows a low-privileged user (customer, reseller) to execute arbitrary code on behalf of the |
| CVE-2026-6464 | Modified | 未確認 | CWE-829 | Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as psql commands, via error injection. If the "COPY FROM STDIN" |
| CVE-2026-64640 | Modified | 未確認 | CWE-863 | Apache Polaris did not consistently validate storage locations supplied during table and view registration. An authenticated principal with permission to register a table or view |
| CVE-2026-64652 | Awaiting Analysis | 未確認 | CWE-201 | GitHub CLI (gh) is GitHub's official command line tool. Prior to version 2.97.0, gh auth status masked only the characters after the last underscore in certain fine-grained persona |
| CVE-2026-64653 | Awaiting Analysis | 未確認 | CWE-22 | GitHub CLI (gh) is GitHub’s official command line tool. Prior to 2.97.0, some HTTP request URLs interpolate variable path components without percent encoding, allowing URL path met |
| CVE-2026-64654 | Awaiting Analysis | 未確認 | CWE-150 | GitHub CLI (gh) is GitHub's official command line tool. Prior to version 2.97.0, multiple GitHub CLI commands printed externally controlled gist, API, pull request, release, codesp |
| CVE-2026-64655 | Awaiting Analysis | 未確認 | CWE-185 | GitHub CLI (gh) is GitHub’s official command line tool. Prior to 2.97.0, gh attestation verify builds the certificate Subject Alternative Name matcher from the --signer-repo and - |
| CVE-2026-64657 | Deferred | 未確認 | CWE-89 | Budibase is an open-source low-code platform. Prior to 3.39.19, the PostgreSQL datasource connector in packages/server/src/integrations/postgres.ts interpolates the user-controlled |
| CVE-2026-64662 | Deferred | 未確認 | CWE-639, CWE-862 | Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.74.1 and 6.24.0, an authenticated Control Panel user could view content from entries they did not |
| CVE-2026-64663 | Deferred | 未確認 | CWE-470 | Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.74.1 and 6.24.0, manipulating user-supplied input incorporated into Antlers templates could result |
| CVE-2026-64664 | Deferred | 未確認 | CWE-200, CWE-862 | Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.74.1 and 6.24.0, an authenticated Control Panel user could use an endpoint intended for the user c |
| CVE-2026-64665 | Deferred | 未確認 | CWE-287, CWE-290 | Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.74.1 and 6.24.0, when OAuth login was enabled with a provider that does not guarantee verified ema |
| CVE-2026-64676 | Deferred | 未確認 | CWE-862 | Kata Containers is an open source implementation of lightweight Virtual Machines (VMs) that perform like containers. In versions prior to 4.0.0, the kata-agent is vulnerable to an |
| CVE-2026-64677 | Deferred | 未確認 | CWE-22 | Anki is a program for creating and reviewing flashcards. Prior to 25.09.3, endpoints in Anki's local HTTP server do not adequately constrain requested media and built-in data paths |
| CVE-2026-64679 | Deferred | 未確認 | CWE-22, CWE-73 | Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. From 0.19.8 until 0.45.0, Atlantis does not consistently validate user-con |
| CVE-2026-6469 | Modified | 未確認 | CWE-708 | Incorrect ownership assignment in PostgreSQL ALTER TABLE ALTER TYPE command reassigns ownership of dependent statistics objects to the current user. This wrongly allows the table |
| CVE-2026-6470 | Modified | 未確認 | CWE-862 | Missing authorization in PostgreSQL DDL commands allows an object creator to achieve denial of service against ALTER and DROP of the type, via creating a dependency on the type. M |
| CVE-2026-64705 | Modified | 未確認 | CWE-120 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.6. An app |
| CVE-2026-6471 | Modified | 未確認 | CWE-862 | Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating system account running the ser |
| CVE-2026-64715 | Modified | 未確認 | CWE-416 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Taho |
| CVE-2026-64760 | Modified | 未確認 | CWE-200 | An information leakage was addressed with additional validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionO |
| CVE-2026-64773 | Analyzed | 未確認 | CWE-770 | An attacker that can reach a container's published TCP port may be able to force the host's forwarding process to buffer an unbounded amount of that client's data in memory, for as |
| CVE-2026-64777 | Analyzed | 未確認 | CWE-22 | A malicious builder peer may be able to request an in-context file by name from the host and receive the contents of whatever the name resolves to, even when it resolves outside th |
| CVE-2026-64778 | Modified | 未確認 | CWE-200 | The issue was addressed with improved checks. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visio |
| CVE-2026-64779 | Modified | 未確認 | CWE-362 | A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tah |
| CVE-2026-64780 | Modified | 未確認 | CWE-119 | The issue was addressed with improved checks. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. P |
| CVE-2026-64781 | Modified | 未確認 | CWE-20 | The issue was addressed with improved input validation. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visi |
| CVE-2026-64782 | Modified | 未確認 | CWE-362 | A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tah |
| CVE-2026-64784 | Modified | 未確認 | CWE-125, CWE-787 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS |
| CVE-2026-64787 | Modified | 未確認 | CWE-416 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Taho |
| CVE-2026-64788 | Modified | 未確認 | CWE-119 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27, watchOS 27. Processing maliciously craf |
| CVE-2026-64826 | Awaiting Analysis | 未確認 | CWE-22 | rConfig before 8.2.13 contains a path traversal vulnerability that allows authenticated attackers to read arbitrary files by supplying unsanitized directory traversal sequences in |
| CVE-2026-64827 | Deferred | 未確認 | CWE-807 | Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain an authentication bypass vulnerability in set_env.php where the redirectToLoginAd |
| CVE-2026-64839 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-6484 | Awaiting Analysis | 未確認 | CWE-1277 | In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution. |
| CVE-2026-64840 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-64841 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-64842 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-64843 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-64844 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-64846 | Awaiting Analysis | 未確認 | CWE-367, CWE-61 | Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can exploit a time-of-check/ |
| CVE-2026-64849 | Analyzed | 掲載 | CWE-918 | MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Starting in 3.3.0 and prior to 3.15.0, the unauthenticated POST /ap |
| CVE-2026-64850 | Deferred | 未確認 | CWE-94 | Grav is a file-based Web platform. Prior to 2.0.7, Grav Blueprint::dynamicData() in system/src/Grav/Common/Data/Blueprint.php sends an editor-controlled Class::method provider and |
| CVE-2026-64851 | Deferred | 未確認 | CWE-79 | Grav Shortcode Core Plugin allows for the development shortcode plugins that utilize the common format utilized by WordPress and BBCode. Prior to 6.2.2, Grav Shortcode Core passes |
| CVE-2026-64852 | Deferred | 未確認 | CWE-862 | Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content. Prior to 1.0.8, the Grav API plugin intercepts the apiKeyGenerate and apiKe |
| CVE-2026-64859 | Deferred | 未確認 | CWE-200 | New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to 1.0.0-rc.7, the admin user list and user lookup APIs, including GE |
| CVE-2026-64865 | Deferred | 未確認 | CWE-362 | New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to 1.0.0-rc.16, repeated PUT /api/user/self requests that update lang |
| CVE-2026-64866 | Deferred | 未確認 | CWE-862 | New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. From 0.9.1.3 until 1.0.0-rc.7, AdminResetPasskey in controller/passkey.go l |
| CVE-2026-64868 | Deferred | 未確認 | CWE-400, CWE-770 | New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to 1.0.0-rc.11, POST /api/stripe/webhook, POST /api/creem/webhook, an |
| CVE-2026-64887 | Awaiting Analysis | 未確認 | CWE-321 | Use of hard-coded cryptographic key vulnerability in Johnson Controls Airwall allows : Cryptanalytic Attack. This issue affects Airwall: before 4.1. |
| CVE-2026-64896 | Awaiting Analysis | 未確認 | CWE-284, CWE-732 | Debug and Test Interface With Improper Access Control vulnerability in Johnson Controls T2000 allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects T |
| CVE-2026-64897 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network |
| CVE-2026-64898 | Analyzed | 未確認 | CWE-122, CWE-190 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-64899 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-64900 | Modified | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network |
| CVE-2026-64901 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-64902 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network |
| CVE-2026-64903 | Analyzed | 未確認 | CWE-122, CWE-190 | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-64904 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-64905 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2026-64906 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. |
| CVE-2026-64907 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2026-64908 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. |
| CVE-2026-64909 | Analyzed | 未確認 | CWE-122, CWE-125, CWE-191 | Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-64910 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-64911 | Analyzed | 未確認 | CWE-122, CWE-190 | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-64912 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. |
| CVE-2026-64914 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. |
| CVE-2026-64915 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2026-64916 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network |
| CVE-2026-64917 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
| CVE-2026-64919 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. |
| CVE-2026-64920 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. |
| CVE-2026-64921 | Analyzed | 未確認 | CWE-306 | Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-64922 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network |
| CVE-2026-64927 | Awaiting Analysis | 未確認 | CWE-639 | A flaw was found in the multicloud-operators-channel component. This vulnerability allows a user with specific permissions to manipulate how the system handles sensitive informatio |
| CVE-2026-64934 | Deferred | 未確認 | CWE-807 | The Mira cloud API accepts the firmware version reported by the companion app as authoritative for a given device, without independently attesting the version from the device itsel |
| CVE-2026-64940 | Deferred | 未確認 | CWE-625 | Tegalog -Fumy Otegaru Memo Logger- provided by Nishishi Factory contains a vulnerability due to a permissive regular expression, which may allow an attacker who can access the affe |
| CVE-2026-64941 | Awaiting Analysis | 未確認 | CWE-601 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's |
| CVE-2026-64951 | Awaiting Analysis | 未確認 | CWE-369 | A rogue Velociraptor client can upload a malformed sparse file such that if the GUI attempts to expand the file, a panic occurs which may crash the server process. The problem is |
| CVE-2026-64952 | Awaiting Analysis | 未確認 | CWE-863 | The hunt_delete() VQL function allows deleting hunts. Velociraptor misapplied the permission check requiring only COLLECT_CLIENT (usually assigned to the "investigator" role) ins |
| CVE-2026-64954 | Awaiting Analysis | 未確認 | CWE-862 | Velociraptor allows scheduling new collections via VQL queries in notebooks. For a user to schedule a new collection, they require the COLLECT_CLIENT permission. However, this is n |
| CVE-2026-64955 | Awaiting Analysis | 未確認 | CWE-1236 | When Microsoft Excel imports a CSV file, it executes cells beginning with certain characters as formulas, giving such CSV files arbitrary execution. Velociraptor fails to sanitiz |
| CVE-2026-64958 | Analyzed | 未確認 | CWE-400 | An incomplete fix for CVE-2026-50645 means that it is still possible to perform a denial of service attack on Apache CXF by sending a message with many attachment headers. Users ar |
| CVE-2026-64960 | Deferred | 未確認 | CWE-434 | ATutor Gameme module allows users to upload files of any type and extension without restriction. Due to improper handling of file uploads, files are stored in a web-accessible loca |
| CVE-2026-64961 | Deferred | 未確認 | CWE-639 | ATutor is vulnerable to authentication bypass . Although a token validation check is present in the auto-login functionality, the values required for token validation remain uninit |
| CVE-2026-64962 | Deferred | 未確認 | CWE-352 | ATutor is vulnerable to Cross-Site Request Forgery (CSRF) in profile update functionality. An attacker can craft a malicious website which, when visited by an authenticated victim, |
| CVE-2026-64963 | Deferred | 未確認 | CWE-22 | A path traversal vulnerability in ATutor allows an authenticated user to access files from other course directories when the AT_FORCE_GET_FILE configuration option is enabled. This |
| CVE-2026-64964 | Deferred | 未確認 | CWE-340 | ATutor generates predictable email confirmation tokens due to the use of insufficiently random values in the account confirmation functionality. Due to the use of predictable value |
| CVE-2026-64965 | Deferred | 未確認 | CWE-862 | ATutor is vulnerable to Missing Authorization Check on Test and Question Import endpoints. A low-privileged authenticated user (e.g. a student) enrolled in a course can bypass aut |
| CVE-2026-64966 | Deferred | 未確認 | CWE-22 | ATutor is vulnerable to a Path Traversal vulnerability in ZIP extraction functionality. An attacker with instructor privileges can upload and extract a specially crafted ZIP archiv |
| CVE-2026-64967 | Deferred | 未確認 | CWE-22 | A path traversal vulnerability in ATutor's error log viewer allows an attacker with administrative privileges to access arbitrary files outside the intended logs directory. This ca |
| CVE-2026-64968 | Deferred | 未確認 | CWE-918 | ATutor is vulnerable to Server-Side request forgery in import functionalities. An authenticated administrator can make the server request arbitrary internal HTTP endpoints, cloud m |
| CVE-2026-64969 | Deferred | 未確認 | CWE-639 | ATutor is vulnerable to Insecure Direct Object Reference (IDOR) attack in profile picture related endpoints. Any authenticated user, including a student, can supply another user's |
| CVE-2026-64970 | Deferred | 未確認 | CWE-79 | ATutor is vulnerable to Stored Cross Site Scripting in registration functionality. An attacker can register a new account and enter a JavaScript payload in the phone field during |
| CVE-2026-64971 | Deferred | 未確認 | CWE-79 | ATutor is vulnerable to Reflected XSS in restore functionality. An attacker can provide a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the |
| CVE-2026-64972 | Deferred | 未確認 | CWE-79 | ATutor is vulnerable to Reflected XSS via popup parameter in preview.php. An authenticated attacker can inject a double quote into the popup parameter, break out of the attribute v |
| CVE-2026-64993 | Analyzed | 未確認 | CWE-295 | Dell RVTools versions prior to 4.8.1, contains an improper certificate validation vulnerability in the collector. A remote unauthenticated attacker could potentially exploit this v |
| CVE-2026-65017 | Analyzed | 未確認 | CWE-200 | Apache Airflow's Config API did not mask team-scoped sensitive configuration values in multi-team deployments. When an administrator has enabled multi-team mode and exposed the Con |
| CVE-2026-6505 | Awaiting Analysis | 未確認 | CWE-367 | The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to privilege escalation. This vulnerability can only be exploited i |
| CVE-2026-65053 | Deferred | 未確認 | CWE-79 | Horde IMP's AppleDouble MIME viewer writes an attacker-controlled attachment name into an HTML status block without escaping it. In lib/Mime/Viewer/Appledouble.php, _IMPrender() ob |
| CVE-2026-65081 | Analyzed | 未確認 | CWE-494 | NVIDIA NemoClaw for Linux contains a vulnerability in its installation process, where an attacker could cause execution of untrusted code. A successful exploit of this vulnerabilit |
| CVE-2026-65082 | Analyzed | 未確認 | CWE-94 | NVIDIA NemoClaw for Linux contains a vulnerability in its migration command, where a local attacker could cause code injection. A successful exploit of this vulnerability might lea |
| CVE-2026-65083 | Analyzed | 未確認 | CWE-184 | NVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioning API, where an attacker could cause an incomplete list of disallowed inputs. A successful exploit of |
| CVE-2026-65084 | Analyzed | 未確認 | CWE-295 | NVIDIA NemoClaw for Linux contains a vulnerability in its deployment process, where an attacker could cause improper certificate validation. A successful exploit of this vulnerabil |
| CVE-2026-65085 | Analyzed | 未確認 | CWE-116 | NVIDIA OpenShell for Linux contains a vulnerability in its inference proxy, where an attacker could cause an improper encoding or escaping of output. A successful exploit of this v |
| CVE-2026-65086 | Analyzed | 未確認 | CWE-78 | NVIDIA OpenShell for Linux contains a vulnerability in its sandbox exec handler, where an attacker could cause an OS command injection. A successful exploit of this vulnerability m |
| CVE-2026-65087 | Analyzed | 未確認 | CWE-522 | NVIDIA NemoClaw contains a vulnerability where an attacker could cause insufficiently protected credentials . A successful exploit of this vulnerability might lead to information d |
| CVE-2026-65088 | Analyzed | 未確認 | CWE-214 | NVIDIA NemoClaw contains a vulnerability where an attacker could cause invocation of process using visible sensitive information. A successful exploit of this vulnerability might l |
| CVE-2026-65089 | Analyzed | 未確認 | CWE-78 | NVIDIA NemoClaw for Linux contains a vulnerability in its status and logs plugin commands, where an attacker could cause OS command injection. A successful exploit of this vulnerab |
| CVE-2026-65090 | Analyzed | 未確認 | CWE-78 | NVIDIA NemoClaw for Linux contains a vulnerability in its NIM management component, where an attacker could cause OS command injection. A successful exploit of this vulnerability m |
| CVE-2026-65091 | Analyzed | 未確認 | CWE-78 | NVIDIA OpenShell for all platforms contains a vulnerability where a malicious gateway could cause OS command injection. A successful exploit of this vulnerability might lead to cod |
| CVE-2026-65092 | Analyzed | 未確認 | CWE-22 | NVIDIA OpenShell Sandbox for Linux contains a vulnerability where an attacker could cause a path traversal bypass of L7 REST network policy. A successful exploit of this vulnerabil |
| CVE-2026-65093 | Analyzed | 未確認 | CWE-427 | NVIDIA OpenShell for Linux contains a vulnerability where an attacker could cause a sandbox escape. A successful exploit of this vulnerability might lead to code execution, escalat |
| CVE-2026-65096 | Analyzed | 未確認 | CWE-78 | NVIDIA NemoClaw for Linux contains a vulnerability in the Telegram bridge component, where an attacker could cause an OS command injection. A successful exploit of this vulnerabili |
| CVE-2026-65097 | Analyzed | 未確認 | CWE-494 | NVIDIA NemoClaw for Linux contains a vulnerability in its installation scripts, where an attacker could cause a download of code without integrity check. A successful exploit of th |
| CVE-2026-65098 | Analyzed | 未確認 | CWE-1390 | NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication. A successful exploit of this vulnerabili |
| CVE-2026-65099 | Analyzed | 未確認 | CWE-78 | NVIDIA NemoClaw for Linux contains a vulnerability in its command-line interface, where an attacker could cause OS command injection. A successful exploit of this vulnerability mig |
| CVE-2026-65105 | Analyzed | 未確認 | CWE-306 | NVIDIA NemoClaw for Linux contains a vulnerability in its inference server setup, where a remote attacker may access the inference service without authentication. A successful expl |
| CVE-2026-65182 | Analyzed | 未確認 | CWE-284, CWE-863 | Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a longer path is specified before a more res |
| CVE-2026-65183 | Analyzed | 未確認 | CWE-367 | Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat when creating unix domain sockets allows an unauthorised local user to access the unix domain socke |
| CVE-2026-65321 | Deferred | 未確認 | CWE-89 | PyAthena prior to 3.35.4 contains a sql injection vulnerability that allows unauthenticated attackers to inject arbitrary SQL by exploiting improper quote-escaping in DefaultParame |
| CVE-2026-65329 | Modified | 未確認 | CWE-287 | An authentication issue was addressed with improved state management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, iOS 27 and iPadOS 27. An attacker in a privileged network |
| CVE-2026-65330 | Modified | 未確認 | CWE-119 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27 |
| CVE-2026-65331 | Modified | 未確認 | CWE-703 | This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, |
| CVE-2026-65332 | Modified | 未確認 | CWE-703 | This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, |
| CVE-2026-65333 | Modified | 未確認 | CWE-119 | This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, |
| CVE-2026-65334 | Modified | 未確認 | CWE-119, CWE-787 | A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Ta |
| CVE-2026-65335 | Modified | 未確認 | CWE-119 | This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, |
| CVE-2026-65336 | Modified | 未確認 | CWE-20 | This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, |
| CVE-2026-65337 | Modified | 未確認 | CWE-20, CWE-703 | This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, |
| CVE-2026-65338 | Modified | 未確認 | CWE-119, CWE-416 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visio |
| CVE-2026-65339 | Modified | 未確認 | CWE-693 | A logic issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An |
| CVE-2026-65340 | Modified | 未確認 | CWE-20, CWE-703 | This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, |
| CVE-2026-65341 | Modified | 未確認 | CWE-119, CWE-416 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS |
| CVE-2026-65343 | Modified | 未確認 | CWE-416 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. A r |
| CVE-2026-65346 | Modified | 未確認 | CWE-190 | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, |
| CVE-2026-65347 | Modified | 未確認 | CWE-400 | The issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing an image may lea |
| CVE-2026-65349 | Modified | 未確認 | CWE-125 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 2 |
| CVE-2026-65351 | Modified | 未確認 | CWE-703 | This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, |
| CVE-2026-65367 | Analyzed | 未確認 | CWE-476 | A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5. An app may be able to cause |
| CVE-2026-65370 | Analyzed | 未確認 | CWE-444 | ServiceTalk HTTP/1.x incorrectly handles malformed Transfer-Encoding which could result in request smuggling attacks. This vulnerability is addressed in servicetalk version 0.42.65 |
| CVE-2026-65400 | Analyzed | 掲載 | CWE-287 | An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, ma |
| CVE-2026-65432 | Modified | 未確認 | CWE-611 | Apache CXF reads a top-level WSDL through its hardened StaxUtils path, which disables XML DTDs and external entities. However, any <wsdl:import> or <xsd:import> referenced from tha |
| CVE-2026-65502 | Deferred | 未確認 | CWE-290 | Unauthenticated Bypass Vulnerability in Element Pack Elementor Addons <= 8.7.13 versions. |
| CVE-2026-65504 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in BOX NOW Delivery Croatia <= 3.3.0 versions. |
| CVE-2026-65507 | Deferred | 未確認 | CWE-266 | Unauthenticated Privilege Escalation in AIWU <= 1.5.6 versions. |
| CVE-2026-65508 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Simply Schedule Appointments <= 1.6.12.10 versions. |
| CVE-2026-65509 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in wpDataTables <= 7.5.1 versions. |
| CVE-2026-65513 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.12.10 versions. |
| CVE-2026-65515 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in AffiliateWP <= 2.35.0 versions. |
| CVE-2026-65517 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Easy PayPal Buy Now Button <= 2.0.4 versions. |
| CVE-2026-65520 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in WP OAuth Server <= 6.2.0 versions. |
| CVE-2026-65523 | Deferred | 未確認 | CWE-639 | Unauthenticated Insecure Direct Object References (IDOR) in Formidable Forms Signature Online Contract Automation <= 2.0.1 versions. |
| CVE-2026-65541 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Staff Training <= 1.0.7 versions. |
| CVE-2026-65542 | Deferred | 未確認 | CWE-288 | Unauthenticated Broken Authentication in Super Socializer <= 7.14.5 versions. |
| CVE-2026-65543 | Deferred | 未確認 | CWE-201 | Subscriber Sensitive Data Exposure in Vimeo <= 1.2.2 versions. |
| CVE-2026-65544 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Super Socializer <= 7.14.5 versions. |
| CVE-2026-65545 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in AI Engine <= 3.6.8 versions. |
| CVE-2026-65546 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Qode Tours <= 3.1.3.1 versions. |
| CVE-2026-65547 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in Creative Mail <= 1.6.9 versions. |
| CVE-2026-65548 | Deferred | 未確認 | CWE-94 | Contributor Remote Code Execution (RCE) in Betheme <= 28.4.2 versions. |
| CVE-2026-65549 | Deferred | 未確認 | CWE-502 | Author PHP Object Injection in Jeg Kit for Elementor <= 3.2.10 versions. |
| CVE-2026-65551 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Soflyy Breakdance allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Breakdance: from n/a before 2. |
| CVE-2026-65552 | Deferred | 未確認 | CWE-502 | Subscriber PHP Object Injection in Export User Data <= 2.2.6 versions. |
| CVE-2026-65553 | Deferred | 未確認 | CWE-94 | Unauthenticated Remote Code Execution (RCE) in Spider Analyser – WordPress搜索引擎蜘蛛分析插件 <= 2.1.3 versions. |
| CVE-2026-65554 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in AnsPress – Question and answer 4.4.4 versions. |
| CVE-2026-65556 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in WPBruiser {no- Captcha anti-Spam} <= 3.1.43 versions. |
| CVE-2026-65559 | Deferred | 未確認 | CWE-266 | Shop manager Privilege Escalation in Order Delivery Date for WooCommerce <= 4.6.0 versions. |
| CVE-2026-65560 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Houzez Property Feed <= 2.5.48 versions. |
| CVE-2026-65565 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Survey Maker <= 5.2.3.3 versions. |
| CVE-2026-65569 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in WP Job Portal <= 2.5.6 versions. |
| CVE-2026-65570 | Deferred | 未確認 | CWE-290 | Unauthenticated Bypass Vulnerability in Login with phone number <= 1.8.70 versions. |
| CVE-2026-65571 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in 69 Clothing <= 1.2.11.1 versions. |
| CVE-2026-65572 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in A.Williams <= 1.3.1 versions. |
| CVE-2026-65573 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Abelle <= 1.22 versions. |
| CVE-2026-65574 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Abogado <= 1.18 versions. |
| CVE-2026-65575 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Accalia <= 1.5.3 versions. |
| CVE-2026-65576 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Adrena <= 1.2.14 versions. |
| CVE-2026-65577 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Advice <= 1.18.0 versions. |
| CVE-2026-65578 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Agora <= 1.9 versions. |
| CVE-2026-65579 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Agricola <= 1.21.0 versions. |
| CVE-2026-65580 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Agrion <= 1.0.0 versions. |
| CVE-2026-65581 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in AI ANN <= 1.29.0 versions. |
| CVE-2026-65582 | Deferred | 未確認 | CWE-22 | Subscriber Arbitrary File Download in AI Hub <= 1.3.10 versions. |
| CVE-2026-65583 | Modified | 未確認 | CWE-345 | Apache CXF’s OIDC relying-party token validation could accept self-issued ID tokens without enforcing required claim checks (issuer/subject/audience/time and sub_jwk binding), enab |
| CVE-2026-65609 | Deferred | 未確認 | CWE-787 | nnn is vulnerable to Out-of-Bound write vulnerability. Due to lack of validation of attacker-controlled length fields deserialized from a session file, a crafted session file can c |
| CVE-2026-65610 | Deferred | 未確認 | CWE-197 | nnn stores homelen variable as uchar_t, which can only represent values in the range 0-255. An attacker who can influence the victim's execution environment can provide an arbitrar |
| CVE-2026-65611 | Deferred | 未確認 | CWE-78 | nnn does not sanitize the path variable. An attacker can create a directory on a shared filesystem, removable media, or inside an extracted archive whose name contains a single quo |
| CVE-2026-65612 | Deferred | 未確認 | CWE-78 | nnn does not sanitize the filename variable. An attacker can place a file with a crafted name on a shared filesystem, removable media, or inside an extracted archive whose name con |
| CVE-2026-65613 | Analyzed | 未確認 | CWE-200, CWE-284 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's Webhook module while listing and deleting deliveries. This issue affects Apache Clo |
| CVE-2026-65633 | Deferred | 未確認 | CWE-287 | Improper Authentication vulnerability in team-alembic AshAuthentication allows purpose-limited JWTs to be replayed as full bearer API credentials when a resource uses stateless bea |
| CVE-2026-65637 | Analyzed | 未確認 | CWE-20 | Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990. This issue affects Apache Tomcat: from 11.0.20 through 11.0.24, from 10.1.53 t |
| CVE-2026-65640 | Awaiting Analysis | 未確認 | CWE-434 | WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher. Prerequisites: * Imagick and Ghostscript i |
| CVE-2026-65641 | Deferred | 未確認 | CWE-288 | A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account. |
| CVE-2026-65642 | Awaiting Analysis | 未確認 | CWE-639 | Insecure direct object reference in Plesk 18.0.79.7 and earlier or 18.0.80 through 18.0.80.3, allows remote authenticated users to read and modify other customers' databases. |
| CVE-2026-65644 | Analyzed | 未確認 | CWE-79 | Rocket.Chat in versions before 8.8.0, 8.7.1, 8.6.2, 8.5.3, 8.4.6, 8.3.8, 8.2.8, 8.1.8, and 7.10.15 has a REST API endpoint POST /api/v1/livechat/visitor that accepts an unauthentic |
| CVE-2026-65645 | Analyzed | 未確認 | CWE-20 | Rocket.Chat in versions before 8.8.0, 8.7.1, 8.6.2, 8.5.3, 8.4.6. 8.3.8, 8.2.8, 8.1.8, and 7.10.15, the Meteor DDP methods getThreadsList and getThreadMessages accept rid / tmid as |
| CVE-2026-65646 | Awaiting Analysis | 未確認 | CWE-74 | Improper neutralization of special elements in in Plesk's DNS zone management functionality allows remote authenticated users to disclose arbitrary local files and escalate privile |
| CVE-2026-65647 | Awaiting Analysis | 未確認 | CWE-59 | Improper symlink resolution before file access in Plesk allows remote authenticated users to execute arbitrary code as root. |
| CVE-2026-65655 | Deferred | 未確認 | CWE-614 | When OAuth authentication is enabled and browser-facing TLS terminates at a reverse proxy that forwards the callback to Temporal UI Server over HTTP, affected versions derive authe |
| CVE-2026-65656 | Analyzed | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-65657 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-65658 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-65660 | Analyzed | 掲載 | CWE-94 | Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-65661 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-65662 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally. |
| CVE-2026-65663 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-65664 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-65665 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-65667 | Analyzed | 未確認 | CWE-862 | Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-65668 | Analyzed | 未確認 | CWE-284 | Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-65671 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally. |
| CVE-2026-65672 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally. |
| CVE-2026-65673 | Modified | 未確認 | CWE-89 | Incorrect authorization in Microsoft Entra Connect Sync allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-65675 | Modified | 未確認 | CWE-284, CWE-862 | No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-65678 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-65679 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network. |
| CVE-2026-65680 | Analyzed | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Microsoft OneDrive allows an authorized attacker to elevate privileges locally. |
| CVE-2026-65681 | Analyzed | 未確認 | CWE-476 | Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network. |
| CVE-2026-65767 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams for Android allows an authorized attacker to perform spoofing over a network |
| CVE-2026-65768 | Analyzed | 未確認 | CWE-22 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Teams for Android allows an unauthorized attacker to execute code over a network. |
| CVE-2026-65769 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Microsoft Teams Mobile allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-65770 | Analyzed | 未確認 | CWE-88 | Improper neutralization of argument delimiters in a command ('argument injection') in Azure Managed Instance for Apache Cassandra allows an unauthorized attacker to execute code ov |
| CVE-2026-65773 | Analyzed | 未確認 | CWE-284 | Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-65774 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-65775 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-65776 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-65777 | Analyzed | 未確認 | CWE-326 | Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network. |
| CVE-2026-65778 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. |
| CVE-2026-65779 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. |
| CVE-2026-65780 | Analyzed | 未確認 | CWE-415 | Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally. |
| CVE-2026-65781 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. |
| CVE-2026-65782 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. |
| CVE-2026-65783 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. |
| CVE-2026-65784 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. |
| CVE-2026-65785 | Analyzed | 未確認 | CWE-400 | Uncontrolled resource consumption in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network. |
| CVE-2026-65786 | Analyzed | 未確認 | CWE-122, CWE-125 | Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-65787 | Analyzed | 未確認 | CWE-122, CWE-125 | Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-65788 | Analyzed | 未確認 | CWE-416 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-65789 | Analyzed | 未確認 | CWE-416 | Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. |
| CVE-2026-65790 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally. |
| CVE-2026-65791 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network. |
| CVE-2026-65794 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-65795 | Modified | 未確認 | CWE-197 | Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-65796 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network. |
| CVE-2026-65797 | Analyzed | 未確認 | CWE-122, CWE-197 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-65798 | Analyzed | 未確認 | CWE-197 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-65799 | Analyzed | 未確認 | CWE-122, CWE-190 | Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-65801 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-65802 | Analyzed | 未確認 | CWE-73 | External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-65804 | Analyzed | 未確認 | CWE-94 | Improper control of generation of code ('code injection') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-65806 | Analyzed | 未確認 | CWE-862 | Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network. |
| CVE-2026-65807 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-65810 | Analyzed | 未確認 | CWE-23 | Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally. |
| CVE-2026-65811 | Analyzed | 未確認 | CWE-20 | Improper input validation in Power BI allows an authorized attacker to execute code over a network. |
| CVE-2026-65813 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-65814 | Analyzed | 未確認 | CWE-122, CWE-190 | Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-65815 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network. |
| CVE-2026-65816 | Analyzed | 未確認 | CWE-706 | Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-65819 | Deferred | 未確認 | CWE-125, CWE-400 | gopacket provides packet processing capabilities for Go. Through version 1.7.0, multiple layer decoders use attacker-controlled lengths, counts, or offsets before validating them a |
| CVE-2026-65822 | Deferred | 未確認 | CWE-89 | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.116.0 and 16.23.0, erpnext/selling/report/inactive_customers/inactive_customers.py accepts an unval |
| CVE-2026-65832 | Deferred | 未確認 | CWE-125, CWE-129 | Deskflow is a keyboard and mouse sharing app. Prior to continuous build 1.26.0.299, a remote unauthenticated Deskflow server can send kMsgDSetOptions (DSOP) values to ServerProxy:: |
| CVE-2026-65842 | Deferred | 未確認 | CWE-918 | Plate is a rich-text editor with AI and shadcn/ui. Prior to 53.3.2, @platejs/docx-io fetches remote image URLs while converting attacker-controlled HTML through htmlToDocxBlob in a |
| CVE-2026-65875 | Deferred | 未確認 | CWE-1236 | BaserCMS provided by baserCMS Users Community contains a CSV file injection vulnerability. If a user downloads and opens a CSV file containing malicious code injected by an attacke |
| CVE-2026-65905 | Analyzed | 未確認 | CWE-294 | Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made, a client makes a DIGEST authenticated |
| CVE-2026-65915 | Analyzed | 未確認 | CWE-284 | NLTK versions before 3.10.0 contain a logic bug in FileSystemPathPointer.open() where the sandbox validation check compares a normalized path against itself, making the security ch |
| CVE-2026-65926 | Awaiting Analysis | 未確認 | CWE-862 | An anonymous caller when anonymous access is enabled, or a low-privilege authenticated user, may learn private Release Bundle names and versions when the bundle name is known. |
| CVE-2026-65927 | Analyzed | 未確認 | CWE-193 | Off-by-one Error vulnerability in Apache Tomcat impacting the [N] flag on the rewrite valves causes rewrite processing to restart at the second rule rather than the first rule. |
| CVE-2026-65930 | Deferred | 未確認 | CWE-79 | LimeSurvey Community Edition 7.0.5 contains an authenticated stored cross-site scripting vulnerability in the replacement-fields dialog used by the administrative question editor.T |
| CVE-2026-65931 | Deferred | 未確認 | CWE-862 | LimeSurvey Community Edition 7.0.5 contains an authenticated improper authorization vulnerability in the survey menu entry creation endpoint. An authenticated user with only the |
| CVE-2026-65932 | Awaiting Analysis | 未確認 | CWE-440 | The BT122 module stops advertising after receiving a plaintext 'pause enceryption response' message resulting in a denial of service. See vulnerability B-E2 in the related paper be |
| CVE-2026-65933 | Awaiting Analysis | 未確認 | CWE-126 | A malformed Bluetooth connection request message can cause the BT122 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below. |
| CVE-2026-65934 | Awaiting Analysis | 未確認 | CWE-440 | An unencrypted 'pause encryption request' message causes a denial of service in the BT122 module. See vulnerability B-E10 in the related paper below. |
| CVE-2026-65935 | Awaiting Analysis | 未確認 | CWE-305 | Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key value. See vulnerability B-E3 in the related paper below. |
| CVE-2026-65936 | Awaiting Analysis | 未確認 | CWE-126 | A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below. |
| CVE-2026-65937 | Analyzed | 未確認 | CWE-79, CWE-94 | In WhatsUp Gold versions released before 2026.0.2, an authenticated attacker can bypass frontend controls and inject persistent script content. |
| CVE-2026-65938 | Analyzed | 未確認 | CWE-602, CWE-862 | In WhatsUp Gold versions released before 2026.0.2, an improper authorization vulnerability in the Scheduled Reports API allows any authenticated user to invoke restricted actions. |
| CVE-2026-65939 | Analyzed | 未確認 | CWE-22, CWE-434, CWE-73 | In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can create a LogToFile action specifying an arbitrary file extension within the IIS web root. |
| CVE-2026-65940 | Analyzed | 未確認 | CWE-276, CWE-732 | In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can write arbitrary files to a web-accessible location on the host server. |
| CVE-2026-65941 | Analyzed | 未確認 | CWE-306, CWE-73, CWE-918, CWE-94 | In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network access to the affected service can execute arbitrary code in the context of the I |
| CVE-2026-65942 | Analyzed | 未確認 | CWE-297 | TLS hostname verification issue in Apache Ranger Client Code in versions <= 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes this issue. |
| CVE-2026-65945 | Analyzed | 未確認 | CWE-532 | Logs contain replayable JWT tokens in Apache Ranger versions <= 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue. |
| CVE-2026-65948 | Analyzed | 未確認 | CWE-307 | UnixAuth lacks brute-force protection in Apache Ranger versions <= 2.8.0. Note: UnixAuth is NOT a recommended option for production deployments. Users are recommended to upgrade |
| CVE-2026-65956 | Deferred | 未確認 | CWE-306 | KubePi is a Kubernetes multi-cluster management panel. In versions up to and including 1.6.15, the SSO configuration API endpoints are exposed on the same public routing boundary a |
| CVE-2026-65959 | Awaiting Analysis | 未確認 | CWE-862 | Vitess is a database clustering system for horizontal scaling of MySQL. In 24.0.2 and earlier, the /debug/vrlog endpoint registered by addHttpEndpoint() in go/vt/vttablet/tabletman |
| CVE-2026-65974 | Deferred | 未確認 | CWE-1336 | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.111.0 and 16.22.0, limited authenticated users can cross a permission boundary in Frappe safe execu |
| CVE-2026-65976 | Deferred | 未確認 | CWE-400 | Deskflow is a keyboard and mouse sharing app. From 1.17.0 until continuous build 1.26.0.300, a connected peer can send repeated DCLP DataChunk messages to ClipboardChunk::assemble( |
| CVE-2026-65979 | Deferred | 未確認 | CWE-125, CWE-20 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. From version 3.4.0 through 3.4.12, the HTJ2K decoder |
| CVE-2026-65984 | Deferred | 未確認 | CWE-613 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. In 1.3.2 and earlier, POST /api/refresh in server/api/auth/index.js falls back from current user data to d |
| CVE-2026-65985 | Deferred | 未確認 | CWE-918 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. In 1.3.2 and earlier, the device-webapi-request Socket.IO handler in server/runtime/index.js permits an au |
| CVE-2026-65986 | Awaiting Analysis | 未確認 | CWE-434, CWE-79 | CVAT is an open source interactive video and image annotation tool for computer vision. Versions 2.5.0 through 2.66.0 contain a XSS vulnerability that can be accessed through annot |
| CVE-2026-66000 | Deferred | 未確認 | CWE-863 | Frappe is a full-stack web application framework. Prior to 16.23.0 and 15.112.0, Document Follow notification generation does not re-evaluate the recipient's current document permi |
| CVE-2026-66001 | Deferred | 未確認 | CWE-352 | Frappe is a full-stack web application framework. Prior to 15.114.0 and 16.26.0, the approve and authorize functions in frappe/integrations/oauth2.py allow the OAuth2 consent flow |
| CVE-2026-66002 | Deferred | 未確認 | CWE-204 | Frappe is a full-stack web application framework. Prior to 15.115.0 and 16.27.0, the public request-data web form and PersonalDataDownloadRequest class in frappe/website/doctype/pe |
| CVE-2026-66003 | Deferred | 未確認 | CWE-863 | Frappe is a full-stack web application framework written in Python and JavaScript. Prior to version 15.115.0, an access control bypass in the REST API allows a user to read data fr |
| CVE-2026-66016 | Analyzed | 未確認 | CWE-312 | Under specific self-hosted Helm configurations, generated TLS private keys may be retained in rendered manifests accessible to highly privileged local users. |
| CVE-2026-66046 | Analyzed | 未確認 | CWE-407 | Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts() function in xmlparse.c, where processing N specified at |
| CVE-2026-66047 | Deferred | 未確認 | CWE-306, CWE-330 | ProfilePress (wp-user-avatar) WordPress plugin before 4.17.2 contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to install and ac |
| CVE-2026-66058 | Deferred | 未確認 | CWE-639, CWE-862 | Frappe is a full-stack web application framework. Prior to 16.20.0 and 15.112.0, unrestricted access to a Document Follow API (update_follow) is possible for an authenticated user. |
| CVE-2026-66059 | Deferred | 未確認 | CWE-863 | Frappe is a full-stack web application framework. Prior to 16.20.0 and 15.112.0, a field-level permissions bypass exposes restricted DocType fields. This issue is fixed in versions |
| CVE-2026-66060 | Deferred | 未確認 | CWE-862 | Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.5.3, the Companion app treats tag links (NFC or QR) delivered through a |
| CVE-2026-66061 | Deferred | 未確認 | CWE-862 | Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.5.0, the iOS Companion app treats tag links (NFC or QR) delivered throug |
| CVE-2026-66062 | Deferred | 未確認 | CWE-1333 | SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. Prior to 2.70.2, the content negotiation header parser used by SvelteKit's request |
| CVE-2026-66065 | Deferred | 未確認 | CWE-15, CWE-94 | Ouroboros is a local-first runtime for AI coding agents that records their actions and applies user-defined policies to constrain behavior. Versions prior to 0.42.1 have an incompl |
| CVE-2026-66098 | Awaiting Analysis | 未確認 | CWE-306 | The Mira hormone monitor device firmware accepts a 0x01 write from any BLE central without authentication, causing the device to reboot into bootloader mode. An attacker could caus |
| CVE-2026-66109 | Deferred | 未確認 | CWE-862 | A missing authorization vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to the Windows system on wh |
| CVE-2026-66145 | Awaiting Analysis | 未確認 | CWE-94 | An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier versions which allows remote attacker to read sensitive data and pe |
| CVE-2026-66146 | Awaiting Analysis | 未確認 | CWE-79 | Multiple Cross-Site Scripting (XSS) vulnerabilities were identified in GMS 9.5.1 (Build 9510.1044) and earlier versions that allow a remote attacker to execute javascript script in |
| CVE-2026-66147 | Awaiting Analysis | 未確認 | CWE-94 | An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier versions which allows remote attacker to perform remote cod |
| CVE-2026-66148 | Awaiting Analysis | 未確認 | CWE-94 | An authenticated command injection vulnerability was identified in GMS Command-Line Interface (CLI) 9.5.1 (Build 9510.1044) and earlier versions which allows low-privileged local u |
| CVE-2026-66149 | Awaiting Analysis | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Emai |
| CVE-2026-66150 | Awaiting Analysis | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Emai |
| CVE-2026-66151 | Awaiting Analysis | 未確認 | CWE-125 | SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, which could allow a local attacker to ca |
| CVE-2026-66152 | Awaiting Analysis | 未確認 | CWE-29 | A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary file as root. |
| CVE-2026-66153 | Awaiting Analysis | 未確認 | CWE-59 | The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows an attacker to manipulate file paths. |
| CVE-2026-66154 | Awaiting Analysis | 未確認 | CWE-295 | An insufficient certificate validation in a privileged communication workflow, was identified in a GMS application 9.5.1 (Build 9510.1044) and earlier versions which, under a succe |
| CVE-2026-66155 | Awaiting Analysis | 未確認 | CWE-79 | A vulnerability has been identified in Element maps-ng V47 (All versions < V47.12.3), Element maps-ng V48 (All versions < V48.11.3), Element maps-ng V49 (All versions < V49.16.1). |
| CVE-2026-66256 | Analyzed | 未確認 | CWE-502 | ** UNSUPPORTED WHEN ASSIGNED ** Deserialization of Untrusted Data vulnerability in Apache Shindig. This issue affects Apache Shindig: all versions. Users with access to the Shind |
| CVE-2026-66257 | Analyzed | 未確認 | CWE-770 | A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apache Qpid Proton-J: thr |
| CVE-2026-6627 | Deferred | 未確認 | CWE-862 | The WPFormify – Stripe Payments with Form and Checkout plugin for WordPress is vulnerable to unauthorized modification and deletion of Stripe payment credentials in all versions up |
| CVE-2026-66270 | Analyzed | 未確認 | CWE-434 | Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote acces |
| CVE-2026-66271 | Analyzed | 未確認 | CWE-434 | Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote acces |
| CVE-2026-66272 | Analyzed | 未確認 | CWE-200 | Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access c |
| CVE-2026-66273 | Analyzed | 未確認 | CWE-789 | A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Proton-J |
| CVE-2026-66274 | Analyzed | 未確認 | CWE-674 | A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid Proton-J: through |
| CVE-2026-66275 | Analyzed | 未確認 | CWE-770 | An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. |
| CVE-2026-66276 | Analyzed | 未確認 | CWE-606 | An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service. This is |
| CVE-2026-66277 | Analyzed | 未確認 | CWE-770 | It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial |
| CVE-2026-66296 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in lud oaskit allows reflected cross-site scripting via the default HTML error handler. Oaskit.Erro |
| CVE-2026-66297 | Analyzed | 未確認 | CWE-78 | Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) vulnerability in livebook-dev livebook allows command injection into generated deployment s |
| CVE-2026-66298 | Analyzed | 未確認 | CWE-346 | Origin Validation Error vulnerability in livebook-dev livebook allows untrusted notebook output JavaScript to trigger session-wide keyboard shortcuts, including forced evaluation o |
| CVE-2026-66300 | Awaiting Analysis | 未確認 | CWE-79 | SNOMED International Snowstorm contains a reflected XSS vulnerability within the "Web Route" redirection functionality. An attacker can inject arbitrary JavaScript which will execu |
| CVE-2026-66301 | Analyzed | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information over a network. |
| CVE-2026-66309 | Analyzed | 未確認 | CWE-284 | Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-66310 | Analyzed | 未確認 | CWE-73 | External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally. |
| CVE-2026-66311 | Analyzed | 未確認 | CWE-862 | Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally. |
| CVE-2026-66312 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network. |
| CVE-2026-66313 | Analyzed | 未確認 | CWE-346 | Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally. |
| CVE-2026-66314 | Analyzed | 未確認 | CWE-367 | Time-of-check time-of-use (toctou) race condition in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-66315 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-66316 | Analyzed | 未確認 | CWE-346 | Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-66317 | Analyzed | 未確認 | CWE-346 | Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering over a network. |
| CVE-2026-66318 | Analyzed | 未確認 | CWE-346 | Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-66321 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-66322 | Analyzed | 未確認 | CWE-346 | Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-66323 | Analyzed | 未確認 | CWE-141 | Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-66324 | Analyzed | 未確認 | CWE-73 | External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-66325 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-66326 | Analyzed | 未確認 | CWE-862 | Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-66340 | Deferred | 未確認 | CWE-307 | The Mira cloud authentication endpoints do not enforce per-account rate limiting, per-IP throttling, or account lockout after repeated failed login attempts. An attacker can use br |
| CVE-2026-66344 | Deferred | 未確認 | CWE-427 | NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Uncontrolled Search Path Element vulnerability (CWE-427). An authenticated attacker may exploit this v |
| CVE-2026-66353 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in woylie doggo allows Reflected XSS. Doggo.normalize_value/2 in lib/doggo.ex re |
| CVE-2026-66358 | Deferred | 未確認 | CWE-79 | A cross-site scripting vulnerability exists in acmailer, which may allow an attacker to execute an arbitrary script. |
| CVE-2026-66370 | Modified | 未確認 | CWE-601 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the HTML5 scrubber in rrrene html_sanitize_ex allows an unauthenticated remote attacker to retarget a form alre |
| CVE-2026-66375 | Analyzed | 未確認 | CWE-862 | A low-privilege authenticated user may permanently remove protected internal metadata across repositories under specific conditions. |
| CVE-2026-66376 | Analyzed | 未確認 | CWE-613 | Credentials for a deleted user may remain valid for a short period under specific conditions. |
| CVE-2026-66377 | Analyzed | 未確認 | CWE-862 | An unauthenticated user may access restricted repository information under specific conditions. |
| CVE-2026-66378 | Analyzed | 未確認 | CWE-862 | An authenticated user without repository read permission may access private NuGet metadata under specific conditions. |
| CVE-2026-66379 | Analyzed | 未確認 | CWE-862 | An authenticated user may view private Puppet module metadata without repository read access. |
| CVE-2026-66380 | Analyzed | 未確認 | CWE-862 | An authenticated user without repository read permission may access private OCI referrer metadata under specific conditions. |
| CVE-2026-66381 | Analyzed | 未確認 | CWE-22 | A repository reader with cache-deploy permission may access content outside a configured upstream path under specific conditions. |
| CVE-2026-66382 | Analyzed | 未確認 | CWE-22 | An authenticated user may write files outside the intended Artifactory work directory under specific conditions. |
| CVE-2026-66384 | Analyzed | 掲載 | CWE-22 | An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions. |
| CVE-2026-6639 | Deferred | 未確認 | CWE-862 | The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.6. This is due to the `g |
| CVE-2026-66393 | Analyzed | 未確認 | CWE-674 | NLTK versions before 3.9.4 contain an unbounded recursion vulnerability in JSONTaggedDecoder.decode_obj() that allows attackers to cause denial of service by supplying deeply neste |
| CVE-2026-66401 | Analyzed | 未確認 | CWE-125 | FreeRDP before 3.29.0 contains an out-of-bounds heap read vulnerability in the UVC H.264 extension-unit parser that fails to validate descriptor length before accessing the GUID fi |
| CVE-2026-66402 | Analyzed | 未確認 | CWE-295 | FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains multiple TLS certificate identity validation weaknesses in tls_verify_certificate(), tls_match_hostname(), and x509_uti |
| CVE-2026-66403 | Deferred | 未確認 | CWE-489 | DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the web server for debugging purposes enabled. The floor map and log information stored on the affected products may be retrieved. |
| CVE-2026-66404 | Deferred | 未確認 | CWE-295 | DEEBOT PRO M1 and DEEBOT PRO K1VAC do not validate server certificates in MQTT communications. Operation logs and activity logs stored on the affected products may be retrieved. |
| CVE-2026-66405 | Deferred | 未確認 | CWE-489 | DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the telnet servers enabled. The telnet service may be leveraged to log in to the affected products. |
| CVE-2026-66406 | Deferred | 未確認 | CWE-295 | DEEBOT PRO M1 and DEEBOT PRO K1VAC use wget command with server certificate validation disabled. A man-in-the-middle attack may allow to obtain and/or alter communications of the |
| CVE-2026-66407 | Deferred | 未確認 | CWE-327 | DEEBOT PRO M1 and DEEBOT PRO K1VAC improperly implement authentication in WebSocket communication. The WebSocket private key may be retrieved through analyzing the traffic data vi |
| CVE-2026-66408 | Deferred | 未確認 | CWE-1391 | The root accounts of DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords. Physical access to an affected product may allow to obtain the password of the root acc |
| CVE-2026-66409 | Deferred | 未確認 | CWE-1391 | DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords for their Wi-Fi hotspot networks. The password may be analyzed and obtained to connect to the access point of |
| CVE-2026-66410 | Deferred | 未確認 | CWE-295 | Android and iOS apps ECOVACS PRO App improperly validate server certificates. Communication may be retrieved and/or altered. |
| CVE-2026-66411 | Deferred | 未確認 | CWE-303 | DEEBOT PRO M1 and DEEBOT PRO K1VAC incorrectly implement authentication algorithm in Websocket communications. An unauthenticated attacker may connect and operate the affected rob |
| CVE-2026-66422 | Analyzed | 未確認 | CWE-285 | Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct us |
| CVE-2026-66424 | Deferred | 未確認 | CWE-266 | Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.7 versions. |
| CVE-2026-66425 | Deferred | 未確認 | CWE-288 | Unauthenticated Broken Authentication in Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder <= 1.9.0 versions. |
| CVE-2026-66426 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WP-Stats <= 2.56 versions. |
| CVE-2026-66429 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Visitor Traffic Real Time Statistics Pro <= 11.10 versions. |
| CVE-2026-66430 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in Visitor Traffic Real Time Statistics Pro <= 11.10 versions. |
| CVE-2026-66431 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Bitcoin Lightning Payment Gateway for WooCommerce (via CLINK) <= 1.0.7 versions. |
| CVE-2026-66432 | Deferred | 未確認 | CWE-1258 | Subscriber Sensitive Data Exposure in WPJAM Basic <= 7.0.2.1 versions. |
| CVE-2026-66436 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Active Products Tables for WooCommerce <= 1.1.1 versions. |
| CVE-2026-66439 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Advanced AJAX Product Filters <= 3.2.0.3 versions. |
| CVE-2026-66440 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WPIDE – File Manager & Code Editor <= 3.5.7 versions. |
| CVE-2026-66441 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in MultiVendorX <= 5.0.10 versions. |
| CVE-2026-66443 | Deferred | 未確認 | CWE-201 | Unauthenticated Sensitive Data Exposure in REST API Log <= 1.7.1 versions. |
| CVE-2026-66444 | Deferred | 未確認 | CWE-497 | Subscriber Sensitive Data Exposure in Payment Forms for Paystack <= 4.0.5 versions. |
| CVE-2026-66446 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in If-So Dynamic Content Personalization <= 1.10 versions. |
| CVE-2026-66447 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in WordPress File Upload <= 5.1.7 versions. |
| CVE-2026-66449 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Geo Mashup <= 1.13.18 versions. |
| CVE-2026-66450 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Geo Mashup <= 1.13.18 versions. |
| CVE-2026-66451 | Deferred | 未確認 | CWE-288 | Unauthenticated Broken Authentication in WP Event SOlution <= 4.1.9 versions. |
| CVE-2026-66452 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Legal Text Connector of the IT-Recht Kanzlei <= 1.0.13 versions. |
| CVE-2026-66453 | Deferred | 未確認 | CWE-288 | Unauthenticated Broken Authentication in Salon booking system <= 10.30.26 versions. |
| CVE-2026-66454 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in WP Social Avatar <= 1.5 versions. |
| CVE-2026-66455 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in ReactPress <= 3.4.0 versions. |
| CVE-2026-66456 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in Profile Extra Fields by BestWebSoft <= 1.3.4 versions. |
| CVE-2026-66457 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pixelite Events Manager events-manager allows Reflected XSS.This issue affects |
| CVE-2026-66458 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in RealPress <= 1.1.2 versions. |
| CVE-2026-66459 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in AI for SEO <= 2.4.2 versions. |
| CVE-2026-66460 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in AfterShip Tracking <= 1.18.1 versions. |
| CVE-2026-66461 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in SMEPay: UPI Gateway for WooCommerce <= 1.0.5 versions. |
| CVE-2026-66462 | Deferred | 未確認 | CWE-497 | Unauthenticated Sensitive Data Exposure in WooCommerce Appointments <= 5.3.8 versions. |
| CVE-2026-66463 | Deferred | 未確認 | CWE-201 | Unauthenticated Sensitive Data Exposure in iCARRY <= 2.9 versions. |
| CVE-2026-66464 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Internal Link Optimiser <= 5.2.7 versions. |
| CVE-2026-66465 | Deferred | 未確認 | CWE-288 | Unauthenticated Broken Authentication in Cartify <= 1.3.0.1 versions. |
| CVE-2026-66466 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.1.1 versions. |
| CVE-2026-66467 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in FluentCommunity <= 2.7.5 versions. |
| CVE-2026-66468 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Local Delivery Drivers for WooCommerce <= 3.0.0 versions. |
| CVE-2026-66469 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Arvow AI SEO Writer <= 1.5.3 versions. |
| CVE-2026-66470 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Frontend Admin by DynamiApps <= 3.29.10 versions. |
| CVE-2026-66471 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in Accordion <= 3.0.6 versions. |
| CVE-2026-66472 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Everest Backup <= 2.3.12 versions. |
| CVE-2026-66478 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Church Admin <= 5.1.1 versions. |
| CVE-2026-66484 | Deferred | 未確認 | CWE-22 | GNU cpio contains a Path Traversal vulnerability in its tar archive extraction functionality. When extracting a tar archive in copy-in mode with the --no-absolute-filenames option, |
| CVE-2026-66485 | Deferred | 未確認 | CWE-789 | GNU cpio is vulnerable to an uncontrolled memory allocation in the make_path function at src/makepath.c. The function uses alloca to allocate stack memory based on the length of ar |
| CVE-2026-66486 | Deferred | 未確認 | CWE-116 | GNU cpio is vulnerable to improper encoding or escaping of output in its archive member listing functionality. When listing archive members via cpio -it, member names are printed d |
| CVE-2026-66491 | Deferred | 未確認 | CWE-22 | Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the getSource function lead to an arbitrary file read vulnerabili |
| CVE-2026-66492 | Deferred | 未確認 | CWE-22 | Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the file upload action lead to path a traversal vulnerab |
| CVE-2026-66493 | Deferred | 未確認 | CWE-22 | Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths for delete, copy and move actions lead to path traversal vu |
| CVE-2026-66494 | Deferred | 未確認 | CWE-284, CWE-79 | Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Shapes API endpoint SP Page Builder < 6.7.0 - An unauthenticated attacker can store malicious JavaScript in a Joom |
| CVE-2026-66581 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.14.1 versions. |
| CVE-2026-66582 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in TranslatePress <= 3.3.2 versions. |
| CVE-2026-66583 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Forminator <= 1.57.0 versions. |
| CVE-2026-66584 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in 12 Step Meeting List <= 3.19.16 versions. |
| CVE-2026-66585 | Deferred | 未確認 | CWE-201 | Unauthenticated Sensitive Data Exposure in WP Cafe Pro < 3.0.15 versions. |
| CVE-2026-66586 | Deferred | 未確認 | CWE-98 | Author Local File Inclusion in WP Cafe Pro < 3.0.15 versions. |
| CVE-2026-66587 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in WP Cafe Pro < 3.0.15 versions. |
| CVE-2026-66589 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Kings Plugins B2BKing allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects B2BKing: from n/a through |
| CVE-2026-66590 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Tagembed <= 7.4 versions. |
| CVE-2026-66591 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant allows Stored XSS. This issue affects M |
| CVE-2026-66592 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 versions. |
| CVE-2026-66593 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Security & Malware scan by CleanTalk <= 2.184 versions. |
| CVE-2026-66594 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in WordPress Persistent Login <= 3.1.0 versions. |
| CVE-2026-66595 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in WP Data Access <= 5.5.80 versions. |
| CVE-2026-66596 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Newsletter <= 9.3.3 versions. |
| CVE-2026-66597 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in wpDataTables <= 6.5.1.4 versions. |
| CVE-2026-66598 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in B2BKing Premium <= 5.6.07 versions. |
| CVE-2026-66599 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WPComplete <= 2.9.5.6 versions. |
| CVE-2026-66600 | Deferred | 未確認 | CWE-434 | Author Arbitrary File Upload in Media LIbrary Assistant <= 3.39 versions. |
| CVE-2026-66601 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.39 versions. |
| CVE-2026-66602 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in DevItems HashBar – WordPress Notification Bar allows Cross Site Request Forgery. This issue affects HashBar – WordPress Notifica |
| CVE-2026-66603 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Artiss Draft List simple-draft-list allows Stored XSS. This issue affec |
| CVE-2026-66604 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in GeoDirectory <= 2.8.173 versions. |
| CVE-2026-66605 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Swatchly – WooCommerce Variation Swatches for Products <= 1.4.13 versions. |
| CVE-2026-66606 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in SmartSMTP <= 1.2.0 versions. |
| CVE-2026-66607 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Advance Product Search <= 1.4.8 versions. |
| CVE-2026-66609 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in TheGem (Elementor) <= 5.12.3 versions. |
| CVE-2026-66610 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Urna <= 2.6.2 versions. |
| CVE-2026-66611 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Paymob for WooCommerce <= 4.1.10 versions. |
| CVE-2026-66612 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Aora <= 1.3.19 versions. |
| CVE-2026-66613 | Deferred | 未確認 | CWE-1336 | Unauthenticated Remote Code Execution (RCE) in JetEngine <= 3.8.14 versions. |
| CVE-2026-66614 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in SEO Plugin by Squirrly SEO <= 14.2.2 versions. |
| CVE-2026-66615 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Podlove Podcast Publisher <= 4.5.4 versions. |
| CVE-2026-66616 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Form Maker by 10Web form-maker allows Stored XSS.This issue affects Form |
| CVE-2026-66620 | Deferred | 未確認 | CWE-502 | Editor PHP Object Injection in OptionTree <= 2.7.3 versions. |
| CVE-2026-66621 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ultimate Dashboard Ultimate Dashboard Pro ultimate-dashboard-pro allows DOM-Ba |
| CVE-2026-66622 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Depicter Slider <= 4.8.0 versions. |
| CVE-2026-66623 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Social Media & Share Icons <= 2.9.9 versions. |
| CVE-2026-66627 | Deferred | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type vulnerability in EDGE22 Studios Ltd. GP Premium allows Remote Code Inclusion. This issue affects GP Premium: from n/a through 2.5.5 |
| CVE-2026-66629 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Kirki <= 6.2.3 versions. |
| CVE-2026-66633 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Fluent Forms Pro Add On Pack < 6.2.12 versions. |
| CVE-2026-66634 | Deferred | 未確認 | CWE-639 | Subscriber Insecure Direct Object References (IDOR) in Modal Survey <= 2.0.2.2.3 versions. |
| CVE-2026-66635 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in 10Web Slider by 10Web slider-wd allows Cross Site Request Forgery.This issue affects Slider by 10Web: from n/a through 1.2.63. |
| CVE-2026-66636 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Marcin Wise Chat wise-chat allows Stored XSS.This issue affects Wise Chat: fro |
| CVE-2026-66637 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Featured Video Plus <= 2.3.3 versions. |
| CVE-2026-66638 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Frontend Admin by DynamiApps <= 3.29.10 versions. |
| CVE-2026-66639 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in WPZOOM Forms – Contact Form Plugin for Gutenberg <= 2.0.4 versions. |
| CVE-2026-66640 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Login With Ajax <= 4.5.1 versions. |
| CVE-2026-66641 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Video Conferencing with Zoom <= 4.6.8 versions. |
| CVE-2026-66642 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in WP Umbrella allows Cross Site Request Forgery. This issue affects WP Umbrella: from 2.24.2 through 2.26.2. |
| CVE-2026-66643 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Wufoo Shortcode <= 1.55 versions. |
| CVE-2026-66644 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Typing Effect <= 1.3.7 versions. |
| CVE-2026-66645 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Table Of Contents Block <= 1.5.0 versions. |
| CVE-2026-66646 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in WP Tab Widget <= 1.2.11 versions. |
| CVE-2026-66647 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Homlisti <= 3.1.2 versions. |
| CVE-2026-66648 | Deferred | 未確認 | CWE-266 | Unauthenticated Privilege Escalation in Jawn <= 1.4.2 versions. |
| CVE-2026-66649 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Directory Pro <= 2.5.8 versions. |
| CVE-2026-66650 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in FreightCo <= 1.1.15 versions. |
| CVE-2026-66651 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe |
| CVE-2026-66653 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Barista <= 2.5.1 versions. |
| CVE-2026-66654 | Deferred | 未確認 | CWE-918 | Subscriber Server Side Request Forgery (SSRF) in Vehica Core <= 1.0.104 versions. |
| CVE-2026-66655 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in MultiParcels Shipping For WooCommerce <= 1.30.36 versions. |
| CVE-2026-66656 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Foton Core <= 1.1.1 versions. |
| CVE-2026-66657 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Biagiotti Core <= 2.1.1 versions. |
| CVE-2026-66658 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in Reviewer <= 3.14.2 versions. |
| CVE-2026-66659 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Essekia Tablesome Table allows Blind SQL Injection. This issue affects Tables |
| CVE-2026-66660 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Contact Form 7 – PayPal & Stripe Add-on <= 2.5.1 versions. |
| CVE-2026-66661 | Deferred | 未確認 | CWE-266 | Subscriber Privilege Escalation in Directories Pro <= 2.0.5 versions. |
| CVE-2026-66662 | Deferred | 未確認 | CWE-266 | Unauthenticated Privilege Escalation in Frontend Admin by DynamiApps <= 3.29.10 versions. |
| CVE-2026-66663 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions. |
| CVE-2026-66664 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in SEO Plugin by Squirrly SEO <= 14.2.0 versions. |
| CVE-2026-66665 | Deferred | 未確認 | CWE-434 | Unauthenticated Arbitrary File Upload in Type Hub <= 2.0.6 versions. |
| CVE-2026-66667 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Templately <= 3.7.1 versions. |
| CVE-2026-66668 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in Community by PeepSo <= 9.0.5.2 versions. |
| CVE-2026-66670 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Måne <= 1.7 versions. |
| CVE-2026-66671 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Verdure Core <= 1.2 versions. |
| CVE-2026-66672 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Flatastic <= 2.0 versions. |
| CVE-2026-66673 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Flatastic <= 2.0 versions. |
| CVE-2026-66677 | Deferred | 未確認 | CWE-288 | Subscriber Broken Authentication in Leyka <= 3.32.3 versions. |
| CVE-2026-66678 | Deferred | 未確認 | CWE-862 | Contributor Broken Access Control in Advanced Custom Fields: Font Awesome Field <= 6.1.1 versions. |
| CVE-2026-66679 | Deferred | 未確認 | CWE-1284 | Unauthenticated Broken Access Control in Appointment Hour Booking <= 1.5.91 versions. |
| CVE-2026-66680 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Locatoraid Store Locator <= 3.9.72 versions. |
| CVE-2026-66681 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in Theme My Login <= 7.1.14 versions. |
| CVE-2026-66682 | Deferred | 未確認 | CWE-266 | Unauthenticated Privilege Escalation in Abandoned Cart Pro for WooCommerce <= 10.4.0 versions. |
| CVE-2026-66683 | Deferred | 未確認 | CWE-201 | Unauthenticated Sensitive Data Exposure in Custom CSS and JavaScript <= 2.0.16 versions. |
| CVE-2026-66684 | Deferred | 未確認 | CWE-201 | Unauthenticated Sensitive Data Exposure in Export Import Menus <= 1.9.2 versions. |
| CVE-2026-66685 | Deferred | 未確認 | CWE-201 | Unauthenticated Sensitive Data Exposure in Featured Video Plus <= 2.3.3 versions. |
| CVE-2026-66686 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in Plugins Garbage Collector (Database Cleanup) <= 0.14 versions. |
| CVE-2026-66687 | Deferred | 未確認 | CWE-79 | Customer Cross Site Scripting (XSS) in WpBookingly <= 1.3.2 versions. |
| CVE-2026-66688 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Ultimate Addons for Elementor <= 1.45.2 versions. |
| CVE-2026-66689 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Anti Spam and list cleaner – AcyChecker <= 2.0.0 versions. |
| CVE-2026-66690 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.5 versions. |
| CVE-2026-66691 | Deferred | 未確認 | CWE-640 | Unauthenticated Broken Access Control in Nokri <= 1.6.6 versions. |
| CVE-2026-66692 | Deferred | 未確認 | CWE-639 | Customer Insecure Direct Object References (IDOR) in Colissimo Officiel : Méthodes de livraison pour WooCommerce <= 2.10.0 versions. |
| CVE-2026-66693 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Motors <= 1.4.113 versions. |
| CVE-2026-66694 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Thrive Architect <= 10.9.3.1 versions. |
| CVE-2026-66695 | Deferred | 未確認 | CWE-35 | Unauthenticated Path Traversal in W3 Total Cache <= 2.10.2 versions. |
| CVE-2026-66696 | Deferred | 未確認 | CWE-201 | Contributor Sensitive Data Exposure in Gutenberg Blocks by Kadence Blocks <= 3.7.8 versions. |
| CVE-2026-66697 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Colissimo Officiel : Méthodes de livraison pour WooCommerce <= 2.10.0 versions. |
| CVE-2026-66698 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in SureDash <= 1.10.1 versions. |
| CVE-2026-66699 | Deferred | 未確認 | CWE-862 | Custom role Broken Access Control in Dokan <= 5.0.10 versions. |
| CVE-2026-66700 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Smart Online Order for Clover <= 1.6.1 versions. |
| CVE-2026-66701 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Profile Builder <= 3.16.5 versions. |
| CVE-2026-66702 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Rank Math SEO <= 1.0.274.1 versions. |
| CVE-2026-66703 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in MailOptin <= 1.2.78.0 versions. |
| CVE-2026-66704 | Deferred | 未確認 | CWE-918 | Unauthenticated Server Side Request Forgery (SSRF) in Gutenverse Companion <= 2.5.1 versions. |
| CVE-2026-66705 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Facebook for WordPress <= 5.2.1 versions. |
| CVE-2026-66706 | Deferred | 未確認 | CWE-79 | Author Cross Site Scripting (XSS) in Subscribe to Comments <= 2.3.1 versions. |
| CVE-2026-66707 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Facebook for WooCommerce <= 3.7.5 versions. |
| CVE-2026-66708 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Total Upkeep <= 1.17.2 versions. |
| CVE-2026-66709 | Deferred | 未確認 | CWE-94 | Shop manager Remote Code Execution (RCE) in CTX Feed <= 6.6.42 versions. |
| CVE-2026-66710 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in e2pdf <= 1.32.40 versions. |
| CVE-2026-66711 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in WooCommerce Multilingual & Multicurrency <= 5.5.6 versions. |
| CVE-2026-66712 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Simple Membership <= 4.7.8 versions. |
| CVE-2026-66721 | Analyzed | 未確認 | CWE-862 | Missing authorization issue for domain admins in CloudStack's host tags listing functionality. Domain Admins, by default, have permission to call the listHostTags API, but the |
| CVE-2026-66722 | Analyzed | 未確認 | CWE-285 | Improper authorization for CRUD operations on Project Roles and Project Role permissions for domain admins in CloudStack. A Domain Admin can create, update, delete, and list pr |
| CVE-2026-66732 | Deferred | 未確認 | CWE-346 | Sonic 3 A.I.R. before commit 2492d18 contains a missing source address validation vulnerability in ConnectionManager where established connections are resolved by a two-byte local |
| CVE-2026-66733 | Deferred | 未確認 | CWE-789 | Sonic 3 A.I.R. before commit 2492d18 contains an unbounded memory allocation vulnerability in ReceivedPacketCache::enqueuePacket() that allows unauthenticated remote attackers to c |
| CVE-2026-66738 | Deferred | 未確認 | CWE-94 | SPIP before 4.4.18 contains a code injection vulnerability in SQLite-backed installations. The navigation menu endpoint improperly handles array-typed user input, which bypasses in |
| CVE-2026-66747 | Deferred | 未確認 | CWE-506 | Zbtlink router firmware ships an embedded remote-control implant, ENDLESSDOORS, present in every published build across the product line. It is the open-source ycsunjane/rctl tool |
| CVE-2026-66760 | Analyzed | 未確認 | CWE-295 | SAP Approuter does not correctly validate client certificates in certain callback flows. An attacker with low privileges, holding a certificate from the same trusted authority with |
| CVE-2026-66761 | Analyzed | 未確認 | CWE-770 | SAP Approuter does not enforce sufficient flow control in certain functionality. An attacker with low privileges could send high volumes of data without consuming responses, causin |
| CVE-2026-66763 | Awaiting Analysis | 未確認 | CWE-321 | SAP BusinessObjects Business Intelligence Platform stores certain sensitive credentials associated with user objects using a hard-coded cryptographic key. An attacker with high pri |
| CVE-2026-66764 | Awaiting Analysis | 未確認 | CWE-639 | Reprocess Bank Statement Items in SAP S/4HANA does not perform the necessary authorization checks for authenticated users, allowing them to use rules that have not been shared with |
| CVE-2026-66766 | Awaiting Analysis | 未確認 | CWE-1333 | SAP S/4HANA (Private Cloud) uses a third-party component that contains a Regular Expression Denial of Service (ReDoS) vulnerability. An unauthenticated attacker could supply specia |
| CVE-2026-66770 | Awaiting Analysis | 未確認 | CWE-89 | Due to an SQL Injection vulnerability in SAP Social intelligence, an authenticated attacker could directly inject an SQL DDL (Data Definition Language) string into the underlying d |
| CVE-2026-66771 | Awaiting Analysis | 未確認 | CWE-79 | SAPUI5 allows a key user with content adaptation privileges to inject malicious script content into persisted application changes. When another user subsequently opens the adapted |
| CVE-2026-66772 | Awaiting Analysis | 未確認 | CWE-862 | SAP BusinessObjects Business Intelligence Platform (Admin Tools) does not perform sufficient authorization check on certain administrative functionality. An attacker authenticated |
| CVE-2026-66773 | Awaiting Analysis | 未確認 | CWE-601 | A malicious or compromised OData service could disclose sensitive authentication information and inject untrusted data into the application, which may leads to a high impact on con |
| CVE-2026-66774 | Analyzed | 未確認 | CWE-754 | SAP Approuter does not consistently handle certain error conditions. An attacker with low privileges could exploit this under a non-default configuration. Successful exploitation i |
| CVE-2026-66775 | Analyzed | 未確認 | CWE-352 | SAP Approuter does not enforce cross-site request forgery protection on the authentication flow by default. An unauthenticated attacker could craft a malicious link and trick a vic |
| CVE-2026-66776 | Analyzed | 未確認 | CWE-347 | SAP Approuter does not consistently enforce integrity verification on certain session-related request headers under specific conditions. An attacker with low privileges could send |
| CVE-2026-66777 | Analyzed | 未確認 | CWE-22 | SAP Approuter does not sufficiently validate certain incoming requests before forwarding them to backend destinations. Due to the complexity of the required conditions, an attacker |
| CVE-2026-66778 | Analyzed | 未確認 | CWE-644 | SAP Approuter does not sufficiently sanitize certain request headers before forwarding traffic to internal components. An unauthenticated attacker could send a specially crafted re |
| CVE-2026-66779 | Awaiting Analysis | 未確認 | CWE-79 | Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP, an authenticated attacker could generate a malicious link and make it publicly accessibl |
| CVE-2026-66780 | Awaiting Analysis | 未確認 | CWE-532 | A flaw was found in the submariner-operator component. The `submariner-k8s-broker-cluster` Role, which is assigned to joined clusters, possesses excessive permissions. This allows |
| CVE-2026-66781 | Awaiting Analysis | 未確認 | CWE-749 | A flaw was found in the Submariner operator. The Submariner Custom Resource (CR), used for configuring network connectivity, stores the IPsec pre-shared key (PSK) in an unencrypted |
| CVE-2026-66782 | Awaiting Analysis | 未確認 | CWE-269 | A flaw was found in the Submariner operator. This vulnerability allows for the exposure of a long-lived broker service account (SA) bearer token within the Submariner Custom Resour |
| CVE-2026-66783 | Awaiting Analysis | 未確認 | CWE-1357 | A flaw was found in the `submariner-operator` component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability allows a cluster administrator, or any user with p |
| CVE-2026-66785 | Awaiting Analysis | 未確認 | CWE-345 | A flaw was found in Submariner. This vulnerability allows a malicious cluster (spoke) to redirect network traffic from other connected clusters (peer clusters) by publishing a spec |
| CVE-2026-66787 | Awaiting Analysis | 未確認 | CWE-345 | A flaw was found in the lighthouse component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability stems from insufficient validation of advertised IP addresses |
| CVE-2026-66788 | Awaiting Analysis | 未確認 | CWE-1104 | A flaw was found in Lighthouse. A remote attacker, by compromising a spoke cluster, can exploit a vulnerability where the destination namespace for resource injection is derived fr |
| CVE-2026-66792 | Awaiting Analysis | 未確認 | CWE-863 | A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a user on a managed cluster to escalate their privileges by creating a Subscription w |
| CVE-2026-66793 | Awaiting Analysis | 未確認 | CWE-20 | A flaw was found in the governance-policy-addon-controller component of Red Hat Advanced Cluster Management for Kubernetes. A user with permissions to annotate the namespaced Manag |
| CVE-2026-66794 | Awaiting Analysis | 未確認 | CWE-918 | A flaw was found in the `cluster-proxy-addon` component of Multicluster Engine for Kubernetes. This vulnerability allows an unauthenticated attacker, who can access the user-facing |
| CVE-2026-66795 | Awaiting Analysis | 未確認 | CWE-295 | A flaw was found in the managedcluster-import-controller. The Certificate Signing Request (CSR) auto-approval logic improperly validates incoming CSRs, specifically by not inspecti |
| CVE-2026-66797 | Analyzed | 未確認 | CWE-284 | Improper access control in CloudStack's annotation functionality allows unauthorized comment creation and disclosure. The addAnnotation and listAnnotation APIs perform an owner |
| CVE-2026-66798 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-66799 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally. |
| CVE-2026-66800 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Azure Data Factory allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-66802 | Modified | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute co |
| CVE-2026-66804 | Analyzed | 未確認 | CWE-284 | Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-66805 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-66806 | Analyzed | 未確認 | CWE-125, CWE-193 | Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
| CVE-2026-66807 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-66808 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-66809 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-66810 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
| CVE-2026-66829 | Modified | 未確認 | CWE-601 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the HTML5 scrubber in rrrene html_sanitize_ex allows a remote attacker to force visitors of a page to navigate |
| CVE-2026-66832 | Deferred | 未確認 | CWE-598 | When the Mira Android app opens in-app WebView content (e.g., shop redirect flows), the user's live session token is appended to the URL as a query string parameter, and a persiste |
| CVE-2026-66838 | Analyzed | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in elixir-ecto postgrex allows SQL Injection via the :comment option of Postgrex. |
| CVE-2026-66839 | Deferred | 未確認 | CWE-428 | NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Unquoted Search Path or Element vulnerability (CWE-428). An authenticated attacker may exploit this vu |
| CVE-2026-66843 | Modified | 未確認 | CWE-829 | Inclusion of Functionality from Untrusted Control Sphere vulnerability in the HTML5 scrubber in rrrene html_sanitize_ex allows a remote attacker to load a document of their choosin |
| CVE-2026-66875 | Awaiting Analysis | 未確認 | CWE-306 | In the Mira hormone monitor device firmware v1.7.1.47 build 01070147, a remote unauthenticated attacker within BLE range (approximately 10–30 meters) can silently rebind the device |
| CVE-2026-66878 | Awaiting Analysis | 未確認 | CWE-639 | A flaw was found in multicloud-operators-subscription. A privileged user, specifically a namespace administrator capable of creating Channel and Subscription resources, can exploit |
| CVE-2026-66881 | Analyzed | 未確認 | CWE-23 | Relative Path Traversal vulnerability in livebook-dev livebook allows an attacker-authored notebook to write a file with attacker-controlled content to an arbitrary path. A .livem |
| CVE-2026-66882 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in team-alembic AshAuthentication allows reflected cross-site scripting via the confirmation and mag |
| CVE-2026-66883 | Awaiting Analysis | 未確認 | CWE-178 | Improper Handling of Case Sensitivity vulnerability in Erlang Ecosystem Foundation oidcc_plug (Oidcc.Plug.Authorize module) renders the user agent session binding inert, removing a |
| CVE-2026-66884 | Awaiting Analysis | 未確認 | CWE-352 | Cross-Site Request Forgery vulnerability in Erlang Ecosystem Foundation oidcc_plug (Oidcc.Plug.AuthorizationCallback module) allows an attacker to make a victim's browser complete |
| CVE-2026-66885 | Analyzed | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in livebook-dev livebook allows an attacker to authenticate a victim's browser session under the attacker's own Livebook Teams ident |
| CVE-2026-66897 | Analyzed | 未確認 | CWE-22, CWE-23 | A path traversal vulnerability in LXD's instance template processing allows an attacker with container edit permissions, or any user launching a crafted image, to overwrite arbitra |
| CVE-2026-66898 | Analyzed | 未確認 | CWE-22 | A path traversal vulnerability in LXD allows an attacker to manipulate file system paths during backup import and restore operations. When importing or restoring a backup archive, |
| CVE-2026-66901 | Deferred | 未確認 | CWE-201, CWE-918 | Google::Auth versions before 0.09 for Perl allow server side request forgery and credential exfiltration via unvalidated URLs taken from the credentials JSON. The URLs the library |
| CVE-2026-66902 | Deferred | 未確認 | CWE-78, CWE-829 | Google::Auth versions before 0.06 for Perl run a command named in an external_account credentials JSON via an ungated system call. The Pluggable subclass reads credential_source.e |
| CVE-2026-66906 | Analyzed | 未確認 | CWE-23 | Relative path traversal vulnerability in Apache Camel Azure Storage Blob component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4. |
| CVE-2026-66907 | Analyzed | 未確認 | CWE-23 | Relative path traversal vulnerability in Apache Camel Google Storage component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 |
| CVE-2026-66908 | Analyzed | 未確認 | CWE-287 | Improper Authentication vulnerability in Apache Camel Platform HTTP Main component. This issue affects Apache Camel: from 4.8.0 before 4.22.0. The camel-main embedded HTTP se |
| CVE-2026-66909 | Modified | 未確認 | CWE-502 | Apache CXF's JMS transport deserializes the body of any inbound JMS ObjectMessage using native Java deserialization, with no type restrictions in place. Any attacker able to place |
| CVE-2026-66914 | Deferred | 未確認 | CWE-22 | Joomla Extension - seblod.com - Unauthenticated path traversal in SEBLOD < 3.30.0, < 4.7.0, < 6.0.1 - An unauthenticated attacker could download files from both inside and outside |
| CVE-2026-66915 | Deferred | 未確認 | CWE-94 | Joomla Extension - fabrikar.com - Remote code execution in Fabrik < 4.7.2 - An unauthenticated attacker could execute arbitrary code by using the ajax_calc feature of the calc plug |
| CVE-2026-66916 | Deferred | 未確認 | CWE-284 | Joomla Extension - joomgalleryfriends.net - Password-Protected Category Bypass via JSON Format in JoomGallery < 4.4.0- An unauthenticated access control bypass exists in JoomGaller |
| CVE-2026-66917 | Deferred | 未確認 | CWE-79 | Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery < 4.4.0 - An authenticated, privileged can store an XSS payload in any image causing JS execution in every vis |
| CVE-2026-6694 | Analyzed | 未確認 | CWE-120 | A flaw was found in GIMP's file-png plugin. A remote attacker can exploit this by crafting a malicious Animated Portable Network Graphics (APNG) image containing an oversized tRNS |
| CVE-2026-6695 | Analyzed | 未確認 | CWE-805 | A flaw was found in GIMP. A remote attacker could exploit this by tricking a user into opening a specially crafted PAA (Paint Shop Pro Array) image file. This vulnerability, a heap |
| CVE-2026-67179 | Awaiting Analysis | 未確認 | CWE-644 | Genkit does not properly validate host request headers. Any host on the developer's network, and any website the developer visits (via DNS rebinding), can reach POST /api/runAction |
| CVE-2026-67180 | Awaiting Analysis | 未確認 | CWE-78 | Google Turbinia allows arbitrary command execution via worker tasks. An attacker with privileges to submit a processing request or influence an evidence path/name obtains code exec |
| CVE-2026-67189 | Awaiting Analysis | 未確認 | CWE-79 | pfSense Plus before 26.07 and pfSense CE through 2.8.1 contain a stored cross-site scripting vulnerability in the Traffic Graphs top-talkers feature, where PTR records returned by |
| CVE-2026-67195 | Deferred | 未確認 | CWE-95 | Perspective 5.0.0 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary operating system commands by submitting crafted expressi |
| CVE-2026-67196 | Deferred | 未確認 | CWE-79 | Perspective 5.0.0 contains a cross-site scripting vulnerability in the built-in Debug plugin that allows attackers to inject arbitrary HTML and JavaScript by writing table cell val |
| CVE-2026-67198 | Deferred | 未確認 | CWE-616 | Perspective 5.0.0 contains a denial-of-service vulnerability in the VirtualServer protocol dispatcher that allows unauthenticated remote attackers to crash the server process by se |
| CVE-2026-67199 | Deferred | 未確認 | CWE-770 | Perspective 5.0.0 contains a denial of service vulnerability that allows remote attackers to block the server event loop indefinitely by submitting a crafted expression containing |
| CVE-2026-67200 | Deferred | 未確認 | CWE-22 | Perspective 5.0.0 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files from the server filesystem by including literal ../ s |
| CVE-2026-67204 | Deferred | 未確認 | CWE-863 | BookStack before 26.05.4 contains a broken access control vulnerability that allows authenticated API users with image-update or image-delete permissions to manipulate other users' |
| CVE-2026-67243 | Deferred | 未確認 | CWE-434 | freo2 provided by refirio contains an unrestricted upload of file with dangerous type vulnerability. A user with the highest-level administrative privileges for the product may upl |
| CVE-2026-6726 | Awaiting Analysis | 未確認 | CWE-704 | An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a credential from a TPM-awa |
| CVE-2026-67260 | Analyzed | 未確認 | CWE-502 | Apache Airflow 3.3.0 moved human-in-the-loop tasks from the triggerer to a new `awaiting_input` task state swept by the scheduler. That sweep deserializes the task instance's `next |
| CVE-2026-67261 | Analyzed | 未確認 | CWE-78 | Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) an OS Command Injection vulnerability in the IAPI component. A remote unauthentic |
| CVE-2026-67262 | Awaiting Analysis | 未確認 | CWE-862 | Dell PowerStore contains a Missing Authorization vulnerability. An attacker with access to a mapped host could exploit this vulnerability to read from or write to LUNs that the hos |
| CVE-2026-67266 | Analyzed | 未確認 | CWE-863 | Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vul |
| CVE-2026-67267 | Analyzed | 未確認 | CWE-497 | Dell Command Update (DCU), versions prior to 5.7.1, contain an Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability. A low privileged attacker w |
| CVE-2026-67268 | Analyzed | 未確認 | CWE-611 | Dell Command Update (DCU), versions prior to 5.7.1, contain an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with local access coul |
| CVE-2026-6727 | Awaiting Analysis | 未確認 | CWE-208 | A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may be able to exploit ti |
| CVE-2026-67271 | Awaiting Analysis | 未確認 | CWE-787 | Dell PowerStore SDNAS, contains an Out-of-bounds Write vulnerability in SMB/CIFS. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leadi |
| CVE-2026-67275 | Analyzed | 未確認 | CWE-1357 | Dell PowerProtect One, versions 20.1.0.0 and below, contain a Reliance on Insufficiently Trustworthy Component vulnerability. An unauthenticated attacker with remote access could p |
| CVE-2026-67282 | Deferred | 未確認 | CWE-94 | Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.6.8 - An unauthenticated attacker could execute arbitrary code by using the frontend listfilte |
| CVE-2026-67283 | Deferred | 未確認 | CWE-284 | Joomla Extension - tabaoca.org - Improper ACL implementation allows file operations in Cotton Cloud < 2.0.2 - Unauthenticated users could perform various file-related operations (r |
| CVE-2026-67284 | Deferred | 未確認 | CWE-284 | Joomla Extension - tabaoca.org - Improper ACL implementation allows file operations in Cotton Cloud < 2.0.3 - Authenticated users could perform various file-related operations (rea |
| CVE-2026-67285 | Deferred | 未確認 | CWE-22 | Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder < 6.8.0 - An unauthenticated attacker can perform includes to arbitrary PH |
| CVE-2026-67286 | Deferred | 未確認 | CWE-22 | Joomla Extension - joomshaper.com - Unauthenticated arbitrary directory creation and file write in SP Page Builder < 6.8.0 - An unauthenticated attacker can create arbitrary direct |
| CVE-2026-67287 | Deferred | 未確認 | CWE-284 | Joomla Extension - joomshaper.com - Unauthenticated comment creation in SP Page Builder < 6.8.0 - An unauthenticated attacker can create comments on instances with disabled guest c |
| CVE-2026-67288 | Analyzed | 未確認 | CWE-476 | FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard cache request decoders that accept NULL NDR pointers for LookupName in SCARD_IOCTL_READCACHEA a |
| CVE-2026-67289 | Analyzed | 未確認 | CWE-113 | FreeRDP before 3.29.0 (affected versions <= 3.28.0) does not validate CRLF and control characters in the server-controlled RDP redirection TargetNetAddress field. This value is cop |
| CVE-2026-67290 | Analyzed | 未確認 | CWE-125 | FreeRDP before 3.29.0 contains a heap out-of-bounds read vulnerability in the TSMF FFmpeg decoder when parsing AVC1 MPEG2VIDEOINFO media types with insufficient ExtraData. Attacker |
| CVE-2026-67291 | Analyzed | 未確認 | CWE-125 | FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains a heap out-of-bounds read in update_process_glyph_fragments()/glyph_cache_fragment_put() in libfreerdp/cache/glyph.c. W |
| CVE-2026-67292 | Analyzed | 未確認 | CWE-130 | FreeRDP before 3.29.0 contains a buffer over-disclosure vulnerability in the gateway WebSocket transport (libfreerdp/core/gateway/websocket.c). The client's Pong reply reuses a fix |
| CVE-2026-67293 | Analyzed | 未確認 | CWE-295 | FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains an improper certificate hostname validation vulnerability. The TLS hostname matcher (tls_match_hostname() in libfreerdp |
| CVE-2026-67294 | Analyzed | 未確認 | CWE-295 | FreeRDP before 3.29.0 improperly validates the Extended Key Usage (EKU) purpose of the peer certificate during client-side server TLS authentication. In x509_utils_verify(), when s |
| CVE-2026-67295 | Undergoing Analysis | 未確認 | CWE-22 | FreeRDP before 3.29.0 fails to properly validate server-supplied RDPDR paths in drive redirection, allowing attackers to access prefix-sibling paths outside the configured shared r |
| CVE-2026-67296 | Analyzed | 未確認 | CWE-20 | FreeRDP before 3.29.0 contains a denial of service vulnerability in the RDPEI server channel handler that fails to validate maximum PDU body length before stream allocation. A mali |
| CVE-2026-67297 | Analyzed | 未確認 | CWE-770 | FreeRDP before 3.29.0 fails to enforce the RESPONSE_SIZE_LIMIT when processing Transfer-Encoding: chunked HTTP responses in http_response_recv_body(). Attackers controlling a malic |
| CVE-2026-67298 | Undergoing Analysis | 未確認 | CWE-191 | FreeRDP versions 3.28.0 and earlier contain a heap buffer overflow in the server-side RAIL channel handler (rail_server_handle_messages() in channels/rail/server/rail_main.c). When |
| CVE-2026-67299 | Analyzed | 未確認 | CWE-416 | FreeRDP before 3.29.0 contains a client-side heap use-after-free in the async update message proxy for WINDOW_ICON_ORDER when AsyncUpdate is enabled (e.g. xfreerdp /async-update). |
| CVE-2026-67300 | Undergoing Analysis | 未確認 | CWE-416 | FreeRDP before 3.29.0 contains client-side heap use-after-free vulnerabilities in the async update message proxy for RAIL WINDOW_STATE_ORDER and NOTIFY_ICON_STATE_ORDER when AsyncU |
| CVE-2026-67301 | Analyzed | 未確認 | CWE-125 | FreeRDP before 3.29.0 contains out-of-bounds read vulnerabilities in the async update message proxy for the PolygonSC and PolygonCB primary drawing orders. When AsyncUpdate is enab |
| CVE-2026-67302 | Analyzed | 未確認 | CWE-369 | FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains a divide-by-zero vulnerability in the rdpecam camera redirection client. ecam_dev_process_start_streams_request() parse |
| CVE-2026-67303 | Analyzed | 未確認 | CWE-617 | FreeRDP before 3.29.0 contains a reachable assertion (WINPR_ASSERT(OutputBufferLength == BytesReturned)) in serial_process_irp_device_control() in channels/serial/client/serial_mai |
| CVE-2026-67304 | Analyzed | 未確認 | CWE-476 | FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanup when reader-state decoding fails. Attackers can send malformed s |
| CVE-2026-67305 | Analyzed | 未確認 | CWE-122 | FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when processing CLIPRDR_FILE_CONTENTS_RESPONSE PDUs without vali |
| CVE-2026-67306 | Analyzed | 未確認 | CWE-125 | FreeRDP versions 3.28.0 and earlier contain an out-of-bounds read vulnerability in the RDP6 planar RLE bitmap decoder functions planar_decompress_plane_rle and planar_decompress_pl |
| CVE-2026-67307 | Analyzed | 未確認 | CWE-345 | Wazuh 5.0.0-beta1 (fixed in 5.0.0-beta3) does not validate or override the cluster_name and cluster_node fields in inventory-sync Start FlatBuffer messages, while validating only t |
| CVE-2026-67308 | Awaiting Analysis | 未確認 | CWE-78 | Wazuh workflows before 44bf114 contain a shell injection vulnerability in GitHub Actions that allows attackers to execute arbitrary commands by submitting pull requests with crafte |
| CVE-2026-67309 | Analyzed | 未確認 | CWE-22 | Traefik versions >= v3.7.0 and <= v3.7.7 contain a path traversal vulnerability in the Kubernetes Ingress NGINX provider's RewriteTarget middleware (generated from the nginx.ingres |
| CVE-2026-67310 | Deferred | 未確認 | CWE-863 | OpenRemote (org.openremote:openremote) versions <= 1.26.2 contain an insecure direct object reference vulnerability in the setAssetLinks endpoint of AlarmResourceImpl. The realm ac |
| CVE-2026-67311 | Deferred | 未確認 | CWE-918 | Budibase before 3.38.1 contains a server-side request forgery vulnerability in the REST datasource integration that fails to validate HTTP redirects against the IP blacklist. Attac |
| CVE-2026-67312 | Analyzed | 未確認 | CWE-400 | axios versions from 0.28.0 before 0.33.0 and from 1.0.0 before 1.18.0 contain uncontrolled recursion in formDataToJSON (exposed as axios.formToJSON() and used internally when seria |
| CVE-2026-67313 | Analyzed | 未確認 | CWE-400 | axios versions 0.28.0 and later contain uncontrolled recursion in formDataToJSON when processing FormData field names with deeply nested bracket segments. Attackers can supply Form |
| CVE-2026-67314 | Analyzed | 未確認 | CWE-1321 | axios versions >=1.15.2 and <1.18.0 contain prototype-pollution read-side gadgets in Basic auth subfield handling (lib/adapters/http.js and lib/helpers/resolveConfig.js). When an a |
| CVE-2026-67315 | Analyzed | 未確認 | CWE-183 | axios versions 0.31.0 before 0.33.0 and 1.15.0 before 1.18.0 fail to recognize 0.0.0.0 as a loopback address in shouldBypassProxy.js, allowing requests to 0.0.0.0 to bypass NO_PROX |
| CVE-2026-67316 | Analyzed | 未確認 | CWE-1321 | axios is vulnerable to read-side prototype-pollution gadgets that can alter request construction when Object.prototype has already been polluted by a separate vulnerability or depe |
| CVE-2026-67317 | Analyzed | 未確認 | CWE-770 | axios versions 1.7.0 before 1.18.0 fail to enforce maxBodyLength for WHATWG ReadableStream request bodies in the fetch adapter when Content-Length cannot be determined. Attackers c |
| CVE-2026-67318 | Analyzed | 未確認 | CWE-400 | axios versions >=1.13.0 (Node.js HTTP adapter) fail to enforce the configured maxBodyLength limit on streamed request bodies when requests are sent with httpVersion: 2. Because Nod |
| CVE-2026-67319 | Analyzed | 未確認 | CWE-1321 | axios before 0.33.0 (and 1.x before 1.18.0) can consume inherited properties from nested request option objects when the JavaScript process's Object.prototype has already been poll |
| CVE-2026-67320 | Analyzed | 未確認 | CWE-200 | axios in a Node.js deployment using the HTTP adapter can route requests through an attacker-controlled proxy. axios hardens merged request configuration by creating a null-prototyp |
| CVE-2026-67321 | Analyzed | 未確認 | CWE-674 | axios versions 0.31.1 before 0.33.0 and 1.15.1 before 1.18.0 contain an incomplete depth-limit bypass in toFormData.js when serializing objects with top-level keys ending in '{}'. |
| CVE-2026-67322 | Analyzed | 未確認 | CWE-200 | GitPython before 3.1.52 is vulnerable to environment-variable exfiltration in Repo.clone_from(). The caller-supplied remote URL is passed through Git.polish_url(), which on non-Cyg |
| CVE-2026-67323 | Analyzed | 未確認 | CWE-77 | GitPython before 3.1.51 fails to guard against dangerous Git options passed as keyword arguments in Repo.archive() and git.ls_remote(), allowing command injection via options such |
| CVE-2026-67324 | Analyzed | 未確認 | CWE-78 | GitPython 3.1.50 fails to recognize joined short-option forms such as -u<value> (the short form of --upload-pack=<value>) when enforcing its default unsafe-option gate. When an app |
| CVE-2026-67325 | Analyzed | 未確認 | CWE-78 | GitPython before 3.1.51 contains an incomplete command injection blocklist that fails to account for git's long-option prefix abbreviation feature. Attackers can bypass the unsafe |
| CVE-2026-67326 | Analyzed | 未確認 | CWE-20 | GitPython before 3.1.50 fails to validate newline characters in the section parameter of config_writer(), allowing attackers to inject arbitrary section headers into .git/config. A |
| CVE-2026-67327 | Deferred | 未確認 | CWE-287 | better-auth versions >= 1.1.3 and < 1.6.22 (and pre-release versions >= 1.7.0-beta.0 and < 1.7.0-beta.10) are vulnerable to account takeover via pre-account hijacking on magic-link |
| CVE-2026-67328 | Deferred | 未確認 | CWE-79 | @better-auth/sso versions before 1.6.21 contain multiple authentication bypass vulnerabilities in SSO provider handling that allow attackers to sign in as arbitrary users. Attacker |
| CVE-2026-67329 | Deferred | 未確認 | CWE-639 | @better-auth/stripe versions >= 1.4.11 and < 1.6.21, and >= 1.7.0-beta.0 and < 1.7.0-beta.10, contain an authorization bypass in organization subscription actions. The middleware v |
| CVE-2026-67330 | Deferred | 未確認 | CWE-20 | @better-auth/scim (a better-auth plugin) versions >= 1.4.0-beta.27 through <= 1.6.21 and >= 1.7.0-beta.0 through <= 1.7.0-beta.9 contain an authorization bypass. SCIM token issuanc |
| CVE-2026-67331 | Deferred | 未確認 | CWE-639 | better-auth SCIM versions from 1.5.0 before 1.7.0-beta.4 fail to bind non-organization SCIM providers to their creator by default, allowing authenticated users to manage other user |
| CVE-2026-67332 | Deferred | 未確認 | CWE-285 | @better-auth/oauth-provider before 1.7.0-beta.4 fails to bind access-token audience to the authorization grant, allowing clients to request tokens for unrelated resources. Attacker |
| CVE-2026-67333 | Deferred | 未確認 | CWE-79 | better-auth before 1.6.13 (and pre-release builds 1.7.0-beta.0 through 1.7.0-beta.3) fail to validate the scheme of redirect_uris registered via the deprecated oidc-provider plugin |
| CVE-2026-67334 | Deferred | 未確認 | CWE-459 | better-auth versions before 1.6.11 fail to delete cached sessions when removing users via admin, anonymous, or SCIM endpoints when secondaryStorage is configured and storeSessionIn |
| CVE-2026-67335 | Deferred | 未確認 | CWE-287 | better-auth versions before 1.6.2 fail to validate the OAuth state parameter against the stored nonce when using cookie-backed state storage without PKCE. Attackers can forge the s |
| CVE-2026-67336 | Deferred | 未確認 | CWE-327 | better-auth versions before 1.6.11 contain insecure cryptographic defaults in the oidcProvider and mcp plugins that advertise the none algorithm and accept plain PKCE by default. A |
| CVE-2026-67337 | Deferred | 未確認 | CWE-288 | better-auth versions before 1.4.9 contain a two-factor authentication bypass vulnerability when session.cookieCache is enabled. Attackers with valid primary credentials can access |
| CVE-2026-67338 | Awaiting Analysis | 未確認 | CWE-84 | JupyterLab before 4.5.9 contains a stored cross-site scripting vulnerability in the Extension Manager that fails to validate URI protocols in package metadata URLs. Attackers can p |
| CVE-2026-67339 | Awaiting Analysis | 未確認 | CWE-200 | guzzlehttp/guzzle versions before 7.14.2 fail to properly isolate Proxy-Authorization headers from origin servers in cURL handlers. Attackers can capture proxy credentials through |
| CVE-2026-67340 | Deferred | 未確認 | CWE-94 | ArcadeDB before 26.7.2 (arcadedb-engine) allows trigger scripts to look up host classes in java.lang.* (via Java.type) because ScriptTriggerExecutor adds java.lang.* to the allowed |
| CVE-2026-67341 | Deferred | 未確認 | CWE-863 | ArcadeDB versions before 26.7.2 fail to enforce scripting authorization checks on the SQL DEFINE FUNCTION statement with LANGUAGE js. Attackers with database access can execute arb |
| CVE-2026-67342 | Deferred | 未確認 | CWE-639 | ArcadeDB versions before 26.7.2 contain an authorization bypass vulnerability in HTTP handlers for time series, batch, Prometheus, and Grafana endpoints that fail to validate datab |
| CVE-2026-67343 | Deferred | 未確認 | CWE-200 | ArcadeDB versions before 26.7.2 fail to properly redact the cluster token in the GET /api/v1/server endpoint, allowing authenticated users to retrieve the arcadedb.ha.clusterToken |
| CVE-2026-67344 | Deferred | 未確認 | CWE-862 | ArcadeDB before 26.7.2 fails to enforce the UPDATE_SCHEMA database permission on the ALTER TYPE ... CUSTOM and ALTER TYPE ... BUCKETSELECTIONSTRATEGY SQL operations, which map to s |
| CVE-2026-67352 | Awaiting Analysis | 未確認 | CWE-79 | luci-app-https-dns-proxy contains a stored cross-site scripting vulnerability in the resolver_url parameter that allows authenticated users to inject active HTML. When an administr |
| CVE-2026-67353 | Awaiting Analysis | 未確認 | CWE-770 | guzzlehttp/guzzle versions before 7.15.1 contain a denial of service vulnerability in the CookieJar that accepts unlimited Set-Cookie header fields with no size restrictions. Attac |
| CVE-2026-67354 | Awaiting Analysis | 未確認 | CWE-201 | guzzlehttp/guzzle versions before 7.15.1 contain an information disclosure vulnerability in RedirectMiddleware. When the optional allow_redirects.referer setting is enabled, the mi |
| CVE-2026-67355 | Awaiting Analysis | 未確認 | CWE-201 | guzzlehttp/guzzle versions before 7.15.1 fail to preserve host-only cookie scope, storing the request host in the Domain field instead of marking cookies as host-only. Attackers co |
| CVE-2026-67356 | Deferred | 未確認 | CWE-269 | ArcadeDB before 26.7.3 binds the real LocalDatabase object into JavaScript trigger contexts with HostAccess.ALL, allowing schema-admins to call getSecurity().createUser() without p |
| CVE-2026-67357 | Deferred | 未確認 | CWE-200 | ArcadeDB versions before 26.7.3 contain an information disclosure vulnerability in the MCP get_server_settings tool that leaks the arcadedb.ha.clusterToken in cleartext. Attackers |
| CVE-2026-67358 | Deferred | 未確認 | CWE-352, CWE-639 | Joomla Extension - j2commerce.com - Download quota manipulation in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - An authenticated user with a valid order token could increment |
| CVE-2026-67359 | Deferred | 未確認 | CWE-639 | Joomla Extension - j2commerce.com - Order content disclosure J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - An unauthenticated visitor could supply any order_id as a query param |
| CVE-2026-67360 | Deferred | 未確認 | CWE-639 | Joomla Extension - j2commerce.com - Cross-customer order replication in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - An authenticated user could supply another customer's orde |
| CVE-2026-67361 | Deferred | 未確認 | CWE-352, CWE-538 | Joomla Extension - j2commerce.com - Unauthenticated file upload with missing directory protection in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - The file upload endpoint acce |
| CVE-2026-67362 | Deferred | 未確認 | CWE-601 | Joomla Extension - j2commerce.com - Open redirect in cart controller in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - Four task handlers accepted a base64-encoded URL from user |
| CVE-2026-67363 | Deferred | 未確認 | CWE-472, CWE-602 | Joomla Extension - balbooa.com - Pre-auth Payment Amount Tampering in Balbooa Forms < 2.4.3.2 - The stripeCharges and payAuthorize endpoints accept the charge total from a client-c |
| CVE-2026-67364 | Deferred | 未確認 | CWE-94 | Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms < 2.4.3.2 - The form's optional custom-PHP post-submission handler is executed via eval(). The [URL pa |
| CVE-2026-67365 | Deferred | 未確認 | CWE-89 | Joomla Extension - icagenda.com - Unauthenticated SQL injection in iCagenda < 4.0.0-4.0.11 - Unauthenticated SQL injection in mod_icagenda_calendar (iCagenda), reachable via com_aj |
| CVE-2026-67366 | Deferred | 未確認 | CWE-352 | Joomla Extension - icagenda.com - CSRF on frontend registration actions in iCagenda < 2.0.0-4.0.11 - Multiple state changing operations in the frontend are callable without a CSRF |
| CVE-2026-67422 | Awaiting Analysis | 未確認 | CWE-1333 | pymdown-extensions is a collection of extensions for the Python Markdown library. In versions up to and including 11.0, four inline processors (caret, tilde, betterem, and magiclin |
| CVE-2026-67434 | Awaiting Analysis | 未確認 | CWE-78 | PHP_CodeSniffer tokenizes PHP files and detects violations of a defined set of coding standards. Prior to versions 3.13.6 and 4.0.2, PHP_CodeSniffer contains a command injection vu |
| CVE-2026-67440 | Deferred | 未確認 | CWE-862 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. In 1.3.2 and earlier, the DEVICE_BROWSE, DEVICE_NODE_ATTRIBUTE, HOST_INTERFACES, and DEVICE_TAGS_REQUEST h |
| CVE-2026-67442 | Deferred | 未確認 | CWE-284, CWE-459 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Prior to 1.3.3, DELETE /api/roles removes role definitions through server/runtime/users/usrstorage.js but |
| CVE-2026-67443 | Deferred | 未確認 | CWE-862 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. In 1.3.2 and earlier, the allowDashboard authorization gate in server/integrations/node-red/index.js calls |
| CVE-2026-67445 | Deferred | 未確認 | CWE-400 | Mailpit is an email testing tool and API for developers. Prior to 1.30.4, Mailpit reads SMTP commands through internal/smtpd/smtpd.go session.readLine() using bufio.Reader.ReadStri |
| CVE-2026-67446 | Deferred | 未確認 | CWE-400, CWE-770 | Mailpit is an email testing tool and API for developers. Prior to 1.30.4, Mailpit decodes attacker-supplied image attachments into a full raster before checking decoded dimensions, |
| CVE-2026-67447 | Deferred | 未確認 | CWE-770 | Mailpit is an email testing tool and API for developers. From 1.30.0 until 1.30.5, Mailpit's internal/smtpd/smtpd.go readData() function calls bufio.Reader.ReadBytes before applyin |
| CVE-2026-67448 | Deferred | 未確認 | CWE-177, CWE-200, CWE-346 | Mailpit is an email testing tool and API for developers. From 1.29.0 until 1.30.6, Mailpit's server/server.go origin middleware checks the raw RequestURI for the /api/ prefix while |
| CVE-2026-67465 | Analyzed | 未確認 | CWE-770 | A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apache Qpid Proton-Dotnet |
| CVE-2026-67531 | Deferred | 未確認 | CWE-94 | FrontMCP is a TypeScript-first framework for the Model Context Protocol (MCP). Prior to 1.5.7, the sandboxed codecall:execute tool exposes live host Zod schema instances to the scr |
| CVE-2026-67551 | Analyzed | 未確認 | CWE-789 | pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Proton-Dot |
| CVE-2026-67552 | Analyzed | 未確認 | CWE-674 | A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid Proton-Dotnet thro |
| CVE-2026-67553 | Analyzed | 未確認 | CWE-770 | An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service. This issue affects Apache Qpid Proton-Dotnet: through 1.0 |
| CVE-2026-67554 | Analyzed | 未確認 | CWE-606 | An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service. This is |
| CVE-2026-67555 | Analyzed | 未確認 | CWE-770 | It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial |
| CVE-2026-67558 | Deferred | 未確認 | CWE-290 | The Mira Android companion app v4.5.15.4 identifies the paired Mira hormone analyzer by performing a substring match against the BLE advertisement name only, with no cryptographic |
| CVE-2026-67560 | Awaiting Analysis | 未確認 | CWE-121 | Bendix EC80 Brake ECU is vulnerable to a stack-based buffer overflow, which may allow an attacker to crash the ECU. A crafted payload can then be used to remotely execute arbitr |
| CVE-2026-67567 | Awaiting Analysis | 未確認 | CWE-441 | A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a tenant, who has the ability to create HelmRelease custom resources (CRs), to bypass |
| CVE-2026-67568 | Deferred | 未確認 | CWE-798 | The distributed Mira Android APK v4.5.15.4 allows an attacker read/write access to reproductive health profiles from internet connected hosts, which could result in forgery, deleti |
| CVE-2026-67578 | Deferred | 未確認 | CWE-306 | FA-50 all versions miss authentication for some configuration. An attacker with access to the vessel's internal network can manipulate the product's settings screen to alter some |
| CVE-2026-67579 | Analyzed | 未確認 | CWE-502, CWE-89 | Deserialization of Untrusted Data vulnerability in ash-project ash allows an unauthenticated attacker to inject a filter expression through a forged keyset pagination cursor, resul |
| CVE-2026-67581 | Analyzed | 未確認 | CWE-294 | Authentication Bypass by Capture-replay in ZenHive mpp allows an unauthenticated remote client to obtain paid resources by resubmitting one settled on-chain transfer. MPP.Methods. |
| CVE-2026-67585 | Awaiting Analysis | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in DivvyPayHQ absinthe_federation allows an unauthenticated remote attacker to abort the Erlang VM via crafted _e |
| CVE-2026-67587 | Analyzed | 未確認 | CWE-502 | Apache Airflow's Task SDK rebuilt a `Callback` object from serialized data by re-running its constructor, which imports the module named by the stored callback path. Because `SyncC |
| CVE-2026-67588 | Analyzed | 未確認 | CWE-770 | A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apache Qpid ProtonJ2: thr |
| CVE-2026-67589 | Analyzed | 未確認 | CWE-789 | A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid ProtonJ2 |
| CVE-2026-67590 | Analyzed | 未確認 | CWE-674 | A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid ProtonJ2: through |
| CVE-2026-67591 | Analyzed | 未確認 | CWE-770 | An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. |
| CVE-2026-67592 | Analyzed | 未確認 | CWE-770 | It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial |
| CVE-2026-67598 | Deferred | 未確認 | CWE-295 | Emlog Pro through 2.6.23 contains a disabled TLS certificate validation vulnerability in include/service/ai.php that allows network-adjacent attackers to intercept outbound HTTPS r |
| CVE-2026-67599 | Awaiting Analysis | 未確認 | CWE-78 | ClearOS 7.9 contains an OS command injection vulnerability in the Log Viewer component that allows authenticated attackers to execute arbitrary commands by submitting unsanitized i |
| CVE-2026-67602 | Deferred | 未確認 | CWE-706 | phpIPAM before 1.8.2 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to gain full API access by exploiting an insecure object |
| CVE-2026-67608 | Deferred | 未確認 | CWE-78 | Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain an OS command injection vulnerability in action_audio.php that allows authenticat |
| CVE-2026-67609 | Deferred | 未確認 | CWE-250 | Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain a privilege escalation vulnerability that allows attackers with access to the apa |
| CVE-2026-67610 | Deferred | 未確認 | CWE-306 | OpenEMR through 8.2.0 contains an improper authentication vulnerability in the OAuth2 dynamic client registration endpoint that allows unauthenticated attackers to register a malic |
| CVE-2026-67611 | Analyzed | 未確認 | CWE-308 | OpenEMR through 8.2.0 contains an authentication bypass vulnerability that allows attackers with valid credentials to circumvent multi-factor authentication by exploiting the expos |
| CVE-2026-67612 | Deferred | 未確認 | CWE-79 | OpenEMR through 8.2.0 contains a stored cross-site scripting vulnerability in the patient portal template system that allows authenticated administrators to inject arbitrary HTML a |
| CVE-2026-67613 | Deferred | 未確認 | CWE-22 | CyberPanel before 3.0.0 contains a path traversal vulnerability that allows authenticated administrators to read arbitrary files from the server filesystem by supplying unsanitized |
| CVE-2026-67614 | Deferred | 未確認 | CWE-798 | CyberPanel before 3.0.0 contains a hard-coded JWT secret vulnerability in the WebTerminal FastAPI SSH service that allows unauthenticated remote attackers to forge valid authentica |
| CVE-2026-67616 | Deferred | 未確認 | CWE-862 | Camaleon CMS through 2.9.2, fixed in commit 88ab703, contains a missing authorization vulnerability on the drafts endpoint that allows any authenticated low-privileged user to crea |
| CVE-2026-67617 | Deferred | 未確認 | CWE-79 | Microweber CMS through 2.0.20 contains a stored cross-site scripting vulnerability in the content tagging system that allows admin-authenticated attackers to inject arbitrary JavaS |
| CVE-2026-67618 | Deferred | 未確認 | CWE-345 | marimo before 0.23.15 contains a configuration injection vulnerability that allows notebook authors to exfiltrate operator API keys by embedding a malicious base_url in PEP-723 inl |
| CVE-2026-67619 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-67620 | Analyzed | 未確認 | CWE-918 | Flowise through 3.1.4 contains a server-side request forgery vulnerability in the SSRF guard implemented in httpSecurity.ts, where the DEFAULT_DENY_LIST omits the Oracle Cloud Infr |
| CVE-2026-67621 | Analyzed | 未確認 | CWE-862 | Flowise through 3.1.4 contains a missing authorization vulnerability that allows authenticated workspace members to perform unauthorized document store operations by accessing unpr |
| CVE-2026-67622 | Analyzed | 未確認 | CWE-639 | Flowise through 3.1.4 contains an insecure direct object reference vulnerability in the OpenAI Assistants integration that allows authenticated attackers to access credentials belo |
| CVE-2026-67623 | Deferred | 未確認 | CWE-829 | Mistral Vibe before 2.23.3 contains a remote code execution vulnerability that allows attackers to execute arbitrary commands by embedding a malicious core.fsmonitor hook in a repo |
| CVE-2026-67673 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability exists in the cmd_edl function of OreSat Firmware v1.0. The vulnerability is triggered when processing the edl fw_flash command, where t |
| CVE-2026-67678 | Deferred | 未確認 | CWE-434 | File Upload vulnerability in RainyGao-Hithub DocSys v.2.02.80 allows a remote attacker to execute arbitrary code |
| CVE-2026-67687 | Deferred | 未確認 | CWE-284 | Insecure Permissions vulnerability in ics-park v.2.0 allows a remote attacker to escalate privileges via the /system/role/save endpoint in RoleController.java and system/user/updat |
| CVE-2026-67688 | Deferred | 未確認 | CWE-434 | ICS-Park Smart Park Management System v2.0 contains an unrestricted file upload vulnerability in the file upload module. This allows a remote attacker to execute arbitrary code. |
| CVE-2026-67689 | Deferred | 未確認 | CWE-89 | SQL Injection vulnerability in FineAdmin V1.0 allows a remote attacker to execute arbitrary code via the `field` and `order` parameters in paginated list endpoints |
| CVE-2026-67846 | Deferred | 未確認 | CWE-266 | Berkeley Out-of-Order Machine (BOOM) commit 5223e44cfeb26f41380057a2eb4d651197475f69 contains a potential incorrect privilege assignment issue in the v3 and v4 NBDTLB implementatio |
| CVE-2026-67854 | Deferred | 未確認 | CWE-89 | SQL Injection vulnerability in Qcms v.6.0.6 allows a remote attacker to execute arbitrary code |
| CVE-2026-67855 | Deferred | 未確認 | CWE-400 | open62541 contains a heap use-after-free in the GDS PushManagement certificate update workflow when UA_ENABLE_GDS_PUSHMANAGEMENT is enabled. This allows a remote attacker to cause |
| CVE-2026-67856 | Deferred | 未確認 | CWE-400 | An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via crafted CreateSubscription, CreateMonitoredItems(Sampling), Publish, TransferSubs |
| CVE-2026-67857 | Deferred | 未確認 | CWE-125 | open62541 1.5.5 contains an out-of-bounds read in the client-side function responseReadNamespacesArray() in src/client/ua_client_connect.c. |
| CVE-2026-67858 | Deferred | 未確認 | CWE-120 | Buffer Overflow vulnerability exists in open62541 1.5.5 when the Local Discovery Server (LDS) is built with multicast discovery enabled through the MDNSD backend. An unauthenticate |
| CVE-2026-67859 | Awaiting Analysis | 未確認 | CWE-120 | Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the Discovery/LDS handling. |
| CVE-2026-67860 | Deferred | 未確認 | CWE-122 | open62541 1.5.5 contains a heap-based buffer overflow in the default HistoryRead path when the default history database is used with the memory backend. |
| CVE-2026-67861 | Awaiting Analysis | 未確認 | CWE-400 | An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via the UA_Client_getRemoteDataTypes component |
| CVE-2026-67862 | Deferred | 未確認 | CWE-400 | open62541 1.5.5 contains a buffer-overflow in the high-level attribute reading logic in src/client/ua_client_highlevel.c. This allows a remote attacker to cause a denial of service |
| CVE-2026-67863 | Deferred | 未確認 | CWE-416 | In open62541 1.5.5, a server-side use-after-free exists in the local MonitoredItem callback path. The issue occurs when UA_Subscription_localPublish continues to use the current UA |
| CVE-2026-67864 | Deferred | 未確認 | CWE-400 | An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via the NodeManagement type-instantiation logic component |
| CVE-2026-67865 | Deferred | 未確認 | CWE-125 | S2OPC 1.7.3 contains an out-of-bounds read in RepublishResponse handling. This allows a remote attacker to cause a denial of service |
| CVE-2026-67866 | Deferred | 未確認 | CWE-121 | Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the LockedStaMac_ProcessMsg_DeleteMonitoredItemsResponse and SOPC_St |
| CVE-2026-67867 | Deferred | 未確認 | CWE-122 | Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the Alarm/Conditions wrapper when processing PublishResponse EventNo |
| CVE-2026-67868 | Deferred | 未確認 | CWE-122 | A heap-based out-of-bounds write vulnerability exists in S2OPC 1.7.3 in server-side EventFilter handling during CreateMonitoredItems processing. This allows a remote attacker to ex |
| CVE-2026-67869 | Deferred | 未確認 | CWE-120 | Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the Service_Call validates input arguments against runtime-resolved Inpu |
| CVE-2026-67870 | Deferred | 未確認 | CWE-476 | In open62541 v1.5.5, the server-side AddReferences implementation contains an incomplete validation flaw for non-local ExpandedNodeId targets. A remote attacker can send a crafted |
| CVE-2026-67871 | Deferred | 未確認 | CWE-120 | Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the AddNodes, address_space_bs.c, sopc_node_mgt_helper_internal.c, a |
| CVE-2026-67872 | Deferred | 未確認 | CWE-400 | An issue in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the event monitored-item queue resize handling |
| CVE-2026-67873 | Deferred | 未確認 | CWE-122 | A heap-based buffer overflow exists in lib60870-C 2.4.0 in the server-side FileSegment ASDU encoding path. The issue occurs because FileSegment_encode() validates only the standalo |
| CVE-2026-6791 | Awaiting Analysis | 未確認 | CWE-121 | When expanding paths that begin with a tilde (~) followed by a username, the internal parse_tilde function extracts the username to determine the user's home directory. The implem |
| CVE-2026-67917 | Deferred | 未確認 | CWE-89 | zuraCast versions up to and including 0.23.7 contain a SQL injection vulnerability in the backup restore functionality. The `azuracast:restore` command executes the `db.sql` file e |
| CVE-2026-67918 | Deferred | 未確認 | CWE-22 | Directory Traversal vulnerability in hermes-studio v.0.6.26 allows a remote attacker to obtain sensitive information via the validatePath function in api/hermes/download endpoint |
| CVE-2026-67919 | Deferred | 未確認 | CWE-94 | An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the PluginEndpoint.java, installFromUri method, and DefaultPluginApplicationContextFactory components |
| CVE-2026-67920 | Deferred | 未確認 | CWE-73 | An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the run.halo.app.migration.impl.MigrationServiceImpl.restoreWorkdir(), and org.springframework.util.F |
| CVE-2026-67921 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability exists in Halo CMS versions up to 2.25.4 via the CorsConfigurer.java and the CsrfConfigurer.java components. This allows a remote at |
| CVE-2026-67925 | Deferred | 未確認 | CWE-79 | Cross Site Scripting vulnerability in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the endpoint /airag/chat/upload |
| CVE-2026-67926 | Deferred | 未確認 | CWE-94 | An issue in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the files Parameter in JeecgBoot AI Chat Module |
| CVE-2026-67960 | Deferred | 未確認 | CWE-94 | An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the MemberController.php, UserController.php, CommentController.php, ContentController.php, and helpe |
| CVE-2026-67961 | Deferred | 未確認 | CWE-94 | An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of the Invoke script execution. |
| CVE-2026-67965 | Deferred | 未確認 | CWE-78 | An issue in Tneda W20E v.16.01.0.6(2782) allows a remote attacker to execute arbitrary code via the url_need_login function |
| CVE-2026-67966 | Deferred | 未確認 | CWE-306 | Tenda W20E V16.01.0.6(2782) /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daemon and obtain root shell access. |
| CVE-2026-67967 | Deferred | 未確認 | CWE-121 | Buffer Overflow vulnerability in Tenda W20E V16.01.0.6(2782) allows an attacker to execute arbitrary code. This is an incomplete fix for CVE-2025-44867 and CVE-2026-36819 |
| CVE-2026-67969 | Awaiting Analysis | 未確認 | CWE-20 | An issue in the HS_MonitorApplications() component of NASA cFS v7.0.1 allows attackers to force the processor to reset via supplying a crafted HS.AppMon_Tbl entry. |
| CVE-2026-67970 | Awaiting Analysis | 未確認 | CWE-284 | Incorrect access control in the DS_SetDestPathCmd() component of NASA cFS v7.0.1 allows attackers to access sensitive components via a path traversal. |
| CVE-2026-67972 | Awaiting Analysis | 未確認 | CWE-200 | An issue in the CF_CFDP_RecvMd() component of NASA cFS v7.0.1 allows attackers to contrl where received content and data is stored, possibly leading to an information disclosure. |
| CVE-2026-67973 | Awaiting Analysis | 未確認 | CWE-400 | An issue in the CFDP receive path of NASA cFS v7.0.1 allows attackers to cause a Denial of Service (DoS) via replaying final CFDP PDUs. |
| CVE-2026-67974 | Awaiting Analysis | 未確認 | CWE-20 | A parser boundary flaw in the Software Bus Network (SBN) application's peer subscription message handling in NASA cFS v7.0.1 allows attackers to cause a Denial of Service (DoS) via |
| CVE-2026-67975 | Awaiting Analysis | 未確認 | CWE-284 | Incorrect access control in NASA cFS v7.0.1 allows attackers to arbitrarily remove low-index subscriptions and add new streams via sending TO_LAB add/remove subscription commands. |
| CVE-2026-67976 | Deferred | 未確認 | CWE-400 | The Ref::SignalGen component of fprime framework v4.2.2 does not validate the safety of user-controlled parameters, allowing attackers to cause a Denial of Service (DoS) via inputt |
| CVE-2026-67977 | Deferred | 未確認 | CWE-400 | An integer overflow in the Svc::FileDownlink::SendPartial component of fprime framework v4.2.2 allows attackers to cause a Denial of Service (DoS) via a crafted input. |
| CVE-2026-67978 | Awaiting Analysis | 未確認 | CWE-20, CWE-400 | An issue in the SBN UDP interface of NASA cFS v7.0.1 allows attackers to cause a Denial of Service (DoS) via transmitting a crafted SBN frame. |
| CVE-2026-67979 | Awaiting Analysis | 未確認 | CWE-284 | Incorrect access control in the Executive Services dynamic application start path component of NASA cFS v7.0.1 allows attackers to execute arbitrary code via placing a shared objec |
| CVE-2026-67986 | Deferred | 未確認 | CWE-94 | amazing-print/amazing_print at commit dc890dfafdf07088ea901df53c19c2710e5c5234 contains a Ruby code injection condition in AwesomeMethodArray#grep. A specially named method contain |
| CVE-2026-67990 | Deferred | 未確認 | CWE-352 | basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f disables Rails CSRF protection for its Alertmanager and Prometheus proxy controllers. An unauthenticated attacke |
| CVE-2026-67991 | Deferred | 未確認 | CWE-1333 | crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains a polynomial-time regular expression denial-of-service condition in RubyLLM::Utils.underscore on Ruby 3.1 |
| CVE-2026-68000 | Deferred | 未確認 | CWE-89 | The front-end interface /cms/category/list of MCMS <=6.2.0 is vulnerable to SQL injection. The size parameter is directly concatenated into the LIMIT clause of SQL through FreeMark |
| CVE-2026-68004 | Deferred | 未確認 | CWE-284 | An issue in OSSRS SRS (Simple Realtime Server) <v5.0.213 allows a remote attacker to execute arbitrary code via RTMP publish authorization, vhost-level security configuration (secu |
| CVE-2026-68005 | Deferred | 未確認 | CWE-400 | An issue in ACME mini_httpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handle_request() function |
| CVE-2026-68060 | Analyzed | 未確認 | CWE-770 | A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Broker-J |
| CVE-2026-68062 | Deferred | 未確認 | CWE-22 | SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the aff |
| CVE-2026-68067 | Deferred | 未確認 | CWE-1390 | The login endpoint on the Mira cloud API accepts any format-valid string in the password field and returns a live active session token for the account matching the supplied email a |
| CVE-2026-68073 | Modified | 未確認 | CWE-674 | A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid Broker-J: through |
| CVE-2026-68074 | Analyzed | 未確認 | CWE-770 | A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apache Qpid Broker-J: thr |
| CVE-2026-68075 | Analyzed | 未確認 | CWE-770 | An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service. This issue affects Apache Qpid Broker-J: through 10.0.1. |
| CVE-2026-68076 | Modified | 未確認 | CWE-639 | Apache Airflow's environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team's scope. The guard meant to prevent this only ran when no te |
| CVE-2026-68077 | Analyzed | 未確認 | CWE-606 | An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service. This is |
| CVE-2026-68078 | Analyzed | 未確認 | CWE-770 | It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial |
| CVE-2026-68079 | Modified | 未確認 | CWE-294 | In Apache CXF's DefaultEncryptingCodeDataProvider, a captured authorization code can be redeemed an unlimited number of times due to a flaw in the implementation of the removeCodeG |
| CVE-2026-68080 | Analyzed | 未確認 | CWE-406 | It was not possible to govern the rate at which the broker would respond to an echo flow, enabling an authenticated attacker to cause excessive resource usage and potential denial |
| CVE-2026-68081 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state Put all vmcs12 pages if KVM sy | |
| CVE-2026-68082 | Received | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: libceph: fix two unsafe bare decodes in decode_lockers() decode_lockers() in cls_lock_client.c contains two ba |
| CVE-2026-68083 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix path resolution in ksmbd_vfs_kern_path_create The SMB2 open lookup is rooted at the share with LOOK | |
| CVE-2026-68084 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: staging: vme_user: fix location monitor leak in tsi148 bridge tsi148_probe() allocates a location monitor reso | |
| CVE-2026-68085 | Received | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled HCI_UART_SENDING bit in tx_state means |
| CVE-2026-68086 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/khugepaged: write all dirty file folios when collapsing [There is no upstream commit, as this code was remo | |
| CVE-2026-68087 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: wacom: use GFP_ATOMIC in wacom_wac_queue_flush() wacom_wac_queue_flush() is called via the .raw_event cal | |
| CVE-2026-68088 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: function: rndis: add length check to response query Add variable representations for BufLength an | |
| CVE-2026-68089 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: core: fix uninitialized data in debugfs If *ppos is non-zero then simple_write_to_buffer() will not initi | |
| CVE-2026-68090 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: debugobjects: Plug race against a concurrent OOM disable syzbot reported a puzzling splat: WARNING: kernel | |
| CVE-2026-68091 | Received | 未確認 | CWE-404 | In the Linux kernel, the following vulnerability has been resolved: HID: wacom: stop hardware after post-start probe failures wacom_parse_and_register() starts HID hardware befor |
| CVE-2026-68092 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: time/jiffies: Register jiffies clocksource before usage Teddy reported that a XEN HVM has a long boot delay, w | |
| CVE-2026-68093 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug If a vCPU stays scheduled o | |
| CVE-2026-68094 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Preserve rq tracking across local DSQ dispatch dispatch_to_local_dsq() can run from scx_bpf_dsq_mov | |
| CVE-2026-68095 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix race between registration and connection abortion This fixes this race: - thread a: io_uring_e | |
| CVE-2026-68096 | Received | 未確認 | CWE-835 | In the Linux kernel, the following vulnerability has been resolved: audit: fix recursive locking deadlock in audit_dupe_exe() A deadlock occurs in the audit subsystem when duplic |
| CVE-2026-68097 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate ACE size against SID sub-authorities set_ntacl_dacl() validates sid.num_subauth before copying | |
| CVE-2026-68098 | Received | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: bound DACL dedup walk to copied ACEs set_ntacl_dacl() can stop copying ACEs before consuming the full i |
| CVE-2026-68099 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: restore DACL size on check_add_overflow() to avoid malformed ACL check_add_overflow() unconditionally w | |
| CVE-2026-68100 | Received | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl set_ntacl_dacl() copies each ACE from the attac |
| CVE-2026-68101 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-68102 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix aperture mapping leak amdgpu_pci_remove() calls drm_dev_unplug() before invoking the driver fi | |
| CVE-2026-68103 | Received | 未確認 | CWE-662 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: reject mapping a reserved doorbell to a new queue When creating an user-queue, the user space prov |
| CVE-2026-68104 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: invoke pm_genpd_remove() before freeing genpd Call pm_genpd_remove() to unregister from global lis |
| CVE-2026-68105 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix kernel panic during driver load failure Avoid kernel panic if MES init fails during driver loa | |
| CVE-2026-68106 | Received | 未確認 | CWE-369 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix division by zero with invalid uvd dimensions When width or height is less than 16, width_in_mb |
| CVE-2026-68107 | Received | 未確認 | CWE-367 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn4: avoid rereading IB param length Reuse the parameter length returned by vcn_v4_0_enc_find_ib_p |
| CVE-2026-68108 | Received | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: fix integer overflow in image size Fix a security vulnerability where malicious VCE command st |
| CVE-2026-68109 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma7.1: replace BUG_ON() with WARN_ON() There's no need to crash the kernel for these cases. (che | |
| CVE-2026-68110 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON() There's no need to crash the kernel for these cases. (c | |
| CVE-2026-68111 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON() There's no need to crash the kernel for these cases. (cherry | |
| CVE-2026-68112 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx9.4.3: replace BUG_ON() with WARN_ON() There's no need to crash the kernel for these cases. (ch | |
| CVE-2026-68113 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx12: replace BUG_ON() with WARN_ON() There's no need to crash the kernel for these cases. (cherr | |
| CVE-2026-68114 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx12.1: replace BUG_ON() with WARN_ON() There's no need to crash the kernel for these cases. (che | |
| CVE-2026-68115 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON() There's no need to crash the kernel for these cases. (cherr | |
| CVE-2026-68116 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vxlan: mdb: Fix source list corruption on a failed replace When replacing the source list of an MDB remote ent | |
| CVE-2026-68117 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: tipc: clear sock->sk on the failed-insert path in tipc_sk_create() When tipc_sk_create() fails to insert the n |
| CVE-2026-68118 | Received | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: tcp: challenge ACK for non-exact RST in SYN-RECEIVED The SYN-RECEIVED request-socket path in tcp_check_req() a |
| CVE-2026-68119 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tcp: initialize standalone TCP-AO response padding tcp_v4_send_ack() and tcp_v6_send_response() construct stan | |
| CVE-2026-68120 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rtase: Workaround for TX hang caused by hardware packet parsing The hardware performs packet parsing before pa | |
| CVE-2026-68121 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after dev_hard_header() pppoe_sendmsg() saves a pointer to the PPPoE header befor |
| CVE-2026-68122 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ovpn: fix peer refcount leak in TCP error paths When either the TCP RX or TX error path calls ovpn_peer_hold() | |
| CVE-2026-68123 | Received | 未確認 | CWE-191 | In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix GSO userspace truncation underflow OVS_ACTION_ATTR_TRUNC currently stores a delta from the or |
| CVE-2026-68124 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mctp: serial: handle zero-length frames to prevent rx buffer overflow The MCTP serial receive state machine re | |
| CVE-2026-68125 | Received | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: reject frames shorter than the authentication tag llsec_do_decrypt_auth() computes the assoc |
| CVE-2026-68126 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mac802154: hold an interface reference across the scan worker mac802154_scan_worker() captures the scanning su | |
| CVE-2026-68127 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ila: reload IPv6 header after pskb_may_pull in checksum adjust ila_csum_adjust_transport() caches ip6h = ipv6_ |
| CVE-2026-68128 | Received | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: ice: reject out-of-range ptype in ice_parser_profile_init set_bit(rslt->ptype, prof->ptypes) operates on a DEC |
| CVE-2026-68129 | Received | 未確認 | CWE-400 | In the Linux kernel, the following vulnerability has been resolved: gve: fix Rx queue stall on alloc failure When the system is under extreme memory pressure, page allocations ca |
| CVE-2026-68130 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: defer destroy_previous_session() until after NTLM authentication In ntlm_authenticate(), destroy_previo | |
| CVE-2026-68131 | Received | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: rbd: Reset positive result codes to zero in object map update path In a reply message to an RBD request, a pos |
| CVE-2026-68132 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: super: fix emergency thaw deadlock on frozen block devices do_thaw_all_callback() calls bdev_thaw() while hold | |
| CVE-2026-68133 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ice: fix PTP Call Trace during PTP release If a PF reset occurs when the PTP state is ICE_PTP_UNINIT, then ice | |
| CVE-2026-68134 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ptp: ptp_s390: Add missing facility check Only register the physical clock when facility 28 is installed and P | |
| CVE-2026-68135 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: hip04: fix RX buffer leak on build_skb failure When build_skb() fails in hip04_rx_poll(), the driver jump | |
| CVE-2026-68136 | Received | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net: gro: fix double aggregation of flush-marked skbs Commit 0ab03f353d36 ("net-gro: Fix GRO flush when receiv |
| CVE-2026-68137 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/x25: fix use-after-free in x25_kill_by_neigh() x25_kill_by_neigh() walks the global X.25 socket list looki | |
| CVE-2026-68138 | Received | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: net/sched: serialize qdisc_rtab_list against concurrent get/put qdisc_get_rtab() and qdisc_put_rtab() mutate t |
| CVE-2026-68139 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Use sender devcom for MPV master-up After PCIe DPC recovery, mlx5 reloads the affected functions an | |
| CVE-2026-68140 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix use-after-free of a severed iucv_path af_iucv queues not-yet-received message notifications on i |
| CVE-2026-68141 | Received | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() afiucv_hs_callback_syn() allocates the child socket wi |
| CVE-2026-68142 | Received | 未確認 | CWE-862 | In the Linux kernel, the following vulnerability has been resolved: geneve: require CAP_NET_ADMIN in the device netns for changelink A tunnel changelink() operates on at most two |
| CVE-2026-68143 | Received | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: net: slip: serialize receive against buffer reallocation sl_realloc_bufs() replaces rbuff and updates buffsize |
| CVE-2026-68144 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: phonet: pep: fix use-after-free in pep_get_sb() pep_get_sb() doesn't consider that pskb_may_pull() might have |
| CVE-2026-68145 | Received | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: iomap: fix out-of-bounds bitmap_set() with zero-length range ifs_set_range_dirty() and ifs_set_range_uptodate( |
| CVE-2026-68146 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ftrace: Add global mutex to serialize trace_parser access In ftrace, the trace_parser structure is allocated a | |
| CVE-2026-68147 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fscrypt: Avoid dynamic allocation in fscrypt_get_devices() When a blk_crypto_key starts being used or is evict | |
| CVE-2026-68148 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: fscrypt: Add missing superblock check in find_or_insert_direct_key() The legacy 'fscrypt_direct_keys' table ca |
| CVE-2026-68149 | Received | 未確認 | CWE-662 | In the Linux kernel, the following vulnerability has been resolved: fs: preserve ACL_DONT_CACHE state in forget_cached_acl() The ACL_DONT_CACHE state is meant to be a constant st |
| CVE-2026-68150 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs/super: fix emergency thaw double-unlock of s_umount do_thaw_all() iterates over all superblocks via __itera | |
| CVE-2026-68151 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: binfmt_elf_fdpic: only honour the first PT_INTERP The program header scan handles PT_INTERP from a switch nest | |
| CVE-2026-68152 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: amt: fix use-after-free in AMT delayed works When an AMT device is removed, pending delayed works can still ac | |
| CVE-2026-68153 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: libceph: remove debugfs files before client teardown ceph_destroy_client() tears down the monitor client befor |
| CVE-2026-68154 | Received | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: libceph: reject zero bucket types in crush_decode CRUSH bucket type 0 is reserved for devices. The mapper rel |
| CVE-2026-68155 | Received | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: libceph: Reject monmaps advertising zero monitors A message of type CEPH_MSG_MON_MAP contains a monmap that is |
| CVE-2026-68156 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: libceph: refresh auth->authorizer_buf{,_len} after authorizer update ceph_x_create_authorizer() caches au->buf |
| CVE-2026-68157 | Received | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: libceph: guard missing CRUSH type name lookup Localized read selection can walk a parent bucket whose name exi |
| CVE-2026-68158 | Received | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: libceph: Fix multiplication overflow in decode_new_up_state_weight() If a message of type CEPH_MSG_OSD_MAP con |
| CVE-2026-68159 | Received | 未確認 | CWE-121 | In the Linux kernel, the following vulnerability has been resolved: libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE __decode_pg_temp() decodes an user-contr |
| CVE-2026-68160 | Received | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() ceph_handle_caps() reads snap_trace_l |
| CVE-2026-68161 | Received | 未確認 | CWE-404 | In the Linux kernel, the following vulnerability has been resolved: sctp: close UDP tunnel sockets during netns teardown proc_sctp_do_udp_port() starts per-net SCTP UDP tunneling |
| CVE-2026-68162 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: sctp: avoid auth_enable sysctl UAF during netns teardown proc_sctp_do_auth() updates the SCTP control socket a |
| CVE-2026-68163 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/page_vma_mapped: fix device-private PMD handling Commit 65edfda6f3f2 ("mm/rmap: extend rmap and migration s | |
| CVE-2026-68164 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: disallow overlapping input ranges for damon_set_regions() damon_set_regions() assumes the input | |
| CVE-2026-68165 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: validate ranges in damon_set_regions() DAMON core logic assumes zero length regions don't exist | |
| CVE-2026-68166 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: userfaultfd: prevent registration of special VMAs Vova Tokarev says: userfaultfd allows registration on sha | |
| CVE-2026-68167 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: do not try compression for data reloc inodes [BUG] There is a syzbot report that the check inside get_n | |
| CVE-2026-68168 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix afs_edit_dir_remove() to get, not find, block 0 Fix afs_edit_dir_remove() to use afs_dir_get_block() | |
| CVE-2026-68169 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: userspace: fix use-after-free in get_local_id In mptcp_pm_userspace_get_local_id(), the address ent | |
| CVE-2026-68170 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix stale skb->sk reference on subflow close The backlog list is updated by mptcp_data_ready() under mp | |
| CVE-2026-68171 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-68172 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: arm64: make huge_ptep_get handled unaligned addresses huge_ptep_get() can be handed a virtual address pointing | |
| CVE-2026-68173 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ublk: wait on ublk_dev_ready() instead of ub->completion ub->completion is only re-armed by a successful START | |
| CVE-2026-68174 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix union collision of module and refcnt for dynamic events In 'struct trace_event_call', the 'module | |
| CVE-2026-68175 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix resource leak on mmiotrace trace_pipe close The mmiotrace tracer was added May 12th 2008. At that | |
| CVE-2026-68176 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev If the mmio_pipe_open() fails to find a PCI d | |
| CVE-2026-68177 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracing: Delay module ref count for "enable_event" trigger Triggers are now delayed from freeing, but can stil | |
| CVE-2026-68178 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: misc: nsm: pin the module while the device is open misc_open() installs a misc driver's file operations with f |
| CVE-2026-68179 | Received | 未確認 | CWE-675 | In the Linux kernel, the following vulnerability has been resolved: misc: nsm: only unlock nsm_dev on post-lock error paths nsm_dev_ioctl() jumps to the common out label even whe |
| CVE-2026-68180 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: intel_th: fix MSC output device reference leak intel_th_output_open() looks up the output device with bus_find | |
| CVE-2026-68181 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mei: bus: access mei_device under device_lock on cleanup Fix couple of problems in mei_cl_bus_dev_release(): | |
| CVE-2026-68182 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: comedi: comedi_parport: deal with premature interrupt Syzbot reported a general protection fault in `comedi_ge | |
| CVE-2026-68183 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-svc: fix memory leaks and list corruption bugs Fix a memory leak when gen_pool_alloc() fai | |
| CVE-2026-68184 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cdrom: fix stack out-of-bounds read in CDROMVOLCTRL mmc_ioctl_cdrom_volume() first reads the audio control mod | |
| CVE-2026-68185 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Move jump_label_init() before parse_early_param() When enabling both CONFIG_MEM_ALLOC_PROFILING=y a | |
| CVE-2026-68186 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: set have_execfd only once the interpreter is opened load_misc_binary() raises bprm->have_execfd a | |
| CVE-2026-68187 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: exec: fix unsigned loop counter wrap in transfer_args_to_stack() The stop value is derived from bprm->p >> PAG | |
| CVE-2026-68188 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: Fix session UAF in set_termios rfcomm_tty_set_termios() tests dlc->session without rfcomm_m | |
| CVE-2026-68189 | Received | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Protect UUID list traversal The hci_sync conversion moved class-of-device and EIR generat |
| CVE-2026-68190 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie() rtw_get_wps_ie() iterates over IE data from network fram | |
| CVE-2026-68191 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix NULL pointer dereference in rhash table destroy When unbinding the ath12k driver, kernel NUL | |
| CVE-2026-68192 | Received | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: make release_scratchbuffers idempotent brcmf_pcie_release_scratchbuffers() frees the shared.sc |
| CVE-2026-68193 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses PKT_TYPE_TXRX_NOTIFY is an mmio-only event, but mt7925_ | |
| CVE-2026-68194 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses PKT_TYPE_TXRX_NOTIFY is an mmio-only event, but mt7921_ | |
| CVE-2026-68195 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses PKT_TYPE_TXRX_NOTIFY is an mmio-only event, but mt7615_ | |
| CVE-2026-68196 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: validate assoc response length before subtracting header wilc_parse_assoc_resp_info() computes | |
| CVE-2026-68197 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper mwifiex_tdls_add_ht_oper() gates its | |
| CVE-2026-68198 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: fix use-after-free in aggr_reset_state() The aggr_reset_state() function uses timer_delete() (no |
| CVE-2026-68199 | Received | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: fix OOB access from firmware ADDBA window size aggr_recv_addba_req_evt() logs a debug message wh |
| CVE-2026-68200 | Received | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: don't re-enter an instance callback that is still running The userspace-driven timer (utimer) TRI |
| CVE-2026-68201 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: drain a slave's callback before its master detaches it snd_timer_close_locked() drains the closin |
| CVE-2026-68202 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: close a re-opened queue timer in the destructor queue_delete() closes the queue timer, then frees i |
| CVE-2026-68203 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: vivid: fix cleanup bugs in vivid_init() When platform_device_register() fails in vivid_init(), the embe | |
| CVE-2026-68204 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: vivid: check for vb2_is_busy() when toggling caps The vivid_update_format_cap/out() functions must only | |
| CVE-2026-68205 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor() The v4l2 helper v4l2_a | |
| CVE-2026-68206 | Received | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC active reference counts HEVC slice parameters are shared stateless V4L2 contr |
| CVE-2026-68207 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: ti: vpe: unwind v4l2 device registration on probe error If the vpe_top resource is missing, vpe_probe() | |
| CVE-2026-68208 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: ti: vpe: Fix the error code of devm_kzalloc() in vip_probe_slice() In vip_probe_slice(), the error chec | |
| CVE-2026-68209 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: sun4i-csi: Return queued buffers on start_streaming() failure The vb2 framework hands buffers to the dr | |
| CVE-2026-6821 | Analyzed | 未確認 | CWE-862 | GitLab has remediated an issue in GitLab EE affecting all versions from 12.0 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allo |
| CVE-2026-68210 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: unregister notifier on probe failure dcmi_graph_init() registers the async notifier before | |
| CVE-2026-68211 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: stm32-dcmipp: Return queued buffers on start_streaming() failure The vb2 framework hands buffers to the | |
| CVE-2026-68212 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: saa7134: Fix a possible memory leak in saa7134_video_init1 In saa7134_video_init1(), the return value o | |
| CVE-2026-68213 | Received | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: media: rtl2832_sdr: Return queued buffers on start_streaming() failure The vb2 framework hands buffers to the |
| CVE-2026-68214 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: rtl2832: fix use-after-free in rtl2832_remove() cancel_delayed_work_sync() is called before i2c_mux_del | |
| CVE-2026-68215 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: radio-si476x: Unregister v4l2_device on probe failure si476x_radio_probe() registers radio->v4l2dev bef | |
| CVE-2026-68216 | Received | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: media: pwc: Return queued buffers on start_streaming() failure The vb2 framework hands buffers to the driver v |
| CVE-2026-68217 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: pwc: Drain fill_buf on start_streaming() failure pwc_isoc_init() submits its isochronous URBs with usb_ | |
| CVE-2026-68218 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: pci: dm1105: Free allocated workqueue Destroy allocated workqueue in remove() callback to free its reso | |
| CVE-2026-68219 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Fix potential out-of-bounds issues The maximum downscaling factor supported by ISI can b | |
| CVE-2026-6822 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-68220 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in crossbar and pipe Both mxc_isi_crossbar_init() and | |
| CVE-2026-68221 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: nuvoton: npcm-video: fix memory leaks in probe and remove npcm_video_probe() allocates the npcm_video s | |
| CVE-2026-68222 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: msi2500: Return queued buffers on start_streaming() failure The vb2 framework hands buffers to the driv | |
| CVE-2026-68223 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: meson: vdec: Fix memory leak in error path of vdec_open The vdec_open() function previously jumped dire | |
| CVE-2026-68224 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: mali-c55: Fix possible ERR_PTR in enable_streams The media_pad_remote_pad_unique() function returns eit | |
| CVE-2026-68225 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: i2c: alvium: fix critical pointer access in alvium_ctrl_init The current implementation of alvium_ctrl_ | |
| CVE-2026-68226 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: cx23885: add ioremap return check and cleanup Add a check for the return value of pci_ioremap_bar() in | |
| CVE-2026-68227 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: cx231xx: fix devres lifetime USB drivers bind to USB interfaces and any device managed resources should | |
| CVE-2026-68228 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Move src_buf Removal to finish_encode During encoder processing, there is a case wh | |
| CVE-2026-68229 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: cedrus: skip invalid H.264 reference list entries Cedrus consumes H.264 ref_pic_list0/ref_pic_list1 ent | |
| CVE-2026-68230 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: amlogic-c3: Add validations for ae and awb config Avoid invalid memory access if the zones_num is bigge | |
| CVE-2026-68231 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: airspy: Return queued buffers on start_streaming() failure The vb2 framework hands buffers to the drive | |
| CVE-2026-68232 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: Fix MM reference leak in drm_gpusvm_range_evict If kvmalloc_array() fails in drm_gpusvm_range_evic | |
| CVE-2026-68233 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Shut down BO cache timer before teardown The BO cache timer callback schedules time_work, and time_wo | |
| CVE-2026-68234 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved amdgpu_bo_create_reserved() only allocates a new | |
| CVE-2026-68235 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: dce100: skip non-DP stream encoders for DP MST On DCE8-class ASICs (e.g. Bonaire), the resour | |
| CVE-2026-68236 | Received | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: set new_stream to NULL after release In dm_update_crtc_state(), the skip_modeset path release |
| CVE-2026-68237 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: fix indefinite fence wait during GPU reset pre_reset only force-completes fences of MAPPED q | |
| CVE-2026-68238 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Release VFCT ACPI table reference amdgpu_acpi_vfct_bios() fetches the VFCT table with acpi_get_tab | |
| CVE-2026-68239 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Account for NULL and handle pages in ttm_pool_backup Pages in ttm_pool_backup can be NULL or backup h | |
| CVE-2026-68240 | Received | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: publish dpagemap early to avoid device mapping leak on error drm_gpusvm_get_pages() only stored th |
| CVE-2026-68241 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/mst: limit DP MST ESI service loop The loop in intel_dp_check_mst_status() keeps servicing interrupts | |
| CVE-2026-68242 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Fix NULL deref on sched_engine alloc failure Avoid using intel_context_put() before intel_context | |
| CVE-2026-68243 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU Setting context engine slot N into I915_ENGINE_CLASS_I | |
| CVE-2026-68244 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Do not leak siblings[] on proto context error After a successful BALANCE/PARALLEL_SUBMIT extensi | |
| CVE-2026-68245 | Received | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() The vm pointer returned from amdgpu_vm_get_v |
| CVE-2026-68246 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx11: replace BUG_ON() with WARN_ON() There's no need to crash the kernel for these cases. (cherr | |
| CVE-2026-68247 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/bios: range check LFP Data Block panel_type2 While the panel_type from LFP Data Block is range checke | |
| CVE-2026-68248 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/i915: Return NULL on error in active_instance Avoid returning &node->base when node is NULL due to OOM dur | |
| CVE-2026-68249 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma5.0: replace BUG_ON() with WARN_ON() There's no need to crash the kernel for these cases. (che | |
| CVE-2026-68250 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON() There's no need to crash the kernel for these cases. (che | |
| CVE-2026-68251 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON() There's no need to crash the kernel for these cases. (che | |
| CVE-2026-68252 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma7.0: replace BUG_ON() with WARN_ON() There's no need to crash the kernel for these cases. (che | |
| CVE-2026-68253 | Received | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/hdcp: check streams[] bounds before overflow The data->streams[] overflow check is done after the buf |
| CVE-2026-68254 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/vrr: require valid min/max vfreq for VRR Ensure the EDID provided min/max vfreq are valid. Most scena | |
| CVE-2026-68255 | Received | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: drm/virtio: bound EDID block reads to the response buffer virtio_get_edid_block() validates the read offset on |
| CVE-2026-68256 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: detect_link_and_local_sink: DP alt mode timeout path leaks prev_sink reference prev_sink is u | |
| CVE-2026-68257 | Received | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix 32-bit overflow in CWSR total size calculation total_cwsr_size was computed in 32-bit before b |
| CVE-2026-68258 | Received | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size We weren't checking whether the values provid |
| CVE-2026-68259 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds in allocate_event_notification_slot The valid event ids go from 0 to KFD_SIGNAL_EVENT | |
| CVE-2026-68260 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/imagination: acquire vm_ctx->lock before mapping memory to GPU VM The drm gpuvm code doesn't protect find | |
| CVE-2026-68261 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/imagination: fix error checking of pvr_vm_context_lookup() Since pvr_vm_context_lookup() returns either NU | |
| CVE-2026-68262 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix user array stride in pvr_set_uobj_array() pvr_set_uobj_array() copies an array of kernel | |
| CVE-2026-68263 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix double call to drm_sched_entity_fini() Call sequence of double call: pvr_context_destroy | |
| CVE-2026-68264 | Received | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() xe_pt_update_ops_init() fails to reset current_op to 0. |
| CVE-2026-68265 | Received | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/vm: Fix BO prefetch with CONSULT_MEM_ADVISE_PREF_LOC When prefetch region is DRM_XE_CONSULT_MEM_ADVISE_ |
| CVE-2026-68266 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Hold a dma-buf reference for imported BOs An imported dma-buf BO is created as a ttm_bo_type_sg BO who |
| CVE-2026-68267 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists Unconditionally whitelisting OA registers is a sec | |
| CVE-2026-68268 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Return error on non-migratable faults requiring devmem Non-migratable faults that require devmem incor | |
| CVE-2026-68269 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Add missing nospec on parallel submit slot Add missing Spectre mitigation for userspace controll | |
| CVE-2026-6827 | Deferred | 未確認 | CWE-79 | justhtml before 1.17.0 contains multiple security issues in sanitization, serialization, and programmatic DOM handling. When custom policies preserve foreign namespaces (SVG/MathML |
| CVE-2026-68270 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/sysfb: Avoid possible truncation with calculating visible size Calculating the visible size of the system | |
| CVE-2026-68271 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix reversed error cleanup order in ucopy functions nouveau_uvmm_vm_bind_ucopy() and nouveau_exec | |
| CVE-2026-68272 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate CP_GFX_SHADOW chunk size in CS pass1 Add a minimum-length check for the AMDGPU_CHUNK_ID_C | |
| CVE-2026-68273 | Received | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix context pstate override handling There are several problems in the context pstate handling cod |
| CVE-2026-68274 | Received | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Fix buffer overflow in steered register list allocation The size calculation for the steered regis |
| CVE-2026-68275 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check amdgpu_vm_bo_find() result in GET_MAPPING_INFO The AMDGPU_GEM_OP_GET_MAPPING_INFO path of am | |
| CVE-2026-68276 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx: fix cleaner shader IB buffer overflow The cleaner shader sysfs path allocates a 16-dword (64 b | |
| CVE-2026-68277 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers Three sideband reply parsers read 16-bit | |
| CVE-2026-68278 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/dp/mst: fix buffer overflows in sideband chunk accumulation drm_dp_sideband_append_payload() has three rel | |
| CVE-2026-68279 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers drm_dp_sideband_parse_remote_dpcd_read() r | |
| CVE-2026-68280 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS() The deprecated UNIVERSAL_DEV_PM_OPS() macro us | |
| CVE-2026-68281 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Count paired job fence as dependency in prepare_job() The DRM scheduler's prepare_job() callb | |
| CVE-2026-68282 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: analogix_dp: Add missing error check for platform_get_resource() Add missing error check for pla | |
| CVE-2026-68283 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free freeing trigger private data Commit 61d445af0a7c ("tracing: Add bulk garbage colle | |
| CVE-2026-68284 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() tcp_bpf_sendmsg() keeps msg_tx across sk_stream_wai |
| CVE-2026-68285 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Fix memory leak in bpf_jit_free() When bpf_int_jit_compile() is called for subprograms, it ret | |
| CVE-2026-68286 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drop_monitor: perform u64_stats updates under IRQ-disabled section In net_dm_packet_trace_kfree_skb_hit() and | |
| CVE-2026-68287 | Received | 未確認 | CWE-131 | In the Linux kernel, the following vulnerability has been resolved: drop_monitor: fix size calculations for 64-bit attributes net_dm_packet_report_fill() and net_dm_hw_packet_rep |
| CVE-2026-68288 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD net_dm_packet_report_fill() and net_dm_hw_packet_repor | |
| CVE-2026-68289 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() In tipc_recvmsg(), the copy length is compu | |
| CVE-2026-68290 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: rds: tcp: unregister sysctl before tearing down listen socket rds_tcp_exit_net() frees the per-netns RDS TCP l |
| CVE-2026-68291 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: idpf: fix max_vport related crash on allocation error during init Set adapter->max_vports only after successfu | |
| CVE-2026-68292 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ice: prevent tstamp ring allocation for non-PF VSI types The pf->txtime_txqs bitmap tracks which Tx queues hav | |
| CVE-2026-68293 | Received | 未確認 | CWE-122 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads The MCIA register can return up to 32 dwords (12 |
| CVE-2026-68294 | Received | 未確認 | CWE-862 | In the Linux kernel, the following vulnerability has been resolved: net: qrtr: restrict socket creation to the initial network namespace QRTR keeps its entire port and node state |
| CVE-2026-68295 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Zero-extend signed ALU32 div/mod results ALU32 operations write a 32-bit result and leave the | |
| CVE-2026-68296 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM Before commit 00d066a4d4ed ("netdev_features: conv | |
| CVE-2026-68297 | Received | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix u16 MTU truncation in media and bearer MTU validation Both TIPC_NL_MEDIA_SET and TIPC_NL_BEARER_SET |
| CVE-2026-68298 | Received | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/vm: Fix SVM leak on resv obj alloc failure in xe_vm_create() Commit 9e9787414882 ("drm/xe/userptr: repl |
| CVE-2026-68299 | Received | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets vmxnet3_get_hdr_len() assumes gdesc->rcd.v4/v6 |
| CVE-2026-68300 | Received | 未確認 | CWE-287 | In the Linux kernel, the following vulnerability has been resolved: sctp: auth: verify auth requirement when auth_chunk is NULL sctp_auth_chunk_verify() returns true unconditiona |
| CVE-2026-68301 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: hsr: fix memory leak on slave unregistration by removing synced VLANs When an HSR master device is brough | |
| CVE-2026-68302 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: amt: re-read skb header pointers after every pull Several AMT receive and transmit paths cache a pointer into | |
| CVE-2026-68303 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/vc4: hvs/v3d: Fix null dereference in unbind The hvs and v3d drivers use dev_get_drvdata(master) in their | |
| CVE-2026-68304 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix 802.1X-SHA256 call trace warning Based on wpa_auth as 1x_256 mode, need to set up "use_fws | |
| CVE-2026-68305 | Received | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Add drm_dev guards when detaching CCS read/write buffers CCS read/write buffers are freed during BO |
| CVE-2026-68306 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht() mt76_connac_get_eht_phy_cap r | |
| CVE-2026-68307 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix crash in reset link replay During reset recovery, mt7925_vif_connect_iter() replays fi | |
| CVE-2026-68308 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap() mt76_connac_get_he_phy_cap routine | |
| CVE-2026-68309 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv() mt76_connac_get_he_phy | |
| CVE-2026-68310 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: guard HE capability lookups mt7915_mcu_bss_he_tlv() and mt7915_mcu_sta_bfer_tlv() both run | |
| CVE-2026-68311 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: guard link STA in decap offload mt7925_sta_set_decap_offload() iterates over the vif valid | |
| CVE-2026-68312 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths In cifs_close_deferred_file(), ci | |
| CVE-2026-68313 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix infinite loop in __tipc_nl_compat_dumpit cmd->dumpit callback can return a negative errno, causing a | |
| CVE-2026-68314 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: mctp i3c: clean up notifier and buses if driver register fails mctp_i3c_mod_init() registers the I3C bus | |
| CVE-2026-68315 | Received | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: sctp: validate stream count in sctp_process_strreset_inreq() When processing a RESET_IN_REQUEST from a peer, s |
| CVE-2026-68316 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Fix element size accounting for cmd stream validation There are 2 issues with the element size | |
| CVE-2026-68317 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: pds_core: fix auxiliary device add/del races Two paths add or delete the same slot (pf->vfs[vf_id].padev): a V | |
| CVE-2026-68318 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: pds_core: fix use-after-free on workqueue during remove In pdsc_remove(), the workqueue is destroyed before pd | |
| CVE-2026-68319 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: pds_core: fix deadlock between reset thread and remove pci_reset_function() acquires device_lock before perfor | |
| CVE-2026-68320 | Received | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid sctp_auth_ep_add_chunkid() uses SCTP_NUM_ |
| CVE-2026-68321 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix FDIR filter leak on remove Perfect FDIR filters can be added while the interface is down and a | |
| CVE-2026-68322 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled When booting with the 'ipv6.disable=1' paramete | |
| CVE-2026-68323 | Received | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: tipc: serialize udp bearer replicast list updates tipc_udp_rcast_add() and cleanup_bearer() both update ub->rc |
| CVE-2026-68324 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() dmar_latency_disable() intends to zero out onl | |
| CVE-2026-68325 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Bound the early ACPI HID map The ivrs_acpihid command-line parser appends entries to a fixed four-e | |
| CVE-2026-68326 | Received | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: bound uAP association event IEs to the event buffer mwifiex_process_uap_event() handles EVENT_U |
| CVE-2026-68327 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wan: wanxl: Only reset hardware after BAR mapping wanxl_pci_init_one() stores the freshly allocated card in dr | |
| CVE-2026-68328 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfp: Check resource mutex allocation nfp_cpp_resource_find() allocates a CPP mutex handle for the matching res | |
| CVE-2026-68329 | Received | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() need_sync is a per-IOMMU |
| CVE-2026-68330 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix DMA direction for NPU mailbox buffer airoha_npu_send_msg() always maps the mailbox buffer wit | |
| CVE-2026-68331 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dpaa2-eth: put MAC endpoint device on disconnect fsl_mc_get_endpoint() returns the MAC endpoint device with a | |
| CVE-2026-68332 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix potential use-after-free in airoha_ppe_deinit() airoha_ppe_deinit() replaces the NPU pointer | |
| CVE-2026-68333 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: put MAC endpoint device on disconnect fsl_mc_get_endpoint() returns the MAC endpoint device with | |
| CVE-2026-68334 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: fix io_thread race in rxrpc_wake_up_io_thread() rxrpc_wake_up_io_thread() checks local->io_thread befor | |
| CVE-2026-68335 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: rds: drop incoming messages that cross network namespace boundaries rds_find_bound() looks up the destination |
| CVE-2026-68336 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bonding: fix devconf_all NULL dereference when IPv6 is disabled When booting with the 'ipv6.disable=1' paramet | |
| CVE-2026-68337 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject redirect helpers without a bpf_net_context The bpf_redirect*() helpers and skb_do_redirect() obtai | |
| CVE-2026-68338 | Received | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: net/packet: avoid fanout hook re-registration after unregister packet_set_ring() temporarily detaches a socket |
| CVE-2026-68339 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: validate Realtek vendor event length btusb_recv_event_realtek() reads the event code at data | |
| CVE-2026-68340 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: occ: validate poll response sensor blocks The OCC poll response parser walks a counted list of sensor d | |
| CVE-2026-68341 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ovpn: fix use after free in unlock_ovpn() unlock_ovpn() iterates over the release_list using llist_for_each_en | |
| CVE-2026-68342 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ovpn: avoid putting unrelated P2P peer on socket release ovpn_peer_release_p2p() is called when an OVPN UDP so | |
| CVE-2026-68343 | Received | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: smb: client: validate DFS referral PathConsumed parse_dfs_referrals() validates that the response contains the |
| CVE-2026-68344 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect uea_probe() distinguishes a pre-fir | |
| CVE-2026-68345 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: arm_mpam: guard MBWU state before adding it to garbage __destroy_component_cfg() adds each RIS mbwu_state obje | |
| CVE-2026-68346 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: validate and free ACPI mute object cs35l41_get_acpi_mute_state() evaluates a _DSM method t | |
| CVE-2026-68347 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix IRQ unsafe locking in gdom allocation Lockdep complains: [ 259.410489] ==================== | |
| CVE-2026-68348 | Received | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: ASoC: tas2781: bound firmware description string parsing The TAS2781 firmware parser reads several variable-le |
| CVE-2026-68349 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: fix buffer overflow in rx_stream failover path The failover continuation in carl9170_rx_stream | |
| CVE-2026-68350 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: fix OOB read from off-by-two in TX status handler The bounds check in carl9170_tx_process_stat | |
| CVE-2026-68351 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read When the firmware sends a command resp | |
| CVE-2026-68352 | Received | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: fix OOB read from firmware IE lengths in connect event The firmware-controlled beacon_ie_len, as |
| CVE-2026-68353 | Received | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler The firmware-controlled num_msg field |
| CVE-2026-68354 | Received | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: firewire: net: Fix fragmented datagram reassembly fwnet_frag_new() keeps a sorted list of received fragments f |
| CVE-2026-68355 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get() When the first entry in msdu_det | |
| CVE-2026-68356 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: watchdog: airoha: Prevent division by zero when clock frequency is zero clk_get_rate() can return 0 when the c | |
| CVE-2026-68357 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: watchdog: pretimeout: Fix UAF in watchdog_unregister_governor() When a watchdog governor is unregistered, it u | |
| CVE-2026-68358 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (nzxt-kraken3) Stop device IO before calling hid_hw_stop Calling hid_hw_stop() does not stop the device | |
| CVE-2026-68359 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop Calling hid_hw_stop() does not stop the device | |
| CVE-2026-68360 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop Calling hid_hw_stop() does not stop the device | |
| CVE-2026-68361 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop hid_hw_stop() does not stop the device IO. Thi | |
| CVE-2026-68362 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin In ATH11K_QMI_EVENT_FW_READY, ATH11 | |
| CVE-2026-68363 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request ath9k_hif_request_firmware() | |
| CVE-2026-68364 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix ISM dc_lock deadlock during suspend [Why] System hang observed during suspend/resume whil | |
| CVE-2026-68365 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: io_edgeport: cap received transmit credits The interrupt-status packet reports transmit credits r | |
| CVE-2026-68366 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer uvc_send_response() builds the UVC control | |
| CVE-2026-68367 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_tcm: synchronize delayed set_alt with teardown The f_tcm set_alt() path defers endpoint setup t | |
| CVE-2026-68368 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb() When unpacking host-supplied NTBs, ncm_unwrap | |
| CVE-2026-68369 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: printer: fix infinite loop in printer_read() printer_read() uses the same variable for the reques | |
| CVE-2026-6837 | Awaiting Analysis | 未確認 | CWE-78 | A post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel WAX650S firmware versions through 7.10(ABRM.4)C0 could allow an authenticated attacke |
| CVE-2026-68370 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback dummy_hcd embeds a single shared usb_request (d | |
| CVE-2026-68371 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: musb: omap2430: Do not put borrowed of_node in probe omap2430_probe() stores pdev->dev.of_node in a local | |
| CVE-2026-68372 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: core: port: Deattach Type-C connector on component unbind connector_unbind() is the mirror of connector_b | |
| CVE-2026-68373 | Received | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: wifi: at76c50x-usb: avoid length underflow in at76_guess_freq() at76_guess_freq() checks only that the receive |
| CVE-2026-68374 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: usb: core: sysfs: add lock to bos_descriptors_read() Add a lock to the function bos_descriptors_read(). This |
| CVE-2026-68375 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Handle partially initialized auxiliary devices bnxt_aux_devices_init() calls auxiliary_device_init() | |
| CVE-2026-68376 | Received | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: sctp: fix auth_hmacs array size in struct sctp_cookie The auth_hmacs array in struct sctp_cookie is supposed t |
| CVE-2026-68377 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_tunnel_key: Defer dst_release to RCU callback Fix a race-condition use-after-free in tunnel_key |
| CVE-2026-68378 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() When a dpll_pin is shared across multiple dp | |
| CVE-2026-68379 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tcp: fix TIME_WAIT socket reference leak on PSP policy failure Release the TIME_WAIT socket reference and jump | |
| CVE-2026-68380 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix use-after-free of mm_struct in job scheduler amdxdna_cmd_submit() stores current->mm in job | |
| CVE-2026-68381 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: pin conn during async oplock break notification smb2_oplock_break_noti() and smb2_lease_break_noti() st |
| CVE-2026-68382 | Received | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Hold device ref until queue teardown completes GuC exec queue destruction can run asynchronously. |
| CVE-2026-68383 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Keep scheduler timeline name alive The scheduler keeps a pointer to the timeline name, but q->name |
| CVE-2026-68384 | Received | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Fix VF CCS attach/detach race with in-flight BO moves xe_bo_move() attaches VF CCS read/write batch |
| CVE-2026-68385 | Received | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: s390/checksum: Fix csum_partial() without vector facility Currently csum_partial() calls csum_copy() with copy |
| CVE-2026-68386 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Reject unhashed UDP sockets on sockmap update UDP sockets get SOCK_RCU_FREE set when (auto-)boun | |
| CVE-2026-68387 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: can: raw: add locking for raw flags bitfield With commit 890e5198a6e5 ("can: raw: use bitfields to store flags | |
| CVE-2026-68388 | Received | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: smb/client: handle overlapping allocated ranges in fallocate smb3_simple_fallocate_range() can skip holes when |
| CVE-2026-68389 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_qca: Clear memdump state on invalid dump size qca_controller_memdump() allocates qca->qca_memdu | |
| CVE-2026-68390 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold hdev->lock for hci_conn_params lookups hci_conn_params_lookup requires hdev->lock be | |
| CVE-2026-68391 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds Dereferencing RCU-protected pointers outside |
| CVE-2026-68392 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync Dereferencing RCU-protected pointers outside cri | |
| CVE-2026-68393 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: extend conn_hash lookup critical sections Using RCU-protected pointers outside the critic |
| CVE-2026-68394 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: revalidate LOAD_CONN_PARAM queued update MGMT_OP_LOAD_CONN_PARAM queues conn_update_sync() wh |
| CVE-2026-68395 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered sata_dwc_enable_interrupts() | |
| CVE-2026-68396 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: core: wake eh reliably when using scsi_schedule_eh Drivers which use the scsi_schedule_eh function to ru | |
| CVE-2026-68397 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net/iucv: take a reference on the socket found in afiucv_hs_rcv() afiucv_hs_rcv() looks up the destination soc |
| CVE-2026-68398 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF pppol2tp_recv() runs in the L2TP UDP-enc |
| CVE-2026-68399 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF in sock clone early bailouts Similar to recent commit 9b51a6155d14 ("bpf,fork: wipe ->bpf_storage |
| CVE-2026-68400 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Fix Endpoint Memory Access Descriptor offset calculation Use the descriptor's `ep_mem_offse | |
| CVE-2026-68401 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Fix out-of-bound writes in ffa_setup_and_transmit() Sashiko (locally) reports multiple out- | |
| CVE-2026-68402 | Received | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: bound element ID read when checking non-inheritance cfg80211_is_element_inherited() reads the |
| CVE-2026-68403 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: initialize SDIO data work before cleanup brcmf_sdio_probe() stores the newly allocated bus in | |
| CVE-2026-68404 | Received | 未確認 | CWE-662 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: use wiphy work for socket owner autodisconnect nl80211_netlink_notify() walks the cfg80211 wir |
| CVE-2026-68405 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock ieee80211_do_stop() removes AP_VLAN packets from the | |
| CVE-2026-68406 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate PMSR FTM preamble range PMSR FTM request parsing accepts preamble values outside the | |
| CVE-2026-68407 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: free RNR data on MBSSID mismatch nl80211_parse_beacon() rejects EMA RNR data when there are few | |
| CVE-2026-68408 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock When a netlink socket that owns a PMSR sess | |
| CVE-2026-68409 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: defer link RX stats percpu free to RCU sta_remove_link() frees a removed MLO link's RX stats p |
| CVE-2026-68410 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix memory leak in helper_firmware_cb() helper_firmware_cb() neglects to free the single-stage | |
| CVE-2026-68411 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: clamp virtio RX length before skb_put hwsim_virtio_rx_work() passes the virtqueue used-r | |
| CVE-2026-68412 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Fix an error handling path in cfg80211_wext_siwscan() If the test against IEEE80211_MAX_SSID_L | |
| CVE-2026-68413 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one() The memory allocated in the ipw2100_alloc_d | |
| CVE-2026-68414 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel sched scan results work on unregister cfg80211_sched_scan_results() can queue rdev->sch |
| CVE-2026-68415 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfrm: clear mode callbacks after failed mode setup xfrm_state_gc_task can run long after a failed IPTFS state | |
| CVE-2026-68416 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mtd: fix double free and WARN_ON in add_mtd_device() error paths When device_register() or mtd_nvmem_add() fai | |
| CVE-2026-68417 | Received | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: publish QP after initialization siw_create_qp() currently calls siw_qp_add() before the queues, CQ p |
| CVE-2026-68418 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Prevent user-triggered null deref on QP create Previously, the user QP creation path would only at | |
| CVE-2026-68419 | Received | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Prevent rereg_mr for non-mem regions When a QP/CQ/SRQ is created, a two step process is used where |
| CVE-2026-68420 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfrm: reject optional IPTFS templates in outbound policies syzbot reported a stack-out-of-bounds read in xfrm_ | |
| CVE-2026-68421 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Don't warn on core-sched forced idle in put_prev_task_scx() put_prev_task_scx() warns when a runnab | |
| CVE-2026-68422 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots() If we have an unexpected reloc_roo | |
| CVE-2026-68423 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mtd: virt_concat: fix use-after-free in mtd_virt_concat_destroy() mtd_concat_destroy() frees item->concat so c | |
| CVE-2026-68424 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mtd: virt_concat: fix use-after-free in mtd_virt_concat_destroy_joins() mtd_concat_destroy() frees item->conca | |
| CVE-2026-68425 | Received | 未確認 | CWE-400 | In the Linux kernel, the following vulnerability has been resolved: IB/mad: Drop unmatched RMPP responses before reassembly Kernel-handled RMPP receive processing starts reassemb |
| CVE-2026-68426 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: xfrm: fix stale skb->prev after async crypto steals a GSO segment skb_gso_segment() leaves the segment list he |
| CVE-2026-68427 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings __host1x_bo_unpin() drops the last referenc |
| CVE-2026-68428 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Fix use-after-free on vendor module reload mmu_destroy_caches() destroys pte_list_desc_cache and | |
| CVE-2026-68429 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe() A hotplug or link-loss e | |
| CVE-2026-68430 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx8: drop unecessary BUG_ON() There's no need to crash the kernel for this case. (cherry picked f | |
| CVE-2026-68431 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate minimum PDU size for transform requests The receive path applies the minimum SMB2 PDU size che | |
| CVE-2026-68432 | Received | 未確認 | CWE-863 | In the Linux kernel, the following vulnerability has been resolved: vxlan: require CAP_NET_ADMIN in the device netns for changelink A tunnel changelink() operates on at most two |
| CVE-2026-68433 | Received | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: libceph: bound get_version reply decode to front len handle_get_version_reply() uses msg->front_alloc_len as t |
| CVE-2026-68434 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms Commit b1b4efea05a5 ("seria | |
| CVE-2026-68435 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix address space mismatch in kexec command line lookup When searching the loaded segments for the | |
| CVE-2026-68436 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use kvzalloc to allocate struct dc struct dc has grown large over time (most of it the two in | |
| CVE-2026-68437 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fit paired fragment job in the correct CCCB For geometry jobs with a paired fragment job, at | |
| CVE-2026-68438 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smp: Make CSD lock acquisition atomic for debug mode Commit b0473dcd4b1d ("smp: Improve smp_call_function_sing | |
| CVE-2026-68439 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix possible NULL-pointer deref in mt7925_mcu_bss_he_tlv() mt76_connac_get_he_phy_cap rout | |
| CVE-2026-68440 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbe_read_eeprom_hostif() always copies round_up(len | |
| CVE-2026-68441 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains When a TC filter attached to a qdisc filter chain r | |
| CVE-2026-68442 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: btrfs: don't propagate EXTENT_FLAG_LOGGING to split extent maps When btrfs_drop_extent_map_range() splits an e |
| CVE-2026-68443 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (gigabyte_waterforce) Stop device IO before calling hid_hw_stop Calling hid_hw_stop() does not stop the | |
| CVE-2026-68444 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get() ffa_partition_info_get() passes uuid_str d | |
| CVE-2026-68445 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Prevent shader BO mappings from becoming writable vc4_gem_object_mmap() rejects a writable mapping of | |
| CVE-2026-68446 | Received | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate vmw_surface_metadata::array_size This field comes from userspace and should be validated |
| CVE-2026-68447 | Received | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size CRIU checkpoint copies the MQD control stac |
| CVE-2026-68448 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ovl: check access to copy_file_range source with src mounter creds Commit 5dae222a5ff0c ("vfs: allow copy_file | |
| CVE-2026-68449 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning The hand-rolled bit-scanning loop in | |
| CVE-2026-68450 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: free mapping node on duplicate reloc root insert __add_reloc_root() allocates a mapping_node before ins | |
| CVE-2026-68451 | Received | 未確認 | CWE-120 | In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA ECC private key requests cca_ecc2protkey() derives the copy length for th |
| CVE-2026-68452 | Received | 未確認 | CWE-120 | In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA AES cipher key requests cca_cipher2protkey() derives the copy length for |
| CVE-2026-68453 | Received | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix buffer over-read in cca_cipher2protkey Add validation of both the actual key buffer size and |
| CVE-2026-68454 | Received | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix handling of AIF enable without AISB When a guest seeks to register IRQs without a summary |
| CVE-2026-68455 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: liveupdate: validate session type before performing operation The sessions ioctls are not applicable to all se | |
| CVE-2026-68456 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect() ueagle-atm uses the asynchronous request_fir | |
| CVE-2026-68457 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for FSCTL mutations SET_SPARSE, SET_ZERO_DATA and SET_COMPRESSION operate on an | |
| CVE-2026-68458 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: binder: cache secctx size before release zeroes it binder_transaction() bounds the scatter-gather buffer area | |
| CVE-2026-68459 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs() When we mount device w/ gc_merge mount opti | |
| CVE-2026-68460 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix potential deadlock in f2fs_balance_fs() When the f2fs filesystem space is nearly exhausted, we encou | |
| CVE-2026-68461 | Received | 未確認 | CWE-665 | In the Linux kernel, the following vulnerability has been resolved: device property: initialize the remaining fields of fwnode_handle in fwnode_init() If a firmware node is alloc |
| CVE-2026-68462 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject negative const offsets for buffer pointers The verifier rejects variable offsets for PTR_TO_TP_BUF | |
| CVE-2026-68463 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend Replace pm_runtime_get_sync() with pm_runtime | |
| CVE-2026-68464 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt When using WIFI out-of-band wakeup | |
| CVE-2026-68465 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore esdhc_change_pinstate() check | |
| CVE-2026-68466 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout lpc32xx_xmit_dma() waits for the DMA comple | |
| CVE-2026-68467 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mtd: mchp23k256: use SPI match data for chip caps The driver stores chip capacity information in both the OF m | |
| CVE-2026-68468 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mtd: virt-concat: free duplicate generated name Every MTD registration runs mtd_virt_concat_create_join(). On | |
| CVE-2026-68469 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix permanently busy scans after multiple roam iterations In order for the firmware to sleep, t | |
| CVE-2026-68470 | Received | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate extension-frame layout before RX Extension frames only have the extension header at t |
| CVE-2026-68471 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: ieee80211: validate MLE common info length ieee80211_mle_common_size() uses the first common-info octet | |
| CVE-2026-68472 | Received | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate EHT MLE before MLD ID read cfg80211_gen_new_ie() copies ML probe response elements fr |
| CVE-2026-68473 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: powerpc/uaccess: correct check for CONFIG_PPC_E500 in mask_user_address() mask_user_address() incorrectly chec | |
| CVE-2026-68474 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access() spufs_mem_mmap_access() computes the local | |
| CVE-2026-68475 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: reset: sunxi: fix memory region leak on ioremap failure In sunxi_reset_init(), when ioremap() fails, the memor | |
| CVE-2026-68476 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipvs: reload ip header after head reallocation __ip_vs_get_out_rt() calls skb_ensure_writable() which may real | |
| CVE-2026-68477 | Received | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: ipvs: fix more places with wrong ipv6 transport offsets Sashiko reports for more incorrect IPv6 transport offs |
| CVE-2026-68478 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: memstick: ms_block: reject a card that reports too many blocks msb_ftl_initialize() computes the zone count fr | |
| CVE-2026-68479 | Received | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: validate firmware patch bounds rtlbt_parse_firmware() copies patch_length - 4 bytes before a |
| CVE-2026-68480 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Make Safe-RET robust against interrupt injection An attacker injecting interrupts while the Safe-RET | |
| CVE-2026-68481 | Modified | 未確認 | CWE-672 | In Apache CXF's DefaultEncryptingOAuthDataProvider, revoked access tokens still decrypt successfully, and TokenIntrospectionService reports active:true. The same applies to refresh |
| CVE-2026-68494 | Awaiting Analysis | 未確認 | CWE-770 | The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 (GHSA-72hv-8253-57qq, number length constraint bypass in the non-blocking parser) is incomplete. This record c |
| CVE-2026-68508 | Deferred | 未確認 | CWE-470, CWE-94 | Hydra is a framework for elegantly configuring complex applications. Prior to 1.3.4, hydra.utils.instantiate() resolves and calls Python objects selected by configuration through _ |
| CVE-2026-68513 | Deferred | 未確認 | CWE-122, CWE-787 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions 3.3.0 through 3.3.12 and 3.4.0 through 3.4. |
| CVE-2026-68514 | Deferred | 未確認 | CWE-122, CWE-787 | OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion picture industry. In versions 3.3.0 through 3.3.12 and 3.4.0 thro |
| CVE-2026-68515 | Deferred | 未確認 | CWE-122, CWE-787 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions before 3.2.11, 3.3.0 through 3.3.12, and |
| CVE-2026-68516 | Deferred | 未確認 | CWE-121, CWE-787 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. From version 3.4.0 through 3.4.13, a crafted HTJ2K-c |
| CVE-2026-68517 | Deferred | 未確認 | CWE-942 | Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, the cors_origins guard in glances/outputs/glances_restful_api.py uses exact list equality instead o |
| CVE-2026-68518 | Deferred | 未確認 | CWE-78 | Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, _sanitize_mustache_dict() in glances/actions.py sanitizes individual Mustache values before chevron |
| CVE-2026-68519 | Deferred | 未確認 | CWE-78 | Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, GlancesActions.run() in glances/actions.py ignores --disable-config-exec for on-alert action comman |
| CVE-2026-68520 | Deferred | 未確認 | CWE-200 | Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, as_dict_secure() in glances/config.py checks only option names and exposes public_username and cred |
| CVE-2026-68525 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows the bypassing of a security constraint that limits user has access to a resource POST bu |
| CVE-2026-68552 | Deferred | 未確認 | CWE-190 | Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an unauthenticated remote client can send a STUN message over TCP or TLS with a body-length fi |
| CVE-2026-68553 | Deferred | 未確認 | CWE-134 | Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.0, an authenticated TURN user can place printf-style format specifiers in the STUN USERNAME or RE |
| CVE-2026-68554 | Deferred | 未確認 | CWE-345, CWE-924 | Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an on-path attacker can append attributes after MESSAGE-INTEGRITY to an authenticated STUN req |
| CVE-2026-68555 | Deferred | 未確認 | CWE-400 | Coturn is a free open source implementation of TURN and STUN Server. In 4.15.0, an authenticated TURN user can repeatedly resume one allocation from fresh UDP 5-tuples without comp |
| CVE-2026-68558 | Deferred | 未確認 | CWE-918 | Wekan is open source kanban built with Meteor. From 8.36 until 9.74, the outgoing webhook Integration URL validator in models/integrations.js checked only the literal URL.hostname |
| CVE-2026-68559 | Deferred | 未確認 | CWE-639 | Wekan is open source kanban built with Meteor. From 9.57 until 9.74, the /api/boards/:boardId/exportExcel route in models/exportExcel.js called the asynchronous exporterExcel.canEx |
| CVE-2026-68560 | Deferred | 未確認 | CWE-78 | Wekan is open source kanban built with Meteor. Prior to 9.75, models/fileValidation.js interpolated the uploaded fileObj.path into the administrator-configured externalCommandLine |
| CVE-2026-68561 | Deferred | 未確認 | CWE-269, CWE-863 | Wekan is open source kanban built with Meteor. Prior to 9.89, the second Boards.allow({ update }) rule in server/permissions/boards.js called canUpdateBoardSort in server/lib/utils |
| CVE-2026-68564 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in NotificationX Pro <= 3.1.4 versions. |
| CVE-2026-68565 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in GeoDirectory <= 2.8.172 versions. |
| CVE-2026-68566 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in BookingPress Appointment Booking Pro <= 6.0.2 versions. |
| CVE-2026-68567 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Convert Pro <= 1.0.1 versions. |
| CVE-2026-68568 | Deferred | 未確認 | CWE-266 | Subscriber Privilege Escalation in MasterStudy LMS <= 3.7.41 versions. |
| CVE-2026-68569 | Analyzed | 未確認 | CWE-287 | Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances (e.g. CLIENT-CERT, SPNEGO) that a user would be authenticated even if the user did not exist |
| CVE-2026-68578 | Deferred | 未確認 | CWE-306 | ArcadeDB versions before 26.7.3 fail to bind the authenticated principal in the MCP HTTP transport, causing all engine permission checks to silently pass as no-ops. Non-root MCP-al |
| CVE-2026-68579 | Analyzed | 未確認 | CWE-787 | FreeRDP before 3.30.0 (<= 3.29.0) contains a heap-based buffer overflow in the Windows clipboard client's CliprdrStream_Read function (client/Windows/wf_cliprdr.c). When an OLE pas |
| CVE-2026-68580 | Analyzed | 未確認 | CWE-122 | FreeRDP before 3.29.0 contains integer overflow vulnerabilities in the audio input redirection channel (audin) across ALSA, sndio, WinMM, and OpenSL ES backends that fail to valida |
| CVE-2026-68581 | Deferred | 未確認 | CWE-863 | Vikunja versions 0.22.0 through 2.3.0 fail to validate the principal type in API token management. Because user IDs and link-share IDs are independent numeric sequences and both re |
| CVE-2026-68582 | Deferred | 未確認 | CWE-639 | Vikunja versions >= 0.24.0 and <= 2.3.0 contain a broken object level authorization (BOLA) vulnerability in the task-collection endpoint (GET /api/v1/projects/{project}/views/{view |
| CVE-2026-68583 | Deferred | 未確認 | CWE-79 | luci-app-adblock-fast before 1.2.4-4 contains a stored cross-site scripting vulnerability in the blocklist name field that allows lower-privileged users to inject active HTML. When |
| CVE-2026-68584 | Deferred | 未確認 | CWE-288 | SiYuan versions before v3.7.3 contain an authentication bypass vulnerability in publish mode where content-returning endpoints getHeadingChildrenDOM, getHeading*Transaction, and ge |
| CVE-2026-68585 | Deferred | 未確認 | CWE-862 | SiYuan versions before v3.7.3 contain a metadata disclosure vulnerability in the /api/block/getBlockInfo endpoint that returns document root metadata including title for publish-fo |
| CVE-2026-68586 | Deferred | 未確認 | CWE-862 | SiYuan before v3.7.3 fails to apply publish-access filters to the getBacklinkDoc and getBackmentionDoc content endpoints (/api/ref/getBacklinkDoc and /api/ref/getBackmentionDoc). W |
| CVE-2026-68587 | Deferred | 未確認 | CWE-862 | SiYuan versions before v3.7.3 contain an information disclosure vulnerability in the getHeadingDeleteTransaction, getHeadingLevelTransaction, and getHeadingInsertTransaction endpoi |
| CVE-2026-68742 | Analyzed | 未確認 | CWE-125 | A flaw was found in SSSD. The sss_nss_protocol_parse_addr() function in the NSS responder does not validate the addrlen field against the remaining packet body size. A local attack |
| CVE-2026-68743 | Analyzed | 未確認 | CWE-125 | A flaw was found in SSSD. The extract_authtok_v1() function in the PAM responder does not validate the auth_token_length field against the remaining buffer size before processing. |
| CVE-2026-68744 | Analyzed | 未確認 | CWE-908 | A flaw was found in SSSD. The sss_nss_protocol_fill_initgr() function in the NSS responder pre-allocates reply space for all group entries but does not shrink the packet when group |
| CVE-2026-68745 | Analyzed | 未確認 | CWE-347 | Certificate validation failures in SAML authentication in Apache CloudStack 4.20.3.0 and 4.22.1.0 on all platforms allow a malicious agent to forge a SAML response to the managemen |
| CVE-2026-68746 | Analyzed | 未確認 | CWE-636 | Not Failing Securely ('Failing Open') vulnerability in livebook-dev livebook allows an unauthenticated network client to obtain full access to a Livebook server that enforces ident |
| CVE-2026-68747 | Modified | 未確認 | CWE-74 | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the CSS scrubber in rrrene html_sanitize_ex allows an unauthenti |
| CVE-2026-68749 | Modified | 未確認 | CWE-1333 | Inefficient Regular Expression Complexity vulnerability in the CSS scrubber in rrrene html_sanitize_ex allows an unauthenticated remote attacker to exhaust server CPU via a long CS |
| CVE-2026-68750 | Modified | 未確認 | CWE-407 | Inefficient Algorithmic Complexity vulnerability in the traversal engine in rrrene html_sanitize_ex allows an unauthenticated remote attacker to exhaust server CPU and memory via a |
| CVE-2026-68752 | Analyzed | 未確認 | CWE-269 | A Project Resource Manager may gain broader administrative privileges under specific conditions. |
| CVE-2026-68753 | Analyzed | 未確認 | CWE-862 | An unauthenticated user may access restricted Artifactory content when a credentialed remote repository is configured in a specific way. |
| CVE-2026-68754 | Analyzed | 未確認 | CWE-862 | A repository publisher without delete permission may modify protected package content under specific conditions. |
| CVE-2026-68755 | Analyzed | 未確認 | CWE-863 | A bundle writer may create misleading release promotion information under specific conditions. |
| CVE-2026-68756 | Analyzed | 未確認 | CWE-502 | A party with write access to stored session data may affect JFrog Artifactory under specific conditions. |
| CVE-2026-68757 | Analyzed | 未確認 | CWE-347 | A user with access to a valid SAML response may impersonate another user under specific conditions. |
| CVE-2026-68758 | Analyzed | 未確認 | CWE-862 | A low-privileged authenticated user may access restricted support information under specific conditions. |
| CVE-2026-68759 | Analyzed | 未確認 | CWE-347 | A holder of a valid integration credential may impersonate other users under specific conditions. |
| CVE-2026-6876 | Awaiting Analysis | 未確認 | CWE-1284, CWE-693, CWE-94 | ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This security issue could allow an unauthenticated user to execute arbi |
| CVE-2026-68760 | Analyzed | 未確認 | CWE-287 | An unauthenticated user may bypass authentication under specific cache conditions. |
| CVE-2026-68762 | Awaiting Analysis | 未確認 | CWE-835 | In JetBrains Ktor before 3.4.1 potential DoS attack via WebSocket decompression was possible |
| CVE-2026-68763 | Analyzed | 未確認 | CWE-400 | Uncontrolled Resource Consumption vulnerability in Apache Tomcat via an allocation leak in the HTTP/2 backlog tracking when a stream is reset This issue affects Apache Tomcat: f |
| CVE-2026-68765 | Deferred | 未確認 | CWE-122 | hashcat master branch builds after v7.1.2 contain a heap buffer overflow vulnerability in the KeePass AESKDF/KDBX v4 module (module 34301) that allows attackers to corrupt adjacent |
| CVE-2026-68766 | Deferred | 未確認 | CWE-88 | hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like --outfile and --potfile-path. Attackers can |
| CVE-2026-68767 | Deferred | 未確認 | CWE-193 | hashcat's fgetl() function in src/filehandling.c writes a null terminator one byte past the caller's buffer when an input line is exactly the buffer length. Attackers can trigger t |
| CVE-2026-68768 | Deferred | 未確認 | CWE-120 | hashcat contains a heap-based buffer overflow (out-of-bounds write) in the outfile_write() function in src/outfile.c. When assembling output into a fixed-size buffer (HCBUFSIZ_LARG |
| CVE-2026-68769 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-68772 | Awaiting Analysis | 未確認 | CWE-502 | ZenML 0.94.6 contains a remote code execution vulnerability in the CloudpickleMaterializer component that allows attackers with write access to a shared artifact store to execute a |
| CVE-2026-68782 | Analyzed | 未確認 | CWE-89 | Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-68789 | Analyzed | 未確認 | CWE-89 | Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-68792 | Analyzed | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in Microsoft Office allows an authorized attacker to elevate privileges locally. |
| CVE-2026-68793 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-68794 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-68795 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-68796 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-68797 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-68798 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-68799 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-68800 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-68801 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-68802 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-68803 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-68804 | Analyzed | 未確認 | CWE-122, CWE-197 | Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-68805 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-68806 | Analyzed | 未確認 | CWE-787 | Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-68807 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-68808 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-68809 | Analyzed | 未確認 | CWE-459 | Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. |
| CVE-2026-68810 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-68811 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-68812 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-68813 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-68814 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-68815 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-68816 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-68817 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-68819 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network. |
| CVE-2026-68820 | Analyzed | 掲載 | CWE-416 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2026-68821 | Analyzed | 未確認 | CWE-269 | Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-68823 | Analyzed | 未確認 | CWE-749 | Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network. |
| CVE-2026-68861 | Analyzed | 未確認 | CWE-78 | Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privi |
| CVE-2026-68863 | Analyzed | 未確認 | CWE-121 | Dell PowerProtect One, versions 20.1.0.0 and below, contain a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit th |
| CVE-2026-68868 | Analyzed | 未確認 | CWE-1220 | The Google Cloud Secret Manager secrets backend in Apache Airflow's Google provider never applied the team scope when resolving Connections and Variables: the caller's `team_name` |
| CVE-2026-68869 | Rejected | 未確認 | Rejected reason: This CVE ID was assigned in error. Upon further review, the reported issue does not represent a security vulnerability and does not require a CVE record. | |
| CVE-2026-68870 | Awaiting Analysis | 未確認 | CWE-639 | The Azure Key Vault secrets backend in Apache Airflow's Microsoft Azure provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-sco |
| CVE-2026-68871 | Analyzed | 未確認 | CWE-639 | The Yandex Lockbox secrets backend in Apache Airflow's Yandex provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup |
| CVE-2026-68872 | Analyzed | 未確認 | CWE-639 | The AWS Systems Manager Parameter Store and Secrets Manager backends in Apache Airflow's Amazon provider resolved a team-scoped Connection or Variable id through the team-agnostic |
| CVE-2026-68899 | Deferred | 未確認 | CWE-434 | Wekan is open source kanban built with Meteor. Prior to 9.90, isFileValid() in models/fileValidation.js used the Unix file command for content-based MIME detection, but detectMimeF |
| CVE-2026-68900 | Deferred | 未確認 | CWE-79 | Wekan is open source kanban built with Meteor. From 8.72 until 10.23, addBoardHTMLToZip() in client/lib/exportHTML.js read a card title and body through textContent, which decoded |
| CVE-2026-68901 | Deferred | 未確認 | CWE-476 | Wekan is open source kanban built with Meteor. Prior to 10.38, the /api/boards/:boardId/export, /api/boards/:boardId/attachments/:attachmentId/export, /api/boards/:boardId/export/c |
| CVE-2026-68921 | Deferred | 未確認 | CWE-184, CWE-79 | DiceBear is an avatar library for designers and developers. Prior to 9.4.3, @dicebear/core interpolates the rotate option into an SVG transform attribute without XML escaping in ad |
| CVE-2026-68922 | Deferred | 未確認 | CWE-22 | MobSF is a mobile application security testing tool used. Prior to 4.5.1, find_icon_path_zip in mobsf/StaticAnalyzer/views/android/icon_analysis.py uses the Android manifest androi |
| CVE-2026-68923 | Deferred | 未確認 | CWE-352 | MobSF is a mobile application security testing tool used. Prior to 4.5.1, mobsf/MobSF/settings.py places django.middleware.csrf.CsrfViewMiddleware only in the deprecated MIDDLEWARE |
| CVE-2026-68924 | Deferred | 未確認 | CWE-400 | MobSF is a mobile application security testing tool used. Prior to 4.5.1, the unzip function in mobsf/StaticAnalyzer/views/common/shared_func.py logs that an archive member exceedi |
| CVE-2026-68927 | Deferred | 未確認 | CWE-918 | MobSF is a mobile application security testing tool used. Prior to 4.5.1, get_browsable_activities in mobsf/StaticAnalyzer/views/android/manifest_analysis.py validates only an Andr |
| CVE-2026-68929 | Deferred | 未確認 | CWE-306, CWE-862 | FastGPT is an open-source LLM platform for building AI applications on a knowledge base. In versions prior to 4.15.2, the WeChat (iLink) share-channel endpoints authorize requests |
| CVE-2026-68930 | Deferred | 未確認 | CWE-666, CWE-696, CWE-863 | Russh is a Rust SSH client & server library. Prior to 0.62.5, russh dispatches channel-scoped Handler callbacks for recipient channel IDs that were never opened or confirmed in rus |
| CVE-2026-68939 | Awaiting Analysis | 未確認 | CWE-155, CWE-78, CWE-88 | Pyenv provides simple Python version management. Prior to 2.8.0, is_version_safe() in libexec/pyenv-version-file-read accepts shell glob metacharacters in .python-version values, a |
| CVE-2026-68941 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-67312. Reason: This candidate is a duplicate of CVE-2026-67312. Notes: All CVE users should ref | |
| CVE-2026-68942 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-67313. Reason: This candidate is a duplicate of CVE-2026-67313. Notes: All CVE users should ref | |
| CVE-2026-68943 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-67314. Reason: This candidate is a duplicate of CVE-2026-67314. Notes: All CVE users should ref | |
| CVE-2026-68944 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-67316. Reason: This candidate is a duplicate of CVE-2026-67316. Notes: All CVE users should ref | |
| CVE-2026-68945 | Analyzed | 未確認 | CWE-345 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.2, HttpTrans |
| CVE-2026-68946 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-67315. Reason: This candidate is a duplicate of CVE-2026-67315. Notes: All CVE users should ref | |
| CVE-2026-68947 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-67317. Reason: This candidate is a duplicate of CVE-2026-67317. Notes: All CVE users should ref | |
| CVE-2026-68948 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-67318. Reason: This candidate is a duplicate of CVE-2026-67318. Notes: All CVE users should ref | |
| CVE-2026-68951 | Deferred | 未確認 | CWE-863 | GROWI contains an incorrect authorization vulnerability. If this vulnerability is exploited, an unauthenticated attacker could retrieve the other user's bookmark data. |
| CVE-2026-68959 | Deferred | 未確認 | CWE-25 | SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the aff |
| CVE-2026-68960 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to a Windows system o |
| CVE-2026-68967 | Awaiting Analysis | 未確認 | CWE-787 | Bendix EC80 Brake ECU is vulnerable to an out-of-bounds write, which could allow an attacker to deliver a payload that could establish an arbitrary write primitive, which could c |
| CVE-2026-68968 | Analyzed | 未確認 | CWE-436 | Apache Airflow's Backfill API authorized a request against a Dag id supplied by the caller whenever the `backfill_id` path segment failed to parse. The authorization dependency par |
| CVE-2026-68969 | Analyzed | 未確認 | CWE-532 | Apache Airflow wrote Variable values and Connection `extra` contents to the audit log in cleartext when they were submitted through the bulk endpoints (`PATCH /api/v2/variables` an |
| CVE-2026-68970 | Analyzed | 未確認 | CWE-312 | Apache Airflow's Task SDK did not mask the contents of a Variable whose JSON value is a list, so secrets stored in that shape appeared in cleartext in task logs and in the Rendered |
| CVE-2026-68971 | Analyzed | 未確認 | CWE-862 | Apache Airflow's asset materialization endpoint (`POST /api/v2/assets/{asset_id}/materialize`) and the XCom result check on `wait_dag_run_until_finished` authorized the target Dag |
| CVE-2026-68979 | Analyzed | 未確認 | CWE-862 | Apache NiFI 1.10.0 through 2.10.0 provide a Parameter Context update REST API method that does not enforce authorization checking on components referencing Parameter values. Updati |
| CVE-2026-68980 | Analyzed | 未確認 | CWE-863 | Apache NiFi 2.0.0 through 2.10.0 support creating, reading, and deleting Assets associated with Parameter Contexts through the REST API. The framework authorizes asset deletion aga |
| CVE-2026-68981 | Analyzed | 未確認 | CWE-409 | Apache NiFi 1.5.0 through 2.10.0 support gzip-encoded HTTP requests for the application REST API using a Jersey encoding filter. The framework enforced a configurable maximum reque |
| CVE-2026-69075 | Deferred | 未確認 | CWE-79 | FlowIntel is affected by a stored cross-site scripting vulnerability through multiple user-controlled or administrator-controlled fields. Persisted values—including case titles, t |
| CVE-2026-69078 | Deferred | 未確認 | CWE-918 | CTI-Transmute is affected by a server-side request forgery vulnerability in the evaluation report PDF-generation functionality. User-controlled CTI content, including conversion n |
| CVE-2026-69079 | Deferred | 未確認 | CWE-770 | CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activity_timeline endpoint. The endpoint accepts a user-controlled days query para |
| CVE-2026-69082 | Deferred | 未確認 | CWE-352 | CTI-Transmute contained a cross-site request forgery vulnerability in the administrative user deletion functionality. The /account/delete/<id> endpoint accepted HTTP GET requests f |
| CVE-2026-69083 | Deferred | 未確認 | CWE-89 | SiYuan versions before v3.7.3 contain SQL injection vulnerabilities in the fullTextSearchAssetContent endpoint reachable by unauthenticated users and publish RoleReader tokens. Att |
| CVE-2026-69084 | Deferred | 未確認 | CWE-89 | SiYuan versions <= v3.7.2 expose the /api/search/searchEmbedBlock endpoint, which passes a client-supplied SQL statement verbatim to the main read-write siyuan.db handle with no si |
| CVE-2026-69085 | Deferred | 未確認 | CWE-89 | SiYuan before v3.7.3 contains a SQL injection vulnerability in the /api/filetree/searchDocs endpoint, where the caller-supplied keyword parameter is concatenated directly into SQL |
| CVE-2026-69086 | Deferred | 未確認 | CWE-22 | SiYuan versions before v3.7.3 fail to validate the avID parameter on all code branches in attribute-view read endpoints, allowing attackers to construct traversal paths that escape |
| CVE-2026-69087 | Deferred | 未確認 | CWE-601 | The Grav form plugin (getgrav/grav-plugin-form) before 9.1.13 contains an open redirect vulnerability. Since v9.1.11, the redirect process action evaluates user-supplied form data |
| CVE-2026-69088 | Deferred | 未確認 | CWE-94 | Grav CMS versions 2.0.7 through 2.0.10 fail to validate fully-qualified static method calls (Class::method) in blueprint dynamic-field directives because Blueprint::isSafeDynamicCa |
| CVE-2026-69089 | Deferred | 未確認 | CWE-22 | Grav CMS 2.0.10 contains a path traversal vulnerability in ImageMedium::watermark(), which passes its unsanitized $image argument to RocketTheme\Toolbox\ResourceLocator\UniformReso |
| CVE-2026-69090 | Deferred | 未確認 | CWE-862 | Admidio before 5.0.11 fails to validate target organization membership in role handlers, allowing authenticated role administrators to delete, activate, deactivate, or edit roles b |
| CVE-2026-69091 | Deferred | 未確認 | CWE-306 | Admidio before 5.0.11 contains an authentication bypass vulnerability in the forum module when configured in login-only mode. The access control logic in modules/forum.php fails to |
| CVE-2026-69092 | Deferred | 未確認 | CWE-79 | Admidio versions before 5.0.11 contain a reflected cross-site scripting vulnerability in the SSO/SAML endpoint that echoes unencoded exception messages to the HTTP response. Unauth |
| CVE-2026-69093 | Deferred | 未確認 | CWE-352 | Admidio before 5.0.11 does not validate the adm_csrf_token in modules/category-report/preferences.php, which performs persistent Category Report configuration changes based on GET |
| CVE-2026-69094 | Deferred | 未確認 | CWE-639 | Admidio before 5.0.11 contains an insecure direct object reference vulnerability in the save_temporary mode of mylist_function.php that allows authenticated users to hijack list co |
| CVE-2026-69095 | Deferred | 未確認 | CWE-22 | OpenWrt luci-app-bmx7 before commit 5890760a454dad2cb00389dba2cdc5e779e0ffdd contains a path traversal vulnerability in the bmx7-info CGI script that allows unauthenticated attacke |
| CVE-2026-69096 | Deferred | 未確認 | CWE-78 | OpenWrt luci-app-dockerman (LuCI master and openwrt-25.12 snapshots containing the ucode docker_rpc.uc RPC backend after the JS/ucode conversion) contains an OS command injection v |
| CVE-2026-69097 | Analyzed | 未確認 | CWE-74 | GitPython before 3.1.53 fails to properly escape section names in git config files, allowing attackers to inject arbitrary configuration directives through malicious submodule name |
| CVE-2026-69098 | Deferred | 未確認 | CWE-502 | kotaemon through 0.12.0 contains an insecure deserialization vulnerability in the check_connection endpoint that allows unauthenticated attackers to instantiate arbitrary Python cl |
| CVE-2026-69099 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-69100 | Awaiting Analysis | 未確認 | CWE-94 | LAMP Rapid Development Platform through 5.6.2, fixed in commit 84b0c27, contains a remote code execution vulnerability in GlueFactory that executes unsandboxed Groovy scripts from |
| CVE-2026-69101 | Deferred | 未確認 | CWE-611 | Datavane TIS v5.0.0 contains an XML external entity (XXE) injection vulnerability that allows authenticated attackers to perform server-side request forgery and out-of-band file ex |
| CVE-2026-69102 | Deferred | 未確認 | CWE-798 | MaxKey contains an unauthorized access vulnerability due to a hard-coded JWT signing secret in application-maxkey.properties that allows unauthenticated attackers to forge valid JW |
| CVE-2026-69104 | Awaiting Analysis | 未確認 | CWE-862 | An authenticated user may initiate repository migration operations without required repository permissions, potentially causing information disclosure, unauthorized state changes, |
| CVE-2026-69105 | Analyzed | 未確認 | CWE-345 | An unauthenticated attacker may cause untrusted package content to be cached under specific conditions, potentially affecting artifact integrity and availability. |
| CVE-2026-69106 | Analyzed | 未確認 | CWE-20 | A low-privileged user may poison cached artifact metadata under specific conditions, potentially causing consumers to retrieve untrusted content. |
| CVE-2026-69107 | Analyzed | 未確認 | CWE-862 | An unauthenticated user may access restricted artifacts in JFrog Artifactory under specific conditions. |
| CVE-2026-69108 | Awaiting Analysis | 未確認 | CWE-732 | A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.1). The affected application is vulnerable to a local privilege escalation due to an insecure |
| CVE-2026-69109 | Awaiting Analysis | 未確認 | CWE-35 | A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.3). The affected application is vulnerable to a path traversal vulnerability due to lack of s |
| CVE-2026-69110 | Deferred | 未確認 | CWE-22 | OpenCode Studio before 2.4.4 contains a missing authentication vulnerability that allows unauthenticated remote attackers to read arbitrary files within the temp and static/music d |
| CVE-2026-69111 | Awaiting Analysis | 未確認 | CWE-306 | Milvus through 2.6.22 and 3.0.0 contains an unauthenticated denial of service vulnerability that allows remote attackers to terminate service components by sending a crafted HTTP G |
| CVE-2026-69112 | Awaiting Analysis | 未確認 | CWE-22 | Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in load_checkpoint_in_model and load_checkpoint_and_dispatch functions that fail to sanitize weight_m |
| CVE-2026-69113 | Deferred | 未確認 | CWE-862 | Cap v0.3.1 contains a broken access control vulnerability in the POST /api/video/comment endpoint that allows authenticated users to post comments on any private video without perm |
| CVE-2026-69114 | Deferred | 未確認 | CWE-639 | Spacebar Server before commit 8d126f4 contains a cross-channel message deletion vulnerability in the single-delete and bulk-delete message handlers that fail to scope message queri |
| CVE-2026-69115 | Deferred | 未確認 | CWE-862 | OpenIM Server v3.8.3 contains a missing authorization vulnerability that allows any authenticated user to access admin-only management API endpoints by submitting POST requests wit |
| CVE-2026-69116 | Deferred | 未確認 | CWE-79 | FlyEnv before 4.18.0 fails to sanitize HTML from markdown rendering and AI chat content passed to Vue v-html directives. Attackers can inject malicious scripts through markdown sou |
| CVE-2026-69117 | Awaiting Analysis | 未確認 | CWE-639 | NetBox 4.5.8 contains an ORM injection vulnerability that allows authenticated attackers, including those with read-only API tokens, to inject arbitrary Django ORM lookup expressio |
| CVE-2026-69118 | Deferred | 未確認 | CWE-1336, CWE-863 | Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering that allows authenticated users to execute arbitrary PHP code. Attackers |
| CVE-2026-69119 | Deferred | 未確認 | CWE-639 | Taubyte Tau v1.1.10 contains a missing authorization vulnerability in the services/auth HTTP service that allows any authenticated user to read or permanently delete another tenant |
| CVE-2026-69123 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-67319. Reason: This candidate is a duplicate of CVE-2026-67319. Notes: All CVE users should ref | |
| CVE-2026-69124 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-67320. Reason: This candidate is a duplicate of CVE-2026-67320. Notes: All CVE users should ref | |
| CVE-2026-69125 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-67321. Reason: This candidate is a duplicate of CVE-2026-67321. Notes: All CVE users should ref | |
| CVE-2026-69127 | Deferred | 未確認 | CWE-497 | Kirby is an open-source content management system. Prior to 4.9.5 and from 5.0.0 through 5.5.1, the REST API error handler can return unsanitized PHP error messages that expose the |
| CVE-2026-69129 | Deferred | 未確認 | CWE-639 | KubePi is a Kubernetes multi-cluster management panel. In versions up to and including 2.0.0, cluster-scoped APIs do not consistently validate per-cluster access, allowing an authe |
| CVE-2026-69146 | Awaiting Analysis | 未確認 | CWE-862 | MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.13.0 until 3.15.0, LogInputs is absent from BEFORE_REQUEST_H |
| CVE-2026-69148 | Awaiting Analysis | 未確認 | CWE-862 | MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, CreateModelVersion accepts a run_id or model_id af |
| CVE-2026-69149 | Analyzed | 未確認 | CWE-79 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.7, a Cross-S |
| CVE-2026-69151 | Analyzed | 未確認 | CWE-79 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.1, the Angul |
| CVE-2026-69152 | Analyzed | 未確認 | CWE-400, CWE-770 | The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand() does not apply maxLength while con |
| CVE-2026-69153 | Analyzed | 未確認 | CWE-200, CWE-22 | PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Prior to 8.5.19, if from is unset, an attacker |
| CVE-2026-69159 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-67306. Reason: This candidate is a duplicate of CVE-2026-67306. Notes: All CVE users should ref | |
| CVE-2026-69160 | Deferred | 未確認 | CWE-639 | OpenList a file list program that supports multiple storage. Prior to 4.2.4, the share creation and update checks in server/handles/sharing.go use strings.HasPrefix(requested_path, |
| CVE-2026-69183 | Deferred | 未確認 | CWE-290, CWE-307, CWE-644 | Monkeytype is a minimalistic and customizable typing test. In 26.26.0 and earlier, the backend rate-limit key generator in backend/src/middlewares/rate-limit.ts uses client-control |
| CVE-2026-69185 | Awaiting Analysis | 未確認 | CWE-20, CWE-754 | Socket.IO enables bidirectional and low-latency communication for every platform. Prior to 4.2.7, 3.4.5, and 3.3.6, a specially crafted Socket.IO packet can make the server wait fo |
| CVE-2026-69189 | Deferred | 未確認 | CWE-200, CWE-639, CWE-862 | Hoppscotch is an open source API development ecosystem. Prior to 2026.6.0, the team, teamMembers.user, RESTHistory, GQLHistory, currentRESTSession, currentGQLSession, environments, |
| CVE-2026-69192 | Awaiting Analysis | 未確認 | CWE-20, CWE-918 | ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.3.1, Address4 accepts an octet written with a leading zero and decodes it as |
| CVE-2026-69198 | Awaiting Analysis | 未確認 | CWE-20, CWE-918 | ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. From 10.1.1 until 10.2.2, every special-use classification method is built on isInSubnet |
| CVE-2026-69207 | Deferred | 未確認 | CWE-1333 | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.34, the built-in CORS middleware, hono/cors, is vulnerable to a regular expressi |
| CVE-2026-69219 | Awaiting Analysis | 未確認 | CWE-789 | The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1, src/main/java/com/rabbitmq/client/impl/Valu |
| CVE-2026-69220 | Awaiting Analysis | 未確認 | CWE-674 | The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1, src/main/java/com/rabbitmq/client/impl/Valu |
| CVE-2026-69222 | Awaiting Analysis | 未確認 | CWE-400 | LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.27.2, the join filter in src/filters/array.ts computes complexity from array.length |
| CVE-2026-69223 | Analyzed | 未確認 | CWE-918 | Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF). This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1 |
| CVE-2026-69224 | Analyzed | 未確認 | CWE-200 | There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 12.0 and earlier that may under difficult to reproduce circumstances allow a remote, unauthentic |
| CVE-2026-69225 | Analyzed | 未確認 | CWE-200 | There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 11.5 through 12.0 and earlier that may allow a remote, unauthenticated attacker to reflect sensi |
| CVE-2026-69228 | Analyzed | 未確認 | CWE-306 | There is a missing authentication vulnerability in Esri Portal for ArcGIS versions 12.0 and prior that may allow a remote, unauthenticated attacker to access a specific resource (n |
| CVE-2026-69229 | Analyzed | 未確認 | CWE-79 | There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 12.0 and prior that allows a remote, authenticated attacker to insert arbitrary HTML into the Portal for |
| CVE-2026-69230 | Analyzed | 未確認 | CWE-79 | There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, administratively privileged attacker to inject malicious cod |
| CVE-2026-69231 | Analyzed | 未確認 | CWE-79 | There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, privileged attacker to inject malicious code that could pote |
| CVE-2026-69232 | Analyzed | 未確認 | CWE-79 | There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, privileged attacker to inject malicious code that could pote |
| CVE-2026-69233 | Analyzed | 未確認 | CWE-79 | There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, administratively privileged attacker to inject malicious cod |
| CVE-2026-69234 | Analyzed | 未確認 | CWE-79 | There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS versions 11.5 and prior which may allow a remote, unauthenticated attacker to create a crafted lin |
| CVE-2026-69235 | Analyzed | 未確認 | CWE-79 | There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, privileged attacker to inject malicious code that could pote |
| CVE-2026-69236 | Analyzed | 未確認 | CWE-79 | There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 12.1 and prior that may allow a remote, privileged attacker to inject malicious code that could pote |
| CVE-2026-69237 | Analyzed | 未確認 | CWE-79 | There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.3 and prior that allows a remote attacker with administrative privileges to insert arbitrary HTML int |
| CVE-2026-69238 | Analyzed | 未確認 | CWE-79 | There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.5 and prior that allows a remote, highly priviliged attacker to insert arbitrary HTML into the Portal |
| CVE-2026-69240 | Awaiting Analysis | 未確認 | CWE-89 | Sequelize is a Node.js ORM tool. Prior to 6.37.4, SQL injection is possible with strings only if dialect is set to oracle. The escape function defined in sql-string.js does not esc |
| CVE-2026-69242 | Deferred | 未確認 | CWE-122, CWE-190 | libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, a crafted many-band TIFF processed through VipsForeignLoadTiff can evade scanline validat |
| CVE-2026-69243 | Undergoing Analysis | 未確認 | CWE-444 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the HTTP parsers were vulnerable to a request smuggling attack relating to WebSocke |
| CVE-2026-69244 | Undergoing Analysis | 未確認 | CWE-125, CWE-400, CWE-416 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.3, an out-of-bounds heap read could occur in the C response parser while building an e |
| CVE-2026-69245 | Awaiting Analysis | 未確認 | CWE-180, CWE-346, CWE-384 | Guzzle is an extensible PHP HTTP client. Prior to 7.15.2 and 8.0.1, SetCookie::matchesDomain() gives every subdomain of a cookie Domain that cookie unless SetCookie::matchesDomain( |
| CVE-2026-69246 | Awaiting Analysis | 未確認 | CWE-180, CWE-436, CWE-918, CWE-941 | Guzzle is an extensible PHP HTTP client. Prior to 7.15.2 and 8.0.1, Guzzle gives a transport the request URI as text and supplies the Host header separately. The cURL handlers set |
| CVE-2026-69247 | Awaiting Analysis | 未確認 | CWE-208, CWE-209 | cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 44.0.0 until 50.0.0, pkcs7_decrypt_der, pkcs7_decrypt_pem, and pkcs7_de |
| CVE-2026-69248 | Awaiting Analysis | 未確認 | CWE-295 | cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In versions 45.0.0 through 48.0.0, if an intermediate constrained CA permits |
| CVE-2026-69249 | Awaiting Analysis | 未確認 | CWE-400 | python-cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In versions 42.0.0 through 48.0.0, when resolving invalid certificate |
| CVE-2026-69250 | Analyzed | 未確認 | CWE-639 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the OAuth2 token refresh endpoint POST /api/v1/oauth2-credential/refresh/:c |
| CVE-2026-69251 | Analyzed | 未確認 | CWE-94 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise record manager and agent memory nodes allowed users to set arbitrar |
| CVE-2026-69252 | Analyzed | 未確認 | CWE-862 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the /api/v1/files route was protected only by the feat:files feature gate a |
| CVE-2026-69253 | Analyzed | 未確認 | CWE-95 | Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows. Prior to version 3.1.3, several custom-tool components — AgentAsTool, ChatflowTo |
| CVE-2026-69254 | Analyzed | 未確認 | CWE-94 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, executeJavaScriptCode() accepted caller-provided nodeVMOptions and merged t |
| CVE-2026-69255 | Analyzed | 未確認 | CWE-94 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the CSVAgent in packages/components/nodes/agents/CSVAgent/CSVAgent.ts extra |
| CVE-2026-69256 | Analyzed | 未確認 | CWE-94 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the CSVAgent node allowed users to provide Python code that is executed thr |
| CVE-2026-69257 | Analyzed | 未確認 | CWE-1389, CWE-918 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise's HTTP security module httpSecurity.ts did not normalize IPv4-mappe |
| CVE-2026-69258 | Analyzed | 未確認 | CWE-639, CWE-915 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the unauthenticated POST /api/v1/prediction/:id endpoint accepted an overri |
| CVE-2026-69259 | Analyzed | 未確認 | CWE-94 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the SQLite Record Manager node in packages/components/nodes/recordmanager/S |
| CVE-2026-69262 | Analyzed | 未確認 | CWE-863 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, `DELETE /api/v1/chatflows/:id` authorized requests with checkAnyPermission( |
| CVE-2026-69263 | Analyzed | 未確認 | CWE-184 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the mitigation for CVE-2025-8943 blocked -y and --yes flags on npx, but pac |
| CVE-2026-69264 | Analyzed | 未確認 | CWE-94, CWE-95 | Prior to 3.1.3, Flowise CSVAgent interpolates an attacker-controlled segment of the csvFile data URI directly into a Python source-code template that is then executed by Pyodide. B |
| CVE-2026-69278 | Analyzed | 未確認 | CWE-693, CWE-863 | Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. |
| CVE-2026-69306 | Analyzed | 未確認 | CWE-636 | Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-69320 | Analyzed | 未確認 | CWE-78 | Improper neutralization of special elements used in an os command ('os command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69400 | Analyzed | 未確認 | CWE-22 | Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-69414 | Modified | 未確認 | CWE-269, CWE-284 | Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ". |
| CVE-2026-69419 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to execute code over a network. |
| CVE-2026-69502 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-69519 | Analyzed | 未確認 | CWE-204 | Observable response discrepancy in Azure Stack HCI allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-69543 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Azure Virtual Machines allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69550 | Modified | 未確認 | CWE-125, CWE-126 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-69555 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-69558 | Analyzed | 未確認 | CWE-639 | Authorization bypass through user-controlled key in Microsoft Partner Center allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-69658 | Deferred | 未確認 | CWE-319 | MQTT credentials and control traffic are transmitted in cleartext, exposing sensitive information to network-level attackers. This may enable unauthorized device impersonation an |
| CVE-2026-69659 | Analyzed | 未確認 | CWE-502 | Uncontrolled Resource Consumption vulnerability in ash-project ash allows an attacker to exhaust the memory of the node via a crafted keyset pagination cursor. Read actions with k |
| CVE-2026-69665 | Deferred | 未確認 | CWE-276 | SKYSEA Client View and SKYMEC IT Manager contain an issue with incorrect default permissions. If this vulnerability is exploited, an attacker who can log in to a Windows system on |
| CVE-2026-69701 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-69702 | Deferred | 未確認 | CWE-789 | SnailJob 1.7.0 contains a denial of service vulnerability in the FuryUtil.deserialize helper that allows authenticated attackers to crash the server by supplying a crafted Zstandar |
| CVE-2026-69703 | Deferred | 未確認 | CWE-306 | Atlas-Livre contains an improper access control vulnerability in the admin controllers under Espace_admin/controleur/ that allows unauthenticated attackers to bypass session-based |
| CVE-2026-69704 | Deferred | 未確認 | CWE-89 | Atals-Livre contains a SQL injection vulnerability that allows attackers to manipulate database queries by passing unsanitized input through a GET parameter to the supp() deletion |
| CVE-2026-6972 | Deferred | 未確認 | CWE-79 | The SKT Skill Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `chart_size` attribute of the `skillwrapper` shortcode in all versions up to, and includ |
| CVE-2026-69836 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69851 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69855 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Microsoft Copilot in Azure allows an authorized attacker to disclose information over a network. |
| CVE-2026-70105 | Analyzed | 未確認 | CWE-20 | Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-70130 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-70304 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70306 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a netwo |
| CVE-2026-70307 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70309 | Analyzed | 未確認 | CWE-346 | Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-70310 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
| CVE-2026-70311 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2026-70312 | Analyzed | 未確認 | CWE-20 | Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. |
| CVE-2026-70313 | Analyzed | 未確認 | CWE-20 | Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. |
| CVE-2026-70314 | Analyzed | 未確認 | CWE-20 | Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-70315 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-70316 | Analyzed | 未確認 | CWE-20 | Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. |
| CVE-2026-70317 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-70318 | Analyzed | 未確認 | CWE-20 | Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-70319 | Analyzed | 未確認 | CWE-20 | Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
| CVE-2026-70320 | Analyzed | 未確認 | CWE-20 | Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. |
| CVE-2026-70321 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-70322 | Analyzed | 未確認 | CWE-20 | Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. |
| CVE-2026-70323 | Analyzed | 未確認 | CWE-20 | Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-70324 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-70325 | Analyzed | 未確認 | CWE-20 | Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. |
| CVE-2026-70326 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-70327 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-70328 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-70329 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70330 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70331 | Analyzed | 未確認 | Improper neutralization of input used for llm prompting in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network. | |
| CVE-2026-70332 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a netwo |
| CVE-2026-70335 | Analyzed | 未確認 | CWE-78 | Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privi |
| CVE-2026-70336 | Analyzed | 未確認 | CWE-94 | Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70337 | Analyzed | 未確認 | CWE-23 | Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70338 | Analyzed | 未確認 | CWE-94 | Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally. |
| CVE-2026-70339 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70340 | Analyzed | 未確認 | CWE-862 | Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-70344 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70345 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70346 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70347 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70348 | Analyzed | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Windows Management Services allows an authorized attacker to deny service locally. |
| CVE-2026-70354 | Analyzed | 未確認 | CWE-787 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. |
| CVE-2026-70355 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a netwo |
| CVE-2026-70367 | Awaiting Analysis | 未確認 | CWE-918 | A Server-Side Request Forgery (SSRF) bypass vulnerability exists in “stunnel” 5.79 and lower when configured in SOCKS proxy mode. This flaw allows a client to bypass intended local |
| CVE-2026-70368 | Awaiting Analysis | 未確認 | CWE-125 | A stack-based out-of-bounds read vulnerability exists in the "s_vlog" function of stunnel, when handling oversized log messages via "vsnprintf". A remote attacker with network acce |
| CVE-2026-70369 | Deferred | 未確認 | CWE-89 | Koha's reports/acquisitions_stats.pl builds its per-cell statistics query in sub calculate by interpolating the user-controlled Filter request parameters directly into WHERE fragme |
| CVE-2026-70370 | Deferred | 未確認 | CWE-89 | Koha's reports/catalogue_stats.pl builds dynamic SQL in sub calculate by interpolating the user-controlled Line and Column request parameters directly into identifier positions of |
| CVE-2026-70371 | Deferred | 未確認 | CWE-89 | Koha's reports/issues_avg_stats.pl builds dynamic SQL in sub calculate by concatenating several user-controlled request parameters directly into the query string. The Line and Colu |
| CVE-2026-70372 | Deferred | 未確認 | CWE-89 | Koha's reports/bor_issues_top.pl builds dynamic SQL in sub calculate by concatenating several user-controlled request parameters directly into the query string. An authenticated st |
| CVE-2026-70373 | Deferred | 未確認 | CWE-89 | Koha's reports/issues_stats.pl (the circulation statistics report) builds its calculation query in sub calculate by concatenating several user-controlled request parameters directl |
| CVE-2026-70374 | Deferred | 未確認 | CWE-78 | HashBrown CMS through 1.4.6 contains an OS Command Injection vulnerability (CWE-78) in the media upload thumbnail generation routine. Media.generateThumbnail in src/Server/Entity/R |
| CVE-2026-70375 | Deferred | 未確認 | CWE-78 | HashBrown CMS through 1.4.6 contains an OS Command Injection vulnerability (CWE-78) in the Git deployer component. GitDeployer.pullRepo in src/Server/Entity/Deployer/GitDeployer.js |
| CVE-2026-70376 | Deferred | 未確認 | CWE-352 | Pluck CMS's admin panel relies solely on a Referer-header comparison (requestedByTheSameDomain in data/inc/functions.admin.php, gating every admin.php action) for CSRF protection, |
| CVE-2026-70377 | Deferred | 未確認 | CWE-789 | imagecli's pipeline operation (Scale::apply in src/image_ops.rs) computes output width/height as (dimension as f32 * ratio) as u32 with no upper-bound validation on the CLI-supplie |
| CVE-2026-70378 | Deferred | 未確認 | CWE-1284 | imagecli's pipeline operation (Carve::apply in src/image_ops.rs) only asserts , never validating that the ratio is positive. A negative ratio (e.g. -5) causes the computed target w |
| CVE-2026-70383 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Estonian Information System Authority (RIA) DigiDoc4 client. This issue affects Dig |
| CVE-2026-70395 | Awaiting Analysis | 未確認 | CWE-943 | Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ash allows an attacker to forge a relationship to a record they cannot name, and to rec |
| CVE-2026-70398 | Awaiting Analysis | 未確認 | CWE-441 | A flaw was found in multicloud-integrations, a component of Red Hat Advanced Cluster Management (RHACM). This vulnerability allows an authenticated user, referred to as a tenant, t |
| CVE-2026-70408 | Deferred | 未確認 | CWE-863 | An incorrect authorization vulnerability exists in acmailer, which may allow a user to create a sub-account that has administrative privileges. |
| CVE-2026-70412 | Awaiting Analysis | 未確認 | CWE-1330 | Dell iDRAC9, versions prior to 7.20.30.50, and Dell iDRAC10, version prior to 1.20.60.50, contain a Remanent Data Readable after Memory Erase vulnerability. A low privileged attack |
| CVE-2026-70415 | Awaiting Analysis | 未確認 | CWE-120 | Dell PowerStore SDNAS contains a Buffer Copy without Checking Size of Input vulnerability in NFS/RPC. An unauthenticated attacker with remote access could potentially exploit this |
| CVE-2026-70419 | Analyzed | 未確認 | CWE-78 | Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high p |
| CVE-2026-70421 | Analyzed | 未確認 | CWE-269 | Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Privilege Management vulnerability. A high privileged attacker with remote access could potentially exploi |
| CVE-2026-70422 | Analyzed | 未確認 | CWE-89 | Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privilege |
| CVE-2026-70423 | Analyzed | 未確認 | CWE-611 | Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access c |
| CVE-2026-70424 | Analyzed | 未確認 | CWE-22 | Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A low privileged atta |
| CVE-2026-70426 | Awaiting Analysis | 未確認 | CWE-502 | In Remoting 3384.v60d89463d9e0 and earlier, except 3355.3357.v931d3c992987, included in Jenkins 2.575 and earlier, LTS 2.568.1 and earlier, the JEP-200 class filter is not applied |
| CVE-2026-70427 | Analyzed | 未確認 | CWE-59 | Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not safely handle symbolic links with effectively empty names during the extraction of `.tar` and `.tar.gz` archives, allowi |
| CVE-2026-70428 | Analyzed | 未確認 | CWE-22 | Jenkins 2.575 and earlier, LTS 2.568.1 and earlier improperly identifies file paths attempting path traversal in file parameter names, allowing attackers with Item/Configure and It |
| CVE-2026-70429 | Analyzed | 未確認 | CWE-178 | Jenkins 2.575 and earlier, LTS 2.568.1 and earlier handles case-insensitivity in user names and group names inconsistently, allowing attackers able to create new users or groups wi |
| CVE-2026-70430 | Analyzed | 未確認 | CWE-284 | Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not restrict the types of objects that can be instantiated as part of the project naming strategy configuration, allowing at |
| CVE-2026-70431 | Awaiting Analysis | 未確認 | CWE-94 | Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier provides Groovy scripting features that do not integrate with Script Security Plugin, allowing attackers with Item/Create or |
| CVE-2026-70432 | Awaiting Analysis | 未確認 | CWE-352 | A cross-site request forgery (CSRF) vulnerability in Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier allows attackers to execute arbitrary code in the context of the Jenkin |
| CVE-2026-70433 | Awaiting Analysis | 未確認 | CWE-862 | Missing permission checks in Jenkins HCL AppScan Plugin 1.8.3 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins |
| CVE-2026-70434 | Awaiting Analysis | 未確認 | CWE-352 | A cross-site request forgery (CSRF) vulnerability in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified |
| CVE-2026-70435 | Awaiting Analysis | 未確認 | CWE-862 | A missing permission check in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-spe |
| CVE-2026-70436 | Awaiting Analysis | 未確認 | CWE-862 | Jenkins External Workspace Manager Plugin 1.4.1 and earlier does not perform a permission check (1.4.0 and earlier) or performs an improper permission check (1.4.1) when providing |
| CVE-2026-70437 | Awaiting Analysis | 未確認 | CWE-208 | Jenkins Webhook Secret Credentials Provider Plugin 16.v0cfa_f0215cf5 and earlier does not use a constant-time comparison function when checking whether the provided and expected we |
| CVE-2026-70438 | Awaiting Analysis | 未確認 | CWE-862 | A missing permission check in Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credential |
| CVE-2026-70439 | Awaiting Analysis | 未確認 | CWE-862 | Jenkins XML Job to Job DSL Plugin 0.1.13 and earlier does not perform permission checks, allowing attackers lacking appropriate permissions to invoke the conversion functionality. |
| CVE-2026-70440 | Awaiting Analysis | 未確認 | CWE-79 | Jenkins Qualys Container Scanning Connector Plugin 1.8.0.5 and earlier does not escape user-controlled field values in a JavaScript context, resulting in a stored cross-site script |
| CVE-2026-70441 | Awaiting Analysis | 未確認 | CWE-79 | Jenkins Summary Display Plugin 1.15 and earlier does not escape the job name in a JavaScript context in build report pages, resulting in a stored cross-site scripting (XSS) vulnera |
| CVE-2026-70442 | Awaiting Analysis | 未確認 | CWE-285 | Jenkins Google Chat Notification Plugin 166.ve6b_de280f2e8 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permissio |
| CVE-2026-70443 | Awaiting Analysis | 未確認 | CWE-269 | Jenkins Horreum Plugin 0.16.162.v33b_4a_a_b_5f828 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to have |
| CVE-2026-70444 | Awaiting Analysis | 未確認 | CWE-693 | A missing permission check in Jenkins Violation Comments to GitLab Plugin 2.62.0 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentia |
| CVE-2026-70445 | Awaiting Analysis | 未確認 | CWE-862 | Missing permission checks in Jenkins Sauce OnDemand Plugin 2.2.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenk |
| CVE-2026-70446 | Awaiting Analysis | 未確認 | CWE-862 | Missing permission checks in Jenkins CodeSonar Plugin 3.6.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. |
| CVE-2026-70447 | Awaiting Analysis | 未確認 | CWE-862 | Missing permission checks in Jenkins AWS CodeBuild Plugin 0.59 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkin |
| CVE-2026-70448 | Awaiting Analysis | 未確認 | CWE-611 | Jenkins Ivy Report Plugin 1.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks when processing Ivy report files. |
| CVE-2026-70449 | Analyzed | 未確認 | CWE-22 | Improper validation of resource URL attributes in Apache Wicket allows an unauthenticated remote attacker to read files from the web application, including files under WEB-INF that |
| CVE-2026-70452 | Awaiting Analysis | 未確認 | CWE-636, CWE-863 | rsync 3.1.0 before 3.5.0 contains an access control bypass vulnerability that allows remote attackers to circumvent hosts deny rules by inducing DNS resolution failures during host |
| CVE-2026-70453 | Awaiting Analysis | 未確認 | CWE-407 | rsync before 3.5.0 contains an algorithmic complexity vulnerability in the hash_search() function that allows a remote attacker to cause a denial of service by delivering a careful |
| CVE-2026-70454 | Awaiting Analysis | 未確認 | CWE-295 | rsync 3.2.0 through 3.2.3 (openssl mode) and rsync-ssl through 3.4.4 (stunnel mode) contain a TLS certificate validation vulnerability that allows on-path attackers to intercept en |
| CVE-2026-70455 | Analyzed | 未確認 | CWE-770 | rsync 3.4.2 before 3.5.0 contains a denial of service vulnerability that allows a remote sender to exhaust system resources by specifying the --zt short alias for --compress-thread |
| CVE-2026-70456 | Awaiting Analysis | 未確認 | CWE-787 | rsync 3.0.1 before 3.5.0 contains an out-of-bounds write vulnerability in the read_args() function that allows a malicious sender to corrupt adjacent heap memory by sending a craft |
| CVE-2026-70457 | Analyzed | 未確認 | CWE-131, CWE-787 | rsync 3.2.3 before 3.5.0 contains an out-of-bounds write in parse_size_arg() where the return value of snprintf() is used directly as an index into a .bss-segment array without bou |
| CVE-2026-70458 | Awaiting Analysis | 未確認 | CWE-787 | rsync 3.0.0 before 3.5.0 contains an out-of-bounds write vulnerability that allows attackers to corrupt memory by triggering HLINK_BUMP processing on file entries with the FLAG_HLI |
| CVE-2026-70459 | Analyzed | 未確認 | CWE-908 | rsync 3.0.0 before 3.5.0 contains a null pointer dereference vulnerability in the daemon child process that allows remote attackers to crash the daemon by sending a file list whose |
| CVE-2026-70460 | Awaiting Analysis | 未確認 | CWE-22, CWE-59 | rsync 2.3.3 before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to escape the module root by exploiting symlinks within the module file tree when us |
| CVE-2026-70461 | Analyzed | 未確認 | CWE-787 | rsync 3.2.5 before 3.5.0 contains a heap out-of-bounds write vulnerability that allows remote unauthenticated attackers to write one attacker-controlled byte past the end of a heap |
| CVE-2026-70462 | Awaiting Analysis | 未確認 | CWE-190, CWE-835 | rsync 3.1.0 before 3.5.0 contains a signed integer overflow vulnerability in the I/O timeout implementation that allows attackers to permanently disable connection timeouts by inje |
| CVE-2026-70463 | Analyzed | 未確認 | CWE-863 | rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing. The auth users parser uses comma-only tokenization when splitting the user list, which fa |
| CVE-2026-70464 | Awaiting Analysis | 未確認 | CWE-770 | rsync daemon 2.0.0 before 3.5.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust daemon connection slots by stalling the handshake |
| CVE-2026-70465 | Analyzed | 未確認 | CWE-120 | A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.11 m |
| CVE-2026-70466 | Analyzed | 未確認 | CWE-184 | A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, F |
| CVE-2026-70467 | Analyzed | 未確認 | CWE-918 | A server-side request forgery (ssrf) vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0 through 7.4.2, FortiSIEM 7.3.0 through 7.3.5, FortiSIEM 7.2 all versions, FortiSIEM |
| CVE-2026-70468 | Analyzed | 未確認 | CWE-288 | A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiMa |
| CVE-2026-70470 | Analyzed | 未確認 | CWE-184 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise validatePythonCodeForDataFrame in packages/components/src/pythonCod |
| CVE-2026-70471 | Analyzed | 未確認 | CWE-863 | Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows. Prior to 3.1.3, Flowise injects $vars into the code execution sandbox without re |
| CVE-2026-70472 | Analyzed | 未確認 | CWE-285, CWE-863 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise openai-assistants-vector-store endpoints accept a client-controlled |
| CVE-2026-70473 | Analyzed | 未確認 | CWE-200, CWE-202, CWE-862 | Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows. Prior to 3.1.3, Flowise GET /api/v1/upsert-history returns the entire server-wid |
| CVE-2026-70474 | Analyzed | 未確認 | CWE-863 | Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows. Prior to 3.1.3, Flowise has three OAuth2 credential endpoints that look up crede |
| CVE-2026-70475 | Analyzed | 未確認 | CWE-862 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the PUT /api/v1/executions/:id endpoint in packages/server/src/routes/execu |
| CVE-2026-70476 | Analyzed | 未確認 | CWE-284, CWE-639 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, several organization billing endpoints in packages/server/src/enterprise/ro |
| CVE-2026-70477 | Analyzed | 未確認 | CWE-94 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, a prompt injection sent to a chatflow using a CSV Agent node can cause the |
| CVE-2026-70478 | Analyzed | 未確認 | CWE-200 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the POST /api/v1/oauth2-credential/refresh/:credentialId endpoint is includ |
| CVE-2026-70479 | Analyzed | 未確認 | CWE-918 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.0, with WEB_LOADER_ENGINE=playwright, the Playwright web loader validate |
| CVE-2026-70480 | Analyzed | 未確認 | CWE-918 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.34 until 0.11.0, Open WebUI renders vega and vega-lite fenced code blocks in chat con |
| CVE-2026-70481 | Analyzed | 未確認 | CWE-284, CWE-862 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.5.0 until 0.11.0, the standard channel message update and delete handlers accepted any |
| CVE-2026-70482 | Analyzed | 未確認 | CWE-287 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.11.0, when ENABLE_OAUTH_TOKEN_EXCHANGE=True, /oauth/{provider}/token/exchan |
| CVE-2026-70483 | Analyzed | 未確認 | CWE-862 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.0, DELETE /api/v1/chats/{id} cancelled a chat's in-flight tasks before c |
| CVE-2026-70484 | Analyzed | 未確認 | CWE-862, CWE-863 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.7.0 until 0.11.0, the legacy chat-completions features block trusted a client-supplied |
| CVE-2026-70485 | Analyzed | 未確認 | CWE-918 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.0, Open WebUI checked whether a user-supplied URL destination was global |
| CVE-2026-70486 | Analyzed | 未確認 | CWE-1021, CWE-79 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.0, the terminal file-preview serveUrl iframe branch always granted allow |
| CVE-2026-70487 | Analyzed | 未確認 | CWE-862 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.8 until 0.11.0, inline direct model metadata accepted client-supplied knowledge attac |
| CVE-2026-70488 | Analyzed | 未確認 | CWE-639, CWE-863 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.0, the sync cleanup endpoint authorized write access to the knowledge ba |
| CVE-2026-70489 | Analyzed | 未確認 | CWE-1333, CWE-400 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.0, automation recurrence parsing in backend/open_webui/utils/automations |
| CVE-2026-70490 | Analyzed | 未確認 | CWE-863 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.8 until 0.11.0, the terminal WebSocket route in backend/open_webui/routers/terminals. |
| CVE-2026-70491 | Analyzed | 未確認 | CWE-200 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. In 0.10.2 and earlier, the GET /api/v1/tools/, GET /api/v1/tools/list, and GET /api/v1/tools/i |
| CVE-2026-70492 | Analyzed | 未確認 | CWE-79 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.0, src/lib/components/chat/Messages/Markdown/KatexRenderer.svelte could |
| CVE-2026-70493 | Analyzed | 未確認 | CWE-1333 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.0, the built-in knowledge search path in backend/open_webui/tools/knowle |
| CVE-2026-70494 | Analyzed | 未確認 | CWE-862, CWE-863 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.0, the DELETE /api/v1/folders/{id} handler in backend/open_webui/router |
| CVE-2026-70495 | Awaiting Analysis | 未確認 | CWE-269 | A flaw was found in search-v2-operator. This component's `search-serviceaccount` has overly broad permissions, allowing it to impersonate users and groups across the entire cluster |
| CVE-2026-70496 | Awaiting Analysis | 未確認 | CWE-250 | A flaw was found in search-v2-operator. The operator's ClusterRole has permissions equivalent to a cluster administrator, allowing it to impersonate other entities, write Role-Base |
| CVE-2026-70547 | Analyzed | 未確認 | CWE-862 | An authenticated user without repository read permission may access package metadata under specific conditions. |
| CVE-2026-70548 | Awaiting Analysis | 未確認 | CWE-918 | Under specific circumstances, low-level user can run request to remote CocoaPods repos via JFrog Artifactory External Dependency. |
| CVE-2026-70550 | Awaiting Analysis | 未確認 | CWE-862 | An authorization weakness in JFrog Artifactory Composer repository handling may allow an authenticated user, under specific conditions, to read package metadata from repositories t |
| CVE-2026-70551 | Awaiting Analysis | 未確認 | CWE-918 | A user who can read an existing remote VCS repository can replace its configured origin or supply an absolute VCS data URL. |
| CVE-2026-70552 | Deferred | 未確認 | CWE-306 | MaxSite CMS 109.5 and earlier contains an authentication bypass vulnerability in the AJAX dispatcher that allows unauthenticated attackers to access admin-gated endpoints by supply |
| CVE-2026-70553 | Deferred | 未確認 | CWE-94 | MaxSite CMS contains a remote code execution vulnerability that allows unauthenticated attackers to inject arbitrary PHP code into the application configuration file by submitting |
| CVE-2026-70554 | Deferred | 未確認 | CWE-502 | MaxSite CMS contains a PHP object injection vulnerability that allows unauthenticated attackers to execute arbitrary code by passing attacker-controlled serialized data in the maxs |
| CVE-2026-70556 | Deferred | 未確認 | CWE-352 | Hubzilla versions prior to 11.4 contains a cross-site request forgery vulnerability in the OAuth2 /authorize endpoint handled by Zotlabs\Module\Authorize::post() that allows unaut |
| CVE-2026-70557 | Deferred | 未確認 | CWE-639 | diboot-core's POST /common/load-related-data endpoint resolves caller-supplied field names to any @TableField column of any entity and returns those values for all rows, with no fi |
| CVE-2026-70558 | Deferred | 未確認 | CWE-434 | Dinky's POST /download/uploadFromRsByLocal handler passes the caller-supplied path parameter directly to new File(path) and file.transferTo(dest) with no path validation. The route |
| CVE-2026-70559 | Deferred | 未確認 | CWE-306 | Dinky's SysConfigController.getAll() handler for GET /api/sysConfig/getAll carries a method-level @SaIgnore annotation that short-circuits the class-level @SaCheckLogin, so the Sa- |
| CVE-2026-70560 | Deferred | 未確認 | CWE-79 | Ultimate POS (Stock Management & Point of Sale) contains a stored cross-site scripting vulnerability that allows low-privileged authenticated attackers to inject arbitrary HTML and |
| CVE-2026-70561 | Deferred | 未確認 | CWE-639 | TestLink 1.9.20 and prior contains an insecure direct object reference vulnerability that allows any authenticated user, including low-privilege guest accounts, to read arbitrary a |
| CVE-2026-70588 | Deferred | 未確認 | CWE-79 | Ghost is a Node.js content management system. From 5.26.0 until 6.54.1, the Universal Import feature in Ghost Admin failed to properly sanitize imported content resulting in XSS in |
| CVE-2026-70589 | Deferred | 未確認 | CWE-20 | Ghost is a Node.js content management system. From 4.22.0 until 6.54.1, a missing validation check allowed users to redeem subscription offers that were no longer active. This issu |
| CVE-2026-70590 | Deferred | 未確認 | CWE-200 | Ghost is a Node.js content management system. Prior to 6.54.1, any staff-level user was able to leak the hashed passwords of other staff users through the Ghost Admin API. An offli |
| CVE-2026-70591 | Deferred | 未確認 | CWE-918 | Ghost is a Node.js content management system. From 0.10.0 until 6.54.1, a Server-Side Request Forgery in Ghost Admin image fetching allowed any staff-level user to perform a blind |
| CVE-2026-70592 | Deferred | 未確認 | CWE-22 | Ghost is a Node.js content management system. From 1.20.1 until 6.54.1, an Administrator-level user could remotely overwrite certain files on the filesystem through the database ba |
| CVE-2026-70593 | Deferred | 未確認 | CWE-22 | Ghost is a Node.js content management system. From 0.10.0 until 6.54.1, a vulnerability in custom themes allowed a staff user to write files outside of the uploads directory. This |
| CVE-2026-70594 | Deferred | 未確認 | CWE-384 | Ghost is a Node.js content management system. From 2.2.0 until 6.54.1, Ghost Admin did not invalidate existing sessions on login which could have allowed for session fixation attac |
| CVE-2026-70595 | Deferred | 未確認 | CWE-918 | Ghost is a Node.js content management system. From 6.26.0 until 6.54.1, a validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user |
| CVE-2026-70596 | Deferred | 未確認 | CWE-79 | Ghost is a Node.js content management system. From 4.9.0 until 6.54.1, an input validation issue allowed any staff user to create a post with content in feature_image_caption that |
| CVE-2026-70597 | Analyzed | 未確認 | CWE-367 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, the check Electron uses |
| CVE-2026-70598 | Analyzed | 未確認 | CWE-125 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.10, 40.9.0, 41.2.1, and 42.0.0-beta.3, offscreen rendering fra |
| CVE-2026-70599 | Analyzed | 未確認 | CWE-346 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.7, 40.9.0, 41.2.0, and 42.0.0-beta.1, serial-port and media pe |
| CVE-2026-70600 | Analyzed | 未確認 | CWE-1021 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, the native autofill popu |
| CVE-2026-70601 | Analyzed | 未確認 | CWE-693 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.9, 40.9.2, 41.2.2, and 42.0.0-beta.5, apps that expose Promise |
| CVE-2026-70602 | Analyzed | 未確認 | CWE-284 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, extension tab and script |
| CVE-2026-70603 | Analyzed | 未確認 | CWE-158, CWE-20 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.6, 40.9.0, 41.1.1, and 42.0.0-beta.1, shell.openPath() did not |
| CVE-2026-70604 | Analyzed | 未確認 | CWE-942 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.10, 40.9.3, 41.4.0, and 42.0.0, a custom scheme registered wit |
| CVE-2026-70605 | Analyzed | 未確認 | CWE-918 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, when following HTTP redi |
| CVE-2026-70606 | Analyzed | 未確認 | CWE-668 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 40.10.6, 41.9.1, 42.5.1, and 43.0.0, when a custom protocol handler |
| CVE-2026-70607 | Analyzed | 未確認 | CWE-20 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, some window options supp |
| CVE-2026-70608 | Analyzed | 未確認 | CWE-1021, CWE-693 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.10, 41.10.3, and 42.0.1, a sandboxed iframe without the allow- |
| CVE-2026-70609 | Analyzed | 未確認 | CWE-116, CWE-94 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.7, 40.9.0, 41.2.0, and 42.0.0-beta.1, the mode option of webCo |
| CVE-2026-70610 | Analyzed | 未確認 | CWE-1321 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.9, 40.9.2, 41.2.2, and 42.0.0-beta.4, objects copied across th |
| CVE-2026-70611 | Analyzed | 未確認 | CWE-78 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.9, 40.9.2, 41.2.1, and 42.0.0-beta.3, the DevTools reveal in f |
| CVE-2026-70612 | Analyzed | 未確認 | CWE-284 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, requests to open externa |
| CVE-2026-70615 | Deferred | 未確認 | CWE-93 | boringproxy through 0.10.0 contains a newline injection vulnerability that allows authenticated low-privileged users with tunnel-creation permission to inject arbitrary lines into |
| CVE-2026-70616 | Deferred | 未確認 | CWE-833 | boringproxy through 0.10.0 contains a resource exhaustion vulnerability that allows any authenticated user to permanently exhaust server file descriptors, goroutines, and memory by |
| CVE-2026-70617 | Deferred | 未確認 | CWE-862 | Spacebar Server before commit dcfd910 contains a missing authorization vulnerability that allows any authenticated attacker to add themselves to arbitrary group DM channels by send |
| CVE-2026-70618 | Deferred | 未確認 | CWE-862 | Spacebar Server before commit 51da17c contains a missing authorization vulnerability that allows any authenticated user to enumerate complete guild membership by querying the GET / |
| CVE-2026-70619 | Deferred | 未確認 | CWE-862 | Odysseus before commit bf325f6 contains a missing authorization vulnerability that allows authenticated non-admin users to manage server-wide embedding backend configuration by inv |
| CVE-2026-70620 | Deferred | 未確認 | CWE-918 | Odysseus before commit 87babb5 contains a server-side request forgery vulnerability that allows admin-privileged attackers to direct the server to probe internal network resources |
| CVE-2026-70622 | Deferred | 未確認 | CWE-59 | tar-rs versions 0.4.11 through 0.4.46 contain a symlink escape vulnerability in the Builder::append_dir_all() function that allows attackers to read files outside the intended sour |
| CVE-2026-70623 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-70624 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-70626 | Analyzed | 未確認 | CWE-59 | NLTK versions before 3.9.4 contain a symlink escape vulnerability in CorpusReader.open() that allows local attackers to read arbitrary files outside the corpus root. The vulnerabil |
| CVE-2026-70628 | Analyzed | 未確認 | CWE-190, CWE-787 | FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow vulnerability in the DVB subtitle parser in libavcodec/dvbsub_parser.c that allows attacker |
| CVE-2026-70629 | Analyzed | 未確認 | CWE-908 | FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the native RSCC decoder (libavcodec/rscc.c) that allows attackers |
| CVE-2026-70630 | Analyzed | 未確認 | CWE-908 | FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the native Screenpresso decoder (libavcodec/screenpresso.c) that a |
| CVE-2026-70631 | Analyzed | 未確認 | CWE-908 | FFmpeg versions from 0.5 up to, but not including, 9.0 contain an uninitialized heap memory disclosure vulnerability in the native TIFF decoder in libavcodec/tiff.c. An attacker wh |
| CVE-2026-70632 | Analyzed | 未確認 | CWE-787 | FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the native GoPro CineForm HD (CFHD) decoder that allows remote attackers |
| CVE-2026-70633 | Analyzed | 未確認 | CWE-125, CWE-191 | TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability in the Gorilla compression reverse row iterator that allows authenticated attacker |
| CVE-2026-70634 | Analyzed | 未確認 | CWE-125, CWE-129 | TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read in the Dictionary compression reverse row iterator (tsl/src/compression/algorithms/dictionary.c) |
| CVE-2026-70635 | Analyzed | 未確認 | CWE-125, CWE-129 | TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability that allows authenticated attackers to cause query-result integrity failures or ba |
| CVE-2026-70636 | Analyzed | 未確認 | CWE-862 | Flowise through 3.1.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to access the OAuth2 credential refresh endpoint by exploiting prefix-ba |
| CVE-2026-70637 | Deferred | 未確認 | CWE-820 | LightFTP through 2.4 contains multiple data race vulnerabilities in ftpserv.c that allow anonymous attackers to cause undefined behavior by issuing LIST followed by ABOR commands w |
| CVE-2026-70638 | Analyzed | 未確認 | CWE-122, CWE-190 | llama.cpp builds b1886 through b7445 contain an integer overflow vulnerability in the LLaMA-Android JNI wrapper where the new_1batch() function multiplies sizeof(llama_seq_id) by a |
| CVE-2026-70639 | Analyzed | 未確認 | CWE-476 | llama.cpp builds b1886 through b7445 contain a null pointer dereference vulnerability in the LLaMA-Android JNI wrapper where the bench_1model() function fails to validate the model |
| CVE-2026-70640 | Analyzed | 未確認 | CWE-362, CWE-476 | llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LLaMA-Android JNI wrapper where bench_1model() and free_1context() lack synchroniz |
| CVE-2026-70646 | Deferred | 未確認 | CWE-400 | aiosend is a synchronous and asynchronous Crypto Pay API client. Pror to version 3.0.7, `WebhookHandler.feed_update()` deserializes the entire request body before verifying the HMA |
| CVE-2026-70651 | Deferred | 未確認 | CWE-680 | libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips built without libtiff support but with ImageMagick support can overflow the combi |
| CVE-2026-70652 | Deferred | 未確認 | CWE-126 | libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips built with libultrahdr support can incorrectly size an output buffer in libvips/f |
| CVE-2026-70653 | Deferred | 未確認 | CWE-122 | libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, the old-style Radiance RLE decoder in libvips/foreign/radiance.c can process a repeat mar |
| CVE-2026-70654 | Deferred | 未確認 | CWE-122 | libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, applications that define unusual custom libvips sources and use them to process untrusted |
| CVE-2026-70656 | Deferred | 未確認 | CWE-1333 | Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. From |
| CVE-2026-70657 | Deferred | 未確認 | CWE-863 | Copyparty is a portable file server. Prior to 1.20.17, copyparty volumes with the dk or dks directory-key flag combined with the fk or fka file-key flag can convert a valid file ke |
| CVE-2026-70665 | Deferred | 未確認 | CWE-285 | Doorkeeper OpenID Connect implements an OpenID Connect authentication provider for Rails applications on top of Doorkeeper. Prior to 1.10.4, the Dynamic Client Registration (DCR) e |
| CVE-2026-70666 | Deferred | 未確認 | CWE-918 | Lemur manages TLS certificate creation. Prior to 1.9.3, an authority-role member could update acme_url through PUT /api/1/authorities/ without revalidation and direct setup_acme_cl |
| CVE-2026-70667 | Deferred | 未確認 | CWE-367, CWE-918 | Lemur manages TLS certificate creation. Prior to 1.9.3, _validate_revocation_url in lemur/certificates/verify.py checked the original CRL or OCSP URL but the later request could re |
| CVE-2026-70668 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. |
| CVE-2026-70669 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. |
| CVE-2026-70670 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. |
| CVE-2026-70671 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. |
| CVE-2026-70672 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. |
| CVE-2026-70673 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. |
| CVE-2026-70674 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. |
| CVE-2026-70675 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. |
| CVE-2026-70676 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to e |
| CVE-2026-70677 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to e |
| CVE-2026-70678 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploit |
| CVE-2026-70679 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploit |
| CVE-2026-70680 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily e |
| CVE-2026-70681 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: JRI and other Java utils). Supported versions that are affected are 12.2.3-12.2.15. Dif |
| CVE-2026-70682 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to e |
| CVE-2026-70683 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploit |
| CVE-2026-70684 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 13.5 and 2 |
| CVE-2026-70685 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploit |
| CVE-2026-70686 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exp |
| CVE-2026-70687 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnera |
| CVE-2026-70688 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle Essbase (component: Calculator). The supported version that is affected is 21.8.1.0.0. Easily exploitable vulnerability allows low privileged attacker wit |
| CVE-2026-70689 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle Essbase (component: Infrastructure). The supported version that is affected is 21.8.1.0.0. Easily exploitable vulnerability allows unauthenticated attacke |
| CVE-2026-70690 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll - General). Supported versions that are affected are 12.2.3-12.2.15. Difficult to e |
| CVE-2026-70691 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affec |
| CVE-2026-70692 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Marketing Encyclopedia System product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2 |
| CVE-2026-70693 | Modified | 未確認 | CWE-306 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affec |
| CVE-2026-70694 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Difficult to explo |
| CVE-2026-70695 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Difficult to explo |
| CVE-2026-70696 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable |
| CVE-2026-70697 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affec |
| CVE-2026-70698 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.2.1. Easily exploit |
| CVE-2026-70699 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Difficult to explo |
| CVE-2026-70700 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Payables product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitab |
| CVE-2026-70701 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Payables product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitab |
| CVE-2026-70702 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable |
| CVE-2026-70703 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affec |
| CVE-2026-70704 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite (component: Party Search UI). Supported versions that are affected are 12.2.3-12.2.15. Difficult t |
| CVE-2026-70705 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploit |
| CVE-2026-70706 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Sales product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploi |
| CVE-2026-70707 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Sales for Handhelds product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easil |
| CVE-2026-70708 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Sales Foundation product of Oracle E-Business Suite (component: Security API). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita |
| CVE-2026-70709 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affec |
| CVE-2026-70710 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Sales Foundation product of Oracle E-Business Suite (component: Security API). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita |
| CVE-2026-70711 | Modified | 未確認 | CWE-306 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to e |
| CVE-2026-70712 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.2.1. Difficult to e |
| CVE-2026-70713 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Supported versions that are affected are 12.2.3-12.2.1 |
| CVE-2026-70714 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to e |
| CVE-2026-70715 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). Supported versions that are affected are 26-26.1.0, 26.2.0, 26.3.1, 26.5.0 and 26.5.2. Easil |
| CVE-2026-70716 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17 and 4.0.0-4.4.1. Diffic |
| CVE-2026-70717 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle Autonomous Health Framework (component: Cluster Health Analyzer). Supported versions that are affected are 26-26.1.0, 26.2.0, 26.3.1, 26.5.0 and 26.5.2. D |
| CVE-2026-70718 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficu |
| CVE-2026-70719 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploit |
| CVE-2026-70720 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Eas |
| CVE-2026-70721 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion (component: Deployment). The supported version that is affected is 11.2.25.0.000 |
| CVE-2026-70722 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15 |
| CVE-2026-70723 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion (component: Deployment). The supported version that is affected is 11.2.25.0.000 |
| CVE-2026-70724 | Analyzed | 未確認 | CWE-284 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 8.0.0-8.0.48, 8.4.0-8.4.11 and 9.7.0-9.7.2. Dif |
| CVE-2026-70725 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15 |
| CVE-2026-70726 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Cash Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily ex |
| CVE-2026-70727 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vuln |
| CVE-2026-70728 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). Supported versions that are affected are 26-26.1.0, 26.2.0, 26.3.1, 26.5.0 and 26.5.2. Easil |
| CVE-2026-70729 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Teleservice product of Oracle E-Business Suite (component: Service Request Form). Supported versions that are affected are 12.2.3-12.2.15. Easily explo |
| CVE-2026-70730 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion (component: Deployment). The supported version that is affected is 11.2.25.0.000 |
| CVE-2026-70731 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). Supported versions that are affected are 26-26.1.0, 26.2.0, 26.3.1, 26.5.0 and 26.5.2. Easil |
| CVE-2026-70732 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15. |
| CVE-2026-70733 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion (component: Deployment). The supported version that is affected is 11.2.25.0.000 |
| CVE-2026-70734 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). Supported versions that are affected are 26-26.1.0, 26.2.0, 26.3.1, 26.5.0 and 26.5.2. Easil |
| CVE-2026-70735 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion (component: Deployment). The supported version that is affected is 11.2.25.0.000 |
| CVE-2026-70736 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion (component: Deployment). The supported version that is affected is 11.2.25.0.000 |
| CVE-2026-70737 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Manager for Systems Infrastructure product of Oracle Enterprise Manager (component: Storage Server Management). Supported versions that are |
| CVE-2026-70738 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion (component: Deployment). The supported version that is affected is 11.2.25.0.000 |
| CVE-2026-70739 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitab |
| CVE-2026-70740 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitab |
| CVE-2026-70741 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitab |
| CVE-2026-70742 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitab |
| CVE-2026-70743 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitab |
| CVE-2026-70744 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Difficult to exp |
| CVE-2026-70745 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitab |
| CVE-2026-70746 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitab |
| CVE-2026-70747 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Customers Online product of Oracle E-Business Suite (component: Customer Tab). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita |
| CVE-2026-70749 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Difficult to exp |
| CVE-2026-70750 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitab |
| CVE-2026-70751 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Difficult to exp |
| CVE-2026-70752 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitab |
| CVE-2026-70753 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitab |
| CVE-2026-70754 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitab |
| CVE-2026-70758 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Difficult to exp |
| CVE-2026-70759 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitab |
| CVE-2026-70760 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Dif |
| CVE-2026-70761 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Risk Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily ex |
| CVE-2026-70762 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Risk Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily ex |
| CVE-2026-70763 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Operations Intelligence product of Oracle E-Business Suite (component: Daily Business Intelligence). Supported versions that are affected are 12.2.3-12 |
| CVE-2026-70764 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exp |
| CVE-2026-70765 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitab |
| CVE-2026-70766 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitab |
| CVE-2026-70767 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitab |
| CVE-2026-70768 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitab |
| CVE-2026-70769 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Difficult to exp |
| CVE-2026-70770 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easi |
| CVE-2026-70771 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easi |
| CVE-2026-70772 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easi |
| CVE-2026-70773 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Knowledge Integration). Supported versions that are affected are 12.2.3-12.2.15. |
| CVE-2026-70774 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easi |
| CVE-2026-70775 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita |
| CVE-2026-70776 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Difficult to exp |
| CVE-2026-70777 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily e |
| CVE-2026-70778 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Customer Care product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily expl |
| CVE-2026-70779 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficul |
| CVE-2026-70780 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Difficult to exp |
| CVE-2026-70781 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Proposals product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita |
| CVE-2026-70782 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-70783 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Service Contracts product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficu |
| CVE-2026-70784 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Difficult to exp |
| CVE-2026-70785 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Difficult to exp |
| CVE-2026-70786 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Service Fulfillment Manager product of Oracle E-Business Suite (component: Fulfillment Engine). Supported versions that are affected are 12.2.3-12.2.15 |
| CVE-2026-70787 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitab |
| CVE-2026-70788 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitab |
| CVE-2026-70789 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Difficult to exp |
| CVE-2026-70790 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Telecommunications Billing Integrator product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12. |
| CVE-2026-70791 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Transportation Execution product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. |
| CVE-2026-70792 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Yard Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily ex |
| CVE-2026-70793 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Difficult to exp |
| CVE-2026-70794 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Difficult to exp |
| CVE-2026-70795 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Applications Platform Engineering product of Oracle E-Business Suite (component: Valid Session). Supported versions that are affected are 12.2.3-12.2.1 |
| CVE-2026-70796 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult |
| CVE-2026-70797 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploit |
| CVE-2026-70798 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploit |
| CVE-2026-70799 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle SDP Number Portability product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Ea |
| CVE-2026-70800 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle SDP Number Portability product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Ea |
| CVE-2026-70801 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-70802 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite (component: Regression Testing). Supported versions that are affected are 12.2.3-12.2. |
| CVE-2026-70803 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exp |
| CVE-2026-70804 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite (component: Regression Testing). Supported versions that are affected are 12.2.3-12.2. |
| CVE-2026-70805 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Project Planning and Control product of Oracle E-Business Suite (component: Change Management). Supported versions that are affected are 12.2.3-12.2.15 |
| CVE-2026-70806 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle E-Business Tax product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exp |
| CVE-2026-70807 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Ea |
| CVE-2026-70808 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita |
| CVE-2026-70809 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to ex |
| CVE-2026-70810 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita |
| CVE-2026-70811 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.5-12.2.15. Easily exploit |
| CVE-2026-70812 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Ea |
| CVE-2026-70813 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Ea |
| CVE-2026-70814 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Di |
| CVE-2026-70815 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Internet Procurement Connector product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12. |
| CVE-2026-70816 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Financials for EMEA product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easil |
| CVE-2026-70817 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70818 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70819 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70820 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Ea |
| CVE-2026-70821 | Modified | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70822 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70823 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to |
| CVE-2026-70824 | Modified | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70825 | Modified | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70826 | Modified | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70827 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2 |
| CVE-2026-70828 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70829 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2 |
| CVE-2026-70830 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2 |
| CVE-2026-70831 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70832 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70833 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Landed Cost Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Ea |
| CVE-2026-70834 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70835 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily explo |
| CVE-2026-70836 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70837 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Financials for Asia/Pacific product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.1 |
| CVE-2026-70838 | Modified | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70839 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Financials for EMEA product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easil |
| CVE-2026-70840 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70841 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to |
| CVE-2026-70842 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70843 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to |
| CVE-2026-70844 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Loans product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable |
| CVE-2026-70845 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Loans product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable |
| CVE-2026-70846 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (component: Internal Operations). Supported versions that are affected are 12.1 and 12.2. Easily exploi |
| CVE-2026-70847 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70848 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to |
| CVE-2026-70849 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70850 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to |
| CVE-2026-70851 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to |
| CVE-2026-70852 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (component: Internal Operations). Supported versions that are affected are 12.1 and 12.2. Easily exploi |
| CVE-2026-70853 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to |
| CVE-2026-70854 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70855 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel Apps - Self Service product of Oracle Siebel CRM (component: Helpdesk/Training). Supported versions that are affected are 17.0-26.6. Easily exploitable |
| CVE-2026-70856 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Migration). Supported versions that are affected are 17.0-26.6. Difficult to exploit vulnerabil |
| CVE-2026-70857 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.6. Difficult to exploit vulnerability |
| CVE-2026-70858 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-70859 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). Supported versions that are affected are 17.0-26.6. Difficult to exploit vulnerability |
| CVE-2026-70861 | Undergoing Analysis | 未確認 | CWE-284, CWE-306 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Common Objects). The supported version that is affected is 9.1. Easi |
| CVE-2026-70862 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with netwo |
| CVE-2026-70863 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker having Load |
| CVE-2026-70864 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker having Load |
| CVE-2026-70865 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Difficult to exploit vulnerability allows low privileged attacker having Lo |
| CVE-2026-70866 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker having Load |
| CVE-2026-70867 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with acces |
| CVE-2026-70868 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with net |
| CVE-2026-70870 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Web Client - Unicode). The supported version that is affected is 11.2.23. |
| CVE-2026-70871 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0 |
| CVE-2026-70872 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0 |
| CVE-2026-70873 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0 |
| CVE-2026-70874 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0 |
| CVE-2026-70875 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0 |
| CVE-2026-70876 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0 |
| CVE-2026-70877 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0 |
| CVE-2026-70878 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0 |
| CVE-2026-70879 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0 |
| CVE-2026-70880 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0 |
| CVE-2026-70881 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0 |
| CVE-2026-70882 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0 |
| CVE-2026-70883 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0 |
| CVE-2026-70884 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0 |
| CVE-2026-70885 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0 |
| CVE-2026-70886 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0 |
| CVE-2026-70887 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0 |
| CVE-2026-70888 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0 |
| CVE-2026-70889 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0 |
| CVE-2026-70890 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0 |
| CVE-2026-70891 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0 |
| CVE-2026-70892 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0 |
| CVE-2026-70893 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0 |
| CVE-2026-70894 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0 |
| CVE-2026-70895 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0 |
| CVE-2026-70896 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0 |
| CVE-2026-70897 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0 |
| CVE-2026-70898 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0 |
| CVE-2026-70899 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0 |
| CVE-2026-70900 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0 |
| CVE-2026-70901 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0 |
| CVE-2026-70902 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0 |
| CVE-2026-70903 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0 |
| CVE-2026-70904 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0 |
| CVE-2026-70905 | Modified | 未確認 | CWE-287 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Agent infrastructure). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1 |
| CVE-2026-70906 | Awaiting Analysis | 未確認 | CWE-400 | Vulnerability in Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 25.0.4 and 26.0.2. Easily exploitable vulnerability allows unauthenticat |
| CVE-2026-70907 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected ar |
| CVE-2026-70908 | Modified | 未確認 | CWE-400 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vuln |
| CVE-2026-70909 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70910 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability al |
| CVE-2026-70911 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70912 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to |
| CVE-2026-70914 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to |
| CVE-2026-70916 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70917 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70918 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Outbound Data). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable |
| CVE-2026-70919 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to |
| CVE-2026-70920 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70921 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70922 | Analyzed | 未確認 | CWE-287 | Vulnerability in the Oracle Financial Services Enterprise Case Management product of Oracle Financial Services Applications (component: Web UI). Supported versions that are affect |
| CVE-2026-70923 | Modified | 未確認 | CWE-285 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.18. Easily exploitable vuln |
| CVE-2026-70924 | Modified | 未確認 | CWE-306 | Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-70925 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70926 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-70927 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-70928 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70929 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70930 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Dif |
| CVE-2026-70931 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-70932 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Dif |
| CVE-2026-70933 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70934 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70935 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70936 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70937 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to |
| CVE-2026-70938 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70939 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70940 | Analyzed | 未確認 | CWE-269, CWE-306 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70941 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitabl |
| CVE-2026-70942 | Analyzed | 未確認 | CWE-200, CWE-269 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70943 | Analyzed | 未確認 | CWE-200, CWE-269 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70944 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70945 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitabl |
| CVE-2026-70946 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to |
| CVE-2026-70947 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vul |
| CVE-2026-70948 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vul |
| CVE-2026-70949 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.6. Easily exploitable |
| CVE-2026-70950 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70951 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Document Management). Supported versions that are affected are 17.0-26.6. Easily exploitable vuln |
| CVE-2026-70952 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70953 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Easily explo |
| CVE-2026-70954 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Easily explo |
| CVE-2026-70955 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Difficult to |
| CVE-2026-70956 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-70957 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-70958 | Analyzed | 未確認 | CWE-601 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-70959 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-70960 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70961 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-70962 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-70963 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-70964 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-70965 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-70966 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-70967 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-70968 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-70969 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70970 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. E |
| CVE-2026-70971 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-70972 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-70973 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 1 |
| CVE-2026-70974 | Analyzed | 未確認 | CWE-200, CWE-269 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to |
| CVE-2026-70975 | Analyzed | 未確認 | CWE-200, CWE-269 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-70976 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version |
| CVE-2026-70977 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version |
| CVE-2026-70978 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version |
| CVE-2026-70979 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version |
| CVE-2026-70980 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version |
| CVE-2026-70981 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version |
| CVE-2026-70982 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version |
| CVE-2026-70983 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version |
| CVE-2026-70984 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version |
| CVE-2026-70985 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version |
| CVE-2026-70986 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version |
| CVE-2026-70987 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version |
| CVE-2026-70988 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version |
| CVE-2026-70989 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version |
| CVE-2026-70990 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version |
| CVE-2026-70991 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version |
| CVE-2026-70992 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version |
| CVE-2026-70993 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version |
| CVE-2026-70994 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported versi |
| CVE-2026-70995 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported versi |
| CVE-2026-70996 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported versi |
| CVE-2026-70997 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is |
| CVE-2026-70998 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported versi |
| CVE-2026-70999 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is |
| CVE-2026-71000 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is |
| CVE-2026-71001 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is |
| CVE-2026-71002 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is |
| CVE-2026-71003 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is |
| CVE-2026-71004 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is |
| CVE-2026-71005 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is |
| CVE-2026-71006 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is |
| CVE-2026-71007 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is |
| CVE-2026-71008 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is |
| CVE-2026-71009 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is |
| CVE-2026-71010 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is |
| CVE-2026-71011 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is |
| CVE-2026-71012 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is |
| CVE-2026-71013 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-71014 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported versi |
| CVE-2026-71015 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported versi |
| CVE-2026-71016 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported versi |
| CVE-2026-71017 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported versi |
| CVE-2026-71018 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported versi |
| CVE-2026-71019 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Internal operations). The supported version that is |
| CVE-2026-71020 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported versi |
| CVE-2026-71021 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported versi |
| CVE-2026-71022 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Workbench). The supported version that is affected |
| CVE-2026-71023 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported versi |
| CVE-2026-71024 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 1 |
| CVE-2026-71025 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported versi |
| CVE-2026-71026 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported versi |
| CVE-2026-71027 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported versi |
| CVE-2026-71028 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported versi |
| CVE-2026-71029 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Difficult to exploit vu |
| CVE-2026-71030 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported versi |
| CVE-2026-71031 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported versi |
| CVE-2026-71032 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported versi |
| CVE-2026-71033 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported versi |
| CVE-2026-71034 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 1 |
| CVE-2026-71035 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 1 |
| CVE-2026-71036 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is |
| CVE-2026-71037 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is |
| CVE-2026-71038 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is |
| CVE-2026-71039 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version that is affected is 9.3.6. Easily exploitable vulnerab |
| CVE-2026-71040 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allo |
| CVE-2026-71041 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Gantt Chart). The supported version that is affected is 9.3.6. Difficult to exploit vulnerability |
| CVE-2026-71042 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: PGC / Excel Plugin). The supported version that is affected is 9.3.6. Easily exploitable vulnerab |
| CVE-2026-71043 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allo |
| CVE-2026-71044 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows |
| CVE-2026-71045 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allo |
| CVE-2026-71046 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allo |
| CVE-2026-71048 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily e |
| CVE-2026-71049 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily e |
| CVE-2026-7105 | Deferred | 未確認 | CWE-862 | The Xpro Addons plugin for WordPress is vulnerable to unauthorized creation of data due to a missing capability check on the `get_menu_content_editor()` function in all versions up |
| CVE-2026-71050 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily e |
| CVE-2026-71051 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily e |
| CVE-2026-71052 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Web Services Security). The supported version that is affected is 6.2.1. |
| CVE-2026-71053 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Web Services Security). The supported version that is affected is 6.2.1. |
| CVE-2026-71054 | Awaiting Analysis | 未確認 | CWE-770 | Vulnerability in Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 7u511. Easily exploitable vulnerability allows unauthenticated attacker w |
| CVE-2026-71055 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). The supported version that is affected is 12.2.1. |
| CVE-2026-71056 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search). Supported versions that are affected are 8.2.0.0.0, 12.2.1 |
| CVE-2026-71057 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.1.0. |
| CVE-2026-71058 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. |
| CVE-2026-71059 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API). Supported versions that are affected are 8.2.0.0.0 and 26.1.0.0.0. Easily explo |
| CVE-2026-71060 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to |
| CVE-2026-71061 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0. |
| CVE-2026-71062 | Analyzed | 未確認 | CWE-284 | Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Difficult to exploit vulnerability allows low privileged a |
| CVE-2026-71063 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploita |
| CVE-2026-71064 | Modified | 未確認 | CWE-284 | Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploita |
| CVE-2026-71065 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vuln |
| CVE-2026-71066 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Difficult to exploit v |
| CVE-2026-71067 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Easily exploitable vul |
| CVE-2026-71068 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Difficult to exploit v |
| CVE-2026-71069 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Difficult to exploit v |
| CVE-2026-71070 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Easily exploitable vul |
| CVE-2026-71071 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Easily exploitable vul |
| CVE-2026-71072 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Easily exploitable vul |
| CVE-2026-71073 | Analyzed | 未確認 | CWE-404 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allo |
| CVE-2026-71074 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 1.0.0-1.4.19 and 3.0.0-3.2.17. Easil |
| CVE-2026-71075 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Difficult to exploit v |
| CVE-2026-71076 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Easily exploitable vul |
| CVE-2026-71077 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Difficult to exploit v |
| CVE-2026-71078 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Difficult to exploit v |
| CVE-2026-71079 | Analyzed | 未確認 | CWE-284 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allo |
| CVE-2026-71080 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Difficult to exploit v |
| CVE-2026-71081 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Difficult to exploit v |
| CVE-2026-71082 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Difficult to exploit v |
| CVE-2026-71083 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Difficult to exploit v |
| CVE-2026-71084 | Analyzed | 未確認 | CWE-284 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allo |
| CVE-2026-71085 | Modified | 未確認 | CWE-200, CWE-269 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-71087 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Easily exploitable vul |
| CVE-2026-71088 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Difficult to exploit v |
| CVE-2026-71089 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Easily exploitable vul |
| CVE-2026-71090 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to |
| CVE-2026-71091 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-71092 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise FIN Lease Administration product of Oracle PeopleSoft (component: Lease Administration). The supported version that is affected is 9.2. |
| CVE-2026-71094 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Presentation Services). The supported version that is affected is 12. |
| CVE-2026-71095 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security). The supported version that is affected is 12.2 |
| CVE-2026-71096 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0. |
| CVE-2026-71097 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). The supported version that is affected is 26.01.0 |
| CVE-2026-71098 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). The supported version that is affected is 26.01.0 |
| CVE-2026-71099 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Answers). The supported version that is affected is 26. |
| CVE-2026-71100 | Analyzed | 未確認 | CWE-284 | Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerabili |
| CVE-2026-71101 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll Tax Issues). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi |
| CVE-2026-71102 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploita |
| CVE-2026-71103 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-71104 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle HRMS (Netherlands) product of Oracle E-Business Suite (component: Netherlands Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-71105 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to |
| CVE-2026-71106 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Opera Servlet). Supported versions that are affected are 5 |
| CVE-2026-71107 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Supported versions that are affected are 8.2.0.0.0 |
| CVE-2026-71108 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to |
| CVE-2026-71109 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-71110 | Modified | 未確認 | CWE-269, CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 1.0.0-1.4.18, 3.0.0-3.2.17 and 4.0.0 |
| CVE-2026-71111 | Modified | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Installer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easil |
| CVE-2026-71112 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2. Difficult to expl |
| CVE-2026-71113 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability a |
| CVE-2026-71114 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability a |
| CVE-2026-71115 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability a |
| CVE-2026-71116 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Difficult to exploit vulnerability |
| CVE-2026-71117 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to |
| CVE-2026-71118 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to |
| CVE-2026-71119 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to |
| CVE-2026-71120 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to |
| CVE-2026-71121 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-71122 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). The supported version that is affected is 26.01.0 |
| CVE-2026-71123 | Modified | 未確認 | CWE-269, CWE-352 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-71124 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authorization Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1 |
| CVE-2026-71125 | Analyzed | 未確認 | CWE-363 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability a |
| CVE-2026-71126 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Difficult to exploit vulnerability |
| CVE-2026-71127 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability a |
| CVE-2026-71128 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability a |
| CVE-2026-71129 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability a |
| CVE-2026-71130 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability a |
| CVE-2026-71131 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability a |
| CVE-2026-71132 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Difficult to exploit vulnerability |
| CVE-2026-71134 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability a |
| CVE-2026-71135 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability a |
| CVE-2026-71136 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability a |
| CVE-2026-71137 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability a |
| CVE-2026-71138 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability a |
| CVE-2026-71139 | Modified | 未確認 | CWE-770 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability a |
| CVE-2026-71140 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability a |
| CVE-2026-71141 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability a |
| CVE-2026-71142 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security Component). Supported versions that are affected are |
| CVE-2026-71143 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Third Party). Supported versions that are affected are 7.5.0, |
| CVE-2026-71144 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to |
| CVE-2026-71145 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to |
| CVE-2026-71146 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to |
| CVE-2026-71147 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to |
| CVE-2026-71148 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-71149 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to |
| CVE-2026-71150 | Analyzed | 未確認 | CWE-269, CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploi |
| CVE-2026-71151 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Difficult to exploit vulnerability |
| CVE-2026-71152 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17 and 4.0.0-4.4.1. Easily |
| CVE-2026-71153 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 1.0.0-1.4.19. Easily exploitable vuln |
| CVE-2026-71154 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulne |
| CVE-2026-71155 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vuln |
| CVE-2026-71156 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.18. Easily exploitable vuln |
| CVE-2026-71157 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17 and 4.0.0-4.4.1. Easily |
| CVE-2026-71158 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vuln |
| CVE-2026-71159 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vuln |
| CVE-2026-71160 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 1.0.0-1.4.18 and 3.0.0-3.2.17. Diffi |
| CVE-2026-71161 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vuln |
| CVE-2026-71162 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Difficult to exploit vu |
| CVE-2026-71164 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vuln |
| CVE-2026-71165 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vuln |
| CVE-2026-71166 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vuln |
| CVE-2026-71167 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulne |
| CVE-2026-71171 | Analyzed | 未確認 | CWE-78 | Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the RE |
| CVE-2026-71172 | Analyzed | 未確認 | CWE-918 | Dell Cloud Disaster Recovery, versions 20.2 and prior, contain a Server-Side Request Forgery (SSRF) vulnerability. A low privileged attacker with remote access could potentially ex |
| CVE-2026-71176 | Analyzed | 未確認 | CWE-89 | Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privilege |
| CVE-2026-71187 | Deferred | 未確認 | CWE-603 | The Ebyte device relies on client side authentication logic that can be reproduced by unauthenticated users. An attacker may generate valid authentication requests and bypass aut |
| CVE-2026-71190 | Awaiting Analysis | 未確認 | CWE-1333 | In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnerable to catastrophic backtracking (ReDoS). The "qdtext" pattern (?:[^"] |
| CVE-2026-71191 | Awaiting Analysis | 未確認 | CWE-863 | In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz-* headers are covered by the SigV4 signature on presigned URL requests. An attacker who obt |
| CVE-2026-71192 | Awaiting Analysis | 未確認 | CWE-863 | In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control headers (X-Copy-From, X-Copy-From-Account) from S3 API requests when s3_acl=true. An |
| CVE-2026-71193 | Awaiting Analysis | 未確認 | CWE-863 | In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone DB constraint) are scoped to the target pool only. An authenticated u |
| CVE-2026-71194 | Awaiting Analysis | 未確認 | CWE-669 | In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving record queries and NOTIFY requests. When two zones with the same name exist across |
| CVE-2026-71201 | Awaiting Analysis | 未確認 | CWE-863 | In OpenStack Ironic through 38.0.0, a project reader that makes a crafted request to Ironic can return Portgroups assigned to Nodes owned or leased by another project. |
| CVE-2026-71202 | Deferred | 未確認 | CWE-191 | The raster Rust crate's crop function (src/editor.rs) clamps the crop width/height against source dimensions but only clamps the offset_x/offset_y parameters against 0, never again |
| CVE-2026-71203 | Deferred | 未確認 | CWE-306 | changedetection.io's REST API resources are protected by an @auth.check_token decorator validating the caller's x-api-key header, except the Spec resource registered at /api/v1/ful |
| CVE-2026-71204 | Deferred | 未確認 | CWE-284 | changedetection.io's /settings save handler builds an update dict from form.data['application'] and blind-merges it into the stored application settings via .update. |
| CVE-2026-71205 | Deferred | 未確認 | CWE-307 | changedetection.io's /login route checks the submitted password against a single PBKDF2-HMAC-SHA256 hash with no per-IP or per-session rate limiting, failed-attempt counter, or loc |
| CVE-2026-71206 | Deferred | 未確認 | CWE-613 | Shiori's CheckToken function (internal/domains/auth.go) validates only the JWT's HMAC signature and returns the embedded claims.Account object unmodified, never re-fetching the acc |
| CVE-2026-71207 | Deferred | 未確認 | CWE-89 | The Stock-Inventory-Management-System application's login.php assigns raw username/password values to and builds its authentication query by directly concatenating those session va |
| CVE-2026-71208 | Deferred | 未確認 | CWE-918 | KubeSphere's cluster-controller reconciliation (pkg/utils/clusterclient/clusterclient.go, addCluster) processes every Cluster custom resource's connection configuration and immedia |
| CVE-2026-71209 | Deferred | 未確認 | CWE-22 | audiobookshelf's authentication-exemption check (server/routers/Auth.js) matches unauthenticated-allowed GET routes against req.path via a regex requiring a literal /items/:id/cove |
| CVE-2026-71210 | Deferred | 未確認 | CWE-367 | Mealie's AsyncSafeTransport SSRF guard (mealie/pkgs/safehttp/transport.py) resolves a target hostname once, checks the resolved IP against private-range rules, but then issues the |
| CVE-2026-71211 | Deferred | 未確認 | CWE-918 | MLflow's AI Gateway accepts an auth_config.api_base value when creating a gateway secret (mlflow/server/handlers.py, _create_gateway_secret) with no validation of scheme, host, or |
| CVE-2026-71212 | Deferred | 未確認 | CWE-88 | xidown (a yt-dlp/ffmpeg GUI wrapper) builds its yt-dlp command-line invocation (xidown/core/scanner.py and downloader.py) by appending the user-provided or scanned URL as a bare tr |
| CVE-2026-71213 | Deferred | 未確認 | CWE-307 | Typemill's login endpoint (POST /tm/login, ControllerWebAuth::login) performs no rate-limiting, failed-attempt counting, or account lockout when captcha is disabled, which is the d |
| CVE-2026-71214 | Deferred | 未確認 | CWE-306 | The Aerie/PlanDev sequencing-server's authorization middleware (sequencing-server/src/app.ts) derives the caller's Hasura session role via getHasuraSession, which prefers a session |
| CVE-2026-71215 | Deferred | 未確認 | CWE-22 | art-template's sub-template resolution logic (src/compile/adapter/resolve-filename.js), used by both the include and extend template directives, resolves the target file path via p |
| CVE-2026-71217 | Awaiting Analysis | 未確認 | CWE-20 | A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON with oversized numeric parameters, such as `parallel` and `len` |
| CVE-2026-71218 | Awaiting Analysis | 未確認 | CWE-789 | A flaw was found in iperf3. A remote unauthenticated attacker can exploit a vulnerability in the `JSON_read()` function, which accepts a peer-controlled message length and allocate |
| CVE-2026-71225 | Modified | 未確認 | CWE-330 | A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs (over 64 KiB) in stateful modes such as Counter (CTR) or Cipher Block Chaining (C |
| CVE-2026-71226 | Modified | 未確認 | CWE-416 | Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into c |
| CVE-2026-71227 | Modified | 未確認 | CWE-835 | A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output (AIO) interface. By reusing an AIO-enabled handle after a prior |
| CVE-2026-71231 | Deferred | 未確認 | CWE-89 | IOTSmartHome's gui/login.php checkCookie function builds an authentication query as SELECT * FROM users WHERE ID='<decoded lastLogin cookie>' after base64-decoding the client-suppl |
| CVE-2026-71232 | Deferred | 未確認 | CWE-94 | MacCMS10's admin template editor (application/admin/controller/Template.php) blocks dangerous PHP functions in template content via a blacklist regex, but the blacklist omitted exe |
| CVE-2026-71233 | Deferred | 未確認 | CWE-79 | InvoiceNinja v5-stable renders an invoice or quote's "terms" field in the client portal using Laravel Blade's raw output directive {!! ->terms !!} (resources/views/portal/ninja2020 |
| CVE-2026-71234 | Deferred | 未確認 | CWE-863 | Documize Community's attachment download route (domain/attachment/endpoint.go, Download function, registered via AddPublic with no auth middleware) accepts a query parameter and gr |
| CVE-2026-71235 | Deferred | 未確認 | CWE-94 | Magistrala's Rules Engine allows authenticated users to create rules with embedded Go or Lua scripts executed server-side when IoT messages arrive. The Lua script engine (re/lua.go |
| CVE-2026-71236 | Deferred | 未確認 | CWE-79 | Grocy's API request-body parser (controllers/Api/BaseApiController.php, GetParsedAndFilteredRequestBody) purifies incoming field values with HTMLPurifier, then manually reverses HT |
| CVE-2026-71237 | Deferred | 未確認 | CWE-89 | Miantang/IoT-PHP's index.php implements a POST /userlogin route that reads the password directly from ['pwd'] with no sanitization and concatenates it into a raw SQL string: mysql_ |
| CVE-2026-71238 | Deferred | 未確認 | CWE-798 | DjangoCRM ships with its Django SECRET_KEY hardcoded directly in the committed webcrm/settings.py rather than read from an environment variable. Since this key is used for session |
| CVE-2026-71239 | Deferred | 未確認 | CWE-1336 | DjangoCRM's massmail module renders user-controlled EmlMessage fields (subject, content) through Django's Template constructor with no sanitization, in at least three locations: me |
| CVE-2026-71240 | Deferred | 未確認 | CWE-601 | DjangoCRM's toggle_default_sorting view is the only route in common/urls.py that is not wrapped in login_required or staff_member_required, and it redirects to a caller-supplied ne |
| CVE-2026-71241 | Deferred | 未確認 | CWE-306 | Book-Management-System's Flask API endpoints /student, /record, /books, /find_stu_book, and /find_not_return_book are missing the @login_required decorator that protects sibling ro |
| CVE-2026-71242 | Deferred | 未確認 | CWE-639 | Crater's NotePolicy checks only a blanket Bouncer ability (manage-all-notes / view-all-notes) with no company-ownership comparison, unlike InvoicePolicy and other sibling policies |
| CVE-2026-71243 | Deferred | 未確認 | CWE-78 | The backmeup npm package assembles shell command strings by directly concatenating its option values (name, source, destination, filter) - e.g. cmd = "mkdir -p " + path.join(info.d |
| CVE-2026-71244 | Deferred | 未確認 | CWE-918 | Paperless-ngx's MailAccountViewSet.test action, when called with an existing account's ID and a masked password field, reuses the stored password, account_type, refresh_token, and |
| CVE-2026-71245 | Rejected | 未確認 | Rejected reason: Red Hat CNA-LR concluded that this CVE is not valid. | |
| CVE-2026-71246 | Deferred | 未確認 | CWE-918 | Pixelfed's SearchController (behind the auth middleware) accepts a URL via its remote-search parameters and fetches it server-side through ActivityPubFetchService, whose validateUr |
| CVE-2026-71247 | Deferred | 未確認 | CWE-863 | Documenso's sign-field-with-token.ts, used by the live document-signing UI, allows a recipient with the ASSISTANT role to fetch and complete fields belonging to any later-or-equal- |
| CVE-2026-71248 | Deferred | 未確認 | CWE-89 | Inventory-Management-System-PHP's login.php constructs its authentication query via direct string concatenation of raw POST parameters: = "select * from user where email = '' and p |
| CVE-2026-71249 | Deferred | 未確認 | CWE-79 | 299Ko's public contact form (plugin/contact/controllers/ContactController.php, home) sets raw POST field values (name, firstname, email, message) into the page template with no san |
| CVE-2026-71250 | Deferred | 未確認 | CWE-918 | Firefly III's webhook URL validator (IsValidWebhookUrl.php) filters most private/reserved IPv4 ranges but contains an explicit early-return that allows any resolved address in 127. |
| CVE-2026-71251 | Deferred | 未確認 | CWE-639 | Akaunting's shared download route (app/Http/Controllers/Common/Uploads.php::download, reachable at uploads/{id}/download behind only generic auth middleware) fetched the requested |
| CVE-2026-71252 | Deferred | 未確認 | CWE-862 | toner-management's admin state-changing handlers (add.php, edit.php, delete.php under admin/toners, admin/toner-brands, admin/printers, and related admin subdirectories) executed I |
| CVE-2026-71254 | Deferred | 未確認 | CWE-787 | nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbus server-side handle_read_file_record function (FC 0x14, Read File Record) in nanomodbus.c. The function vali |
| CVE-2026-71255 | Deferred | 未確認 | CWE-787 | nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbus client-side recv_read_device_identification_res function (FC 0x2B/MEI 0x0E, Read Device Identification) in |
| CVE-2026-71256 | Deferred | 未確認 | CWE-125 | nanoMODBUS through v1.23.0 contains an out-of-bounds stack read leading to a wild-pointer write in nmbs_read_device_identification_basic / recv_read_device_identification_res in na |
| CVE-2026-71257 | Modified | 未確認 | CWE-770 | Apache Wicket enforces the upload limits configured on a form or upload field while parsing a multipart request with Apache Commons FileUpload. If the request body has already been |
| CVE-2026-71259 | Deferred | 未確認 | CWE-184 | ESPHome through 2026.7.0-dev contains an operator-precedence bug in the cv.url validator in esphome/config_validation.py. Because binds tighter than , any file: URI passes validati |
| CVE-2026-71260 | Deferred | 未確認 | CWE-522 | ESPHome through 2026.7.0-dev discloses plaintext passwords via its web_server component. In WebServer::text_json_ (esphome/components/web_server/web_server.cpp), a text entity conf |
| CVE-2026-71261 | Deferred | 未確認 | CWE-190 | dr_libs dr_wav.h (all versions through current master) contains an integer overflow in W64 CUE chunk metadata parsing. In drwav__metadata_process_chunk, a stage-1 capacity estimate |
| CVE-2026-71262 | Deferred | 未確認 | CWE-306 | IoTSharp BlobStorageController.cs lacks the [Authorize] attribute applied to every other controller in the application (DevicesController, CustomersController, TenantsController, e |
| CVE-2026-71263 | Deferred | 未確認 | CWE-787 | The LINUXTCP port of FreeModbus contains an off-by-one bounds check in xMBPortTCPPool (demo/LINUXTCP/port/porttcp.c). The check uses a strict greater-than comparison instead of gre |
| CVE-2026-71264 | Deferred | 未確認 | CWE-862 | WLED's GET /json/cfg endpoint (registered in wled00/wled_server.cpp) calls serveJson with no settings-PIN check, unlike the /edit endpoint which explicitly checks correctPIN, discl |
| CVE-2026-71265 | Deferred | 未確認 | CWE-121 | Domoticz's MochadTCP::MatchLine handler for MOCHAD_RFSEC messages (hardware/MochadTCP.cpp) copies network-received data from the up-to-1028-byte m_mochadbuffer into a fixed 50-byte |
| CVE-2026-71266 | Deferred | 未確認 | CWE-121 | tinyobjloader-c's tinyobj_parse_and_index_mtl_file (tinyobj_loader_c.h) reads each line of a .mtl material file into a fixed 4096-byte stack buffer via memcpy(linebuf, p, p_len), g |
| CVE-2026-71267 | Deferred | 未確認 | CWE-121 | microtar's mtar_write_file_header and mtar_write_dir_header functions (src/microtar.c) copy a caller-supplied entry name into the 100-byte field of a stack-allocated mtar_header_t |
| CVE-2026-71268 | Deferred | 未確認 | CWE-22 | OpenPLC Runtime v3's compile_program function (webserver/openplc.py) parses directives from uploaded Structured Text (.st) program files and writes the referenced content to with n |
| CVE-2026-71269 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-71270 | Deferred | 未確認 | CWE-918 | Stirling-PDF's POST /api/v1/convert/url/pdf endpoint (ConvertWebsiteToPDF.java) was not updated with the CustomHtmlSanitizer/SsrfProtectionService SSRF protections that were added |
| CVE-2026-71271 | Deferred | 未確認 | CWE-918 | Memos' webhook URL validation, isReservedIP (internal/webhook/validate.go), checks a candidate IP against a reservedCIDRs list that omits 0.0.0.0/8 and never calls ip.IsUnspecified |
| CVE-2026-71272 | Deferred | 未確認 | CWE-367 | Memos' webhook dispatch function safeDialContext (internal/webhook/webhook.go) resolves the target hostname via net.DefaultResolver.LookupHost and validates the resulting IPs again |
| CVE-2026-71273 | Deferred | 未確認 | CWE-352 | OpenBK7231T's /cfg_wifi_set endpoint (src/httpserver/http_fns.c) accepts configuration changes via a plain GET request with no CSRF token. If the parameter is absent from the reque |
| CVE-2026-71274 | Deferred | 未確認 | CWE-79 | OpenBK7231T's CHANNEL_SetLabel (src/cmnds/cmd_channels.c) stores channel labels received via the MQTT SetChannelLabel command using strdup with no HTML sanitization. CHANNEL_GetLab |
| CVE-2026-71275 | Deferred | 未確認 | CWE-79 | OpenBK7231T's http_fn_ota_exec() (src/httpserver/http_fns.c) reflects the `host` query parameter directly into an HTML response via hprintf255(request, "<h3>OTA requested for %s!</ |
| CVE-2026-71276 | Deferred | 未確認 | CWE-89 | Magistrala (formerly Mainflux)'s message-readers API reads a value from the HTTP query string (readers/api/http/transport.go) with no validation and interpolates it directly into r |
| CVE-2026-71277 | Deferred | 未確認 | CWE-287 | rust-iot-platform's AuthToken request-guard implementation (api/src/main.rs) only checks whether the Authorization HTTP header is present, and never validates its value against any |
| CVE-2026-71278 | Deferred | 未確認 | CWE-94 | rust-iot-platform allows creating a "calc rule" via POST /calc-rule/create (api/src/controller/calc_rule_router.rs) containing an arbitrary field. This route does not take the Auth |
| CVE-2026-71279 | Deferred | 未確認 | CWE-22 | Zigbee2MQTT's ExternalJSExtension.getFilePath (lib/extension/externalJS.ts) joins a parameter received via an MQTT message (topic zigbee2mqtt/bridge/request/extension/save) into th |
| CVE-2026-71280 | Deferred | 未確認 | CWE-918 | go-shiori's DownloadBookmark (internal/core/download.go) fetches a caller-supplied bookmark URL using a plain http.Client with no custom DialContext or destination-IP validation (n |
| CVE-2026-71281 | Deferred | 未確認 | CWE-502 | Hugging Face peft's LoRA-GA and CorDA initialization modules (src/peft/tuners/lora/corda.py lines ~102 and ~163, and src/peft/tuners/lora/loraga.py line ~101) call torch.load on co |
| CVE-2026-71282 | Deferred | 未確認 | CWE-89 | ChirpStack's SQLite-backend device tag filtering (chirpstack/src/storage/device.rs, in both get_count and list) interpolates the user-supplied tag KEY directly into a raw SQL fragm |
| CVE-2026-71283 | Deferred | 未確認 | CWE-22 | Fledge's backup-restore upload handler, upload_backup (python/fledge/services/core/api/backup_restore.py), calls tarfile.extractall(temp_path) on an admin-uploaded tar archive with |
| CVE-2026-71284 | Deferred | 未確認 | CWE-78 | Fledge's backup-restore upload handler, upload_backup (python/fledge/services/core/api/backup_restore.py), takes the first extracted tar member's filename (tar_file_names[0]) and b |
| CVE-2026-71285 | Deferred | 未確認 | CWE-79 | Uptime Kuma's Matomo analytics integration (server/analytics/matomo-analytics.js) injects the admin-configurable Matomo value as a bare, unquoted JavaScript expression inside a <sc |
| CVE-2026-71286 | Deferred | 未確認 | CWE-1336 | The render-template component of ember-dynamic-render-template (addon/components/render-template.js) passes its property directly into Ember/Glimmer's compileTemplate (from @ember/ |
| CVE-2026-71287 | Deferred | 未確認 | CWE-89 | Cacti's sanitize_sql_column (lib/functions.php) sanitizes user-supplied ORDER BY column names using the regex . Because this allowlist retains letters, digits, underscore, parenthe |
| CVE-2026-71288 | Deferred | 未確認 | CWE-89 | Koha's guided report builder (reports/guided_reports.pl) reads the CGI parameter and, for each value, a dynamically-named parameter, and concatenates both directly into an SQL ORDE |
| CVE-2026-71289 | Deferred | 未確認 | CWE-306 | The NASA-AMMOS Asynchronous Network Management System (ANMS) reference implementation's default docker-compose.yml publishes the amp-manager service's REST API directly to the host |
| CVE-2026-71290 | Analyzed | 未確認 | CWE-295 | Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5.4 or newer. HostnameVerificationPolicy#BUILTIN setting has no effect when used with the async ver |
| CVE-2026-71291 | Deferred | 未確認 | CWE-1336 | Bolt CMS renders content field values through Twig's full application-level Environment with no SandboxExtension registered anywhere in the codebase. In src/Entity/Field.php, getTw |
| CVE-2026-71292 | Deferred | 未確認 | CWE-89 | Subrion CMS's admin grid sorting helper, _gridGetSorting in includes/classes/ia.base.controller.admin.php, whitelists the (ASC/DESC) request parameter via in_array, but falls back |
| CVE-2026-71293 | Deferred | 未確認 | CWE-200 | Statamic CMS's user-augmentation resolver, AugmentedUser::get in src/Auth/AugmentedUser.php, contains an explicit case for the handle that returns the user's raw two-factor recover |
| CVE-2026-71294 | Deferred | 未確認 | CWE-502 | Cotonti CMS's Comments plugin deserializes user-supplied data without restricting the classes that may be instantiated. In plugins/comments/controllers/actions/CreateAction.php, a |
| CVE-2026-71300 | Undergoing Analysis | 未確認 | CWE-20 | Improper input validation vulnerability in Apache Camel Atmosphere Websocket component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, fro |
| CVE-2026-71303 | Deferred | 未確認 | CWE-918 | Lemur manages TLS certificate creation. Prior to 1.9.3, _validate_acme_url enforced ACME_DIRECTORY_HOST_ALLOWLIST when an authority was created, but PUT /api/1/authorities/ passed |
| CVE-2026-71307 | Deferred | 未確認 | CWE-862 | Lemur manages TLS certificate creation. Prior to 1.9.3, GET /api/1/destinations and GET /api/1/destinations/ relied only on authentication while sibling write handlers required adm |
| CVE-2026-71308 | Deferred | 未確認 | CWE-639, CWE-862 | Lemur manages TLS certificate creation. From 0.5.0 until 1.9.3, certificate create, upload, and edit requests accepted replaces[] or replacements identifiers that AssociatedCertifi |
| CVE-2026-71309 | Awaiting Analysis | 未確認 | CWE-22 | rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.40.0 until 1.75.0, rclone serve restic does not correctly rejec |
| CVE-2026-71310 | Awaiting Analysis | 未確認 | CWE-400, CWE-770 | rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.0, the shared HTTP CONNECT helper in lib/proxy/http.go p |
| CVE-2026-71311 | Awaiting Analysis | 未確認 | CWE-93 | rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.0, a valid but nondefault FTP filename encoding in backe |
| CVE-2026-71312 | Awaiting Analysis | 未確認 | CWE-78 | rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to v1.75.0, rclone interpolates remote SFTP paths into PowerShel |
| CVE-2026-71313 | Awaiting Analysis | 未確認 | CWE-22 | rclone is a command-line program to sync files and directories to and from different cloud storage providers. From v1.51.0 until v1.75.0, the local backend in backend/local/local.g |
| CVE-2026-71314 | Deferred | 未確認 | CWE-1284, CWE-400, CWE-770, CWE-789 | Nuxt is an open-source web development framework for Vue.js. From 3.1.0 until 3.21.10 and 4.5.1, an unauthenticated attacker can use a server island v-for prop, including vforToArr |
| CVE-2026-71315 | Deferred | 未確認 | CWE-178, CWE-863 | Nuxt is an open-source web development framework for Vue.js. From 3.21.7 until 3.21.10 and 4.5.1, mixed-case routeRules keys can fail to match case-folded lookups when router.optio |
| CVE-2026-71316 | Deferred | 未確認 | CWE-524, CWE-862 | Nuxt is an open-source web development framework for Vue.js. From 4.4.0 until 4.5.1, runtime cache:nuxt:payload entries for /<page>/_payload.json can be returned before route middl |
| CVE-2026-71317 | Deferred | 未確認 | CWE-862 | Lemur manages TLS certificate creation. Prior to 1.9.3, POST /api/1/authorities with type=subca did not require AuthorityPermission on the parent authority when ADMIN_ONLY_AUTHORIT |
| CVE-2026-71318 | Deferred | 未確認 | CWE-20 | Nuxt is an open-source web development framework for Vue.js. From 3.1.0 until 3.21.10 and 4.5.1, an attacker can supply a top-level `as` prop to the /__nuxt_island/ endpoint and dr |
| CVE-2026-71319 | Deferred | 未確認 | CWE-306, CWE-94 | Nuxt is an open-source web development framework for Vue.js. Prior to 3.3.1, Nuxt DevTools (development mode only) exposes a bidirectional RPC channel over the Vite HMR WebSocket v |
| CVE-2026-71320 | Deferred | 未確認 | CWE-74, CWE-94 | Nuxt is an open-source web development framework for Vue.js. From 3.4.0 until 3.21.10 and 4.5.1, an attacker can inject a template key through /__nuxt_island/ props into a dynamic |
| CVE-2026-71321 | Deferred | 未確認 | CWE-407, CWE-770 | Nuxt is an open-source web development framework for Vue.js. From 3.1.0 until 3.21.10 and 4.5.1, the internal island renderer endpoint `/__nuxt_island/...` decodes and hashes attac |
| CVE-2026-71322 | Deferred | 未確認 | CWE-862 | Lemur manages TLS certificate creation. Prior to 1.9.3, CertificateExport placed its CertificatePermission ownership check inside the plugin.requires_key branch for POST /api/1/cer |
| CVE-2026-71324 | Analyzed | 未確認 | CWE-444 | Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.53, 3.6.24, and 3.7.9, Traefik's default HTTP reverse proxy forwards a plain HTTP/2 or HTTP/3 CONNECT |
| CVE-2026-71325 | Analyzed | 未確認 | CWE-653, CWE-863 | Traefik is an open-source edge router that makes publishing services a fun and easy experience. Prior to 2.11.54, 3.6.25, and 3.7.10, cross-namespace @kubernetescrd references are |
| CVE-2026-71326 | Analyzed | 未確認 | CWE-287 | Traefik is an open source HTTP reverse proxy and load balancer. From 3.6.11 until 3.6.25 and 3.7.10, Traefik's BasicAuth middleware in pkg/middlewares/auth/basic_auth.go deduplicat |
| CVE-2026-71327 | Analyzed | 未確認 | CWE-694 | Traefik is an open source HTTP reverse proxy and load balancer. From 3.0.0 until 3.6.25 and 3.7.10, Traefik's Kubernetes Gateway API provider in pkg/provider/kubernetes/gateway/htt |
| CVE-2026-71331 | Modified | 未確認 | CWE-122, CWE-190 | Integer overflow or wraparound in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-71360 | Analyzed | 未確認 | CWE-400 | CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerabi |
| CVE-2026-71362 | Analyzed | 掲載 | CWE-863 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated acc |
| CVE-2026-71364 | Awaiting Analysis | 未確認 | CWE-22 | A path traversal vulnerability was found in AWX's project archive extraction. The project_archive action plugin extracts zip and tar archive members by joining the project director |
| CVE-2026-71365 | Awaiting Analysis | 未確認 | CWE-918 | A server-side request forgery (SSRF) vulnerability was found in AWX's webhook status callback mechanism. When processing GitHub pull request webhooks, AWX extracts the status callb |
| CVE-2026-71366 | Awaiting Analysis | 未確認 | CWE-918 | A server-side request forgery (SSRF) vulnerability was found in multiple AWX notification backends. The webhook, Mattermost, Rocket.Chat, and Grafana notification backends use noti |
| CVE-2026-71368 | Deferred | 未確認 | CWE-79 | F-RevoCRM contains a cross-site scripting vulnerability. If a user views a crafted page while logged in to the affected product, unintended operations may be performed. |
| CVE-2026-71378 | Analyzed | 未確認 | CWE-352 | ResourceIsolationRequestCycleListener protects a Wicket application against cross-site request forgery by rejecting requests that a resource isolation policy judges to come from an |
| CVE-2026-71381 | Awaiting Analysis | 未確認 | CWE-863 | Adobe Genuine Software Integrity Service on Windows is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could levera |
| CVE-2026-71382 | Analyzed | 未確認 | CWE-787 | Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this iss |
| CVE-2026-71383 | Analyzed | 未確認 | CWE-863 | is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures an |
| CVE-2026-71384 | Analyzed | 未確認 | CWE-863 | is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures an |
| CVE-2026-71386 | Analyzed | 未確認 | CWE-79 | is affected by a Cross-site Scripting (XSS) vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerabi |
| CVE-2026-71387 | Analyzed | 未確認 | CWE-863 | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this |
| CVE-2026-71389 | Analyzed | 未確認 | CWE-191 | CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit this |
| CVE-2026-71390 | Analyzed | 未確認 | CWE-20 | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to b |
| CVE-2026-71391 | Deferred | 未確認 | CWE-193 | GNU Emacs for Android contains an off-by-one error in the gvar table parser in src/sfnt.c. The shared-coordinate index boundary check in sfnt_vary_simple_glyph() and sfnt_vary_comp |
| CVE-2026-71392 | Deferred | 未確認 | CWE-190 | GNU Emacs for Android is vulnerable to an integer overflow in the sfnt_read_cmap_format_12() function in src/sfnt.c. When processing a crafted TrueType font file, an unguarded addi |
| CVE-2026-71393 | Deferred | 未確認 | CWE-190 | GNU Emacs for Android is vulnerable to an integer overflow in sfnt_read_name_table() in src/sfnt.c. The function computes an allocation size using a 32-bit length value from a True |
| CVE-2026-71394 | Deferred | 未確認 | CWE-1284 | GNU Emacs for Android improperly validates the table header input in sfnt_read_table_directory() in src/sfnt.c. Due to an incorrect comparison variable in the read-length check, a |
| CVE-2026-71396 | Deferred | 未確認 | CWE-798 | Bendix EC80 Brake ECU uses hard-coded credentials, which could allow an attacker to disable automatic traction control. |
| CVE-2026-71398 | Analyzed | 未確認 | CWE-863 | Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker c |
| CVE-2026-71399 | Analyzed | 未確認 | CWE-120 | Adobe XD is affected by a Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerabili |
| CVE-2026-71401 | Awaiting Analysis | 未確認 | CWE-191 | An integer underflow was found in the DHCPv4 packet capture code of wicked. ni_capture_inspect_udp_header() in src/capture.c does not verify that the IP total length field (ip_len) |
| CVE-2026-71402 | Awaiting Analysis | 未確認 | CWE-125, CWE-130 | An out-of-bounds read was found in the DHCPv4 packet capture code of wicked. ni_capture_inspect_udp_header() in src/capture.c reports the IP total length as the payload length inst |
| CVE-2026-71407 | Modified | 未確認 | CWE-121 | A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection an |
| CVE-2026-71408 | Modified | 未確認 | CWE-770 | A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions may allow attacker |
| CVE-2026-71415 | Deferred | 未確認 | CWE-862 | Kirby is an open-source content management system. From 5.0.0 until 5.5.2, Kirby's REST API chunk upload handler in src/Api/Upload.php did not run the relevant upload authorization |
| CVE-2026-71417 | Deferred | 未確認 | CWE-639 | Lemur manages TLS certificate creation. Prior to 1.9.3, POST /api/1/certificates/upload allowed a non-read-only user to create a duplicate row using another certificate body, autho |
| CVE-2026-71424 | Deferred | 未確認 | CWE-200, CWE-863 | Onyx is an open-source AI platform. Prior to 3.1.10, 3.2.14, and 4.0.0, Onyx's GET /api/mcp/servers and GET /api/mcp/servers/persona/{persona_id} endpoints expose another user's OA |
| CVE-2026-71428 | Deferred | 未確認 | CWE-601, CWE-918 | The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more. From 0.4.7 until |
| CVE-2026-71430 | Awaiting Analysis | 未確認 | CWE-617 | node-re2 provides RE2 regular expression bindings for Node.js. Prior to version 1.25.1, the WrappedRE2::Replace function built its replacement result and passed it to V8 using ToLo |
| CVE-2026-71433 | Awaiting Analysis | 未確認 | CWE-200, CWE-863 | LangGraph Checkpoint Postgres and SQLite Checkpoint are the Postgres and SQLite implementations of LangGraph's checkpoint saver. Prior to 3.1.1, the langgraph-checkpoint-postgres a |
| CVE-2026-71434 | Deferred | 未確認 | CWE-434 | Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.74.3 and 6.24.2, public frontend forms did not enforce the file upload restrictions that the Contr |
| CVE-2026-71435 | Deferred | 未確認 | CWE-79 | Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.74.3 and 6.24.2, the default ("automagic") form notification email rendered user-submitted values |
| CVE-2026-71436 | Awaiting Analysis | 未確認 | CWE-1325, CWE-835 | Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. From version 10.6.0 until 10.9.8 and 11.16.1, Mermaid XY Charts are vulnerab |
| CVE-2026-71437 | Awaiting Analysis | 未確認 | CWE-1321 | Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. From version 11.5.0 until 11.16.1, Mermaid Architecture Diagrams are vulnera |
| CVE-2026-71438 | Awaiting Analysis | 未確認 | CWE-1321 | Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Prior to 10.9.8 and 11.16.1, Mermaid's configuration setters (mermaid.initia |
| CVE-2026-71439 | Awaiting Analysis | 未確認 | CWE-1322, CWE-606 | Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. From version 11.6.0 until 11.16.1, Mermaid Radar Diagrams allow arbitrary la |
| CVE-2026-71441 | Analyzed | 未確認 | CWE-125 | Illustrator is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitiv |
| CVE-2026-71442 | Analyzed | 未確認 | CWE-191 | CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit this |
| CVE-2026-71443 | Analyzed | 未確認 | CWE-20 | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerabilit |
| CVE-2026-71444 | Analyzed | 未確認 | CWE-191 | CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit this |
| CVE-2026-71445 | Deferred | 未確認 | CWE-79 | AIL Framework contained a reflected cross-site scripting vulnerability in the /tag/add_tags endpoint. When an error occurred while processing a tag operation, the application retur |
| CVE-2026-71446 | Deferred | 未確認 | CWE-79 | AIL Framework contains a stored cross-site scripting vulnerability in the crawler domain view. Crawled URLs were embedded directly into the JavaScript onclick handler used to displ |
| CVE-2026-71447 | Deferred | 未確認 | CWE-79 | AIL Project contains a stored cross-site scripting vulnerability in the translation controls displayed for chat messages and forum posts. The affected templates inserted message a |
| CVE-2026-71467 | Awaiting Analysis | 未確認 | CWE-287 | A flaw was found in search-v2-api. The authentication middleware in the affected component unconditionally skips authentication when a request includes an `Upgrade: websocket` head |
| CVE-2026-71468 | Awaiting Analysis | 未確認 | CWE-266 | A flaw was found in acm-search-v2-api-rhel9. When the `getFederationConfig` function refreshes its cache, it improperly reuses a user's bearer token for all subsequent federated re |
| CVE-2026-71469 | Awaiting Analysis | 未確認 | CWE-770 | A flaw was found in search-v2-api. An unauthenticated attacker can exploit this by sending requests with unique random bearer tokens. Each unique token creates a permanent entry in |
| CVE-2026-71470 | Awaiting Analysis | 未確認 | CWE-913 | A flaw was found in the search-v2-operator. This vulnerability allows a privileged user, specifically a Custom Resource (CR) editor, to manipulate Search CR fields such as imageOve |
| CVE-2026-71471 | Awaiting Analysis | 未確認 | CWE-829 | A flaw was found in acm-search-v2-rhel9. An attacker with administrative privileges on the hub cluster, specifically with patch access to the Search Custom Resource (CR), could exp |
| CVE-2026-71472 | Awaiting Analysis | 未確認 | CWE-78 | A flaw was found in acm-search-v2-rhel9. This vulnerability allows an authenticated attacker, such as a hub administrator or a Search Custom Resource (CR) editor, to inject malicio |
| CVE-2026-71473 | Awaiting Analysis | 未確認 | CWE-915 | A flaw was found in the `search-v2-operator` component. A user with specific administrative permissions on a managed cluster can exploit a vulnerability that allows them to inject |
| CVE-2026-71474 | Modified | 未確認 | CWE-532 | A flaw was found in insights-client. When the application receives a non-200 response, it logs the request headers, which can include the cloud.openshift.com pull-secret token. A l |
| CVE-2026-71475 | Modified | 未確認 | CWE-22 | A flaw was found in insights-client. A compromised managed cluster, referred to as a 'spoke', can inject unencoded data into the Insights API URL path. This occurs because the Clus |
| CVE-2026-71476 | Awaiting Analysis | 未確認 | CWE-22, CWE-59 | Nx is a monorepo solution for TypeScript and polyglot codebases. From version 20.8.0 until 22.7.7 and 23.0.2, the Nx self-hosted HTTP remote cache extracts downloaded cache artifac |
| CVE-2026-71477 | Deferred | 未確認 | CWE-278 | mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.7.1, release tar archives record mise/bin/mise with user and group ID 1001 and packaging/standalone/in |
| CVE-2026-71478 | Awaiting Analysis | 未確認 | CWE-692, CWE-79, CWE-86 | league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 1.5.0 until 2.9.0, the AttributesExtension's href and src unsafe-link filter can be bypassed |
| CVE-2026-71479 | Deferred | 未確認 | CWE-190, CWE-682 | New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to 1.0.0-rc.18, user-controlled image n, video seconds and duration, |
| CVE-2026-71485 | Deferred | 未確認 | CWE-290 | Centrifugo is an open-source scalable real-time messaging server. Prior to 6.9.0, Centrifugo copies the client-controlled protocol.ConnectRequest.headers map through OnClientConnec |
| CVE-2026-71486 | Analyzed | 未確認 | CWE-400, CWE-770 | vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the /v1/completions/derender and /v1/chat/completions/derender endpoints accept caller-supplied |
| CVE-2026-71488 | Awaiting Analysis | 未確認 | CWE-1050, CWE-407 | league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 0.6.0 until 2.9.0, specially crafted Markdown lines can cause the parser to have quadratic ti |
| CVE-2026-71491 | Deferred | 未確認 | CWE-400, CWE-407 | sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, group_comments in sqlparse/engine/grouping.py repeatedly rescans comment-only statements before the MAX_G |
| CVE-2026-71492 | Deferred | 未確認 | CWE-22 | Banks generates meaningful LLM prompts using a simple template language. Prior to version 2.4.5, DirectoryPromptRegistry.set() in src/banks/registries/directory.py interpolates att |
| CVE-2026-71493 | Deferred | 未確認 | CWE-22, CWE-59 | Infracost provides cloud cost intelligence for engineers, AI coding agents, and CI/CD. Prior to 0.10.45, the readFile, pathExists, isDir, and matchPaths template functions in inter |
| CVE-2026-71494 | Deferred | 未確認 | CWE-522 | Infracost provides cloud cost intelligence for engineers, AI coding agents, and CI/CD. Prior to 0.10.45, internal/hcl/remote_variables_loader.go and related Terraform Cloud, remote |
| CVE-2026-71497 | Awaiting Analysis | 未確認 | CWE-79 | jsoup is a Java library for working with real-world HTML. From 1.14.3 until 1.23.1, jsoup's HTML parser could incorrectly handle a malformed tag name ending in a control character, |
| CVE-2026-71498 | Awaiting Analysis | 未確認 | CWE-125 | node-re2 provides RE2 regular expression bindings for Node.js. Prior to version 1.26.1, passing a Buffer whose final bytes form a truncated (incomplete) multi-byte UTF-8 sequence c |
| CVE-2026-71502 | Deferred | 未確認 | CWE-1336, CWE-79 | CTI-Transmute contains a stored cross-site scripting vulnerability caused by insufficient neutralization of Vue template expression delimiters in server-rendered user-controlled da |
| CVE-2026-71503 | Deferred | 未確認 | CWE-79 | Dolibarr before 24.0.0 contains a reflected cross-site scripting vulnerability in the extra fields administration template where the type request parameter is echoed without JavaSc |
| CVE-2026-71504 | Deferred | 未確認 | CWE-862, CWE-915 | Dolibarr before 24.0.0 contains an improper authorization vulnerability in the Members REST API that allows attackers with only member-creation rights to reset the password of any |
| CVE-2026-71505 | Deferred | 未確認 | CWE-639 | Dolibarr before 24.0.0 contains a broken object-level authorization vulnerability in the REST API third-party site account write routes that allows authenticated attackers with thi |
| CVE-2026-71506 | Deferred | 未確認 | CWE-863 | Dolibarr before 24.0.0 contains an improper authorization vulnerability in the payments REST API delete endpoint that allows authenticated attackers with invoice-deletion rights to |
| CVE-2026-71507 | Deferred | 未確認 | CWE-639 | Dolibarr before 24.0.0 contains a broken object-level authorization vulnerability in the REST API company bank account write routes that allows authenticated attackers with third-p |
| CVE-2026-71508 | Deferred | 未確認 | CWE-862 | Dolibarr before 24.0.0 contains an improper authorization vulnerability in the user REST API update endpoint that allows attackers with user-write rights to modify payroll fields b |
| CVE-2026-71509 | Deferred | 未確認 | CWE-862 | Dolibarr before 24.0.0 contains an improper authorization vulnerability in the expense report REST API update endpoint that allows authenticated attackers with expense-creation rig |
| CVE-2026-71510 | Deferred | 未確認 | CWE-863 | Dolibarr before 24.0.0 contains a SQL injection vulnerability in the users REST API that allows authenticated attackers with user-read rights to extract sensitive data by splicing |
| CVE-2026-71511 | Deferred | 未確認 | CWE-522 | Dolibarr before 24.0.0 contains a sensitive data exposure vulnerability in the Members REST API that allows authenticated attackers with member-read rights to retrieve bcrypt passw |
| CVE-2026-71513 | Analyzed | 未確認 | CWE-502 | NLTK before 3.10.3 contains a remote code execution vulnerability in AllowlistUnpickler that validates only the pickle module string and not the global name, allowing attackers to |
| CVE-2026-71514 | Analyzed | 未確認 | CWE-22 | NLTK 3.9.4 through 3.10.2 contains a path traversal vulnerability in CrubadanCorpusReader. _load_lang_ngrams joins the corpus root with crubadan_code, the column-0 value read from |
| CVE-2026-71518 | Deferred | 未確認 | CWE-863 | Typemill before 2.26.0 contains an authorization bypass vulnerability in the media file download route that allows unauthenticated attackers to access restricted files by submittin |
| CVE-2026-71539 | Deferred | 未確認 | CWE-367 | n8n is an open source workflow automation platform. Prior to 1.123.64, 2.29.8, and 2.30.1, the Git node clone operation allows an authenticated workflow user to swap a validated di |
| CVE-2026-71551 | Deferred | 未確認 | CWE-78 | Super Productivity is an advanced todo list app with integrated timeboxing and time tracking capabilities. Prior to 18.13.0, the EXEC IPC handler in electron/ipc-handlers/exec.ts a |
| CVE-2026-71553 | Deferred | 未確認 | CWE-1321 | ApostropheCMS is an open-source Node.js content management system. In 4.32.0 and earlier, PATCH /api/v1/article/:id accepts the inherited path toString.call and passes it through t |
| CVE-2026-71554 | Deferred | 未確認 | CWE-444 | h2 is a pure-Python implementation of a HTTP/2 protocol stack. Versions up to and including 4.4.0 accept request header blocks containing more than one Host header, and forward eve |
| CVE-2026-71555 | Deferred | 未確認 | CWE-1022 | PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton. From 2.1.0 until 4.14.1, PILOS does not send a Cross-Origin-Opener-Policy response header, so |
| CVE-2026-71556 | Awaiting Analysis | 未確認 | CWE-59 | go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, worktree operations (including checkout, status, and add) resolve symbolic |
| CVE-2026-71557 | Awaiting Analysis | 未確認 | CWE-22 | go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, reference names are not sanitized before being used to construct on-disk p |
| CVE-2026-71558 | Analyzed | 未確認 | CWE-502, CWE-843 | Heap type confusion vulnerability in Apache Fory C++ deserialization. This issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0. A crafted input payload can bypass type |
| CVE-2026-71559 | Analyzed | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in the Go implementation of Apache Fory allows an attacker to cause a denial of service by supplying crafted data containing malform |
| CVE-2026-71560 | Analyzed | 未確認 | CWE-125, CWE-502 | Out-of-bounds Read vulnerability in Apache Fory C++ deserialization. This issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0 when deserializing structs containing tag |
| CVE-2026-71564 | Analyzed | 未確認 | CWE-787 | Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this is |
| CVE-2026-71566 | Awaiting Analysis | 未確認 | CWE-306 | FakeFish handles incoming credentials by passing them down to scripts. This works for real hardware because in the end it's up to the BMC to validate them. However, KubeVirt reli |
| CVE-2026-71567 | Awaiting Analysis | 未確認 | CWE-78 | In openshift-metal3/fakefish there is a repeated pattern in some of the scripts where shell variables are injected without quoting them either into command lines or into manifest |
| CVE-2026-71570 | Deferred | 未確認 | CWE-284 | Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11 - A backend operator granted access scoped to `com_icagenda` only could enumerate Jo |
| CVE-2026-71571 | Deferred | 未確認 | CWE-89 | Joomla Extension - icagenda.com - Authenticated SQL injection via unescaped numeric filter in iCagenda < 2.0.0-4.0.11 - Backend operators with permissions to access iCagenda could |
| CVE-2026-71572 | Analyzed | 未確認 | CWE-93 | Joomla! Core - [20260801] - Response header injection in download views in Joomla 3.0.0-5.4.7, 6.0.0-6.1.2 - Lack of output processing allowed a header injection in the multiple do |
| CVE-2026-71573 | Analyzed | 未確認 | CWE-93 | Joomla! Core - [20260802] - Improper CORS origin validation in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper implementation prevented configured CORS origins from being properly va |
| CVE-2026-71574 | Analyzed | 未確認 | CWE-284 | Joomla! Core - [20260803] - Inconsistent ACL checks for mutating webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows unauthorized users to per |
| CVE-2026-71576 | Awaiting Analysis | 未確認 | CWE-345 | A flaw was found in multicluster-global-hub. The manager component improperly validates the source identity of incoming CloudEvents on Kafka status topics. A remote attacker, after |
| CVE-2026-71577 | Awaiting Analysis | 未確認 | CWE-522 | A flaw was found in multicluster-global-hub. During a ManagedClusterMigration, the system incorrectly grants all managed hubs read access to a shared communication topic. This allo |
| CVE-2026-71675 | Deferred | 未確認 | CWE-401 | An issue in Open5GS v.2.7.0 allows a remote attacker to cause a denial of service via the ngap_send_to_nas() function in src/amf/ngap-path.c |
| CVE-2026-71676 | Deferred | 未確認 | CWE-122 | Buffer Overflow vulnerability in Open5GS v.2.7.0 allows a remote attacker to cause a denial of service via the NAS 5GS decoder chain, triggered when the message type byte of a NAS |
| CVE-2026-71693 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: n | |
| CVE-2026-71694 | Deferred | 未確認 | CWE-352 | An issue in Berkeley Out-of-Order Machine (BOOM) / BoomTile RTL benchmark v1.2 2d08d0d8b4563212175212f9db0e69f6e68c9619 allows a remote attacker to execute arbitrary code via the C |
| CVE-2026-71832 | Deferred | 未確認 | CWE-369 | Aria2 version 1.37.0 and below is affected by a Divide By Zero issue in src/bittorrent_helper.cc, which allows a remote malicious user to cause a Denial of Service |
| CVE-2026-71845 | Modified | 未確認 | CWE-532 | A flaw was found in insights-client. The setDefault() function logs the value of every environment variable it processes, including CCX_TOKEN, a bearer credential used in disconnec |
| CVE-2026-71846 | Modified | 未確認 | CWE-250 | A flaw was found in insights-client. The component's ServiceAccount is bound to a ClusterRole granting cluster-wide secrets get, list, and watch permissions, while the code only re |
| CVE-2026-71847 | Awaiting Analysis | 未確認 | CWE-416 | Ruby JSON is a JSON implementation for Ruby. From 2.20.0 until 2.21.2, Ruby's JSON native C extension clears the consumed JSON::ResumableParser input buffer but leaves state.start, |
| CVE-2026-71848 | Deferred | 未確認 | CWE-407 | Hono is a Web application framework that provides support for any JavaScript runtime. From 4.12.0 to 4.12.33, the languageDetector middleware is vulnerable to algorithmic complexit |
| CVE-2026-71849 | Deferred | 未確認 | CWE-200 | Hono is a Web application framework that provides support for any JavaScript runtime. From 4.7.0 to 4.12.33, the Proxy Helper proxy() function in hono/proxy does not remove respons |
| CVE-2026-71850 | Deferred | 未確認 | CWE-488 | Hono is a Web application framework that provides support for any JavaScript runtime. From 3.8.0 to 4.12.33, memo() from hono/jsx retains the result of a server side render and reu |
| CVE-2026-71851 | Deferred | 未確認 | CWE-331, CWE-334, CWE-338 | crypto-js is a JavaScript library of crypto standards. Versions of crypto-js prior to 4.0.0 generate randomness in CryptoJS.lib.WordArray.random() using a custom variation of the M |
| CVE-2026-71852 | Analyzed | 未確認 | CWE-834 | pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause long runtimes and large memory consumption when pypdf/_font.py function Font._coll |
| CVE-2026-71858 | Awaiting Analysis | 未確認 | CWE-345, CWE-693, CWE-78 | Notepad++ is a free and open-source source code editor. Prior to 8.9.7, macros loaded from an attacker-controlled shortcuts.xml bypass the HMAC validation applied to UserDefinedCom |
| CVE-2026-71862 | Deferred | 未確認 | CWE-200, CWE-522 | Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. From |
| CVE-2026-71864 | Deferred | 未確認 | CWE-116, CWE-94, CWE-95 | Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.21.0, a double quote in a header parameter name is emitted into |
| CVE-2026-71865 | Deferred | 未確認 | CWE-116, CWE-94, CWE-95 | Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.21.0, a double quote in a query parameter name is emitted into |
| CVE-2026-71866 | Deferred | 未確認 | CWE-89, CWE-95 | Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. From version 8.19.0 until 8.21.0, a double quote in a schema property name |
| CVE-2026-71867 | Deferred | 未確認 | CWE-89, CWE-95 | Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.21.0, a single quote in a schema property name is emitted into |
| CVE-2026-71868 | Deferred | 未確認 | CWE-1336, CWE-94 | Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.21.0, a ${...} expression or backtick in an enum default is emi |
| CVE-2026-71869 | Deferred | 未確認 | CWE-116, CWE-1336, CWE-94 | Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.21.0, a ${...} expression or backtick in an array item default |
| CVE-2026-71870 | Analyzed | 未確認 | CWE-400 | pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause large memory consumption when pypdf/_cmap.py function parse_bfrange parses unusual |
| CVE-2026-71871 | Deferred | 未確認 | CWE-116, CWE-1336, CWE-94 | Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.21.0, a ${...} expression or backtick in a header parameter def |
| CVE-2026-71878 | Awaiting Analysis | 未確認 | CWE-306 | Missing authentication in initial setup functionality left exposed after initial setup is completed in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authen |
| CVE-2026-71879 | Awaiting Analysis | 未確認 | CWE-288 | Missing authentication in initial setup functionality left exposed until first reboot in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attack |
| CVE-2026-71880 | Awaiting Analysis | 未確認 | CWE-1336 | Interpretation of untrusted input in template engine in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to access server-side files a |
| CVE-2026-71904 | Deferred | 未確認 | CWE-78 | Multiple DrayTek VigorAP models contain a command injection vulnerability in the tr069TestInform function. The vulnerability is caused by insufficient filtering of dangerous charac |
| CVE-2026-71905 | Deferred | 未確認 | CWE-78 | Multiple DrayTek VigorAP models contain a command injection vulnerability in the ExportSettings function. The vulnerability is caused by insufficient filtering of the backupkey, ba |
| CVE-2026-71906 | Deferred | 未確認 | CWE-78 | Multiple DrayTek VigorAP models contain a command injection vulnerability in the setLan function. The vulnerability is caused by insufficient validation of the lanIp and lanNetmask |
| CVE-2026-71907 | Deferred | 未確認 | CWE-78 | Multiple DrayTek VigorAP models contain a command injection vulnerability in the setcamset function. The vulnerability is caused by insufficient filtering of the selectSlaves field |
| CVE-2026-71908 | Deferred | 未確認 | CWE-78 | Multiple DrayTek VigorAP models contain a command injection vulnerability in the mesh_start_speed_test function. The vulnerability is caused by insufficient sanitization of the mes |
| CVE-2026-71909 | Deferred | 未確認 | CWE-78 | Multiple DrayTek VigorAP models contain a command injection vulnerability in the InquierTime function. The vulnerability is caused by insufficient filtering of the time field befor |
| CVE-2026-71910 | Deferred | 未確認 | CWE-78 | Multiple DrayTek VigorAP models contain a command injection vulnerability in the apautotest function. The vulnerability is caused by insufficient validation of the CMD0, CMD3, and |
| CVE-2026-71911 | Deferred | 未確認 | CWE-120 | Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the setLan function. The vulnerability is caused by missing length checks during memory copy operations i |
| CVE-2026-71912 | Deferred | 未確認 | CWE-120 | Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the apautotest function. The vulnerability is caused by missing length checks during memory copy operatio |
| CVE-2026-71913 | Deferred | 未確認 | CWE-78 | Multiple DrayTek VigorAP models contain a command injection vulnerability in the upload_settings.cgi interface. The vulnerability is caused by insufficient filtering before the res |
| CVE-2026-71914 | Deferred | 未確認 | CWE-78 | Multiple DrayTek VigorAP models contain a command injection vulnerability in the dray_apm component. The vulnerability is caused by insufficient validation of UDP message content a |
| CVE-2026-71915 | Deferred | 未確認 | CWE-78 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the jsonstatus function. The vulnerability is caused by insufficient filtering of the usescript, us |
| CVE-2026-71916 | Deferred | 未確認 | CWE-78 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the commandTable function. The vulnerability is caused by incomplete filtering of dangerous charact |
| CVE-2026-71917 | Deferred | 未確認 | CWE-78 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the pingtrace function. The vulnerability is caused by insufficient validation of the host field be |
| CVE-2026-71918 | Deferred | 未確認 | CWE-78 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the webBackupAction function. The vulnerability is caused by insufficient filtering of the option, |
| CVE-2026-71919 | Deferred | 未確認 | CWE-78 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the sysreboot function. The vulnerability is caused by insufficient filtering of the config, act, p |
| CVE-2026-71920 | Deferred | 未確認 | CWE-476 | Multiple DrayTek VigorSwitch models contain a null pointer dereference vulnerability in the formlogout function. The vulnerability is caused by missing checks for an empty or absen |
| CVE-2026-71921 | Deferred | 未確認 | CWE-78 | Multiple DrayTek VigorSwitch models contain a pre-authentication command injection vulnerability in the setget.cgi interface. The vulnerability is caused by insufficient filtering |
| CVE-2026-71922 | Deferred | 未確認 | CWE-476 | Multiple DrayTek VigorSwitch models contain a pre-authentication null pointer dereference vulnerability in the setget.cgi interface. The vulnerability is caused by missing validati |
| CVE-2026-71923 | Deferred | 未確認 | CWE-78 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the auth_set function. The vulnerability is caused by insufficient filtering of the username and pa |
| CVE-2026-71924 | Deferred | 未確認 | CWE-78 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the getVid function. The vulnerability is caused by insufficient filtering of the username and pass |
| CVE-2026-71925 | Deferred | 未確認 | CWE-78 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the getDetail function. The vulnerability is caused by insufficient filtering of the username and p |
| CVE-2026-71926 | Deferred | 未確認 | CWE-78 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevice function. The vulnerability is caused by insufficient sanitization of the username, p |
| CVE-2026-71927 | Deferred | 未確認 | CWE-78 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the rebDevice function. The vulnerability is caused by insufficient filtering of the username and p |
| CVE-2026-71928 | Deferred | 未確認 | CWE-78 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the fdftDevice function. The vulnerability is caused by insufficient filtering of the username and |
| CVE-2026-71929 | Deferred | 未確認 | CWE-78 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevProto function. The vulnerability is caused by insufficient filtering of the username and |
| CVE-2026-71930 | Deferred | 未確認 | CWE-78 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setTime function. The vulnerability is caused by insufficient filtering of the username and pas |
| CVE-2026-71931 | Deferred | 未確認 | CWE-78 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the tftp_upgrade function. The vulnerability is caused by insufficient filtering before the filenam |
| CVE-2026-71932 | Deferred | 未確認 | CWE-22 | Multiple DrayTek VigorSwitch models contain a directory traversal vulnerability in the getSyslogFile function. The vulnerability is caused by insufficient validation of the option |
| CVE-2026-71933 | Deferred | 未確認 | CWE-862 | Multiple DrayTek VigorSwitch models contain unauthorized operation vulnerabilities in multiple syslog functions. The vulnerability is caused by missing authorization checks. A remo |
| CVE-2026-71934 | Deferred | 未確認 | CWE-120 | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the pingtrace function. The vulnerability is caused by missing length checks when the host, count, an |
| CVE-2026-71935 | Deferred | 未確認 | CWE-120 | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the webBackupAction function. The vulnerability is caused by repeated string concatenation of the pat |
| CVE-2026-71936 | Deferred | 未確認 | CWE-120 | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the sysreboot function. The vulnerability is caused by unsafe concatenation of split valueN data into |
| CVE-2026-71937 | Deferred | 未確認 | CWE-120 | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the poe_schedule_profile function. The vulnerability is caused by repeated concatenation of the start |
| CVE-2026-71938 | Deferred | 未確認 | CWE-120 | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the switch_lan_gvrp function. The vulnerability is caused by unsafe copying of the portList field int |
| CVE-2026-71939 | Deferred | 未確認 | CWE-120 | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the acl_general_setup Add ACE function. The vulnerability is caused by copying the name field into a |
| CVE-2026-71940 | Deferred | 未確認 | CWE-120 | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the acl_general_setup Edit ACE function. The vulnerability is caused by copying the name field into a |
| CVE-2026-71941 | Deferred | 未確認 | CWE-120 | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the diag_logmail function. The vulnerability is caused by concatenating multiple smtpReceiver email a |
| CVE-2026-71942 | Deferred | 未確認 | CWE-120 | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the mail_mailalert function. The vulnerability is caused by concatenating multiple smtpReceiver email |
| CVE-2026-71943 | Deferred | 未確認 | CWE-78 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevNet function. The vulnerability is caused by insufficient filtering of the username and p |
| CVE-2026-71944 | Deferred | 未確認 | CWE-78 | D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formLtefotaUpgradeQuecte |
| CVE-2026-71945 | Deferred | 未確認 | CWE-78 | D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formLtefotaUpgradeFiboco |
| CVE-2026-71946 | Deferred | 未確認 | CWE-78 | D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formPingDiagnosticRun in |
| CVE-2026-71947 | Deferred | 未確認 | CWE-78 | D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formTracerouteDiagnostic |
| CVE-2026-71948 | Deferred | 未確認 | CWE-78 | D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formDebugDiagnosticRun i |
| CVE-2026-71949 | Deferred | 未確認 | CWE-78 | D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formUSSDSetup interface. |
| CVE-2026-71950 | Deferred | 未確認 | CWE-78 | D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formSmsManage interface. |
| CVE-2026-71951 | Deferred | 未確認 | CWE-78 | D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formIMEISetup interface. |
| CVE-2026-71952 | Deferred | 未確認 | CWE-78 | D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formPinManageSetup inter |
| CVE-2026-71953 | Deferred | 未確認 | CWE-78 | D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formNtp interface. A rem |
| CVE-2026-71954 | Deferred | 未確認 | CWE-78 | D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formL2tpv3ConfigSetup in |
| CVE-2026-71955 | Deferred | 未確認 | CWE-78 | D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a command injection vulnerability in the /boafrm/formWsc interface. A remote att |
| CVE-2026-71956 | Deferred | 未確認 | CWE-78 | D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a command injection vulnerability in the app.cgi interface. A remote attacker ca |
| CVE-2026-71957 | Deferred | 未確認 | CWE-120 | D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the app.cgi interface. A remote attacker can |
| CVE-2026-71958 | Deferred | 未確認 | CWE-120 | D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the quicksetup.cgi interface. A remote attack |
| CVE-2026-71959 | Awaiting Analysis | 未確認 | CWE-862 | Bitwarden Server before 2026.7.2 does not verify that the caller is a member of the organization identified in a POST /collect request body, allowing any authenticated user to writ |
| CVE-2026-71960 | Deferred | 未確認 | CWE-798 | Cudy WR3000 2.0 running firmware before 2.5.24 contains a hard-coded JWT HMAC signing secret vulnerability in the Mosquitto MQTT broker's authentication plugin that allows unauthen |
| CVE-2026-71961 | Deferred | 未確認 | CWE-78 | Cudy WR3000 2.0 running firmware before 2.5.24 contains an OS command injection vulnerability that allows authenticated attackers to execute arbitrary OS commands with root privile |
| CVE-2026-71962 | Analyzed | 未確認 | CWE-862 | Flowise versions 2.2.4 through 3.1.4 contain a missing authorization vulnerability in the POST /api/v1/openai-assistants-file/download endpoint that allows unauthenticated attacker |
| CVE-2026-71964 | Deferred | 未確認 | CWE-59 | CyberPanel 2.4.3, fixed in commit eca0c3c, contains an arbitrary file read vulnerability in the file manager component that allows authenticated attackers to read sensitive system |
| CVE-2026-71965 | Deferred | 未確認 | CWE-345 | CyberPanel 2.4.3, fixed in commit eca0c3c, contains an authenticated remote code execution vulnerability in the remote backup feature that allows authenticated attackers to gain ro |
| CVE-2026-71966 | Deferred | 未確認 | CWE-78 | CyberPanel 2.4.3, fixed in commit eca0c3c, contains an authenticated command injection vulnerability in the remote backup transfer feature that allows authenticated attackers to ex |
| CVE-2026-71967 | Awaiting Analysis | 未確認 | CWE-476 | OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Widevine pseudo-TA open_session handler that allows Normal World clients |
| CVE-2026-71968 | Awaiting Analysis | 未確認 | CWE-362, CWE-416 | OP-TEE OS through 4.10.0, fixed in commit 8794043, contains a use-after-free vulnerability in the Trusted Application loader that allows attackers with the ability to load a signed |
| CVE-2026-71969 | Awaiting Analysis | 未確認 | CWE-124, CWE-787 | OP-TEE OS through 4.10.0, fixed in commit 7b8b494, contains a buffer underwrite vulnerability in the RSA NOPAD encrypt and decrypt operations within the mbedTLS software backend an |
| CVE-2026-71979 | Deferred | 未確認 | CWE-121 | INDI (Instrument Neutral Distributed Interface) indiserver through 2.2.4.2, fixed in commit 96bbd7f, contains a stack buffer overflow vulnerability that allows unauthenticated remo |
| CVE-2026-71980 | Deferred | 未確認 | CWE-125 | Belledonne Communications bcg729 through 1.1.2 contains an out-of-bounds read vulnerability in the decodeSIDframe() function in src/cng.c that allows unauthenticated network-adjace |
| CVE-2026-71982 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-71983 | Deferred | 未確認 | CWE-78 | MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the wps.cgi interface that allows remote attackers to execute arbitrary commands by |
| CVE-2026-71984 | Deferred | 未確認 | CWE-78 | MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the urlfilter function that allows remote attackers to execute arbitrary commands on |
| CVE-2026-71985 | Deferred | 未確認 | CWE-78 | MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the accesscontrol function that allows remote attackers to execute arbitrary command |
| CVE-2026-71986 | Deferred | 未確認 | CWE-78 | MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the dmz function that allows remote attackers to execute arbitrary commands on the a |
| CVE-2026-71987 | Deferred | 未確認 | CWE-78 | MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the alg function that allows remote attackers to execute arbitrary commands on the a |
| CVE-2026-71988 | Deferred | 未確認 | CWE-78 | MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the portFw function that allows remote attackers to execute arbitrary commands on th |
| CVE-2026-71989 | Deferred | 未確認 | CWE-78 | MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the porTrigger function that allows remote attackers to execute arbitrary commands o |
| CVE-2026-71990 | Deferred | 未確認 | CWE-78 | MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function used for SSH configuration that allows remote attackers to ex |
| CVE-2026-71991 | Deferred | 未確認 | CWE-78 | MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function used for Telnet configuration that allows remote attackers to |
| CVE-2026-71992 | Deferred | 未確認 | CWE-78 | MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the macfilter function that allows remote attackers to execute arbitrary commands on |
| CVE-2026-71993 | Deferred | 未確認 | CWE-78 | MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the openvpn function that allows remote attackers to execute arbitrary commands on t |
| CVE-2026-72001 | Deferred | 未確認 | CWE-639 | Pangolin before 1.22.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access any protected resource by supplying an attacker-controlled UR |
| CVE-2026-72003 | Received | 未確認 | CWE-191 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cyw: fix heap overflow on a short auth frame brcmf_notify_auth_frame_rx() takes the frame leng |
| CVE-2026-72004 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix memory leak in ieee80211_register_hw() If kmemdup() fails while copying supported band str | |
| CVE-2026-72005 | Received | 未確認 | CWE-404 | In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00: avoid full teardown before work setup in probe rt2x00lib_probe_dev() uses the full rt2x00lib_rem |
| CVE-2026-72006 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: free mlx5_st_idx_data on final dealloc Workloads that repeatedly allocate and release mkeys carrying | |
| CVE-2026-72007 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx: Fix i.MX8MP VC8000E power up sequence Per errata[1]: ERR050531: VPU_NOC power down handshake ma | |
| CVE-2026-72008 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: Fix possible nullptr KP in HWV cleanup/on-check Should probe fail for HW_VOTER type power | |
| CVE-2026-72009 | Received | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSI The MIPI DSI and CSI domains share control |
| CVE-2026-72010 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed Creating a child cpuset where cpuset.me | |
| CVE-2026-72011 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/diag: Add missing array_index_nospec() call to memtop_get_page_count() 'level' is user space controlled a | |
| CVE-2026-72012 | Received | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Call synchronize_rcu() when unregistering This ensures that any RCU readers traversing the in |
| CVE-2026-72013 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: riscv: Prevent NULL pointer dereference in machine_kexec_prepare() A NULL pointer dereference issue is noticed | |
| CVE-2026-72014 | Received | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: drbd: reject data replies with an out-of-range payload size recv_dless_read() receives a P_DATA_REPLY from a p |
| CVE-2026-72015 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list A pseudo-locked group's RMID is freed w | |
| CVE-2026-72016 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cpu/hotplug: Fix NULL kobject warning in cpuhp_smt_enable() On arm64, when booting with `maxcpus` greater than | |
| CVE-2026-72017 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: macb: drop in-flight Tx SKBs on close The MACB driver has since forever leaked the outgoing SKBs that hav | |
| CVE-2026-72018 | Received | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: dibs: loopback: validate offset and size in move_data() The loopback move_data() performs a memcpy into the re |
| CVE-2026-72019 | Received | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: macsec: don't read an unset MAC header in macsec_encrypt() macsec_encrypt() reads the Ethernet header via eth_ |
| CVE-2026-72020 | Received | 未確認 | CWE-457 | In the Linux kernel, the following vulnerability has been resolved: ipvs: reset full ip_vs_seq structs in ip_vs_conn_new Commit 9a05475cebdd ("ipvs: avoid kmem_cache_zalloc in ip |
| CVE-2026-72021 | Received | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: ipvs: use parsed transport offset in SCTP state lookup set_sctp_state() reads the SCTP chunk header again in o |
| CVE-2026-72022 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: llc: fix SAP refcount leak in llc_ui_autobind() llc_ui_autobind() opens a SAP after choosing a dynamic LSAP. l | |
| CVE-2026-72023 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix SQB pointer leak on init failure otx2_init_hw_resources() initializes SQ aura and pool resou | |
| CVE-2026-72024 | Received | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: mac802154: remove interfaces with RCU list deletion Queue wake, stop, and disable paths walk local->interfaces |
| CVE-2026-72025 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/monwriter: Reject buffer reuse with different data length When data buffers are reused, e.g. for interval | |
| CVE-2026-72026 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: irqchip/irq-riscv-imsic-early: Fix fwnode leak on state setup failure imsic_early_acpi_init() allocates a firm | |
| CVE-2026-72027 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/compaction: handle free_pages_prepare() properly in compaction_free() free_pages_prepare() can fail but com | |
| CVE-2026-72028 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: riscv: probes: save original sp in rethook trampoline Reading a word from the stack in a kretprobe crashes a r | |
| CVE-2026-72029 | Received | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: bound device offsets in the MUX downlink decoder mux_dl_adb_decode() walks a chain of aggrega |
| CVE-2026-72030 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Reject an invalid concurrent positioning ranges count ata_dev_config_cpr() takes the number | |
| CVE-2026-72031 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Add NOLPM quirk for PNY CS900 1TB SSD The PNY CS900 1TB SSD (Phison PS3111-S11, DRAM-less) d | |
| CVE-2026-72032 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, fix matcher leak on resize target setup failure hws_bwc_matcher_move() allocates a replacement | |
| CVE-2026-72033 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: orangefs: keep the readdir entry size 64-bit in fill_from_part() fill_from_part() computes the size of a direc | |
| CVE-2026-72034 | Received | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: fhandle: reject detached mounts in capable_wrt_mount() The recent fhandle RCU fix moved the mount namespace ca |
| CVE-2026-72035 | Received | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked When taprio's software p |
| CVE-2026-72036 | Received | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked multiq_dequeue() takes a |
| CVE-2026-72037 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Initialize eth_syslock spinlock before use lan743x_hardware_init() calls pci11x1x_strap_get_stat | |
| CVE-2026-72038 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: liquidio: fix BAR resource leak on PF number failure If cn23xx_get_pf_num() fails, the function returns w | |
| CVE-2026-72039 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp() If the allocation of fp[i].tpa_info fails, the error | |
| CVE-2026-72040 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipmi: fix refcount leak in i_ipmi_request() When a caller provides a `supplied_recv` message to i_ipmi_request | |
| CVE-2026-72041 | Received | 未確認 | CWE-664 | In the Linux kernel, the following vulnerability has been resolved: espintcp: use sk_msg_free_partial to fix partial send sk_msg_free_partial() ensures consistency of the skmsg a |
| CVE-2026-72042 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix user refcount underflow in event delivery ipmi_alloc_recv_msg(user) takes the temporary user referen | |
| CVE-2026-72043 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix missing dirty page tracking in {pte,pmd}_wrprotect() When hardware page table walker (PTW) is e | |
| CVE-2026-72044 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-72045 | Received | 未確認 | CWE-862 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF rvu_mbox_handler_lmtst_tbl_setup() uses req->ba |
| CVE-2026-72046 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: gve: fix header buffer corruption with header-split and HW-GRO The DQO RX datapath programs a per-buffer-queue | |
| CVE-2026-72047 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit ca8210_test_int_driver_write() and ca8210_test_i | |
| CVE-2026-72048 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ieee802154: ca8210: fix cas_ctl leak on spi_async failure ca8210_spi_transfer() allocates cas_ctl with kzalloc | |
| CVE-2026-72049 | Received | 未確認 | CWE-862 | In the Linux kernel, the following vulnerability has been resolved: ieee802154: admin-gate legacy LLSEC dump operations In net/ieee802154/netlink.c, the legacy IEEE802154_NL fami |
| CVE-2026-72050 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Free BPID bitmap on setup failure nix_setup_bpids() allocates bp->bpids with rvu_alloc_bitmap(), | |
| CVE-2026-72051 | Received | 未確認 | CWE-862 | In the Linux kernel, the following vulnerability has been resolved: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink ip6_tnl_changelink() operates on at |
| CVE-2026-72052 | Received | 未確認 | CWE-862 | In the Linux kernel, the following vulnerability has been resolved: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink ip6gre_changelink() and ip6erspan_chang |
| CVE-2026-72053 | Received | 未確認 | CWE-862 | In the Linux kernel, the following vulnerability has been resolved: net: ipip: require CAP_NET_ADMIN in the device netns for changelink ipip_changelink() operates on at most two |
| CVE-2026-72054 | Received | 未確認 | CWE-862 | In the Linux kernel, the following vulnerability has been resolved: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink vti_changelink() operates on at most two |
| CVE-2026-72055 | Received | 未確認 | CWE-862 | In the Linux kernel, the following vulnerability has been resolved: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink vti6_changelink() operates on at most t |
| CVE-2026-72056 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: ena: clean up XDP TX queues when regular TX setup fails create_queues_with_size_backoff() creates XDP TX | |
| CVE-2026-72057 | Received | 未確認 | CWE-662 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: preserve tc_skb_cb across defragmentation tcf_ct_handle_fragments() calls nf_ct_handle_frag |
| CVE-2026-72058 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: ixp4xx_hss: fix duplicate HDLC netdev allocation ixp4xx_hss_probe() allocates two HDLC netdevs. The first | |
| CVE-2026-72059 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: destroy DMA pool on CLDMA late init failure t7xx_cldma_late_init() creates md_ctrl->gpd_dmapo | |
| CVE-2026-72060 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: icssg: guard PA stat lookups icssg_ndo_get_stats64() unconditionally calls emac_get_stat_by | |
| CVE-2026-72061 | Received | 未確認 | CWE-862 | In the Linux kernel, the following vulnerability has been resolved: net: sit: require CAP_NET_ADMIN in the device netns for changelink ipip6_changelink() operates on at most two |
| CVE-2026-72062 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: gpio: mt7621: avoid corruption of shared interrupt trigger state The bank-shared fields like 'rising' and 'fal | |
| CVE-2026-72063 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: gpio: tegra: do not call pinctrl for GPIO direction tegra_gpio_direction_input() and tegra_gpio_direction_outp | |
| CVE-2026-72064 | Received | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: net: mana: Sync page pool RX frags for CPU MANA allocates RX buffers from page pool fragments when frag_count |
| CVE-2026-72065 | Received | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: net: mana: Validate the packet length reported by the NIC Validate the packet length reported in the RX CQE be |
| CVE-2026-72066 | Received | 未確認 | CWE-120 | In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Bound hotplug states sysfs output states_show() adds CPU hotplug state names into a single sysfs |
| CVE-2026-72067 | Received | 未確認 | CWE-754 | In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Preserve per instance callback errors cpuhp_invoke_callback() unwinds earlier callbacks for the |
| CVE-2026-72068 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu() update_rlimit_cpu() converts the RLIMIT_CPU va | |
| CVE-2026-72069 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() rt_spin_unlock() releases the RCU protection |
| CVE-2026-72070 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() lbtf_free_adapter() calls timer_delete(&priv->com | |
| CVE-2026-72071 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracing/user_events: Fix use-after-free in user_event_mm_dup() user_event_mm_dup() walks the parent mm's enabl | |
| CVE-2026-72072 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete When an offloaded MACsec RX SC is delete |
| CVE-2026-72073 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: fix use-after-free on probe failure The vub300 driver lifetime-manages its controller state using | |
| CVE-2026-72074 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix type confusion in CDC union descriptor parsing The driver currently trusts the bMasterInt | |
| CVE-2026-72075 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix race condition in reset_device sysfs callback The ims_pcu_reset_device() sysfs callback c | |
| CVE-2026-72076 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging The debug logging in ims_pcu_irq() unco | |
| CVE-2026-72077 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix firmware leak in async update The firmware object was not being released if validation fa | |
| CVE-2026-72078 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - validate control endpoint type The driver currently assumes that the first endpoint of the co | |
| CVE-2026-72079 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix use-after-free and double-free in disconnect ims_pcu_disconnect() only intended to perfor | |
| CVE-2026-72080 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Fix use-after-free during unmount During unmount or failure teardown all mon_data structures that |
| CVE-2026-72081 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: elx: efct: Fix I/O leak on unsupported additional CDB efct_dispatch_fcp_cmd() allocates an efct_io befor | |
| CVE-2026-72082 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: elx: efct: Fix refcount leak in efct_hw_io_abort() When efct_hw_reqtag_alloc() fails in efct_hw_io_abort | |
| CVE-2026-72083 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE core_scsi3_emulate_pro_register_and_mov |
| CVE-2026-72084 | Received | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: Bound PR-OUT TransportID parsing to the received buffer core_scsi3_decode_spec_i_port() and core |
| CVE-2026-72085 | Received | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it scsiback_get_pend_req() obtains a c |
| CVE-2026-72086 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: xen: scsiback: Free the command tag on the TMR submit-failure path scsiback_device_action() obtains a co | |
| CVE-2026-72087 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup() The memory allocated for mboxq using mempool_ | |
| CVE-2026-72088 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path If phys_disk->in_reset is set, the function returns di | |
| CVE-2026-72089 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Reject firmware log with size smaller than header fw_log_from_bo() validates the tracing buffer he | |
| CVE-2026-72090 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Use caller client for debug BO sync amdxdna_drm_sync_bo_ioctl() looks up args->handle in the io | |
| CVE-2026-72091 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject user command submission without a command BO amdxdna_drm_submit_execbuf() passes the use | |
| CVE-2026-72092 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject command submission on devices without a submit op amdxdna_cmd_submit() calls xdna->dev_i | |
| CVE-2026-72093 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix use-after-free in amdxdna_gem_dmabuf_mmap() When vm_insert_pages() fails, the error path ca | |
| CVE-2026-72094 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dma-buf: dma-fence: Fix potential NULL pointer dereference The commit mentioned in the fixes tag below introdu | |
| CVE-2026-72095 | Received | 未確認 | CWE-170 | In the Linux kernel, the following vulnerability has been resolved: dma-fence: Make dma_fence_dedup_array() robust against 0-count input dma_fence_dedup_array() returns 1 when ca |
| CVE-2026-72096 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dm-verity: make error counter atomic The error counter "v->corrupted_errs" was not atomic, thus it could be su | |
| CVE-2026-72097 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dm-verity: fix a possible NULL pointer dereference Fix a possible NULL pointer dereference dm_verity_loadpin_i | |
| CVE-2026-72098 | Received | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: dm-verity: fix buffer overflow in FEC calculation There's a buffer overflow in dm-verity-fec: if (neras && *n |
| CVE-2026-72099 | Received | 未確認 | CWE-682 | In the Linux kernel, the following vulnerability has been resolved: dm-integrity: don't increment hash_offset twice hash_offset is already incremented in the loop "for (i = 0; i |
| CVE-2026-72100 | Received | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix a bug if the bio is out of limits If dm_integrity_check_limits fails, the code would exit wi |
| CVE-2026-72101 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix leaking uninitialized kernel memory If hash size is less than device's tuple size, dm-integr | |
| CVE-2026-72102 | Received | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: dm_early_create: fix freeing used table on dm_resume failure If dm_resume fails, the kernel attempts to free t |
| CVE-2026-72103 | Received | 未確認 | CWE-200 | In the Linux kernel, the following vulnerability has been resolved: dm: avoid leaking the caller's thread keyring via the table device file The refactoring in commit a28d893eb327 |
| CVE-2026-72104 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: reject option groups without values The pcache target parses optional arguments as name/value pairs | |
| CVE-2026-72105 | Received | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: dm-log: fix a bitset_size overflow on 32bit machines Commit c20e36b7631d ("dm log: fix out-of-bounds write due |
| CVE-2026-72106 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dm-ioctl: fix a possible overflow in list_version_get_info sizeof(tt->version) is 12 bytes, but the code write | |
| CVE-2026-72107 | Received | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: dm era: fix out-of-bounds memory access for non-zero start sector dm-era tracks writes in target-relative bloc |
| CVE-2026-72108 | Received | 未確認 | CWE-672 | In the Linux kernel, the following vulnerability has been resolved: dm thin metadata: fix metadata snapshot consistency on commit failure __reserve_metadata_snap() and __release_ |
| CVE-2026-72109 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: sparx5: unregister blocking notifier on init failure sparx5_register_notifier_blocks() registers the swit | |
| CVE-2026-72110 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf,fork: wipe ->bpf_storage before bailouts that access it Currently, copy_process() can bail out to free_tas | |
| CVE-2026-72111 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reset register bounds before narrowing retval range in check_mem_access() When the BPF verifier processes | |
| CVE-2026-72112 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: io_uring/bpf-ops: reject re-registration of an already-bound ops io_install_bpf() only rejects a second regist | |
| CVE-2026-72113 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: can: bcm: add missing device refcount for CAN filter removal sashiko-bot remarked a problem with a concurrent | |
| CVE-2026-72114 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: can: bcm: validate frame length in bcm_rx_setup() for RTR replies bcm_tx_setup() validates cf->len against the | |
| CVE-2026-72115 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: can: bcm: track a single source interface for ANYDEV timeout/throttle ops An ANYDEV rx op (ifindex == 0) with | |
| CVE-2026-72116 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix stale rx/tx ops after device removal RX: an RX_SETUP update(!) for an existing op skipped can_rx | |
| CVE-2026-72117 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler() For an rx op subscribed on all interfaces ( | |
| CVE-2026-72118 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix CAN frame rx/tx statistics KCSAN detected a data race within the bcm_rx_handler() when two CAN f | |
| CVE-2026-72119 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: can: bcm: extend bcm_tx_lock usage for data and timer updates Stage new CAN frame content for an existing tx o | |
| CVE-2026-72120 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: can: bcm: add missing rcu list annotations and operations sashiko-bot remarked the missing use of list_add_rcu | |
| CVE-2026-72121 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: can: bcm: add locking when updating filter and timer values KCSAN detected a simultaneous access to timer valu | |
| CVE-2026-72122 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure bcm_sendmsg() reads bo->ifindex and chec | |
| CVE-2026-72123 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF Commit f1b4e32aca08 ("can: bcm: use call_r | |
| CVE-2026-72124 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: can: isotp: serialize TX state transitions under so->rx_lock The TX state machine (so->tx.state) is driven fro | |
| CVE-2026-72125 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER isotp_release() looked up the bound netw | |
| CVE-2026-72126 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: can: isotp: use unconditional synchronize_rcu() in isotp_release() isotp_notify() unregisters the (RCU) CAN fi | |
| CVE-2026-72127 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netdev-genl: report NAPI thread PID in the caller's pid namespace netdev_nl_napi_fill_one() reports the NAPI k | |
| CVE-2026-72128 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvmet: fix refcount leak in nvmet_sq_create() In nvmet_sq_create(), a reference on the ctrl is taken via kref_ | |
| CVE-2026-72129 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: handle inline data with a nonzero offset nvmet_rdma_use_inline_sg() maps the host-controlled inlin | |
| CVE-2026-72130 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: reject short AUTH_RECEIVE buffers nvmet_execute_auth_receive() trusts the AUTH_RECEIVE allocation | |
| CVE-2026-72131 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvme-apple: Prevent shared tags across queues on Apple A11 On Apple A11, tags of pending commands must be uniq | |
| CVE-2026-72132 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: NFS: Charge unstable writes by request size, not folio size nfs_folio_mark_unstable() and nfs_folio_clear_comm | |
| CVE-2026-72133 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: spi: uniphier: Fix completion initialization order before devm_request_irq() The driver calls devm_request_irq | |
| CVE-2026-72134 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: spi: imx: reconfigure for PIO when DMA cannot be started When spi_imx_can_dma() selects DMA, the ECSPI is conf | |
| CVE-2026-72135 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tpm: Make the TPM character devices non-seekable The TPM character devices expose a sequential command/respons | |
| CVE-2026-72136 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink xfrmi_changelink() operates on | |
| CVE-2026-72137 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfrm: nat_keepalive: avoid double free on send error nat_keepalive_send() frees the keepalive skb whenever the | |
| CVE-2026-72138 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xen/gntdev: fix error handling in ioctl When gntdev_ioctl_map_grant_ref() fails to copy the operation result b | |
| CVE-2026-72139 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tcp: defer md5sig_info kfree past RCU grace period in tcp_connect The md5+ao reconciliation in tcp_connect() ( | |
| CVE-2026-72140 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource() If devm_platform_get_and_ioremap_resource() return | |
| CVE-2026-72141 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) SMBus 3.1 6.5.7 allows a Block Read byte count of 0, b | |
| CVE-2026-72142 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) SMBus 3.1 6.5.7 allows a Block Read byte count of 0 | |
| CVE-2026-72143 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Restore SST-PP control to all domains The SST-PP control offset is only restored to power | |
| CVE-2026-72144 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-laptop: fix missing cleanups in init error path dell_init() initializes several resources a | |
| CVE-2026-72145 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/x86/intel/tpmi: use cleanup helpers in mem_write() In mem_write(), the temporary array returned by pa | |
| CVE-2026-72146 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: sh: rz-dmac: Move interrupt request after everything is set up Once the interrupt is requested, the | |
| CVE-2026-72147 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma-pcie: Reject devices without driver data dw_edma_pcie_probe() treats the PCI device ID driv | |
| CVE-2026-72148 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK The DONE_INT_MASK and ABORT_INT_M | |
| CVE-2026-72149 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: tegra: Fix burst size calculation Currently, the Tegra GPC DMA hardware requires the transfer lengt | |
| CVE-2026-72150 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix uninitialized xprt_create_args structure The xprt_create_args structure is allocated on the stack | |
| CVE-2026-72151 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tpm: tpm2-sessions: wait for async KPP completion in tpm_buf_append_salt tpm_buf_append_salt() in drivers/char | |
| CVE-2026-72152 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat() wait_event_interruptible_timeout() evaluates its con | |
| CVE-2026-72153 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: irqchip/crossbar: Use correct index in crossbar_domain_free() crossbar_domain_free() resets the domain data an | |
| CVE-2026-72154 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: openrisc: Fix jump_label smp syncing The original commit 8c30b0018f9d ("openrisc: Add jump label support") cop | |
| CVE-2026-72155 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mtd: spi-nor: swp: Improve locking user experience In the case of the first block being locked (or the few fir | |
| CVE-2026-72156 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fpga: microchip-spi: fix zero header_size OOB read in mpf_ops_parse_header() mpf_ops_parse_header() reads head | |
| CVE-2026-72157 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Fix frags[] overflow by bounding frame_count tbnet_poll() assembles a multi-frame Thunderbol | |
| CVE-2026-72158 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fpga: dfl: add bounds check in dfh_get_param_size() dfh_get_param_size() can return a parameter size larger th | |
| CVE-2026-72159 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject non-inline dinodes with i_size and zero i_clusters On a volume mounted without OCFS2_FEATURE_INC | |
| CVE-2026-72160 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject dinodes with non-canonical i_mode type Patch series "ocfs2: harden inode validators against forg | |
| CVE-2026-72161 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: add journal NULL check in ocfs2_checkpoint_inode() During unmount, ocfs2_journal_shutdown() frees the j | |
| CVE-2026-72162 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix UBSAN array-index-out-of-bounds in ocfs2_sum_rightmost_rec [BUG] On-disk corruption setting l_next_ | |
| CVE-2026-72163 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits [BUG] A direct write over unwritten extents | |
| CVE-2026-72164 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: avoid moving extents to occupied clusters For non-auto OCFS2_IOC_MOVE_EXT operations, userspace supplie | |
| CVE-2026-72165 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: fix condition in 'nand_select_target()' 'cs' here must be in range [0:nanddev_ntargets[. | |
| CVE-2026-72166 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/9p: fix infinite loop in p9_client_rpc on fatal signal When p9_client_rpc() is called with type P9_TFLUSH | |
| CVE-2026-72167 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: pl353: fix probe resource allocation During probe(), the devm_ioremap() is called with the paren | |
| CVE-2026-72168 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix fault in unaligned fixup Use kzalloc_obj() / kzalloc_objs() to allocate the memcard | |
| CVE-2026-72169 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: kho: make sure scratch size is always aligned by CMA_MIN_ALIGNMENT_BYTES When using scratch_scale, the scratch | |
| CVE-2026-72170 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: 9p: skip nlink update in cacheless mode to fix WARN_ON v9fs_dec_count() unconditionally calls drop_nlink() on | |
| CVE-2026-72171 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mtd: slram: remove failed entries from the device list register_device() links a new slram_mtdlist entry befor | |
| CVE-2026-72172 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE If DAX memory is hotplugged into an unoccupied subs | |
| CVE-2026-72173 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs/proc/task_mmu: do not warn on seeing non-migration pmd entry Patch series "mm/hmm: A fix and a selftest", v | |
| CVE-2026-72174 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() A PAGEMAP_SCAN ioctl requesting PM_SCAN | |
| CVE-2026-72175 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs/proc/task_mmu: fix make_uffd_wp_huge_pte() prot-update race Patch series "userfaultfd/pagemap: pre-existing | |
| CVE-2026-72176 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: put stats for scheme_add_dirs() internal error damon_sysfs_scheme_add_dirs() setup the | |
| CVE-2026-72177 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: fix dir put orders in access_pattern_add_dirs() Patch series "mm/damon/sysfs-schemes: | |
| CVE-2026-72178 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: always put unsuccessfully committed target pids damon_commit_target() puts and gets the destina | |
| CVE-2026-72179 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: riscv: cacheinfo: Fix node reference leak in populate_cache_leaves Currently, the while loop drops the referen | |
| CVE-2026-72180 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: preserve pmd_swp_uffd_wp on device-private PMD downgrade change_non_present_huge_pmd() rewrite | |
| CVE-2026-72181 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mips: sched: Fix CPUMASK_OFFSTACK memory corruption This patch addresses a critical memory management flaw. Wh | |
| CVE-2026-72182 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: power: supply: charger-manager: fix refcount leak in is_full_charged() In is_full_charged(), power_supply_get_ | |
| CVE-2026-72183 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO path LANDLOCK_SCOPE_SIGNAL must prevent a sandboxed pr | |
| CVE-2026-72184 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: fix hole runlist memory leak in insert range error path ntfs_non_resident_attr_insert_range() allocates | |
| CVE-2026-72185 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: fix WARN_ON for resident attribute in ntfs_map_runlist_nolock() When ntfs_map_runlist_nolock() needs to | |
| CVE-2026-72186 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: make system files immutable to prevent corruption When a system file such as $Bitmap is exposed via show | |
| CVE-2026-72187 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid self-deadlock during inode eviction An attribute-list update performed while allocating clusters c | |
| CVE-2026-72188 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: sanitize MFT references returned from ntfs_lookup_inode_by_name() ntfs_lookup_inode_by_name() returns MF | |
| CVE-2026-72189 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: fail attrlist updates when the superblock is inactive generic_shutdown_super() clears SB_ACTIVE before e | |
| CVE-2026-72190 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: fix mrec_lock ABBA deadlock in rename ntfs_file_fsync(), ntfs_dir_fsync() and __ntfs_write_inode() lock | |
| CVE-2026-72191 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs3: validate split-point offset in indx_insert_into_buffer indx_insert_into_buffer() computes used = u | |
| CVE-2026-72192 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head indx_insert_into_root() promotes a full r | |
| CVE-2026-72193 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs3: cap RESTART_TABLE free-chain walker at rt->used A crafted NTFS3 disk image triggers an in-kernel infini | |
| CVE-2026-72194 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: add depth limit to indx_find_buffer to prevent stack overflow indx_find_buffer() recursively descend | |
| CVE-2026-72195 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound attr_off in UpdateResidentValue against data_off In do_action()'s UpdateResidentValue case (fs | |
| CVE-2026-72196 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound copy_lcns dp->page_lcns[] index in analysis pass In log_replay()'s analysis pass, after find_d | |
| CVE-2026-72197 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound DeleteIndexEntryAllocation memmove length In do_action()'s DeleteIndexEntryAllocation case, e- | |
| CVE-2026-72198 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: reject non-resident records for resident-only attributes The shared lookup-time attribute validator reje | |
| CVE-2026-72199 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: validate resident index root values on lookup Resident $INDEX_ROOT values carry index header fields that | |
| CVE-2026-72200 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: detect mapping-pairs LCN accumulator overflow The NTFS mapping-pairs parser accumulates relative LCN del | |
| CVE-2026-72201 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: validate index entries on reading Validate index entries immediately after reading an index root or inde | |
| CVE-2026-72202 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid heap allocation for free-cluster readahead state get_nr_free_clusters() allocates a temporary file | |
| CVE-2026-72203 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: skip extent mft records in writeback to prevent deadlock This patch fixes the ABBA deadlock between exte | |
| CVE-2026-72204 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: centalize $INDEX_ROOT header validation Add a dedicated helper to perform stricter validation of $INDEX_ | |
| CVE-2026-72205 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: free volume-wide resources on fill_super failure ntfs_fill_super()'s err_out_now path frees only the vol | |
| CVE-2026-72206 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: validate index block header more strictly Modify ntfs_index_block_inconsisent() to perform stricter vali | |
| CVE-2026-72207 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: not change 0-byte $DATA attribute to non-resident When ntfs_resident_attr_resize() cannot grow a residen | |
| CVE-2026-72208 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: add bounds check before accessing EA entries in ntfs_ea_lookup and ntfs_listxattr, this verifies that th | |
| CVE-2026-72209 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: validate attribute values on lookup ntfs_attr_find() and ntfs_external_attr_find() check that generic re | |
| CVE-2026-72210 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: fix off-by-one in mapping pairs decoding bounds checks In ntfs_mapping_pairs_decompress(), attr_end poin | |
| CVE-2026-72211 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: grow index root value before reparent header update ntfs_ir_reparent() moves the resident index root ent | |
| CVE-2026-72212 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/memory_hotplug: fix incorrect altmap passing in error path In create_altmaps_and_memory_blocks(), when arch | |
| CVE-2026-72213 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch In alloc_hugetlb_folio(), a single h_cg pointer i | |
| CVE-2026-72214 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak In cpcap_battery_detect_ba | |
| CVE-2026-72215 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf() In 64-bit configurations calling any firmware en | |
| CVE-2026-72216 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom: Fix leak when custom dump_segments addition fails Free allocated minidump_region 'name' in q | |
| CVE-2026-72217 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing xdr_buf_to_bvec() writes a bio_vec into the caller | |
| CVE-2026-72218 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure The cached-file path in nlm_lookup_file() | |
| CVE-2026-72219 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlm_file leak when nlm_do_fopen() fails A client can repeatedly drive nlm_do_fopen() failures by p | |
| CVE-2026-72220 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sunrpc: harden rq_procinfo lifecycle to prevent double-free The svc_release_rqst() function executes the callb | |
| CVE-2026-72221 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sunrpc: wait for in-flight TLS handshake callback when cancel loses race When wait_for_completion_interruptibl | |
| CVE-2026-72222 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sunrpc: pin svc_xprt across the asynchronous TLS handshake callback svc_tcp_handshake() stores the raw svc_xpr | |
| CVE-2026-72223 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arena sub-allocations on discover_arenas() error path Memory allocated by btt_freelist_init() | |
| CVE-2026-72224 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arenas on btt_init() error paths The arenas allocated by discover_arenas() or create_arenas() | |
| CVE-2026-72225 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: jbd2: fix integer underflow in jbd2_journal_initialize_fast_commit() jbd2_journal_initialize_fast_commit() val | |
| CVE-2026-72226 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: prevent TVLV OOB check overflow A TT unicast TVLV contains the number of VLANs stored in it. T | |
| CVE-2026-72227 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: mcast: avoid OOB read of num_dests header Before the access to struct batadv_tvlv_mcast_tracker's | |
| CVE-2026-72228 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: frag: fix primary_if leak on failed linearization If the skb has a frag_list, it must be linearize | |
| CVE-2026-72229 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: clean untagged VLAN on netdev registration failure When an mesh interface is registered, it create | |
| CVE-2026-72230 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: frag: free unfragmentable packet The caller of batadv_frag_send_packet() assume that the skb provi | |
| CVE-2026-72231 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: avoid request storms during pending request batadv_send_tt_request() allocates a tt_req_node w | |
| CVE-2026-72232 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: ensure minimal ethernet header on TX As documented in commit 8bd67ebb50c0 ("net: bridge: xmit: mak | |
| CVE-2026-72233 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: reacquire gw address after skb realloc The pskb_may_pull() called by batadv_bla_is_backbone_g | |
| CVE-2026-72234 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: access unicast_ttvn skb->data only after skb realloc The pskb_may_pull() called by batadv_get_vid( | |
| CVE-2026-72235 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: retrieve ethhdr after potential skb realloc on RX pskb_may_pull() in batadv_interface_rx() could r | |
| CVE-2026-72236 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() ev variable is userspace control | |
| CVE-2026-72237 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/brs: Fix kernel address leakage A user-only branch stack can contain branches that originate from | |
| CVE-2026-72238 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: x86/boot: Validate console=uart8250 baud rate to fix early boot hang When the baud rate is empty, 0, invalid, | |
| CVE-2026-72239 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: x86/virt/sev: Revert "Drop WBINVD before setting MSR_AMD64_SYSCFG_SNP_EN" Revert 99cf1fb58e68 ("x86/virt/se | |
| CVE-2026-72240 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mfd: sm501: Fix reference leak on failed device registration When platform_device_register() fails in sm501_re | |
| CVE-2026-72241 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: leds: uleds: Fix potential buffer overread The name string supplied by userspace is not guaranteed to be null- | |
| CVE-2026-72242 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() selinux_sctp_bind_connect() dereferences s | |
| CVE-2026-72243 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: selinux: check connect-related permissions on TCP Fast Open Similar to Landlock, SELinux was not updated when | |
| CVE-2026-72244 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: gpu/buddy: bail out of try_harder when alignment cannot be honoured The try_harder contiguous fallback could r | |
| CVE-2026-72245 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path After device_initialize(), the e | |
| CVE-2026-72246 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-72247 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: fix zone comparison in tuple dedup The "already exists" dedup logic in __nf_conncount | |
| CVE-2026-72248 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: support IPIP tunnel with direct xmit The combination of IPIP tunnel with direct xmit, eg | |
| CVE-2026-72249 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: use dst in this direction when pushing IPIP header When pushing the IPIP header, the rou | |
| CVE-2026-72250 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag nf_ct_frag6_reasm() slides the pa | |
| CVE-2026-72251 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat_sip: reload possible stale data pointer quoting sashiko: ---------------------------------- | |
| CVE-2026-72252 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: don't leak bad clone into future transaction On memory allocation failure the clone | |
| CVE-2026-72253 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it tc ingress and openvswitch do not guarante | |
| CVE-2026-72254 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_fib: reject fib expression on the netdev egress hook A fib expression in a netdev egress base c | |
| CVE-2026-72255 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst The br_netfilter fake rtable is embedded i | |
| CVE-2026-72256 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_cluster: reject template conntracks in hash match xt_cluster_mt() treats any non-NULL nf_ct_get( | |
| CVE-2026-72257 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: q6apm: fix NULL pointer dereference in graph_callback When q6apm_free_fragments() is called it fre | |
| CVE-2026-72258 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8183: Release reserved memory on cleanup The MT8183 AFE probe can assign reserved memory wit | |
| CVE-2026-72259 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8192: Release reserved memory on cleanup The MT8192 AFE probe calls of_reserved_mem_device_i | |
| CVE-2026-72260 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8192: Check runtime resume during probe The MT8192 AFE probe enables runtime PM temporarily | |
| CVE-2026-72261 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control In snd_sof_update_control(), firmware-provide | |
| CVE-2026-72262 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get The ipc_control_data buffer is allocated as kz | |
| CVE-2026-72263 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: topology: fix memory leak in snd_sof_load_topology When the topology filename contains "dummy" and | |
| CVE-2026-72264 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fbdev: tridentfb: fix potential memory leak in trident_pci_probe() In trident_pci_probe(), the memory allocate | |
| CVE-2026-72265 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fbdev: nvidia: fix potential memory leak in nvidiafb_probe() In nvidiafb_probe(), the memory allocated for mod | |
| CVE-2026-72266 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fbdev: vesafb: fix memory leak in vesafb_probe() Since commit 73ce73c30ba9 ("fbdev: Transfer video= option str | |
| CVE-2026-72267 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fbdev: carminefb: fix potential memory leak in alloc_carmine_fb() The memory allocated for modelist in fb_vide | |
| CVE-2026-72268 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe() In tdfxfb_probe(), the memory allocated for modelis | |
| CVE-2026-72269 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fbdev: uvesafb: fix potential memory leak in uvesafb_probe() Due to an incorrect goto label, memory allocated | |
| CVE-2026-72270 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fbdev: s3fb: fix potential memory leak in s3_pci_probe() In s3_pci_probe(), the memory allocated for modelist | |
| CVE-2026-72271 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fbdev: i740fb: fix potential memory leak in i740fb_probe() In i740fb_probe(), the memory allocated in fb_video | |
| CVE-2026-72272 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fbdev: radeon: fix potential memory leak in radeonfb_pci_register() The function radeonfb_pci_register() alloc | |
| CVE-2026-72273 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fbdev: efifb: fix memory leak in efifb_probe() Since commit 73ce73c30ba9 ("fbdev: Transfer video= option strin | |
| CVE-2026-72274 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fbdev: hecubafb: fix potential memory leak in hecubafb_probe() The memory allocated for pagerefs in fb_deferre | |
| CVE-2026-72275 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe() The memory allocated for pagerefs in fb | |
| CVE-2026-72276 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fbdev: metronomefb: fix potential memory leak in metronomefb_probe() The memory allocated for pagerefs in fb_d | |
| CVE-2026-72277 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Inject SEA if guest VNCR isn't normal memory When constructing an L1 VNCR mapping, KVM uncondi | |
| CVE-2026-72278 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Re-translate VNCR before injecting abort KVM faults in the VNCR page with FOLL_WRITE whenever | |
| CVE-2026-72279 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Respect read-only PFN when mapping L1 VNCR KVM currently maps the L1 VNCR into the host stage- | |
| CVE-2026-72280 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Drop bogus WARN for write to ZCR_EL2 It is entirely possible for a guest to write to the ZCR_E | |
| CVE-2026-72281 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: account pKVM reclaim against the VM mm Protected guest faults charge long term pins to the VM's mm | |
| CVE-2026-72282 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers kvm_io_bus_get_dev() returns a device that | |
| CVE-2026-72283 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Nullify irqfd->producer if updating IRTE for bypass fails Nullify irqfd->producer if updating the IR | |
| CVE-2026-72284 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs Ignore KVM's internal "service pending | |
| CVE-2026-72285 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: TDX: Reject concurrent change to CPUID entry count Reject KVM_TDX_INIT_VM if userspace changes cpuid.nent | |
| CVE-2026-72286 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Do not allow intra-host migration/mirroring of SNP VMs The intra-host migration/mirroring feature is | |
| CVE-2026-72287 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Move vTPR vs. TPR Threshold consistency check into "normal" checks Move the off-by-default consiste | |
| CVE-2026-72288 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling Hyunwoo Kim reports some rea | |
| CVE-2026-72289 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Check the interrupt is still ours before migrating it vgic_prune_ap_list() drops both ap_lis | |
| CVE-2026-72290 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix GISC refcount leak on AIF enable failure kvm_s390_gisc_register() registers the guest ISC | |
| CVE-2026-72291 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix unlikely race in try_get_locked_pte() Fix an unlikely race in try_get_locked_pte(), which could | |
| CVE-2026-72292 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Initialize KVM_S390_GET_CMMA_BITS memory kvm_s390_get_cmma_bits() allocates its output buffer with | |
| CVE-2026-72293 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: Add missing radix_tree_preload() in _gaccess_shadow_fault() Add missing radix_tree_preload() | |
| CVE-2026-72294 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Check irq validity in kvm_vcpu_ioctl_interrupt() Function kvm_vcpu_ioctl_interrupt() can be ca | |
| CVE-2026-72295 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Validate irqchip index in irqfd routing Sashiko reported that the irqchip index is not validat | |
| CVE-2026-72296 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: ife: require ETH_HLEN to be pullable in ife_decode() ife decode may return after making only the outer IF | |
| CVE-2026-72297 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: atm: reject out-of-range traffic classes in QoS validation Reject ATM traffic classes above ATM_ANYCLASS | |
| CVE-2026-72298 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() qrtr_endpoint_post() validates an incoming pack | |
| CVE-2026-72299 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tipc: restrict socket queue dumps in enqueue tracepoints tipc_sk_enqueue() runs with sk->sk_lock.slock held wh | |
| CVE-2026-72300 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: topology: validate vendor array size before parsing sof_parse_token_sets() reads array->size while | |
| CVE-2026-72301 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get In sof_ipc3_bytes_put(), the size used for the | |
| CVE-2026-72302 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc In sof_ipc3_control_update(), the exp | |
| CVE-2026-72303 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-control: Validate notification payload size Validate MODULE_NOTIFICATION payload length before | |
| CVE-2026-72304 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put In sof_ipc4_bytes_put(), the copy size is derived fr | |
| CVE-2026-72305 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: VDUSE: avoid leaking information to userspace The bounceing is not necessarily page aligned, so current VDUSE | |
| CVE-2026-72306 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter There is one race case in vduse_dev_msg_sync and | |
| CVE-2026-72307 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace() When mlxsw_sp_vrs_lpm_tree_replace() fails after r | |
| CVE-2026-72308 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() When mlxsw_sp_port_lag_index_get() fails, mlxsw_sp_port_l | |
| CVE-2026-72309 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracing/remotes: Fix leak in trace_remote_alloc_buffer() error path If page allocation fails in trace_remote_a | |
| CVE-2026-72310 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix overflow in passthrough ioctl bounds check smb2_ioctl_query_info() validates the PASSTHRU_FSC | |
| CVE-2026-72311 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: free madvise VMA array on L2 flush failure xe_vm_madvise_ioctl() allocates madvise_range.vmas in get_v | |
| CVE-2026-72312 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: fix VF bringup affecting PF promiscuous state Mbox handling of nix_set_rx_mode for a VF with pro | |
| CVE-2026-72313 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/fb-helper: Only consider active CRTCs for vblank sync Only synchronize fbdev output to the vblank of an ac | |
| CVE-2026-72314 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK Compare against -EDEADLK, which is | |
| CVE-2026-72315 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix busy dentry warning on unmount after DIO Commit c68337442f03 ("cifs: Fix busy dentry used aft | |
| CVE-2026-72316 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dm era: fix NULL pointer dereference in metadata_open() metadata_open() returns NULL when kzalloc_obj() fails, | |
| CVE-2026-72317 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: pin upper rpc_clnt across the TLS connect_worker The TLS connect path has a use-after-free: nothing pi | |
| CVE-2026-72318 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cifs: validate DFS referral string offsets parse_dfs_referrals() validates that the response header and referr | |
| CVE-2026-72319 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipvs: ensure inner headers in ICMP errors are in headroom Sashiko points out that after stripping the outer he | |
| CVE-2026-72320 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_lookup: fix catchall element handling with inverted lookups nft_lookup_eval() decides whether a | |
| CVE-2026-72321 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() When a timer is deleted and n | |
| CVE-2026-72322 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Fix potential UAF in MLD delayed work A race condition exists between device teardown and incomin | |
| CVE-2026-72323 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() A race condition exists between device teardown (inetde | |
| CVE-2026-72324 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: gpio: mvebu: free generic chips on unbind irq_alloc_domain_generic_chips() allocates generic chip data that mu | |
| CVE-2026-72325 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path Branch Sampling (BRS) and Last Branch Record (L | |
| CVE-2026-72326 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cake: reject overhead values that underflow length CAKE accepts signed overhead values and stores t | |
| CVE-2026-72327 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Reject invalid indirect BO handle in indirect CSD setup v3d_get_cpu_indirect_csd_params() looks up th | |
| CVE-2026-72328 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix potential amdxdna_umap lifetime race amdxdna_umap_release() calls the blocking mmu_interval | |
| CVE-2026-72329 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/liquidio: drop cached VF pci_dev LUT The PF SR-IOV enable path caches VF pci_dev pointers in dpiring_to_vf | |
| CVE-2026-72330 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/tls: Consume empty data records in tls_sw_read_sock() A peer may send a zero-length TLS application_data r | |
| CVE-2026-72331 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix VMA access race aie2_populate_range() and amdxdna_umap_release() access a saved VMA pointer | |
| CVE-2026-72332 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Prevent PM resume deadlock in hwctx_sync_debug_bo() amdxdna_hwctx_sync_debug_bo() invokes the h | |
| CVE-2026-72333 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix tx ident leak for commands without a response Commit 6c3ea155e5ee ("Bluetooth: L2CAP: Fi | |
| CVE-2026-72334 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix malformed ISO_END/CONT handling Core specification (Part C vol 4 sec 5.4.5) does not exclu | |
| CVE-2026-72335 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix adv monitor add failure cleanup hci_add_adv_monitor() publishes a new adv_monitor in hdev | |
| CVE-2026-72336 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: 6lowpan: hold L2CAP conn across debugfs control get_l2cap_conn() looks up an LE hci_conn under hdev | |
| CVE-2026-72337 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: 6lowpan: avoid untracked enable work lowpan_enable_set() allocates a temporary work item and schedu | |
| CVE-2026-72338 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_pedit: fix TOCTOU heap OOB write in tc offload There is a TOCTOU race condition in flower lockl | |
| CVE-2026-72339 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: qede: fix off-by-one in BD ring consumption on build_skb failure qede_rx_build_skb() and qede_tpa_rx_build_skb | |
| CVE-2026-72340 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap: fix races on the shared Super VCAP block The VCAP instances on a chip are not independen | |
| CVE-2026-72341 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix publication race for priv->channel_stats[] mlx5e_channel_stats_alloc() publishes a new entry to | |
| CVE-2026-72342 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats agent registration race mlx5e_hv_vhca_stats_create() registers the stats agent th | |
| CVE-2026-72343 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation mlx5e_hv_vhca_stats_create() is called from mlx5e_ni | |
| CVE-2026-72344 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, skip peer flow cleanup when LAG seq is unavailable mlx5_lag_get_dev_seq() will return error whe | |
| CVE-2026-72345 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, Fix off-by-one in single-FDB error rollback On failure at index i, the reverse cleanup loop in | |
| CVE-2026-72346 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: bitland-mifs-wmi: Fix NULL pointer dereference during suspend/resume The driver registers two di | |
| CVE-2026-72347 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_connmark: reject invalid shift parameters Revision 2 of the CONNMARK target accepts user-control | |
| CVE-2026-72348 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop The ah, hbh and rt matches check that | |
| CVE-2026-72349 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() On links faster than ~34 Gbps, where byte rate ma | |
| CVE-2026-72350 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_u32: reject invalid shift counts u32_match_it() executes rule-supplied shift operands on a 32-bi | |
| CVE-2026-72351 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: gue: validate REMCSUM private option length GUE private flags can indicate that remote checksum offload metada | |
| CVE-2026-72352 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: bpf: Fix hid_bpf_get_data() range check hid_bpf_get_data() returns a pointer into the HID-BPF context dat | |
| CVE-2026-72353 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid stale runlist element dereference in fallocate ntfs_attr_fallocate() allocates holes and delayed a | |
| CVE-2026-72354 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid stale runlist element dereference in MFT writeback ntfs_write_mft_block() maps each $MFT record th | |
| CVE-2026-72355 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix barriering when walking subrequest list Fix the barriering used when walking the subrequest list in | |
| CVE-2026-72356 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cifs: Fix missing credit release on failure in cifs_issue_read() Fix missing release of credits in the failure | |
| CVE-2026-72357 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: uprobes/x86: Use proper mm_struct in __in_uprobe_trampoline In the unregister path we use __in_uprobe_trampoli | |
| CVE-2026-72358 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: prevent invalid cursor access for purged BOs During a page table walk for binding, xe_pt_stage_bind | |
| CVE-2026-72359 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: fix NPD in bo_meminfo() When a buffer object is purged, its ttm.resource is set to NULL via the TTM pi | |
| CVE-2026-72360 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays Currently defined VF/PF relay actions use regular | |
| CVE-2026-72361 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/hw_engine: Fix double-free of managed BO in error path The error path in hw_engine_init() explicitly fr | |
| CVE-2026-72362 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: Fix NULL pointer dereference in xe_pt_zap_ptes_entry() The page-table walk framework may pass a NUL | |
| CVE-2026-72363 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix folio state after ENOMEM whilst under writeback iteration Fix the state of the current folio when E | |
| CVE-2026-72364 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix writeback error handling Fix the error handling in writeback_iter() loop. If an error occurs, writ | |
| CVE-2026-72365 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix writethrough to use collection offload Fix writethrough write to set NETFS_RREQ_OFFLOAD_COLLECTION | |
| CVE-2026-72366 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_create_write_req() to handle async cache object creation netfs_create_write_req() will skip c | |
| CVE-2026-72367 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iomap: guard io_size EOF trim against concurrent truncate underflow iomap: fix zero padding data issue in conc | |
| CVE-2026-72368 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix double unlock in nomem_d_alloc error path When start_creating() fails and returns -ENOMEM, it | |
| CVE-2026-72369 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: minix: avoid overflow in bitmap block count calculation minix_check_superblock() uses minix_blocks_needed() to | |
| CVE-2026-72370 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iomap: release pages on atomic dio size mismatch If bio_iov_iter_get_pages() or the bounce helper succeeds but | |
| CVE-2026-72371 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix the volume AFS_VOLUME_RM_TREE is set on Fix afs_insert_volume_into_cell() to set AFS_VOLUME_RM_TREE o | |
| CVE-2026-72372 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix lack of locking around modifications of net->cells_dyn_ino Fix the lack of locking around modificatio | |
| CVE-2026-72373 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix missing NULL pointer check in afs_break_some_callbacks() Fix afs_break_some_callbacks() to check to s | |
| CVE-2026-72374 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix callback service message parsers to pass through -EAGAIN The AFS filesystem client uses an rxrpc serv | |
| CVE-2026-72375 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix reinitialisation of the inode, in particular ->lock_work It seems that initalising afs_vnode::lock_wo | |
| CVE-2026-72376 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix misplaced inc of net->cells_outstanding Fix net->cells_outstanding being incremented before the check | |
| CVE-2026-72377 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: afs: Remove setting of AS_RELEASE_ALWAYS for symlinks and mountpoints Regular AFS files correctly use afs_file | |
| CVE-2026-72378 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix error code in afs_extract_vl_addrs() The error codes on these paths are only set on the first iterati | |
| CVE-2026-72379 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid vfs_tmpfile() never checked that the caller's fs | |
| CVE-2026-72380 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xen/pvcalls: bound backend response req_id before indexing rsp[] pvcalls_front_event_handler() takes req_id di | |
| CVE-2026-72381 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of fp->owner.name in durable handle owner check Two concurrent SMB2 durable reconnec | |
| CVE-2026-72382 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject undersized DACLs before parsing ACEs parse_dacl() limits the attacker-controlled ACE count by co | |
| CVE-2026-72383 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sctp: fix addr_wq_timer race in sctp_free_addr_wq() sctp_free_addr_wq() previously removed addr_wq_timer using | |
| CVE-2026-72384 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: irqchip/ts4800: Fix missing chained handler cleanup on remove The driver installs a chained handler for the pa | |
| CVE-2026-72385 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracing/fprobe: Fix NULL pointer dereference in fprobe_fgraph_entry() fprobe_fgraph_entry() sizes a shadow-sta | |
| CVE-2026-72386 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix a leak when a group is evicted before the tiler OOM is serviced A group ref is tied to the pe | |
| CVE-2026-72387 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix potential invalid pointer deref in group_process_tiler_oom() If heaps is an ERR_PTR(), pantho | |
| CVE-2026-72388 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Always use the IRQ-safe variant when acquiring the fence lock Since dma_fence objects can be shar | |
| CVE-2026-72389 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bridge: stp: Fix a potential use-after-free when deleting a bridge The three STP timers are not supposed to be | |
| CVE-2026-72390 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF The teql master->slaves singly link | |
| CVE-2026-72391 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: phy: sfp: free mii_bus in sfp_i2c_mdiobus_destroy sfp_i2c_mdiobus_create() allocates the I2C MDIO bus wit | |
| CVE-2026-72392 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump inet6_dump_fib() saves its progress in | |
| CVE-2026-72393 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: don't cache shinfo across skb realloc fbnic_tx_lso() calls skb_cow_head() which may reallocate the | |
| CVE-2026-72394 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (aspeed-g6-pwm-tach) Guard fan RPM calculation against divide-by-zero Sashiko reports: In the aspeed-g | |
| CVE-2026-72395 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus) Fix passing events to regulator core Sashiko reports: Commit 754bd2b4a084 ("hwmon: (pmbus/core | |
| CVE-2026-72396 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: adm1275: Prevent reading uninitialized stack While adding support for the ROHM BD127X0 hot-swap control | |
| CVE-2026-72397 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/core) honor vrm_version in pmbus_data2reg_vid() pmbus_data2reg_vid() hardcoded the VR11 encoding | |
| CVE-2026-72398 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sctp: add INIT verification after cookie unpacking In SCTP handshake, the INIT chunk is initially processed by | |
| CVE-2026-72399 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: enetc: check the number of BDs needed for xdp_frame The size of xdp_redirect_arr array is ENETC_MAX_SKB_F | |
| CVE-2026-72400 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: seg6: validate SRH length before reading fixed fields seg6_validate_srh() reads fixed SRH fields such as srh-> | |
| CVE-2026-72401 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix insn_aux_data leak on verifier err_free_env path When bpf_check() allocates env->insn_aux_data succes | |
| CVE-2026-72402 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Mask pseudo pointer values in verifier logs print_bpf_insn() masks ldimm64 immediates for pointer-bearing | |
| CVE-2026-72403 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: Fix NULL pointer dereference in interface lookup A malformed USB device can provide a vendor-specif | |
| CVE-2026-72404 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() TIPC UDP media bearer teardown calls ds | |
| CVE-2026-72405 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync Yue Sun reported a use-after-free and d | |
| CVE-2026-72406 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: sungem: fix probe error cleanup gem_init_one() calls gem_remove_one() when register_netdev() fails. gem_r | |
| CVE-2026-72407 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: geneve: validate inner network offset in geneve_gro_complete() Even with both paths gated on gs->gro_hint, gen | |
| CVE-2026-72408 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: geneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint geneve_gro_receive() reads the GRO hint through | |
| CVE-2026-72409 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: mvneta: re-enable percpu interrupt on resume On Marvell MPIC platforms (Armada 370/XP/38x), mvneta uses a | |
| CVE-2026-72410 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Validate NIX maximum LFs correctly NIX maximum number of LFs can be set via devlink command but | |
| CVE-2026-72411 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: mxl862xx: fix use-after-free of DSA ports in crc_err_work Upon an MDIO CRC error mxl862xx_crc_err_wo | |
| CVE-2026-72412 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/mm: Fix handling of _PAGE_UNUSED pte bit The _PAGE_UNUSED softbit should not really be lying around. Its | |
| CVE-2026-72413 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sctp: fix err_chunk memory leaks in INIT handling When sctp_verify_init() encounters unrecognized parameters, | |
| CVE-2026-72414 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: round up PTP perout pin duration pin_duration is converted from the user-provided period to | |
| CVE-2026-72415 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: Validate written enum value in ge_put_enum_double() ge_put_enum_double() passes the user-supplied | |
| CVE-2026-72416 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_compat: ebtables emulation must reject non-bridge targets xtables targets return netfilter verd | |
| CVE-2026-72417 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: Validate iph->ihl in nf_flow_ip4_tunnel_proto() Add sanity check for iph->ihl field in n | |
| CVE-2026-72418 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: prevent connlimit drops for early confirmed ct Commit 69894e5b4c5e ("netfilter: nft_c | |
| CVE-2026-72419 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init() We ran into below KASAN splat, wh | |
| CVE-2026-72420 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid R5_Overlap races while breaking stripe batches KCSAN report a race in break_stripe_batch_list( | |
| CVE-2026-72421 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: Don't ignore error route in local/main tables. When CONFIG_IP_MULTIPLE_TABLES is enabled but no rul | |
| CVE-2026-72422 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE conn->preauth_info is shared conn | |
| CVE-2026-72423 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Guard conntrack opts error writes The conntrack lookup and allocation kfuncs take an opts pointer togethe | |
| CVE-2026-72424 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rtc: msc313: fix NULL deref in shared IRQ handler at probe msc313_rtc_probe() calls devm_request_irq() with IR | |
| CVE-2026-72425 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() Resetting all VFs causes resource leak on VFs with | |
| CVE-2026-72426 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer spill metadata during half-slot cleanup __clean_func_state() cleans dead stack slots in | |
| CVE-2026-72427 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix effective prog array index with BPF_F_PREORDER replace_effective_prog() and purge_effective_progs() l | |
| CVE-2026-72428 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stack slot index in nospec checks check_stack_write_fixed_off() computes the byte slot for a fixed-of | |
| CVE-2026-72429 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: fix type confusion of dst_entry IOAM uses a dummy dst_entry(null_dst) to mark that the destination | |
| CVE-2026-72430 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: fix nf_connlabels leak on two error paths tcf_ct_fill_params() calls nf_connlabels_get() (s | |
| CVE-2026-72431 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: alloc_tag: fix use-after-free in /proc/allocinfo after module unload allocinfo_start() only reinitializes the | |
| CVE-2026-72432 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tpm_crb: Check ACPI_COMPANION() against NULL during probe Every platform driver can be forced to match a devic | |
| CVE-2026-72433 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak This needs to test for nonzero retval. | |
| CVE-2026-72434 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: make sure gc is properly stopped Sashiko noticed that when destroying a set, cancel_delayed_ | |
| CVE-2026-72435 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() Sashiko pointed out that kfree_rcu() was c | |
| CVE-2026-72436 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types Sashiko pointed out that there ar | |
| CVE-2026-72437 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry When a read is retried, raid1_read_ | |
| CVE-2026-72438 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix writes_pending and barrier reference leaks on discard failures raid10_make_request() acquires a | |
| CVE-2026-72439 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix writes_pending leak on write request failures raid10_make_request() acquires a writes_pending r | |
| CVE-2026-72440 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: md/raid1: fix writes_pending and barrier reference leaks on write failures raid1_make_request() acquires a wri | |
| CVE-2026-72441 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ieee802154: fix kernel-infoleak in dgram_recvmsg() KMSAN reported a kernel-infoleak in move_addr_to_user(): B | |
| CVE-2026-72442 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: fix and simplify IP6IP6 tunnel handling Fix nf_flow_ip6_tunnel_proto() to use pskb_may_p | |
| CVE-2026-72443 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints MIDI 2.0 input URBs are started during snd_usb_mi | |
| CVE-2026-72444 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: flow_dissector: check device type before reading ETH_ADDRS __skb_flow_dissect() unconditionally reads 12 bytes | |
| CVE-2026-72445 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: qcom: clear opened when stream enable fails On enable, subs->opened is set before the service | |
| CVE-2026-72446 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: qcom: reject stream disable with no active interface handle_uaudio_stream_req() resolves an i | |
| CVE-2026-72447 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sctp: hold socket lock when dumping endpoints in sctp_diag SCTP_DIAG endpoint dumping was traversing endpoint | |
| CVE-2026-72448 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown The send-queue timestamp ring is allocated with qmem | |
| CVE-2026-72449 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm The cleanup tail of kfd_criu_resume_svm() walks svm | |
| CVE-2026-72450 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfrm: validate selector family and prefixlen during match syzbot reported a shift-out-of-bounds in xfrm_select | |
| CVE-2026-72451 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix xfrm state cache insertion race The xfrm input state cache insertion code checks the validity of the | |
| CVE-2026-72452 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/i915: clear CRTC color blob pointers after dropping refs intel_crtc_put_color_blobs() drops the CRTC color | |
| CVE-2026-72453 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: regcache: Do not overwrite error code when finalizing cache after error During regcache initialization, if an | |
| CVE-2026-72454 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Fix race in i3c_hci_addr_to_dev() i3c_hci_addr_to_dev() walks bus->devs.i3c, which is prote | |
| CVE-2026-72455 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix uninitialised pointer passed to audit_log_untrustedstring() Commit 4a134723f9f1 ("apparmor: move | |
| CVE-2026-72456 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: apparmor: release exe file resources on path failure get_current_exe_path() takes both an exe_file reference a | |
| CVE-2026-72457 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fail policy unpack on accept2 allocation failure unpack_pdb() may need to allocate a missing ACCEPT2 | |
| CVE-2026-72458 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix NULL pointer dereference in unpack_pdb pdb->dfa could be NULL if unpack_dfa fails, causing a NUL | |
| CVE-2026-72459 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: apparmor: aa_label_alloc use aa_label_free on alloc failure aa_label_alloc() allocates a secid before allocati | |
| CVE-2026-72460 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: apparmor: check label build before no_new_privs test aa_change_profile() builds a replacement label with fn_la | |
| CVE-2026-72461 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix refcount leak when updating the sk_ctx Currently update_sk_ctx() transfers the plabel reference, | |
| CVE-2026-72462 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race in unix socket mediation when peer_path is used The holding a reference to the peer_sk is n | |
| CVE-2026-72463 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix dev use-after-free in xfrm async resumption xfrm async resumption hold skb->dev refcnt until after t | |
| CVE-2026-72464 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Repost Receive buffers for malformed replies rpcrdma_wc_receive() decrements the transport's Receive | |
| CVE-2026-72465 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Sanitize the reply credit grant after parsing The out_norqst exit in rpcrdma_reply_handler() branche | |
| CVE-2026-72466 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Fix bcall rep leak and unbounded peek rpcrdma_is_bcall() decodes a reply's first words to decide whe | |
| CVE-2026-72467 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Check frwr_wp_create() during connect frwr_wp_create() creates the singleton Memory Region used to e | |
| CVE-2026-72468 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Initialize re_id before removal registration rpcrdma_create_id() registers ep->re_rn with the rpcrdm | |
| CVE-2026-72469 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Fix ep kref imbalance on ADDR_CHANGE rpcrdma_cm_event_handler() falls through to the disconnected: l | |
| CVE-2026-72470 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: resize log->one_page_buf when adopting on-disk page size log_replay() allocates log->one_page_buf us | |
| CVE-2026-72471 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: prevent potential lcn remains uninitialized The target VCN being sought was not found within runs[0] | |
| CVE-2026-72472 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfs: use nfsi->rwsem to protect traversal of the file lock list Lingfeng identified a bug and suggested two so | |
| CVE-2026-72473 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Decouple req recycling from RPC completion rl_kref formerly served two distinct lifetimes through a | |
| CVE-2026-72474 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: dma-axi-dmac: use DMA pool to manange DMA descriptor For architectures like Microblaze or arm64 (wh | |
| CVE-2026-72475 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: dma-axi-dmac: Properly free struct axi_dmac_desc Use axi_dmac_free_desc() to free fully the descrip | |
| CVE-2026-72476 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: Fix possible use after free In dma_release_channel(), check chan->device->privatecnt after call dma | |
| CVE-2026-72477 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: call _ntfs_bad_inode() when failing to rename It is safe to call _ntfs_bad_inode on live inodes sinc | |
| CVE-2026-72478 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: add bounds check to run_get_highest_vcn() run_get_highest_vcn() parses a packed NTFS mapping-pairs b | |
| CVE-2026-72479 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: accel: mma8452: handle I2C read error(s) in mma8452_read() Currently, If i2c_smbus_read_i2c_block_data() | |
| CVE-2026-72480 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling ams_event_to_channel() may return a p | |
| CVE-2026-72481 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: magnetometer: ak8975: fix potential kernel stack memory leak Currently in the AK8975 driver there are fou | |
| CVE-2026-72482 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: gpib: fix double decrement of descriptor_busy in command_ioctl() commit d1857f8296dc ("gpib: fix use-after-fre | |
| CVE-2026-72483 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control() The `max3421_hub_control()` function hand | |
| CVE-2026-72484 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: staging: most: video: avoid double free on video register failure comp_register_videodev() allocates a video_d | |
| CVE-2026-72485 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: coresight: platform: defer connection counter increment until alloc succeeds coresight_add_out_conn() incremen | |
| CVE-2026-72486 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mailbox: mtk-adsp: fix UAF during device teardown When the SOF audio driver fails to initialize (e.g. firmware | |
| CVE-2026-72487 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: PCI: Check ROM header and data structure addr before accessing We meet a crash when running stress-ng on x86_6 | |
| CVE-2026-72488 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: soundwire: fix bug in sdw_add_element_group_count found by syzkaller The original implementation caused an out | |
| CVE-2026-72489 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: staging: nvec: fix use-after-free in nvec_rx_completed() In nvec_rx_completed(), when an incomplete RX transfe | |
| CVE-2026-72490 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix stainfo check in rtw_aes_decrypt The null-pointer-guard was incorrect, returning _FAIL | |
| CVE-2026-72491 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/9p: fix race condition on rdma->state in trans_rdma.c The rdma->state field is modified without holding re | |
| CVE-2026-72492 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in same_client_has_lease() same_client_has_lease() returns an opinfo pointer from ci | |
| CVE-2026-72493 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: serialize netif_running() check in enqueue_to_backlog() Syzbot reported a KASAN slab-use-after-free in fi | |
| CVE-2026-72494 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Replace waitqueue and flag with completion The driver previously used a waitqueue along with an ex | |
| CVE-2026-72495 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Avoid repeated requests to allocate WC pages Applications can request multiple WC pages for the | |
| CVE-2026-72496 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Proper rollback if the ioremap fails bnxt_qplib_alloc_dpi returns success even if ioremap fails. | |
| CVE-2026-72497 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Add a max slot check for SQ The variable WQE mode must be validated against the maximum slots su | |
| CVE-2026-72498 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Avoid displaying the kernel pointer While dumping the info on MR using the rdma tool, we dump th | |
| CVE-2026-72499 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Free CQ toggle page after firmware teardown Free the toggle page only after firmware teardown co | |
| CVE-2026-72500 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Free SRQ toggle page after firmware teardown Free the toggle page only after firmware teardown c | |
| CVE-2026-72501 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Initialize dpi variable to zero dpi is initialized only for BNXT_RE_ALLOC_WC_PAGE, but copied fo | |
| CVE-2026-72502 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) When MTU is large, ip6_default_advmss() | |
| CVE-2026-72506 | Deferred | 未確認 | CWE-941 | VoiceTra provided by National Institute of Information and Communications Technology (NICT) contains an incorrectly specified destination in a communication channel vulnerability. |
| CVE-2026-72508 | Awaiting Analysis | 未確認 | CWE-250 | A flaw was found in the multicloud-operators-subscription component of Red Hat Advanced Cluster Management (RHACM). This vulnerability allows a namespace-admin tenant to perform a |
| CVE-2026-72522 | Deferred | 未確認 | CWE-125 | libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing in the *_toUtf1 |
| CVE-2026-72526 | Awaiting Analysis | 未確認 | CWE-441 | A flaw was found in the multicloud-integrations component. The Application propagation controller processes the `ocm-managed-cluster` annotation from an Application Custom Resource |
| CVE-2026-72529 | Analyzed | 掲載 | CWE-306 | A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an ar |
| CVE-2026-72530 | Analyzed | 掲載 | CWE-94 | A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could use a special |
| CVE-2026-72531 | Analyzed | 未確認 | CWE-284 | Joomla! Core - [20260804] - Improper ACL checks for custom fields webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows unauthorized users to cr |
| CVE-2026-72532 | Analyzed | 未確認 | CWE-284 | Joomla! Core - [20260806] - Improper ACL checks for category webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows unauthorized users to create |
| CVE-2026-72533 | Deferred | 未確認 | CWE-287 | An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged users to bypass Docker proxy authorization checks via non-canonical URL no |
| CVE-2026-72534 | Deferred | 未確認 | CWE-269 | A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to gain superuser privileges b |
| CVE-2026-72535 | Deferred | 未確認 | CWE-306 | A missing authentication vulnerability in Chaskiq through commit 46dfdd1 allows unauthenticated remote attackers to mint Stripe Billing Portal sessions for any tenant via the strip |
| CVE-2026-72536 | Deferred | 未確認 | CWE-306 | A missing authentication vulnerability in Chaskiq through commit 46dfdd1 allows unauthenticated remote attackers to manipulate any tenant Stripe subscription via the stripeCreateIn |
| CVE-2026-72537 | Deferred | 未確認 | CWE-269 | A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to take over any user account |
| CVE-2026-72538 | Deferred | 未確認 | CWE-88 | An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the git_clone pull step branch field. The bra |
| CVE-2026-72539 | Deferred | 未確認 | CWE-200 | An information disclosure vulnerability in Windmill Labs Windmill through 1.783.0 allows any authenticated workspace member to read legacy ownerless draft scripts that contain plai |
| CVE-2026-72540 | Rejected | 未確認 | Rejected reason: Red Hat CNA-LR concluded that this CVE is not valid. | |
| CVE-2026-72541 | Deferred | 未確認 | CWE-306 | A missing authorization vulnerability in Windmill Labs Windmill through 1.783.0 allows any authenticated workspace member to overwrite any resource type schema via the update_resou |
| CVE-2026-72542 | Deferred | 未確認 | CWE-306 | A missing authorization vulnerability in Windmill Labs Windmill through 1.783.0 allows authenticated operators to write job progress and read job metrics for any job in the workspa |
| CVE-2026-72543 | Deferred | 未確認 | CWE-639 | An insecure direct object reference vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to retrieve any contact record via the getcontact |
| CVE-2026-72544 | Deferred | 未確認 | CWE-345 | An integrity verification vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to forge document audit-trail entries via the triggerevent P |
| CVE-2026-72545 | Deferred | 未確認 | CWE-639 | An insecure direct object reference vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to write to any contact record via the updateconta |
| CVE-2026-72546 | Deferred | 未確認 | CWE-639 | An insecure direct object reference vulnerability in Attendize through commit 9289acb allows any authenticated event organiser to inject attendees and orders into events belonging |
| CVE-2026-72547 | Deferred | 未確認 | CWE-639 | An insecure direct object reference vulnerability in Attendize through commit 9289acb allows any authenticated event organiser to bulk import attendees into events belonging to oth |
| CVE-2026-72548 | Deferred | 未確認 | CWE-200 | An information disclosure vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to retrieve any organisation tenant record via the gettenant |
| CVE-2026-72549 | Deferred | 未確認 | CWE-200 | An information disclosure vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to map any email address or username to its internal user ob |
| CVE-2026-72550 | Deferred | 未確認 | CWE-89 | An SQL injection vulnerability in Friendica through the 2026.08-dev branch allows unauthenticated remote attackers to execute arbitrary SQL statements via the photo-view order para |
| CVE-2026-72551 | Deferred | 未確認 | CWE-78 | A remote code execution vulnerability in Apioo Fusio 8.8.3 allows authenticated users with the Developer role to execute arbitrary OS commands by exploiting a PHP-Sandbox allow-lis |
| CVE-2026-72552 | Deferred | 未確認 | CWE-918 | A server-side request forgery vulnerability in Dub as of 2026-07-10 allows unauthenticated remote attackers to make the server issue HTTP requests to arbitrary internal or external |
| CVE-2026-72553 | Deferred | 未確認 | CWE-79 | A stored cross-site scripting vulnerability in ElkArte Forum 2.0 Beta 1 allows any registered member to inject persistent JavaScript into the profile fields cust_blurb and cust_loc |
| CVE-2026-72554 | Deferred | 未確認 | CWE-284 | A broken access control vulnerability in Ladybird Web Solution Faveo Helpdesk 2.0.3 allows any self-registered customer to read ticket conversations belonging to other customers vi |
| CVE-2026-72555 | Deferred | 未確認 | CWE-284 | A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 exists because the Config.roles_active flag defaults to false, causing all permission chec |
| CVE-2026-72556 | Deferred | 未確認 | CWE-78 | A remote code execution vulnerability in ZoneMinder 1.39.17 allows any authenticated user to execute OS commands by exploiting a broken permission check in the Filter class. The ca |
| CVE-2026-72557 | Deferred | 未確認 | CWE-434 | An unrestricted file upload vulnerability in Cockpit CMS 2.6.0 allows authenticated users to upload files of any extension including PHP scripts via the asset upload endpoint. The |
| CVE-2026-72558 | Deferred | 未確認 | CWE-89 | An SQL injection vulnerability in CiviCRM through 6.18.alpha1 allows authenticated staff to read the entire database via the contact search RLIKE clause. The clause concatenates a |
| CVE-2026-72559 | Deferred | 未確認 | CWE-79 | A stored cross-site scripting vulnerability in HortusFox 5.9 allows authenticated workspace members to inject persistent JavaScript into plant notes via Parsedown rendered without |
| CVE-2026-72560 | Deferred | 未確認 | CWE-918 | A server-side request forgery vulnerability in HumanSignal Label Studio through 1.24.0.dev0 exists because SSRF_PROTECTION_ENABLED is set to false by default. The import-from-URL e |
| CVE-2026-72561 | Deferred | 未確認 | CWE-284 | A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 allows any authenticated non-administrative user to reconfigure the platform global OIDC/S |
| CVE-2026-72562 | Deferred | 未確認 | CWE-89 | An SQL injection vulnerability in Pimcore admin-ui-classic-bundle through version 2.3 allows authenticated backend users to execute arbitrary SQL via the DataObject grid id column |
| CVE-2026-72563 | Deferred | 未確認 | CWE-284 | A broken access control vulnerability in BadChoice Handesk as of 2026-07-10 allows any authenticated agent to overwrite lead records belonging to other teams via the LeadsControlle |
| CVE-2026-72564 | Deferred | 未確認 | CWE-639 | An improper authorization vulnerability in fosrl/pangolin through v1.20.0 allows an authenticated remote attacker to authenticate to any resource in any organization by reusing an |
| CVE-2026-72565 | Deferred | 未確認 | CWE-89 | A SQL injection vulnerability in Tencent APIJSON through 8.1.8 allows unauthenticated remote attackers to bypass per-table access control and read arbitrary database tables via the |
| CVE-2026-72566 | Deferred | 未確認 | CWE-918 | A server-side request forgery (SSRF) vulnerability in automatisch through commit 41f3c56 allows a low-privileged authenticated user with 'manage Flow' permission to make the server |
| CVE-2026-72567 | Deferred | 未確認 | CWE-22 | An improper path validation vulnerability in AsyncFuncAI/deepwiki-open through commit 16f35a0 allows unauthenticated remote attackers to write to or delete arbitrary files with roo |
| CVE-2026-72568 | Rejected | 未確認 | Rejected reason: Red Hat CNA-LR concluded that this CVE is not valid. | |
| CVE-2026-72569 | Deferred | 未確認 | CWE-22 | A path traversal vulnerability in cube-root/directory-serve through 1.3.7 allows an unauthenticated remote attacker to delete arbitrary files outside the intended served directory |
| CVE-2026-72570 | Deferred | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability in cube-root/directory-serve through 1.3.7 allows an attacker to inject arbitrary JavaScript into the web interface by uploading a |
| CVE-2026-72571 | Deferred | 未確認 | CWE-22 | A path traversal vulnerability in mustafaakin/cast-localvideo (all versions) allows an unauthenticated remote attacker to read arbitrary files from the server. The app.js handler a |
| CVE-2026-72572 | Deferred | 未確認 | CWE-22 | A path traversal vulnerability in o1lab/xmysql (all versions) allows an unauthenticated remote attacker to read and download arbitrary files from the server. The lib/xapi.js file a |
| CVE-2026-72573 | Deferred | 未確認 | CWE-78 | An OS command injection vulnerability in 4xmen/pm2panel (all versions) allows an authenticated remote attacker to execute arbitrary system commands on the host. The pm2panel.js han |
| CVE-2026-72574 | Deferred | 未確認 | CWE-644 | A host header injection vulnerability in picocms/Pico through 2.1.4 allows an unauthenticated remote attacker to control the origin of JavaScript and CSS assets loaded by the defau |
| CVE-2026-72575 | Deferred | 未確認 | CWE-284 | An improper authorization vulnerability in daptin through v0.12.34 allows unauthenticated remote attackers to read, create, update, and delete usergroup records. The permission che |
| CVE-2026-72576 | Deferred | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability in Bludit 4.0.0-beta allows a low-privileged authenticated user (Author role) to inject arbitrary JavaScript by uploading a crafte |
| CVE-2026-72577 | Deferred | 未確認 | CWE-306 | Multiple vulnerabilities in NASA fprime-gds through 3.4.3 allow an unauthenticated remote attacker to achieve arbitrary code execution on the ground station host and inject arbitra |
| CVE-2026-72578 | Deferred | 未確認 | CWE-352 | A cross-site request forgery (CSRF) vulnerability in FreePBX Framework 17.0 allows an unauthenticated remote attacker to perform administrative actions on behalf of an authenticate |
| CVE-2026-72579 | Deferred | 未確認 | CWE-78 | An OS command injection vulnerability in NASA HyperCP (main branch) allows a network-adjacent attacker who can intercept or spoof responses from oceandata.sci.gsfc.nasa.gov to exec |
| CVE-2026-72580 | Deferred | 未確認 | CWE-78 | An OS command injection vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker to execute arbitrary system commands on Xiaomi smart speakers running th |
| CVE-2026-72581 | Deferred | 未確認 | CWE-918 | A server-side request forgery (SSRF) vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker to make the Xiaomi smart speaker perform HTTP requests to a |
| CVE-2026-72582 | Deferred | 未確認 | CWE-476 | A NULL pointer dereference vulnerability in fastschema through v0.15.1 allows an unauthenticated remote attacker to crash the server process with a single HTTP request. The sendOTP |
| CVE-2026-72583 | Deferred | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability in fastschema through v0.15.1 allows a low-privileged authenticated user to upload an SVG file containing malicious JavaScript by |
| CVE-2026-72584 | Deferred | 未確認 | CWE-367 | A time-of-check/time-of-use (TOCTOU) race condition in fastschema through v0.15.1 allows an unauthenticated remote attacker to bypass the OTP attempt limit on the account recovery |
| CVE-2026-72585 | Rejected | 未確認 | Rejected reason: Red Hat CNA-LR concluded that this CVE is not valid. | |
| CVE-2026-72586 | Deferred | 未確認 | CWE-306 | A missing authentication vulnerability in frangoteam/FUXA through 1.3.3 allows an unauthenticated remote attacker to query all historical sensor data via the DAQ_QUERY Socket.IO ev |
| CVE-2026-72587 | Deferred | 未確認 | CWE-444 | A cache poisoning vulnerability in CoreBunch/Instatic through 0.0.14 allows an unauthenticated remote attacker to poison the shared process-wide render cache by manipulating the u |
| CVE-2026-72588 | Deferred | 未確認 | CWE-204 | A user enumeration vulnerability in bluewave-labs/Checkmate through 2.1.0 allows an unauthenticated remote attacker to determine whether a given email address is registered. The PO |
| CVE-2026-72589 | Deferred | 未確認 | CWE-78 | An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker to execute arbitrary system commands by importing a crafted |
| CVE-2026-72590 | Deferred | 未確認 | CWE-93 | An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker to inject arbitrary cron job entries by sending a crafted G |
| CVE-2026-72591 | Deferred | 未確認 | CWE-918 | A server-side request forgery (SSRF) vulnerability in gabehf/Koito through v0.3.2 allows an authenticated user to make the server perform HTTP requests to arbitrary internal or ext |
| CVE-2026-72592 | Deferred | 未確認 | CWE-434 | An unrestricted file upload vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated remote attacker to execute arbitrary PHP code on the server. The application shi |
| CVE-2026-72593 | Deferred | 未確認 | CWE-306 | A missing authentication vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated remote attacker to access the full file manager functionality including reading, wr |
| CVE-2026-72594 | Deferred | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability in lobehub/lobe-chat through v2.2.13 allows a low-privileged authenticated user to inject arbitrary JavaScript into the applicatio |
| CVE-2026-72595 | Deferred | 未確認 | CWE-284 | A broken access control vulnerability in BadChoice Handesk as of 2026-07-10 allows any authenticated agent to update ticket records belonging to other teams via the TicketsControll |
| CVE-2026-72596 | Deferred | 未確認 | CWE-284 | A broken access control vulnerability in Ghost Foundation Ghost 5.x allows authenticated Author-role users to delete posts owned by other users. The post model permissible() cascad |
| CVE-2026-72597 | Deferred | 未確認 | CWE-918 | A server-side request forgery vulnerability in Friendica through the 2026.08-dev branch allows authenticated users with a free self-registered account to probe internal network ser |
| CVE-2026-72598 | Deferred | 未確認 | CWE-918 | A server-side request forgery vulnerability in Apioo Fusio 8.8.3 allows authenticated consumer-role users to make the server issue HTTP requests to internal network addresses by re |
| CVE-2026-72599 | Deferred | 未確認 | CWE-89 | An SQL injection vulnerability in e107 2.4.0 allows unauthenticated remote attackers to execute arbitrary SQL via the news item page ID parameter. The parameter is concatenated wit |
| CVE-2026-72600 | Deferred | 未確認 | CWE-284 | A broken access control vulnerability in Idurar IDURAR ERP CRM 4.1.0 allows unauthenticated remote attackers to download invoice PDF files containing customer PII via the /download |
| CVE-2026-72601 | Deferred | 未確認 | CWE-284 | A broken access control vulnerability in CSZ CMS 1.3.2 allows unauthenticated remote attackers to read all form submissions including personally identifiable information via the ad |
| CVE-2026-72602 | Deferred | 未確認 | CWE-22 | A path traversal vulnerability in AsyncFuncAI deepwiki-open through commit 16f35a0 allows unauthenticated remote attackers to obtain directory listings for arbitrary filesystem pat |
| CVE-2026-72603 | Deferred | 未確認 | CWE-78 | An OS command injection vulnerability in wg-easy 15.3.0 allows users with the clients.create permission to execute arbitrary commands as root by injecting newline-delimited WireGua |
| CVE-2026-72604 | Deferred | 未確認 | CWE-22 | A path traversal vulnerability in Intelliants Subrion CMS through 4.2.1 allows authenticated administrators to delete arbitrary files on the server via the admin panel file deletio |
| CVE-2026-72605 | Deferred | 未確認 | CWE-306 | A missing authentication vulnerability in Swing Music 3.0.0 allows unauthenticated remote attackers to create arbitrary user accounts via the POST /auth/profile/create endpoint. Th |
| CVE-2026-72606 | Deferred | 未確認 | CWE-918 | A server-side request forgery vulnerability in Pinry through 2.1.13 allows unauthenticated remote attackers to make the server issue HTTP requests to arbitrary internal or external |
| CVE-2026-72607 | Awaiting Analysis | 未確認 | CWE-89 | A stored SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with the tools => items_batchmod permission to read arbit |
| CVE-2026-72608 | Awaiting Analysis | 未確認 | CWE-89 | A stored SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with the tools => label_creator permission to execute arb |
| CVE-2026-72609 | Awaiting Analysis | 未確認 | CWE-89 | An SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with the acquisition => order_receive permission to read arbitr |
| CVE-2026-72610 | Awaiting Analysis | 未確認 | CWE-89 | A stored SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with the borrowers => edit_borrowers permission to cause |
| CVE-2026-72629 | Analyzed | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized cross-space access via Accessing Functionality Not Properly Constrained by ACLs (CAPEC |
| CVE-2026-72630 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization (CWE-863) in Kibana Fleet can lead to privilege escalation via Privilege Abuse (CAPEC-122). Fleet restricts some callers to managing integration policies fo |
| CVE-2026-72631 | Analyzed | 未確認 | CWE-269 | Improper Privilege Management (CWE-269) in Kibana Fleet can lead to privilege escalation via Privilege Escalation (CAPEC-233). An integration policy may optionally declare extra da |
| CVE-2026-72632 | Analyzed | 未確認 | CWE-203 | Observable Discrepancy (CWE-203) in Kibana Fleet can lead to information disclosure via Excavation (CAPEC-116). Fleet removes the Elasticsearch API key value of an enrolled Elastic |
| CVE-2026-72636 | Analyzed | 未確認 | CWE-674 | Uncontrolled Recursion (CWE-674) in the Elasticsearch wildcard matching helper can lead to a denial of service via Excessive Allocation (CAPEC-130). The matcher used to resolve wil |
| CVE-2026-72638 | Analyzed | 未確認 | CWE-674 | Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Input Data Manipulation (CAPEC-153). An authenticated user holding only low-privileged index cre |
| CVE-2026-72639 | Analyzed | 未確認 | CWE-789 | Elasticsearch does not enforce an upper bound on a user-supplied count accepted by a search highlighting option, and the allocation derived from that count is not accounted against |
| CVE-2026-72640 | Analyzed | 未確認 | CWE-441 | The Elastic Cloud on Kubernetes (ECK) operator reads a list of secret references from an annotation on secrets it manages, and it accepts the namespace recorded in each reference w |
| CVE-2026-72642 | Analyzed | 未確認 | CWE-823 | The native inference process that Elasticsearch uses to evaluate uploaded machine learning models accepts a model operation that computes a memory address from an offset supplied i |
| CVE-2026-72643 | Analyzed | 未確認 | CWE-863 | Kibana Agent Builder determines whether a caller owns a private agent by comparing a stable user identifier when one is recorded, and falling back to a comparison of the username w |
| CVE-2026-72645 | Analyzed | 未確認 | CWE-789 | Memory Allocation with Excessive Size Value (CWE-789) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user holding only read p |
| CVE-2026-72647 | Analyzed | 未確認 | CWE-674 | Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads (CAPEC-230). An authenticated user holding only read privil |
| CVE-2026-72648 | Analyzed | 未確認 | CWE-526 | Cleartext Storage of Sensitive Information in an Environment Variable (CWE-526) in Elastic Cloud on Kubernetes (ECK) can lead to information disclosure via Retrieve Embedded Sensit |
| CVE-2026-72650 | Analyzed | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An a |
| CVE-2026-72651 | Analyzed | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user with read-only pr |
| CVE-2026-72653 | Analyzed | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user who is authorized |
| CVE-2026-72655 | Analyzed | 未確認 | CWE-915 | Improperly Controlled Modification of Dynamically-Determined Object Attributes (CWE-915) in the case management functionality of Elastic Security in Kibana can lead to unauthorized |
| CVE-2026-72656 | Analyzed | 未確認 | CWE-789 | Memory Allocation with Excessive Size Value (CWE-789) in the ES|QL query processing of Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). An authenti |
| CVE-2026-72657 | Analyzed | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key (CWE-639) in Fleet Server can lead to information disclosure via Manipulating User-Controlled Variables (CAPEC-77). The authorizati |
| CVE-2026-72658 | Analyzed | 未確認 | CWE-352 | Cross-Site Request Forgery (CWE-352) in Kibana can lead to privilege escalation via Cross Site Request Forgery (CAPEC-62). A user who is permitted to create visualizations can save |
| CVE-2026-72659 | Analyzed | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). A specially crafted, malformed payload |
| CVE-2026-72660 | Analyzed | 未確認 | CWE-248 | Uncaught Exception (CWE-248), resulting from Improper Input Validation (CWE-20), in Kibana can lead to denial of service via Input Data Manipulation (CAPEC-153). An authenticated u |
| CVE-2026-72661 | Analyzed | 未確認 | CWE-862 | Missing Authorization (CWE-862) in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An internal Kibana data retriev |
| CVE-2026-72663 | Analyzed | 未確認 | CWE-407 | Inefficient Algorithmic Complexity (CWE-407) in Kibana can lead to denial of service via Input Data Manipulation (CAPEC-153). A specially crafted, deeply nested expression submitte |
| CVE-2026-72664 | Analyzed | 未確認 | CWE-862 | Missing Authorization (CWE-862) in Kibana can lead to unauthorized execution of Elastic Defend response actions on managed hosts via Accessing Functionality Not Properly Constraine |
| CVE-2026-72665 | Analyzed | 未確認 | CWE-862 | Missing Authorization (CWE-862) in Kibana can lead to unauthorized execution of Osquery and Elastic Defend response actions on managed hosts via Accessing Functionality Not Properl |
| CVE-2026-72666 | Analyzed | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized query execution against Elastic Agents that are assigned to a Kibana space the request |
| CVE-2026-72667 | Analyzed | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). A specially crafted request submitted |
| CVE-2026-72669 | Analyzed | 未確認 | CWE-862 | The state that Kibana stores for an Observability Onboarding flow is not bound to the user who created the flow, and the routes that read and update that state do not verify owners |
| CVE-2026-72670 | Analyzed | 未確認 | CWE-200 | A lower privileged user who holds only the privilege to read agent policies can read the entire configuration of a configured Fleet proxy. This would normally require the Fleet pri |
| CVE-2026-72671 | Analyzed | 未確認 | CWE-862 | A Kibana Machine Learning capability that removes a saved object from the current space accepts machine learning trained models as a target, but it verifies only the privileges tha |
| CVE-2026-72672 | Analyzed | 未確認 | CWE-863 | The Elastic Security capability that suggests existing field values while a user authors endpoint policy artifacts queries Elastic Defend event data with Kibana's internal Elastics |
| CVE-2026-72673 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized deletion of Synthetics private locations via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1) |
| CVE-2026-72674 | Analyzed | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). A user-supplied list of document fiel |
| CVE-2026-72675 | Analyzed | 未確認 | CWE-862 | Missing Authorization (CWE-862) in Kibana can lead to cross-space information disclosure and unauthorized data modification via Privilege Abuse (CAPEC-122). Kibana Machine Learning |
| CVE-2026-72676 | Analyzed | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') (CWE-94) in Fleet Server can lead to the execution of attacker-supplied script content via Code Injection (CAPEC-242). Kib |
| CVE-2026-72677 | Analyzed | 未確認 | CWE-23 | Relative Path Traversal (CWE-23) in Kibana can lead to the unauthorized deletion of Kibana resources via Relative Path Traversal (CAPEC-139). Kibana Fleet accepted a user-supplied |
| CVE-2026-72678 | Analyzed | 未確認 | CWE-789 | Elasticsearch does not validate a size value taken from a user-supplied input before that value is used to reserve memory for an internal data structure. An authenticated user hold |
| CVE-2026-72679 | Analyzed | 未確認 | CWE-674 | Elasticsearch does not apply its configurable input length restriction to a user-supplied pattern accepted by an intervals query. Compiling a deeply nested pattern drives unbounded |
| CVE-2026-72680 | Analyzed | 未確認 | CWE-639 | Kibana Agent Builder A2A JSON-RPC API endpoint derives the identifier of a stored conversation from a user-supplied input, and the ownership check on that identifier does not disti |
| CVE-2026-72681 | Analyzed | 未確認 | CWE-862 | Kibana Agent Builder does not correctly verify that the requesting user holds the privileges required by a separate Kibana feature before it creates and runs a tool that invokes th |
| CVE-2026-72683 | Analyzed | 未確認 | CWE-674 | A flaw in Elasticsearch allows an authenticated user with the privileges required to invoke the simulate pipeline API endpoint (https://www.elastic.co/docs/api/doc/elasticsearch/op |
| CVE-2026-72684 | Analyzed | 未確認 | CWE-770 | A flaw in Elasticsearch allows an authenticated user holding only read privileges to submit a small search request containing a crafted user-supplied input. Processing that input c |
| CVE-2026-72685 | Analyzed | 未確認 | CWE-407 | A flaw in Elasticsearch allows a low-privileged authenticated user who can index documents to submit a single small document containing a crafted user-supplied input. Processing on |
| CVE-2026-72686 | Analyzed | 未確認 | CWE-674 | A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single request containing a crafted user-supplied input. A specific internal component validates the |
| CVE-2026-72687 | Analyzed | 未確認 | CWE-789 | A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged opaque identifier. Elasticsearch decodes and deserializes th |
| CVE-2026-72688 | Deferred | 未確認 | CWE-306 | A missing authentication vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to read arbitrary stored documents via the fileupload |
| CVE-2026-72689 | Deferred | 未確認 | CWE-639 | A broken object-level authorization vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to read complete contract records via the |
| CVE-2026-72690 | Deferred | 未確認 | CWE-639 | An improper authorization vulnerability in Attendize through commit 9289acb allows an authenticated remote attacker to inject persistent mandatory survey questions into another org |
| CVE-2026-72691 | Deferred | 未確認 | CWE-288 | An authentication bypass vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to mint MASTER_KEY-signed file access tokens for arbi |
| CVE-2026-72692 | Deferred | 未確認 | CWE-862 | A missing authorization vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to irreversibly decline any in-flight document and for |
| CVE-2026-72693 | Awaiting Analysis | 未確認 | CWE-284 | `openvt -u` is intended to identify the owner of the current VT and then execute `login` as that user from a privileged context. In the documented `kbrequest`/init usage, the owner |
| CVE-2026-72694 | Awaiting Analysis | 未確認 | CWE-59 | A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low-privileged attacker can exploit a symbolic link (symlink) f |
| CVE-2026-72695 | Deferred | 未確認 | CWE-22 | Grav before 2.0.16 contains a path traversal vulnerability in MediaUploadTrait::deleteFile() that allows authenticated users with media management permissions to delete arbitrary f |
| CVE-2026-72696 | Deferred | 未確認 | CWE-59 | Grav CMS before 2.0.16 contains a symlink following vulnerability in Scheduler Job::createLockFile() that allows local attackers to overwrite arbitrary files by pre-creating symlin |
| CVE-2026-72697 | Deferred | 未確認 | CWE-22 | Grav CMS before 2.0.16 contains a path traversal vulnerability in the media_directory() Twig function that fails to validate filesystem paths, allowing authenticated users to enume |
| CVE-2026-72698 | Deferred | 未確認 | CWE-200 | Grav CMS before 2.0.16 fails to filter system, site, and theme configuration arrays in sandboxed Twig renders, allowing content editors to read sensitive configuration values. Atta |
| CVE-2026-72699 | Deferred | 未確認 | CWE-203 | The Grav Login plugin (getgrav/grav-plugin-login) before 3.9.1 is vulnerable to email address enumeration. The register() method in classes/Login.php throws a distinct exception (E |
| CVE-2026-72700 | Deferred | 未確認 | CWE-208 | The getgrav/grav-plugin-login Composer plugin before 3.9.1 (used by Grav) compares password reset and account activation tokens using a non-constant-time === string comparison inst |
| CVE-2026-72701 | Deferred | 未確認 | CWE-208 | Grav CMS before 2.0.16 contains a timing vulnerability in Utils::verifyNonce() that uses non-constant-time string comparison with the === operator instead of hash_equals() for CSRF |
| CVE-2026-72702 | Deferred | 未確認 | CWE-346 | Grav CMS before 2.0.16 contains an origin validation bypass in the Uri::referrer() and Pages::referrerRoute() methods, which validate the Referer header using an unanchored string |
| CVE-2026-72703 | Deferred | 未確認 | CWE-670 | The guard checker in Rocq Prover treats a parameter of a nested mutual fixpoint as uniform without examining calls between the different bodies of that fixpoint. find_uniform_param |
| CVE-2026-72704 | Deferred | 未確認 | CWE-670 | The guard checker in Rocq Prover does not recheck the recursive tree representation of an inductive type parameter after that parameter has been changed by transport. A fixpoint ma |
| CVE-2026-72705 | Deferred | 未確認 | CWE-670 | The guard checker in Rocq Prover does not follow recursive calls made through a fixpoint's own arguments. A fixpoint may pass itself as a higher-order argument to a second fixpoint |
| CVE-2026-72711 | Deferred | 未確認 | CWE-20 | The Lean 4 kernel does not check that the body of an opaque declaration is closed. environment::add_opaque omits the check_no_metavar_no_fvar call that the definition and theorem p |
| CVE-2026-72712 | Awaiting Analysis | 未確認 | CWE-835 | Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote attackers to crash the application by sending a crafted packet containing a zer |
| CVE-2026-72713 | Deferred | 未確認 | CWE-22 | XAgent contains a path traversal vulnerability in the workspace file endpoint that allows self-registered or default-credential users to read arbitrary files on the host by supplyi |
| CVE-2026-72714 | Deferred | 未確認 | CWE-459 | Rocq Prover does not restore the universe graph's copy of the universe checking flag when a module that locally disabled the check is closed. Local Unset Universe Checking inside a |
| CVE-2026-72716 | Deferred | 未確認 | CWE-1336 | Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.21.0, a ${...} expression or backtick in a query parameter defa |
| CVE-2026-72717 | Deferred | 未確認 | CWE-116, CWE-1336, CWE-94 | Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.21.0, a ${...} expression or backtick in a schema default is em |
| CVE-2026-72718 | Deferred | 未確認 | CWE-94 | goose is general-purpose AI agent that runs on your machine. Prior to 1.44.0, the `goose review` command runs the system `git` executable to gather the diff for review without stri |
| CVE-2026-72719 | Deferred | 未確認 | CWE-915 | Chatwoot is a customer engagement suite. Prior to 4.9.0, Chatwoot allowed authenticated account administrators to transfer Portals, Automation Rules, Macros, and Twilio Channels to |
| CVE-2026-72720 | Deferred | 未確認 | CWE-79 | Discourse is an open-source discussion platform. Prior to 2026.1.7, 2026.6.2, 2026.7.1, and 2026.8.0-latest.1, Discourse has HTML injection in PrettyText.format_for_email because c |
| CVE-2026-72721 | Deferred | 未確認 | CWE-178 | Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, Onebox::DomainChecker.is_blocked? compares hostnames and SiteSetting.blocked_o |
| CVE-2026-72722 | Deferred | 未確認 | CWE-862 | Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, TopicLink.extract_from, TopicLink.ensure_entry_for, and TopicLink.duplicate_lo |
| CVE-2026-72723 | Deferred | 未確認 | CWE-862 | Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, SiteSerializer.anonymous_default_navigation_menu_tags serializes tags from Sit |
| CVE-2026-72724 | Deferred | 未確認 | CWE-639 | Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, plugins/chat/lib/chat/onebox_handler.rb resolves Chat::Thread by route thread_ |
| CVE-2026-72725 | Deferred | 未確認 | CWE-79 | Discourse is an open-source discussion platform. Prior to 2026.1.6, the staff action log model rendered unescaped previous and new value fields that could inject stored cross-site |
| CVE-2026-72726 | Deferred | 未確認 | CWE-200 | Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, an authenticated user could eavesdrop on private AI bot conversations through |
| CVE-2026-72727 | Deferred | 未確認 | CWE-79 | Discourse is an open-source discussion platform. Prior to 026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, a low-privileged user could place crafted content in the moderation review queu |
| CVE-2026-72728 | Deferred | 未確認 | CWE-20 | Discourse is an open-source discussion platform. Prior to 2026.1.7, an authenticated user could submit specially formed URLs that bypassed the Onebox allowlist and embedded malicio |
| CVE-2026-72729 | Deferred | 未確認 | CWE-79 | Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, the discourse-local-dates plugin rendered crafted local-date format data as HT |
| CVE-2026-72730 | Deferred | 未確認 | CWE-79 | Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, the Rich Text Editor rendered a chat-transcript username as HTML, allowing sto |
| CVE-2026-72731 | Deferred | 未確認 | CWE-89 | Discourse is an open-source discussion platform. From 2026.1.0-latest until 2026.1.7, 2026.6.2, 2026.7.1, and 2026.8.0-latest.1, anyone able to run a parameterized Data Explorer qu |
| CVE-2026-72732 | Deferred | 未確認 | CWE-862 | Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, the discourse_templates endpoint exposed hidden tag names because DiscourseTem |
| CVE-2026-72733 | Deferred | 未確認 | CWE-78 | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the backup.restoreBackupWithLogs tRPC subscription builds database restore shell pipelines from the |
| CVE-2026-72734 | Deferred | 未確認 | CWE-639 | Dokploy is a free, self-hostable Platform as a Service (PaaS). From 0.28.7 until 0.29.13, the server.remove tRPC mutation in apps/dokploy/server/api/routers/server.ts accepts a cal |
| CVE-2026-72735 | Deferred | 未確認 | CWE-77 | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, writeTraefikConfigRemote in packages/server/src/utils/traefik/application.ts serializes user-contro |
| CVE-2026-72736 | Deferred | 未確認 | CWE-77 | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, Dokploy passes user-controlled values directly into shell commands via unquoted template literal in |
| CVE-2026-72737 | Deferred | 未確認 | CWE-639, CWE-862 | Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.29.8 and earlier, backup.create, backup.update, and backup.restoreBackupWithLogs in apps/dokploy/server/api/rout |
| CVE-2026-72738 | Deferred | 未確認 | CWE-78 | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the backup.listBackupFiles tRPC endpoint in apps/dokploy/server/api/routers/backup.ts passes the se |
| CVE-2026-72739 | Deferred | 未確認 | CWE-78 | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the createCommand() function constructs shell commands by interpolating compose service names and c |
| CVE-2026-72740 | Deferred | 未確認 | CWE-78 | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, packages/server/src/utils/providers/git.ts parses the user-controlled customGitUrl with sanitizeRep |
| CVE-2026-72741 | Deferred | 未確認 | CWE-639 | Rainbond through 6.9.7 contains a broken access control vulnerability in the CheckToken function that allows authenticated attackers to access unauthorized enterprise resources by |
| CVE-2026-72742 | Awaiting Analysis | 未確認 | CWE-73 | DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field adapters that allows attackers with influence over language model outputs to read arbitr |
| CVE-2026-72743 | Deferred | 未確認 | CWE-79 | SQLBot through 1.10.0, fixed in commit c3f40a5, contains a stored cross-site scripting vulnerability in the SQText dashboard component that renders TinyMCE output via v-html withou |
| CVE-2026-72744 | Awaiting Analysis | 未確認 | CWE-200 | Nuxt versions >= 4.4.7 and < 4.5.1, and >= 3.21.7 and < 3.21.10, contain an information disclosure vulnerability in the development server's Chrome DevTools workspace endpoint (GET |
| CVE-2026-72745 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as it's a duplicate of CVE-2026-73242. | |
| CVE-2026-72746 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as it's a duplicate of CVE-2026-73241. | |
| CVE-2026-72747 | Deferred | 未確認 | CWE-79 | AVideo fails to sanitize the phone field during user registration, allowing unauthenticated attackers to inject malicious JavaScript that persists in the database. When administrat |
| CVE-2026-72748 | Deferred | 未確認 | CWE-306 | AVideo contains an unauthenticated arbitrary file write vulnerability in the aVideoEncoderChunk.json.php endpoint that allows remote attackers to write up to 4 GB of arbitrary cont |
| CVE-2026-72749 | Analyzed | 未確認 | CWE-1321 | n8n before 1.123.67, 2.31.5, and 2.32.1 contains a prototype pollution vulnerability in the Edit Fields (Set) node. The node assigns output fields via a dot-notation path setter wi |
| CVE-2026-72750 | Analyzed | 未確認 | CWE-89 | n8n before 1.123.67, 2.31.5, and 2.32.1 contains a SQL injection vulnerability in the Snowflake node's Execute Query operation, which interpolates expression values directly into t |
| CVE-2026-72751 | Deferred | 未確認 | CWE-79 | CTI-Transmute is affected by a stored cross-site scripting (XSS) vulnerability in the conversion graph used to visualise converted MISP and STIX content. Attacker-controlled value |
| CVE-2026-72759 | Deferred | 未確認 | CWE-862 | In affected versions of MISP cti-transmute, the conversion-history details endpoint performs an incomplete authorization check. When a history record references a deleted conversio |
| CVE-2026-72760 | Deferred | 未確認 | CWE-200 | Affected versions of MISP cti-transmute disclose users' email addresses through the account following-list endpoint. When an authenticated user follows another account, get_followi |
| CVE-2026-72761 | Deferred | 未確認 | CWE-918 | The webhook URL validator in `website/notifications/webhooks.py` uses `ip.is_global` to reject non-public addresses after DNS resolution. IPv6 transition addresses (NAT64 `64:ff9b: |
| CVE-2026-72762 | Analyzed | 未確認 | CWE-434 | n8n versions before 1.123.67, 2.31.5, and 2.32.1 contain an arbitrary file write vulnerability in the Edit Image node, which passes its output format parameter to the underlying im |
| CVE-2026-72763 | Analyzed | 未確認 | CWE-639 | n8n before 1.123.67, 2.31.5, and 2.32.1 validates credential-access only for a node's top-level credentials and not for credentials referenced inside an Execute Sub-workflow node's |
| CVE-2026-72764 | Analyzed | 未確認 | CWE-668 | n8n's JavaScript task runner shared a single module cache across all users' Code-node executions. In affected versions (before 1.123.67, 2.31.5, and 2.32.1), a user able to run a C |
| CVE-2026-72765 | Analyzed | 未確認 | CWE-94 | n8n before 2.31.5 and before 2.32.1 contain a sandbox escape vulnerability in expression evaluation. An authenticated user with permission to create or modify workflows can craft e |
| CVE-2026-72766 | Analyzed | 未確認 | CWE-843 | n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a type confusion vulnerability in the Send Email node, which does not enforce that its message fields are s |
| CVE-2026-72767 | Analyzed | 未確認 | CWE-78 | n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a remote code execution vulnerability in the Git node. Authenticated users with rights to create and execut |
| CVE-2026-72768 | Analyzed | 未確認 | CWE-918 | n8n versions before 2.32.1 contain a server-side request forgery protection bypass vulnerability in the MCP Client node that allows authenticated users to bypass SSRF protections. |
| CVE-2026-72769 | Analyzed | 未確認 | CWE-1321 | n8n before 1.123.67, 2.31.5, and 2.32.1 contains a prototype pollution vulnerability in the VM expression engine. An authenticated user able to create or edit a workflow expression |
| CVE-2026-72770 | Analyzed | 未確認 | CWE-22 | n8n versions before 1.123.67 contain a path traversal vulnerability in the Git node's fetch, pull, and push-tags operations that allows authenticated users to bypass repository-pat |
| CVE-2026-72771 | Analyzed | 未確認 | CWE-863 | n8n versions before 2.32.1 fail to enforce the Allowed HTTP Request Domains allowlist in multiple AI and LLM nodes when user-supplied base or endpoint URLs are configured. Low-priv |
| CVE-2026-72772 | Analyzed | 未確認 | CWE-640 | n8n before 2.32.1 (and before 2.31.5) is vulnerable to account takeover via the Token Exchange Embed Login feature. When a validly-signed incoming token was matched to a local acco |
| CVE-2026-72773 | Analyzed | 未確認 | CWE-22 | n8n before 2.31.5 and 2.32.x before 2.32.1 contain a path-confinement bypass in the @n8n/computer-use file-search (search_files) tool. A crafted search pattern can bypass the base- |
| CVE-2026-72774 | Analyzed | 未確認 | CWE-639 | n8n before 1.123.67, 2.31.5, and 2.32.1 contains a credential authorization bypass in the HTTP Request node. An authenticated member with edit access to a shared workflow can refer |
| CVE-2026-72775 | Analyzed | 未確認 | CWE-89 | n8n before 1.123.67, 2.31.5, and 2.32.1 contains a SQL injection vulnerability in the PostgresTrigger node, which interpolates user-supplied identifier parameters (channel, functio |
| CVE-2026-72776 | Deferred | 未確認 | CWE-306 | AgenticSeek (commit fc242c7) contains an unauthenticated remote code execution vulnerability that allows any network-adjacent attacker to execute arbitrary commands by submitting c |
| CVE-2026-72777 | Deferred | 未確認 | CWE-918 | Next AI Draw.io through 0.4.16 contains a server-side request forgery vulnerability in the POST /api/parse-url endpoint due to hostname validation that only checks string patterns |
| CVE-2026-72778 | Deferred | 未確認 | CWE-915 | Craft CMS versions from 4.0.0-RC1 before 4.18.2 and from 5.0.0-RC1 before 5.10.6 contain an authenticated remote code execution vulnerability in the control panel element-search co |
| CVE-2026-72779 | Deferred | 未確認 | CWE-184 | Craft CMS 5.0.0-RC1 before 5.10.6 and 4.0.0-RC1 before 4.18.2 contain an arbitrary file read vulnerability. The create() Twig function restricts class instantiation using a 5-entry |
| CVE-2026-72780 | Deferred | 未確認 | CWE-294 | Craft CMS before 5.10.5 fails to persist updated credential counters after WebAuthn assertion validation in the passkey login endpoint. Attackers can replay captured login request |
| CVE-2026-72781 | Deferred | 未確認 | CWE-693 | Craft CMS versions >= 5.0.0-RC1 before 5.10.7 and >= 4.0.0-RC1 before 4.18.3 contain a remote code execution vulnerability in the Twig sandbox mechanism. Because Craft marks the El |
| CVE-2026-72782 | Deferred | 未確認 | CWE-668 | Craft CMS versions >= 5.0.0-RC1 before 5.10.6 and >= 4.0.0-RC1 before 4.18.2 interpolate environment variables and secrets (via ${ENV_VAR} strings in the elementId parameter) into |
| CVE-2026-72783 | Deferred | 未確認 | CWE-22 | Craft CMS versions >= 5.0.0-RC1 before 5.10.6 and >= 4.0.0-RC1 before 4.18.2 contain a theoretical path traversal weakness in the ensurePathIsContained function of the Local file s |
| CVE-2026-72784 | Deferred | 未確認 | CWE-918 | Craft CMS versions >= 5.0.0-RC1 before 5.10.6 and >= 4.0.0-RC1 before 4.18.2 contain a server-side request forgery vulnerability in the GraphQL save<Volume>Asset mutation, which fe |
| CVE-2026-72785 | Deferred | 未確認 | CWE-863 | Craft CMS 5.0.0-RC1 through 5.10.5 contains an incorrect authorization vulnerability. A control-panel user holding only the viewCategories permission (without saveCategories) for a |
| CVE-2026-72786 | Deferred | 未確認 | CWE-285 | Craft CMS versions before 5.10.8 contain an authentication bypass vulnerability in the elements/save action that allows authenticated users to change passwords without verification |
| CVE-2026-72787 | Deferred | 未確認 | CWE-79 | Craft CMS versions before 5.10.8 contain a stored cross-site scripting vulnerability in the control panel where draft names are rendered without HTML encoding in element chips and |
| CVE-2026-72788 | Deferred | 未確認 | CWE-863 | SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the UILayout filter that fails to properly restrict administrator workspace state from publish read |
| CVE-2026-72789 | Deferred | 未確認 | CWE-862 | SiYuan before v3.7.4 fails to properly validate publish access for encrypted notebooks, treating them as publicly accessible by default. Anonymous readers can enumerate and retriev |
| CVE-2026-72790 | Deferred | 未確認 | CWE-862 | SiYuan before v3.7.4 contains an information disclosure vulnerability in the /api/notebook/getNotebookInfo endpoint that returns notebook metadata without authorization checks. Att |
| CVE-2026-72791 | Deferred | 未確認 | CWE-862 | SiYuan v3.7.4-alpha.1 (a pre-release; the endpoint does not exist in stable v3.7.3 or earlier) contains an information disclosure vulnerability in the /api/av/getAttributeViewField |
| CVE-2026-72792 | Deferred | 未確認 | CWE-863 | SiYuan before v3.7.4 contains an information disclosure vulnerability in the /api/tag/getTag endpoint that returns tag labels and occurrence counts from password-protected document |
| CVE-2026-72793 | Deferred | 未確認 | CWE-522 | SiYuan versions before v3.7.4 fail to mask sensitive configuration fields in the /api/system/getConf endpoint, allowing anonymous or publish-reader users to obtain the session-cook |
| CVE-2026-72794 | Deferred | 未確認 | CWE-522 | siyuan versions before v3.7.4 expose the session cookie signing key through the /api/system/getConf endpoint to unauthenticated users in publish mode. Attackers can retrieve the Co |
| CVE-2026-72795 | Deferred | 未確認 | CWE-862 | SiYuan versions before v3.7.4 fail to filter embedded block content by publish access in the getBlockDOMWithEmbed and getBlockDOMsWithEmbed endpoints. Attackers can request publish |
| CVE-2026-72796 | Deferred | 未確認 | CWE-862 | SiYuan before v3.7.4 contains an access control bypass vulnerability where static-file routes in the server mux bypass publish-access controls enforced on the REST API. Attackers w |
| CVE-2026-72797 | Deferred | 未確認 | CWE-862 | SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getEncryptedNotebookStatus endpoint that returns encrypted notebook identifiers, names, and loc |
| CVE-2026-72798 | Deferred | 未確認 | CWE-862 | SiYuan versions before v3.7.4 fail to properly filter related-database content in renderAttributeView, allowing anonymous readers to access Relation and Rollup cell contents from h |
| CVE-2026-72799 | Deferred | 未確認 | CWE-862 | SiYuan before v3.7.4 (affected <=v3.7.2) fails to enforce publish-access filters on five filetree path-resolution endpoints (getFullHPathByID, getHPathByID, getPathByID, getIDsByHP |
| CVE-2026-72800 | Deferred | 未確認 | CWE-862 | SiYuan versions before v3.7.4 fail to apply publish-access filtering to the getAttributeViewKeysByID endpoint, allowing authenticated readers to retrieve complete database column s |
| CVE-2026-72801 | Deferred | 未確認 | CWE-522 | SiYuan versions before v3.7.4 disclose encrypted-notebook key-derivation material and wrapped data keys through unauthenticated endpoints in publish mode. Attackers can retrieve Ar |
| CVE-2026-72802 | Deferred | 未確認 | CWE-639 | SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the resolveAssetPath endpoint that returns absolute filesystem paths unmodified to CheckAuth-only r |
| CVE-2026-72803 | Deferred | 未確認 | CWE-862 | SiYuan versions before v3.7.4 fail to enforce publish-access checks in the getBlockAttrs and batchGetBlockAttrs endpoints. Attackers can retrieve block attributes including names, |
| CVE-2026-72804 | Deferred | 未確認 | CWE-200 | SiYuan versions before v3.7.4 fail to validate publish-password tier in getGraph and getLocalGraph endpoints, allowing anonymous readers to retrieve block-level content of password |
| CVE-2026-72805 | Deferred | 未確認 | CWE-862 | SiYuan versions before v3.7.4 fail to enforce publish-access checks on getBlockBreadcrumb, getRefText, and getBlockTreeInfos endpoints, allowing disclosure of protected document co |
| CVE-2026-72806 | Deferred | 未確認 | CWE-862 | SiYuan versions before v3.7.4 contain an authentication bypass vulnerability in the FilterViewByPublishAccess filter that fails to check publish password protection when rendering |
| CVE-2026-72807 | Deferred | 未確認 | CWE-89 | SiYuan versions before v3.7.4 contain a second-order SQL injection vulnerability in attribute-view template columns that expose the queryBlocks function, which executes raw SQL usi |
| CVE-2026-72808 | Deferred | 未確認 | CWE-862 | SiYuan versions up to and including v3.7.2 (fixed in v3.7.4) contain an information disclosure vulnerability in the /api/asset/getFileAnnotation endpoint, which returns .sya PDF-an |
| CVE-2026-72809 | Deferred | 未確認 | CWE-290 | SiYuan versions <= v3.7.2 (patched in v3.7.4) contain an authentication bypass vulnerability in the kernel's CheckAuth function, which grants the administrator role (RoleAdministra |
| CVE-2026-72810 | Deferred | 未確認 | CWE-862 | SiYuan versions before v3.7.4 contain a publish-boundary bypass vulnerability in WebSocket broadcast sessions that allows anonymous readers to receive unfiltered edits. Attackers c |
| CVE-2026-72811 | Deferred | 未確認 | CWE-89 | SiYuan versions <= v3.7.2 contain a SQL injection vulnerability in the backlink/mention search query (kernel/model/backlink.go), which concatenates stored block metadata (title, na |
| CVE-2026-72812 | Deferred | 未確認 | CWE-862 | SiYuan versions before v3.7.4 contain a missing authorization vulnerability in the /api/ref/refreshBacklink endpoint that allows anonymous readers to trigger persistent server-side |
| CVE-2026-72813 | Awaiting Analysis | 未確認 | CWE-248 | actix-files before 0.6.10 contains a denial of service vulnerability triggered by an empty Range header in GET requests for static files. When panic is set to abort, remote attacke |
| CVE-2026-72814 | Awaiting Analysis | 未確認 | CWE-22 | The actix-files crate (actix_files) before version 0.6.10 contains an information exposure vulnerability. When a non-existing folder is passed as the serve_from argument to Files:: |
| CVE-2026-72815 | Deferred | 未確認 | CWE-290 | go-chi chi versions >= 5.2.1 and before 5.3.0 contain an IP spoofing vulnerability in the RealIP middleware, which blindly trusts the first (leftmost) value of the X-Forwarded-For |
| CVE-2026-72816 | Deferred | 未確認 | CWE-290 | go-chi/chi through 5.2.1 contains an IP spoofing vulnerability in the RealIP middleware (middleware/realip.go). The realIP() function reads client-controlled headers (True-Client-I |
| CVE-2026-72817 | Deferred | 未確認 | CWE-345 | go-chi/chi versions 0.9.0 before 5.3.0 contains an IP spoofing vulnerability in the RealIP middleware, which resolves the request source IP (Request.RemoteAddr) using the first IP |
| CVE-2026-72818 | Awaiting Analysis | 未確認 | CWE-1333 | The URLS regular expression in nltk/tokenize/casual.py, compiled into TweetTokenizer.WORD_RE and applied by TweetTokenizer.tokenize, contains a naked-domain branch whose domain-lab |
| CVE-2026-72819 | Deferred | 未確認 | CWE-94 | Grav CMS before 2.0.13 contains a remote code execution vulnerability in the Flex Objects plugin settings validation that allows authenticated users to execute arbitrary code by up |
| CVE-2026-72820 | Deferred | 未確認 | CWE-22 | Grav versions before 2.0.13 fail to properly validate backup profile root paths, allowing attackers to archive directories outside GRAV_ROOT when not in the hard-coded deny-list. A |
| CVE-2026-72821 | Deferred | 未確認 | CWE-79 | Grav Form plugin versions before 9.1.15 contain a stored cross-site scripting vulnerability in radio and toggle field option labels rendered with the Twig |raw filter. Attackers wi |
| CVE-2026-72822 | Deferred | 未確認 | CWE-306 | The getgrav/grav-plugin-api Composer package before 1.0.13 (affected <= 1.0.12) fails to enforce API key scope caps on the disable2fa endpoint. Unlike the sibling generate2fa endpo |
| CVE-2026-72823 | Deferred | 未確認 | CWE-862 | The Grav API plugin (getgrav/grav-plugin-api) before 1.0.13 contains an API-key scope cap bypass in DemoController. Its private requireSuper() method checks isSuperAdmin() and retu |
| CVE-2026-72824 | Deferred | 未確認 | CWE-862 | The Grav API plugin (getgrav/grav-plugin-api) before 1.0.13 contains an API key scope-cap bypass in PagesController::guardTwigContent(). The Twig-toggle check uses a bare isSuperAd |
| CVE-2026-72825 | Deferred | 未確認 | CWE-862 | The getgrav/grav-plugin-api plugin before 1.0.13 contains an API-key scope cap bypass in the POST /reports/twig-content/allowlist endpoint (ReportsController). The endpoint enforce |
| CVE-2026-72826 | Deferred | 未確認 | CWE-266 | The getgrav/grav-plugin-api plugin before 1.0.13 fails to validate that the scopes of a newly created API key are a subset of the caller's scopes in createApiKey. The self-target p |
| CVE-2026-72827 | Deferred | 未確認 | CWE-1336 | Grav CMS before 2.0.13 contains a server-side template injection vulnerability in email-action parameters that allows low-privileged page editors to execute arbitrary operating-sys |
| CVE-2026-72828 | Deferred | 未確認 | CWE-269 | Grav Plugin API (getgrav/grav-plugin-api) before 1.0.13 fails to enforce API-key scope caps in InvitationsController. The strip-super and accept-groups decisions are gated on a bar |
| CVE-2026-72829 | Deferred | 未確認 | CWE-269 | The Grav API plugin (getgrav/grav-plugin-api) before 1.0.13 contains an API-key scope-cap bypass in UsersController's create() and update() methods. These methods enforce the scope |
| CVE-2026-72830 | Deferred | 未確認 | CWE-269 | Grav API plugin versions before 1.0.13 fail to enforce API key scope caps in ConfigController super-scope gates, allowing scoped keys to write scheduler configuration. The scope ca |
| CVE-2026-72831 | Deferred | 未確認 | CWE-863 | The Flex Objects plugin (through 1.4.6, tested with Grav 2.0.11) contains an incorrect authorization vulnerability in its Flex Objects API. FlexApiController::update() checks only |
| CVE-2026-72832 | Deferred | 未確認 | CWE-79 | Grav versions from 1.5.2 through 2.0.12 contain a stored cross-site scripting vulnerability in the Security::detectXss() function (system/src/Grav/Common/Security.php). The event-h |
| CVE-2026-72833 | Deferred | 未確認 | CWE-269 | The Grav API plugin (getgrav/grav-plugin-api) versions >= 1.0.6 and <= 1.0.11 contain a privilege escalation vulnerability. A scoped API key minted on a super-admin account bypasse |
| CVE-2026-72834 | Deferred | 未確認 | CWE-200 | filebrowser before 2.63.19 contains a permission bypass in the /api/resources endpoint. The checksum (?checksum=) branch of resourceGetHandler reads the entire file to compute a di |
| CVE-2026-72835 | Deferred | 未確認 | CWE-41 | filebrowser versions before v2.63.21 fail to canonicalize paths before evaluating access rules, allowing authenticated users to bypass administrator-defined deny rules using case-v |
| CVE-2026-72836 | Deferred | 未確認 | CWE-178 | FileBrowser before 2.63.19 does not account for case-insensitive filesystems when checking home directory ownership during self-registration. When Signup and CreateUserDir are enab |
| CVE-2026-72837 | Deferred | 未確認 | CWE-284 | File Browser versions before 2.63.20 fail to honor the createUserDir isolation in proxy and hook authentication auto-provisioning paths. Attackers with valid upstream-authenticated |
| CVE-2026-72838 | Deferred | 未確認 | CWE-770 | FileBrowser versions before 2.63.19 fail to enforce the declared Upload-Length in the TUS resumable-upload PATCH endpoint, allowing authenticated users to write arbitrary data to d |
| CVE-2026-72839 | Deferred | 未確認 | CWE-266 | filebrowser through 2.63.16 fails to properly restrict scope and permissions when self-signup is enabled with default CreateUserDir setting. Unauthenticated attackers can register |
| CVE-2026-72840 | Deferred | 未確認 | CWE-266 | OpenWrt LuCI contains an overly permissive ACL definition in luci-mod-system-mounts that grants write access to /etc/crontabs/root to users intended only for mount configuration. A |
| CVE-2026-72841 | Deferred | 未確認 | CWE-73 | luci-app-openvpn fails to properly validate the instance_name2 parameter during file upload, allowing authenticated users to perform path traversal and write arbitrary files outsid |
| CVE-2026-72842 | Deferred | 未確認 | CWE-73 | luci-app-lxc contains an ACL inconsistency vulnerability that allows low-privileged authenticated LuCI users to access backend container management routes without proper authorizat |
| CVE-2026-72843 | Deferred | 未確認 | CWE-862 | The customer update route in EverShop is declared with "access": "public" in packages/evershop/src/modules/customer/api/updateCustomer/route.json, which causes the admin authentica |
| CVE-2026-72844 | Deferred | 未確認 | CWE-843 | The Lean 4 kernel does not verify that the structure named in a projection expression matches the type of the value being projected, and environment::add_inductive in src/kernel/in |
| CVE-2026-72845 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-72846 | Deferred | 未確認 | CWE-918 | Lightdash stores the webhook URL supplied with a scheduled delivery and later posts to it from sendWebhook in packages/backend/src/clients/GoogleChat/GoogleChatClient.ts and in pac |
| CVE-2026-72847 | Deferred | 未確認 | CWE-150 | broot renders each file and directory name in its interactive tree view exactly as read from the filesystem. Names are converted with a plain to_string_lossy() call in src/tree_bui |
| CVE-2026-72848 | Awaiting Analysis | 未確認 | CWE-918 | SitemapLoader.parse_sitemap in langchain_community/document_loaders/sitemap.py applies the documented restrict_to_same_domain control only to leaf url entries. The loop over url el |
| CVE-2026-72849 | Deferred | 未確認 | CWE-352 | Budibase before 3.40.0 contains a cross-site request forgery vulnerability in the chat-link handoff endpoint that allows attackers to bind an external chat identity to a victim's a |
| CVE-2026-72850 | Deferred | 未確認 | CWE-22 | Budibase before 3.40.0 fails to properly sanitize S3 object keys, allowing authenticated builders to upload files with traversal sequences that are preserved during export. Attacke |
| CVE-2026-72851 | Deferred | 未確認 | CWE-89 | Budibase before 3.40.0 contains an unauthenticated SQL injection vulnerability in webhook-triggered automations with EXECUTE_QUERY steps. Attackers can POST attacker-controlled JSO |
| CVE-2026-72852 | Deferred | 未確認 | CWE-190, CWE-787 | hank-ai/darknet sizes a convolutional layer's weight and output heap buffers by multiplying configuration fields taken from a .cfg file in unchecked 32-bit int arithmetic. In src-l |
| CVE-2026-72853 | Deferred | 未確認 | CWE-89 | Budibase before 3.40.0 contains a SQL injection vulnerability in the Oracle datasource connector's post-write row lookup that fails to escape table names in identifiers. Attackers |
| CVE-2026-72854 | Deferred | 未確認 | CWE-190, CWE-787 | msgpack_unpacker_expand_buffer in src/unpack.c, reached through the public msgpack_unpacker_reserve_buffer API, computes its new buffer size using an unchecked size_t addition of t |
| CVE-2026-72855 | Deferred | 未確認 | CWE-918 | Budibase before 3.40.0 contains server-side request forgery vulnerabilities in OpenAPI query import and REST query execution that allow authenticated builder-level users to bypass |
| CVE-2026-72856 | Deferred | 未確認 | CWE-640 | Budibase versions before 3.40.0 contain an authorization/authentication bypass in the PUT /api/global/users/tenant/owner (changeTenantOwnerEmail) endpoint. On self-hosted instances |
| CVE-2026-72857 | Deferred | 未確認 | CWE-522 | Budibase before 3.40.0 fails to redact datasource credentials stored in STRING typed fields, allowing authenticated users to read MongoDB connection strings and Firebase private ke |
| CVE-2026-72858 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-72859 | Deferred | 未確認 | CWE-863 | Budibase versions 3.39.4 before 3.40.0 contain an authorization regression in the S3 attachment upload endpoint that allows BASIC users to obtain S3 PutObject presigned URLs by sen |
| CVE-2026-72860 | Deferred | 未確認 | CWE-184, CWE-918 | The POST /api/provider-nodes/validate route in 9router takes a caller-supplied baseUrl and issues server-side HTTP requests to it, guarding the destination with assertPublicUrl fro |
| CVE-2026-72861 | Deferred | 未確認 | CWE-347 | The github-issue-bot templates in appwrite/templates verify the GitHub webhook signature with an inverted condition. verifyWebhook in node/github-issue-bot/src/github.js and in nod |
| CVE-2026-72862 | Deferred | 未確認 | CWE-78 | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the mariadb.ts, mongo.ts, mysql.ts, postgres.ts, redis.ts, and libsql.ts Dokploy database service d |
| CVE-2026-72863 | Deferred | 未確認 | CWE-269, CWE-639, CWE-862 | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, Dokploy's WebSocket handlers (in-app terminals and log streamers) authenticate the session but neve |
| CVE-2026-72864 | Deferred | 未確認 | CWE-862 | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the local branch of /docker-container-terminal in apps/dokploy/server/wss/docker-container-terminal |
| CVE-2026-72865 | Deferred | 未確認 | CWE-78 | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the compose.update operation stores an unvalidated composePath that packages/server/src/utils/build |
| CVE-2026-72866 | Deferred | 未確認 | CWE-862 | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the WebSocket handler in apps/dokploy/server/wss/terminal.ts validates a session but does not autho |
| CVE-2026-72867 | Deferred | 未確認 | CWE-20, CWE-602, CWE-78 | Dokploy is a free, self-hostable Platform as a Service (PaaS). From 0.29.3 until 0.29.13, the incomplete fix for CVE-2026-45628 leaves packages/server/src/db/schema/compose.ts bran |
| CVE-2026-72868 | Deferred | 未確認 | CWE-78, CWE-862 | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, apps/dokploy/server/api/routers/destination.ts interpolates the accessKey, secretAccessKey, region, |
| CVE-2026-72869 | Deferred | 未確認 | CWE-77, CWE-78 | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the backup.restoreBackupWithLogs tRPC subscription passes the databaseName parameter to restore bui |
| CVE-2026-72870 | Deferred | 未確認 | CWE-78 | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the buildRemoteDocker() function in packages/server/src/utils/providers/docker.ts interpolates the |
| CVE-2026-72871 | Deferred | 未確認 | CWE-306 | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the unauthenticated /api/providers/github/setup route in apps/dokploy/pages/api/providers/github/se |
| CVE-2026-72872 | Deferred | 未確認 | CWE-78 | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, application.saveBitbucketProvider stores bitbucketOwner and bitbucketRepository without validation |
| CVE-2026-72873 | Deferred | 未確認 | CWE-200 | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, application.one in apps/dokploy/server/api/routers/application.ts returns provider relations loaded |
| CVE-2026-72874 | Deferred | 未確認 | CWE-78 | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, cloneGitRepository in packages/server/src/utils/providers/git.ts interpolates customGitUrl and cust |
| CVE-2026-72875 | Deferred | 未確認 | CWE-78 | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, settings.readTraefikFile in apps/dokploy/server/api/routers/settings.ts passes a path accepted by a |
| CVE-2026-72876 | Deferred | 未確認 | CWE-639, CWE-78, CWE-862 | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, swarm.getNodes, swarm.getNodeInfo, swarm.getNodeApps, and swarm.getAppInfos in apps/dokploy/server/ |
| CVE-2026-72877 | Deferred | 未確認 | CWE-78 | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the dockerImage field is interpolated without quoting into shell commands in buildRemoteDocker() in |
| CVE-2026-72878 | Deferred | 未確認 | CWE-78 | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, Dokploy's backup and restore pipeline constructs shell commands by directly interpolating user-cont |
| CVE-2026-72879 | Deferred | 未確認 | CWE-78 | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.8, the getRegistryCommands() function in packages/server/src/utils/cluster/upload.ts interpolates regis |
| CVE-2026-72880 | Deferred | 未確認 | CWE-78 | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the apiCreateCertificate schema in packages/server/src/db/schema/certificate.ts accepts a client-su |
| CVE-2026-72881 | Deferred | 未確認 | CWE-78 | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, database backup and restore command builders in packages/server/src/utils/backups/utils.ts and pack |
| CVE-2026-72882 | Deferred | 未確認 | CWE-78 | Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.28.8 and earlier, an authenticated user who can create or update file mounts for a service can inject shell meta |
| CVE-2026-72883 | Deferred | 未確認 | CWE-862 | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the WebSocket handlers in apps/dokploy/server/wss/terminal.ts, apps/dokploy/server/wss/docker-conta |
| CVE-2026-72884 | Deferred | 未確認 | CWE-78 | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, sanitizeCommand in packages/server/src/utils/builders/compose.ts only trims whitespace and strips s |
| CVE-2026-72885 | Deferred | 未確認 | CWE-78 | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, dockerContextPath accepted by apps/dokploy/components/dashboard/application/build/show.tsx flows th |
| CVE-2026-72886 | Deferred | 未確認 | CWE-269, CWE-863 | Dokploy is a free, self-hostable Platform as a Service (PaaS). From 0.29.2 until 0.29.13, schedule.create and schedule.update in apps/dokploy/server/api/routers/schedule.ts derive |
| CVE-2026-72887 | Deferred | 未確認 | CWE-757 | Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in get_request_token. Passing a callback to the construct |
| CVE-2026-72888 | Deferred | 未確認 | CWE-770 | Net::OAuth versions before 0.32 for Perl allow memory exhaustion via unbounded caching of failed module loads in smart_require. smart_require stores results in a process-global ha |
| CVE-2026-72889 | Deferred | 未確認 | CWE-347, CWE-757 | Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verify. verify resolves the signature method class from the signature_method paramet |
| CVE-2026-72898 | Analyzed | 掲載 | CWE-89 | Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access to the connected Metabase insta |
| CVE-2026-72899 | Awaiting Analysis | 未確認 | CWE-89 | Metabase allows an unauthenticated attacker to inject arbitrary SQL via a publicly shared card or dashboard that exposes a field-filter (dimension) parameter. |
| CVE-2026-72900 | Awaiting Analysis | 未確認 | CWE-862 | Metabase allows an authenticated, low-privileged attacker to read the entire Metabase application database. |
| CVE-2026-72901 | Deferred | 未確認 | CWE-78 | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, Dokploy allows an authenticated low-privilege member to execute arbitrary commands on the control-p |
| CVE-2026-72902 | Deferred | 未確認 | CWE-78 | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, Dokploy allows an authenticated user to execute arbitrary commands on a local or SSH-connected targ |
| CVE-2026-72903 | Deferred | 未確認 | CWE-22 | Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.235, a malicious SFTP server can return a backslash traversal filename through entry.name. In tab |
| CVE-2026-72904 | Deferred | 未確認 | CWE-77, CWE-78, CWE-94, CWE-95 | Firecrawl turns entire websites into LLM-ready markdown or structured data. Prior to 2.11.32, a critical arbitrary file read vulnerability exists in Firecrawl's extraction function |
| CVE-2026-72905 | Rejected | 未確認 | Rejected reason: Further research determined the issue is not a vulnerability. | |
| CVE-2026-72906 | Deferred | 未確認 | CWE-862 | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.111.0 and 16.22.0, the send_auto_email function in erpnext/accounts/doctype/process_statement_of_ac |
| CVE-2026-72907 | Deferred | 未確認 | CWE-285 | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.111.0 and 16.22.0, the add_ac function in erpnext/accounts/utils.py accepts the ignore_permissions |
| CVE-2026-72908 | Deferred | 未確認 | CWE-89 | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.109.0 and 16.20.0, the get_tax_template function in erpnext/accounts/doctype/tax_rule/tax_rule.py c |
| CVE-2026-72909 | Deferred | 未確認 | CWE-284 | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.112.0 and 16.23.0, the ReceivablePayableReport prepare_conditions path in erpnext/accounts/report/a |
| CVE-2026-72910 | Deferred | 未確認 | CWE-862 | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.112.0 and 16.22.0, the merge_account, pause_job_for_doc, trigger_job_for_doc, change_release_date, |
| CVE-2026-72911 | Deferred | 未確認 | CWE-1336 | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.118.0 and 16.29.0, the validate_template and render_template calls in erpnext/accounts/doctype/proc |
| CVE-2026-72912 | Deferred | 未確認 | CWE-1333, CWE-400 | CyberChef is a web app for encryption, encoding, compression, and data analysis. Prior to 11.3.0, CyberChef's pretty-recipe parser in src/core/Utils.mjs can exhaust client-side CPU |
| CVE-2026-72913 | Deferred | 未確認 | CWE-150, CWE-77, CWE-93 | Kitty is a cross-platform GPU based terminal. Prior to 0.48.2, the @kitty-echo and @kitty-ssh DCS handlers in kitty/window.py write unauthenticated data to the child shell's stdin, |
| CVE-2026-72914 | Deferred | 未確認 | CWE-405, CWE-770 | Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.4.21, 4.5.14, 4.6.4, and 4.7.0-beta.1, the administrative statistics endpoints handled by Api |
| CVE-2026-72915 | Deferred | 未確認 | CWE-200 | Mastodon is a free, open-source social network server based on ActivityPub. From 4.6.0-beta.1 until 4.6.4 and 4.7.0-beta.1, any logged-in local user could use the show action in ap |
| CVE-2026-72916 | Deferred | 未確認 | CWE-1286, CWE-918 | Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.4.21, 4.5.14, 4.6.4, and 4.7.0-beta.1, PrivateAddressCheck.private_address? in app/lib/privat |
| CVE-2026-72917 | Deferred | 未確認 | CWE-180, CWE-287 | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. From 1.0.0 to 1.15.0, AnythingLLM's unauthenticated acco |
| CVE-2026-72918 | Awaiting Analysis | 未確認 | CWE-862 | Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 7.10.14, 8.0.8, 8.1.7, 8.2.7, 8.3.7, 8.4.5, 8.5.2, and 8.6.1, the stream-notify-user str |
| CVE-2026-72919 | Awaiting Analysis | 未確認 | CWE-862 | Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 7.10.14, 8.0.8, 8.1.7, 8.2.7, 8.3.7, 8.4.5, 8.5.2, and 8.6.1, the channels.convertToTeam |
| CVE-2026-72920 | Deferred | 未確認 | CWE-306 | SeaweedFS is a distributed storage system. Prior to 4.24, the filer registers the SeaweedIdentityAccessManagement gRPC service without mandatory authentication when jwt.filer_signi |
| CVE-2026-72921 | Deferred | 未確認 | CWE-863 | SeaweedFS is a distributed storage system. Prior to 4.24, the weed/server/filer_server_handlers.go allowed_prefixes authorization check used strings.HasPrefix on raw path strings, |
| CVE-2026-72922 | Deferred | 未確認 | CWE-287 | AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.70, AutoGPT's autogpt_platform/backend/backe |
| CVE-2026-72924 | Deferred | 未確認 | CWE-1327, CWE-668 | GitHub CLI (gh) is GitHub's official command line tool. Versions 2.28.0 through 2.97.0 bind the local listener created by gh codespace ports forward to all available network interf |
| CVE-2026-72925 | Awaiting Analysis | 未確認 | CWE-116, CWE-79 | SWC is a TypeScript / JavaScript compiler written in Rust. Prior to @swc/html 1.15.47-nightly-20260729.1 and swc_html_minifier 59.0.0, the minifyJson processing in crates/swc_html_ |
| CVE-2026-72970 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-72971 | Analyzed | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering loca |
| CVE-2026-72984 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-73030 | Deferred | 未確認 | CWE-22 | unearth through 0.18.2, fixed in commit 6c78164, contains a path traversal vulnerability in the is_within_directory function that fails to normalize paths before validation, allowi |
| CVE-2026-73031 | Deferred | 未確認 | CWE-79 | telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript in victims' browsers by sending crafted messages c |
| CVE-2026-73032 | Deferred | 未確認 | CWE-94 | PapersGPT for Zotero 0.6.1 contains a remote code execution vulnerability that allows attackers to execute arbitrary JavaScript by returning malicious code from an LLM endpoint tha |
| CVE-2026-73033 | Deferred | 未確認 | CWE-22 | Sucuri Security WordPress plugin through version 2.7.3 contains a path traversal vulnerability in the pageIntegritySubmission() method in src/integrity.lib.php that allows authenti |
| CVE-2026-73034 | Deferred | 未確認 | CWE-22 | DB-GPT v0.8.1 contains an unauthenticated path traversal vulnerability that allows remote attackers to write arbitrary files to any location on the server by injecting directory tr |
| CVE-2026-73035 | Deferred | 未確認 | CWE-150 | npm-check-updates through 23.0.2, fixed in commit b554b84, contains a terminal escape sequence injection vulnerability that allows an attacker to embed arbitrary terminal control c |
| CVE-2026-73036 | Deferred | 未確認 | CWE-150 | Bash-it 3.2.0 contains a terminal escape sequence injection vulnerability in the barbuk theme's Python virtualenv prompt segment that allows local attackers to inject arbitrary ter |
| CVE-2026-73037 | Deferred | 未確認 | CWE-79 | Next AI Draw.io 0.2.1 through 0.4.16 contains a reflected cross-site scripting vulnerability in the mcp query parameter that is interpolated without escaping into HTML and JavaScri |
| CVE-2026-73038 | Deferred | 未確認 | CWE-79 | NodeBB before 4.15.0 contains a stored cross-site scripting vulnerability in the renderEmoji function that fails to escape tag.icon.url and tag.name attributes. Attackers can deliv |
| CVE-2026-73039 | Deferred | 未確認 | CWE-639 | streama contains an insecure direct object reference vulnerability in ViewingStatusController that allows authenticated users to read and delete other users' viewing status records |
| CVE-2026-73040 | Deferred | 未確認 | CWE-22 | Dockge validates a stack name only on the write path. In backend/stack.ts the allow-list check in validate(), which requires the name to match ^[a-z0-9_-]+$, is reached from save() |
| CVE-2026-73041 | Deferred | 未確認 | CWE-79 | SiYuan versions before v3.7.4 fail to validate or escape annotation fields written to disk by the setFileAnnotation endpoint. Attackers can inject malicious markup into annotation |
| CVE-2026-73042 | Deferred | 未確認 | CWE-79 | SiYuan before v3.7.4 fails to properly escape database menu metadata in HTML interpolation, allowing stored values to execute script when users open group, view, or field-edit menu |
| CVE-2026-73043 | Deferred | 未確認 | CWE-79 | SiYuan versions before v3.7.4 contain a remote code execution vulnerability in the Template calculation operator, which renders user-authored Go templates and stores output verbati |
| CVE-2026-73044 | Deferred | 未確認 | CWE-79 | SiYuan versions before v3.7.4 fail to validate or escape table column width values, allowing stored cross-site scripting injection into style attributes. Attackers can inject malic |
| CVE-2026-73045 | Deferred | 未確認 | CWE-307 | SiYuan before 3.7.4 contains an improper restriction of excessive authentication attempts vulnerability in the authFilePublishAccess endpoint that allows unauthenticated attackers |
| CVE-2026-73046 | Deferred | 未確認 | CWE-307 | SiYuan before v3.7.4 improperly restricts excessive authentication attempts in the CheckAuth() middleware. The HTTP Basic Authentication branch, which guards nearly the entire /api |
| CVE-2026-73047 | Deferred | 未確認 | CWE-200 | siyuan versions <= 3.7.3 (fixed in v3.7.4) contain a server-side template injection vulnerability in the attribute-view Template calculation feature (introduced in v3.7.0-beta.1). |
| CVE-2026-73048 | Deferred | 未確認 | CWE-862 | SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getRefIDsByFileAnnotationID endpoint that returns block identifiers citing PDF annotations with |
| CVE-2026-73049 | Deferred | 未確認 | CWE-863 | SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getAttributeViewBacklinks endpoint that consults the forbidden access list instead of the visib |
| CVE-2026-73050 | Deferred | 未確認 | CWE-79 | SiYuan versions before v3.7.4 fail to validate or escape the color field in attribute-view select options, allowing stored cross-site scripting through eight unescaped render sites |
| CVE-2026-73051 | Awaiting Analysis | 未確認 | CWE-444 | actix-http versions before 3.12.1 contain an HTTP request smuggling vulnerability in the HTTP/1.1 parser that accepts requests with both Content-Length and Transfer-Encoding: chunk |
| CVE-2026-73052 | Deferred | 未確認 | CWE-79 | SiYuan before v3.7.4 stores attribute-view field names without HTML escaping and interpolates them directly into option elements via innerHTML in the sort menu. Attackers can injec |
| CVE-2026-73053 | Deferred | 未確認 | CWE-79 | SiYuan versions before v3.7.4 contain a cross-site scripting vulnerability in the unicode2Emoji function that fails to sanitize codepoint branch output. Attackers can craft documen |
| CVE-2026-73054 | Deferred | 未確認 | CWE-287 | SiYuan versions before v3.7.4 contain an authentication bypass vulnerability in the WebSocket endpoint caused by differential parsing of query parameters between authentication exe |
| CVE-2026-73055 | Deferred | 未確認 | CWE-116, CWE-200 | Shescape before 2.1.15 (and 3.0.0 before 3.0.2) fails to properly escape tilde (~) characters in assignment contexts on Unix systems where the shell is explicitly configured to "sh |
| CVE-2026-73056 | Deferred | 未確認 | CWE-307 | SiYuan kernel versions before 3.7.4 contain an improper restriction of excessive authentication attempts vulnerability in the CheckAuth() middleware. The middleware accepts the API |
| CVE-2026-73057 | Deferred | 未確認 | CWE-400 | stoatchat before 0.15.0 fails to validate SVG viewBox dimensions in the proxy endpoint, allowing attackers to cause denial of service by memory exhaustion. Attackers can host malic |
| CVE-2026-73058 | Deferred | 未確認 | CWE-918 | stoatchat versions before 0.15.0 fail to block the IPv6 unspecified address (::) in the SSRF blocklist, allowing unauthenticated attackers to bypass protections via the /proxy and |
| CVE-2026-73059 | Deferred | 未確認 | CWE-863 | stoatchat before 0.15.0 contains a permission bypass vulnerability in the message_fetch route that checks only ViewChannel permission instead of requiring ReadMessageHistory. Attac |
| CVE-2026-73060 | Deferred | 未確認 | CWE-770 | Scriban versions from 3.0.0 through 7.2.5 contain a denial of service vulnerability in the ScriptRange.Multiply operator that bypasses LoopLimit when the left operand is a lazy seq |
| CVE-2026-73061 | Deferred | 未確認 | CWE-284 | Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility chec |
| CVE-2026-73062 | Deferred | 未確認 | CWE-770 | Scriban versions 3.0.0 through 7.2.0 contain a denial of service vulnerability in the array multiplication operator that allocates memory without enforcing LoopLimit or overflow-sa |
| CVE-2026-73066 | Deferred | 未確認 | CWE-787 | Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata LSTM model component loaded through Tesseract's deserializer can cause an unchecked signed integer mu |
| CVE-2026-73067 | Deferred | 未確認 | CWE-125 | Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata model loaded through TessBaseAPI::Init can cause SquishedDawg::read_squished_dawg in src/dict/dawg.cp |
| CVE-2026-73068 | Deferred | 未確認 | CWE-639 | ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows and AI agents. Prior to 3.20.207, the ToolJet Database HTTP API in |
| CVE-2026-73069 | Deferred | 未確認 | CWE-89 | Twenty is an open-source CRM (customer relationship management) platform. Prior to 2.15.0, Twenty allowed a workspace administrator with the DATA_MODEL permission to supply setting |
| CVE-2026-73070 | Analyzed | 未確認 | CWE-121 | Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c accepts unbounded client connections in socketserver_accept(), c |
| CVE-2026-73071 | Analyzed | 未確認 | CWE-416 | Vim is an open source, command line text editor. From 9.2.0511 until 9.2.0844, json_decode_item() in src/json.c can retain a stale pointer after json_decode_string() invokes channe |
| CVE-2026-73072 | Analyzed | 未確認 | CWE-122, CWE-787 | Vim is an open source, command line text editor. Prior to 9.2.0846, set_sofo() in src/spellfile.c reuses sl_sal_first[] without resetting values left by set_sal_first(), so a craft |
| CVE-2026-73073 | Analyzed | 未確認 | CWE-829, CWE-94 | Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers() in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficien |
| CVE-2026-73074 | Analyzed | 未確認 | CWE-190 | Vim is an open source, command line text editor. Prior to 9.2.0841, prop_add_one() in src/textprop.c uses the proplen value from get_text_props() to increment a uint16_t property c |
| CVE-2026-73075 | Analyzed | 未確認 | CWE-124, CWE-125 | Vim is an open source, command line text editor. From 9.2.0469 until 9.2.0843, popup_mark_opacity_zindex() in src/popupwin.c can use a negative w_winrow for a text-property-anchore |
| CVE-2026-73076 | Analyzed | 未確認 | CWE-829, CWE-94 | Vim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named .VimballRecord to overwrite the installation |
| CVE-2026-73077 | Analyzed | 未確認 | CWE-78 | Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attack |
| CVE-2026-73078 | Analyzed | 未確認 | CWE-184, CWE-77 | Vim is an open source, command line text editor. Prior to 9.2.0840, runtime/plugin/netrwPlugin.vim loads netrw and runtime/pack/dist/opt/netrw/autoload/netrw.vim constructs Bookmar |
| CVE-2026-73079 | Deferred | 未確認 | CWE-22, CWE-441 | Sub2API is an AI API gateway platform designed to distribute and manage API quotas from AI product subscriptions. From 0.1.135, to 0.1.168, platform API keys issued to tenants are |
| CVE-2026-73080 | Deferred | 未確認 | CWE-918 | SeaweedFS is a distributed storage system. Prior to 4.24, VolumeServer.FetchAndWriteNeedle in weed/server/volume_grpc_remote.go fetches a caller-supplied remote endpoint through we |
| CVE-2026-73081 | Deferred | 未確認 | CWE-78 | Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, the worker's code-compilation pipeline builds the on-disk path for a Code step from the step's name |
| CVE-2026-73082 | Deferred | 未確認 | CWE-200, CWE-918 | Activepieces is an open source AI workflow automation platform. Prior to 0.82.0, the POST /api/v1/projects/:projectId/mcp-server/validate-agent-mcp-tool endpoint makes an outbound |
| CVE-2026-73083 | Deferred | 未確認 | CWE-693 | Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, in SANDBOX_CODE_ONLY mode, the engine loads the compiled user module with importFresh(), a wrapper |
| CVE-2026-73084 | Deferred | 未確認 | CWE-79, CWE-94 | Activepieces is an open source AI workflow automation platform. Prior to 0.83.0, the /api/redirect OAuth callback endpoint embeds the user-supplied code query parameter directly in |
| CVE-2026-73085 | Deferred | 未確認 | CWE-287 | Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.36.0, the jwtAuthCheck function in server/auth/TokenManager.js treats JWTs with the refresh token type as b |
| CVE-2026-73086 | Deferred | 未確認 | CWE-190 | nanoid is a secure, URL-friendly, unique string ID generator for JavaScript. Prior to versions 3.3.12 and 5.1.11, the nanoid(size) function in index.js and index.cjs coerces the us |
| CVE-2026-73087 | Deferred | 未確認 | CWE-918 | Dozzle is a realtime log viewer for docker containers. From 10.5.2 until 10.6.15, the isBlockedIP SSRF guard in internal/notification/dispatcher/webhook.go, used by safeDialContext |
| CVE-2026-73088 | Awaiting Analysis | 未確認 | CWE-1321, CWE-248 | Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools. Prior to 4.28.7, normalizeStats() in node.js, reached unconditionally |
| CVE-2026-73089 | Awaiting Analysis | 未確認 | CWE-770 | Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools. Prior to 4.28.7, index.js retains every distinct `(queries, context)` |
| CVE-2026-73090 | Deferred | 未確認 | CWE-863 | PeerTube is an ActivityPub-federated video streaming platform. Prior to 8.2.2, processUpdateActivity and processUpdateVideo accept an ActivityPub Update containing a Video object w |
| CVE-2026-73102 | Deferred | 未確認 | CWE-22 | RustDesk versions 1.3.9 through 1.4.9 contain a path traversal vulnerability in the macOS clipboard file-paste code path. The application accepts peer-supplied file descriptor name |
| CVE-2026-73103 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-73104 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-73105 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-73106 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-73107 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-73108 | Deferred | 未確認 | CWE-770 | RustDesk versions before 1.4.7 contain an uncontrolled speculative memory allocation vulnerability in BytesCodec. Before authentication, the decoder trusts the payload length encod |
| CVE-2026-73111 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-73112 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-73122 | Awaiting Analysis | 未確認 | CWE-269 | A flaw was found in the multicloud-operators-channel component of Red Hat Advanced Cluster Management (RHACM). This vulnerability allows a compromised agent from a managed cluster |
| CVE-2026-73125 | Deferred | 未確認 | CWE-306 | Ebyte device web management interface does not consistently enforce authentication before granting access to administrative functionality. An unauthenticated remote attacker coul |
| CVE-2026-73136 | Analyzed | 未確認 | CWE-294 | Authentication Bypass by Capture-replay in ZenHive mpp allows an unauthenticated third party to obtain paid resources by replaying a transfer settled by an unrelated payer. MPP.Me |
| CVE-2026-73137 | Awaiting Analysis | 未確認 | CWE-200 | A flaw was found in the multicloud-operators-subscription component of Red Hat Advanced Cluster Management (RHACM). A tenant with HelmRelease create permissions can exploit this vu |
| CVE-2026-73140 | Deferred | 未確認 | CWE-862 | Affected versions of cti-transmute fail to apply comment-level access-control rules when generating evaluation report exports. Although normal comment retrieval filters comments ac |
| CVE-2026-73155 | Deferred | 未確認 | CWE-862 | Affected versions of cti-transmute allow authenticated users to add or remove emoji reactions on comments without first checking whether those users are authorized to view the targ |
| CVE-2026-73156 | Deferred | 未確認 | CWE-79 | Affected versions of cti-transmute fail to HTML-escape attacker-controlled values used in ECharts Sunburst and Treemap tooltip formatters. Slice names may originate directly from S |
| CVE-2026-73157 | Deferred | 未確認 | CWE-116, CWE-79 | Affected versions of cti-transmute render data obtained from a remote MISP instance into the event-browser interface using HTML interpolation. Because fields such as event IDs, eve |
| CVE-2026-73158 | Deferred | 未確認 | CWE-20, CWE-79 | Affected versions of cti-transmute insufficiently validate saved graph configuration data. Graph configurations can contain style properties that are later consumed by Pivotick, an |
| CVE-2026-73159 | Deferred | 未確認 | CWE-79 | Affected versions of cti-transmute allow a tag's icon value to be stored and later interpolated into HTML through Vue's v-html. The helper mapIcon() previously constructed an HTML |
| CVE-2026-73160 | Deferred | 未確認 | CWE-918 | Affected versions of cti-transmute contain an SSRF vulnerability in the /fetch_misp_event and /misp_search_events endpoints. The URL validation routine checked whether a supplied |
| CVE-2026-73161 | Deferred | 未確認 | CWE-116, CWE-79 | Affected versions of cti-transmute improperly handle conversion-table values passed through the search highlighting feature. The highlight() function previously returned the underl |
| CVE-2026-73162 | Deferred | 未確認 | CWE-352 | Affected versions of MISP cti-transmute expose several state-changing account operations as GET requests: * /account/follow * /account/delete_notification * /acc |
| CVE-2026-73180 | Analyzed | 未確認 | CWE-613 | Insufficient Session Expiration vulnerability in Apache Tomcat meant that if the session ID for an authenticated HTTP session was changed after a WebSocket connection had been esta |
| CVE-2026-73181 | Deferred | 未確認 | CWE-22 | Unauthenticated Arbitrary File Download in Extra Product Options & Add-Ons for WooCommerce < 7.6 versions. |
| CVE-2026-73182 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in BBQ Pro <= 3.9 versions. |
| CVE-2026-73183 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Maps Marker Pro <= 4.32 versions. |
| CVE-2026-73184 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Global Gallery <= 11.1.2 versions. |
| CVE-2026-73185 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in NGG Smart Image Search < 4.0.0 versions. |
| CVE-2026-73187 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Sticky Chat Widget <= 1.4.2 versions. |
| CVE-2026-73188 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate to CVE-2026-13610. | |
| CVE-2026-73189 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate to CVE-2026-14858 | |
| CVE-2026-73190 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in W3 Eden WPDM – Premium Packages wpdm-premium-packages allows DOM-Based XSS.Thi |
| CVE-2026-73193 | Awaiting Analysis | 未確認 | CWE-190, CWE-787 | DBI versions before 1.652 for Perl allow a heap out-of-bounds write on 32-bit perl via an integer wraparound in the output buffer size computed by preparse. preparse reserves its |
| CVE-2026-73194 | Awaiting Analysis | 未確認 | CWE-1284, CWE-787 | DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse. preparse reserves seven output |
| CVE-2026-73196 | Analyzed | 未確認 | CWE-770 | A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerability by submitting an oversized One-Time Password (OTP) key value. This oversized key is t |
| CVE-2026-73197 | Modified | 未確認 | CWE-770 | A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the `/ipa/migration/migration.py` endpoint |
| CVE-2026-73198 | Modified | 未確認 | CWE-770 | A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the `/ipa/i18n_messages` endpoint by sending an arbitrarily large request body. This |
| CVE-2026-73199 | Awaiting Analysis | 未確認 | CWE-476 | A flaw was found in the `ipa-enrollment` SLAPI plugin. A remote authenticated client can exploit a null pointer dereference vulnerability by sending a malformed Lightweight Directo |
| CVE-2026-73208 | Deferred | 未確認 | CWE-287 | An attacker that holds a token intended for a different purpose can authenticate, because when an OAuth2 token response does not contain a scope claim, the audience claim is used i |
| CVE-2026-73209 | Deferred | 未確認 | CWE-674 | An attacker that has valid credentials can send crafted compressed data that causes the affected process to exhaust its stack and crash. The affected process is terminated, which c |
| CVE-2026-73210 | Deferred | 未確認 | CWE-918 | A Server-Side Request Forgery (SSRF) vulnerability existed in Lookyloo's PlaywrightCapture when the only_global_lookup option was enabled. PlaywrightCapture implements this option |
| CVE-2026-73211 | Deferred | 未確認 | CWE-89 | PeerTube is an ActivityPub-federated video streaming platform. Prior to 8.1.6, ActorFollowModel.updateScore() interpolates the attacker-controlled ActivityPub actor inboxUrl into a |
| CVE-2026-73212 | Deferred | 未確認 | CWE-284, CWE-918 | Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.1, good_peer_addr() in src/server/ns_turn_server.c uses ioa_addr_in_range() in src/client/ns_turn |
| CVE-2026-73213 | Deferred | 未確認 | CWE-863 | Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.16.0, addr_less_eq() in src/client/ns_turn_ioaddr.c uses a component-wise comparison for native IPv6 |
| CVE-2026-73214 | Deferred | 未確認 | CWE-400, CWE-770 | Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.16.0, dtls_server_input_handler() and create_new_connected_udp_socket() in src/apps/relay/dtls_liste |
| CVE-2026-73215 | Deferred | 未確認 | CWE-400, CWE-772 | Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.17.0, turnports_allocate_even() in src/apps/relay/turn_ports.c marks the unused odd sibling port as |
| CVE-2026-73216 | Deferred | 未確認 | CWE-400 | Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.17.0, shutdown_client_connection() in src/server/ns_turn_server.c prematurely calls dec_quota() and |
| CVE-2026-73217 | Awaiting Analysis | 未確認 | CWE-693 | Cursor is a code editor built for programming with AI. Prior to 3.1.2, Cursor IDE for macOS allows an agent running in Auto-Run Sandbox mode to replace a virtual environment's Pyth |
| CVE-2026-73218 | Awaiting Analysis | 未確認 | CWE-269 | Cursor is a code editor built for programming with AI. Prior to 3.0.0, Cursor IDE for macOS allows an agent running in Auto-Run Sandbox mode, when Docker Desktop and the Dev Contai |
| CVE-2026-73219 | Awaiting Analysis | 未確認 | CWE-1288 | CVAT is an open source interactive video and image annotation tool for computer vision. From 2.17.0 until 2.72.0, a user with write access to a CVAT job can submit a batch automati |
| CVE-2026-73220 | Deferred | 未確認 | CWE-80 | CVAT is an open source interactive video and image annotation tool for computer vision. From 2.68.0 until 2.70.0, the audio-task annotation guide renderer in cvat-ui/src/audio/comp |
| CVE-2026-73221 | Awaiting Analysis | 未確認 | CWE-863 | CVAT is an open source interactive video and image annotation tool for computer vision. From 2.17.0 until 2.72.0, a user with the Worker role can use predictable task-based request |
| CVE-2026-73222 | Awaiting Analysis | 未確認 | CWE-306, CWE-352, CWE-78 | Claude Code Templates is a CLI tool for configuring and monitoring Claude Code. Prior to 1.29.4, the Claude Code Studio server launched by the --studio option in cli-tool/src/sandb |
| CVE-2026-73223 | Deferred | 未確認 | CWE-22 | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious SFTP server to write attacker-controlled co |
| CVE-2026-73224 | Deferred | 未確認 | CWE-78 | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious FTP or SFTP server to execute arbitrary com |
| CVE-2026-73225 | Deferred | 未確認 | CWE-22 | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious FTP or SFTP server to write attacker-contro |
| CVE-2026-73226 | Deferred | 未確認 | CWE-913 | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.186, electerm allows an authenticated WebSocket client to invoke unintended |
| CVE-2026-73227 | Deferred | 未確認 | CWE-22 | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious RDP server to write attacker-controlled con |
| CVE-2026-73228 | Awaiting Analysis | 未確認 | CWE-400, CWE-770 | Django REST framework is a toolkit for building Web APIs. Prior to 3.17.2, Django REST Framework's request.data parsing in rest_framework/request.py Request._parse() passes the und |
| CVE-2026-73229 | Awaiting Analysis | 未確認 | CWE-200 | Django REST framework is a powerful and flexible toolkit for building Web APIs. Prior to 3.17.2, Django REST Framework's rest_framework/renderers.py AdminRenderer.render() uses ove |
| CVE-2026-73230 | Deferred | 未確認 | CWE-200 | Ente provides end-to-end encrypted cloud services and security tools. Prior to 2026.07.28, Ente 2of3 card format version 1 stored the secret byte length and 32-bit FNV-1a checksum |
| CVE-2026-73231 | Deferred | 未確認 | CWE-95 | Faker generates massive amounts of fake data in the browser and Node.js. Prior to 10.5.0, the faker.helpers.fake method in src/modules/helpers/eval.ts allows attacker-controlled fa |
| CVE-2026-73232 | Deferred | 未確認 | CWE-409 | ffuf is a fast web fuzzer written in Go. Prior to 2.2.0, ffuf allows a malicious target server to cause an out-of-memory denial of service because the response size guard in pkg/ru |
| CVE-2026-73233 | Awaiting Analysis | 未確認 | CWE-94 | FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, the FEM Displacement Constraint task dialog in src/Mod/Fem/Gui/TaskFemConstraintDisplacement. |
| CVE-2026-73234 | Awaiting Analysis | 未確認 | CWE-22 | FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, PropertyFileIncluded::Restore() in src/App/PropertyFile.cpp concatenates an attacker-controll |
| CVE-2026-73235 | Awaiting Analysis | 未確認 | CWE-611 | FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, the Xerces SAX2 XMLReader constructed in src/Base/Reader.cpp by Base::XMLReader::XMLReader() |
| CVE-2026-73237 | Analyzed | 未確認 | CWE-80 | XSS vulnerability in Markdown handling in Apache Allura. This issue affects Apache Allura: from 1.10.0 before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fi |
| CVE-2026-73238 | Analyzed | 未確認 | CWE-80 | XSS vulnerability in code display in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue. |
| CVE-2026-73239 | Analyzed | 未確認 | CWE-280, CWE-639 | Insecure Direct Object Reference (IDOR) due to missing permission checks for multiple Artifact types in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users are |
| CVE-2026-73240 | Analyzed | 未確認 | CWE-88 | Specifically crafted inputs may lead to git argument injection in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19 |
| CVE-2026-73241 | Analyzed | 未確認 | CWE-287 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP server-side RDSTLS in libfreerdp/core/rdstls.c accepts an attacker-supplied RDSTLS_TYPE_CA |
| CVE-2026-73242 | Analyzed | 未確認 | CWE-122 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberos_DecryptMessage function fails to bound |
| CVE-2026-73243 | Deferred | 未確認 | CWE-918 | kkFileView is a universal file online preview project based on Spring Boot. Prior to 5.0.1, the unauthenticated GET /addTask endpoint in kkFileView is omitted from TrustHostFilter |
| CVE-2026-73244 | Deferred | 未確認 | CWE-22 | kkFileView is a universal file online preview project based on Spring Boot. Prior to 5.0.1, the unauthenticated POST /listFiles endpoint in server/src/main/java/cn/keking/web/contr |
| CVE-2026-73245 | Awaiting Analysis | 未確認 | CWE-306 | Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0-rc6, Kestra's cli/src/main/resources/application.yml serves Micronaut management endpoints on port 808 |
| CVE-2026-73246 | Awaiting Analysis | 未確認 | CWE-200, CWE-306 | Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0-rc6, Kestra's worker/src/main/java/io/kestra/worker/endpoint/WorkerEndpoint.java serves GET /worker wi |
| CVE-2026-73247 | Awaiting Analysis | 未確認 | CWE-918 | Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0, Kestra's core/src/main/java/io/kestra/core/runners/pebble/functions/HttpFunction.java passes the user |
| CVE-2026-73248 | Deferred | 未確認 | CWE-94, CWE-95 | calibre is an e-book manager. Prior to 9.12.0, calibre processes attacker-controlled composite_template metadata from a malicious EPUB, OPF, PDF, or similar file through program: a |
| CVE-2026-73249 | Deferred | 未確認 | CWE-862 | calibre is an e-book manager. Prior to 9.12.0, the calibre Content Server endpoint POST /book-update-annotations/{library_id}/{book_id}/{fmt} in src/calibre/srv/books.py omits need |
| CVE-2026-73250 | Awaiting Analysis | 未確認 | CWE-77 | Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the Notepad++ Windows 11 x64 and ARM64 installer passes the attacker-influenced installation directory `$INS |
| CVE-2026-73251 | Analyzed | 未確認 | CWE-295 | Mongoose is an embedded web server and network library. Prior to 7.23, a network attacker can impersonate a TLS server to a Mongoose client configured with a multi-certificate CA b |
| CVE-2026-73253 | Analyzed | 未確認 | CWE-295 | Mongoose is an embedded web server and network library. Prior to version 7.22, an on-path network attacker with a wildcard certificate for a parent domain can impersonate deeper su |
| CVE-2026-73254 | Analyzed | 未確認 | CWE-79 | Mongoose is an embedded web server and network library. Prior to 7.22, an attacker who can create a file with an HTML payload in its name can trigger stored cross-site scripting wh |
| CVE-2026-73255 | Analyzed | 未確認 | CWE-22 | Mongoose is an embedded web server and network library. Prior to 7.22, an attacker who can control an SSI-enabled file can place directory traversal sequences in an #include file o |
| CVE-2026-73256 | Analyzed | 未確認 | CWE-444 | Mongoose is an embedded web server and network library. Prior to 7.22, a remote unauthenticated attacker can exploit an HTTP/1.0 reverse-proxy deployment by sending a request with |
| CVE-2026-73257 | Analyzed | 未確認 | CWE-444 | Mongoose is an embedded web server and network library. Priro to version 7.22, a remote unauthenticated attacker can send an HTTP request containing both Content-Length and Transfe |
| CVE-2026-73258 | Analyzed | 未確認 | CWE-697 | Mongoose is an embedded web server and network library. Prior to 7.22, a remote attacker can place a lone carriage return or line feed in multipart input processed by mg_http_next_ |
| CVE-2026-73259 | Analyzed | 未確認 | CWE-79 | Mongoose is an embedded web server and network library. Prior to 7.22, a remote attacker can send a crafted percent-encoded request path to a deployment using MG_ENABLE_DIRLIST and |
| CVE-2026-7326 | Analyzed | 未確認 | CWE-352 | A cross-site request forgery vulnerability in the Admin UI of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker who lures an authenticated administrator t |
| CVE-2026-73262 | Awaiting Analysis | 未確認 | CWE-79 | Prowler is a cloud security platform. Prior to 5.37.0, Prowler's HTML output formatter in prowler/lib/outputs/html/html.py inserted finding.resource_tags, assembled by unroll_dict |
| CVE-2026-73263 | Awaiting Analysis | 未確認 | CWE-78 | Prowler is a cloud security platform. Prior to 5.36.0, the Kubernetes provider connection test accepted kubeconfig_content containing a legacy gcp auth-provider with config.cmd-pat |
| CVE-2026-73264 | Awaiting Analysis | 未確認 | CWE-918 | Prowler is a cloud security platform. Prior to 5.33.1, an authenticated user with Lighthouse provider configuration access could supply an unvalidated base_url for the openai_compa |
| CVE-2026-73265 | Deferred | 未確認 | CWE-862, CWE-863 | RustFS is a distributed object storage system built in Rust. RustFS authorizes explicit versionId reads in GetObject, CopyObject sources, and UploadPartCopy sources with s3:GetObje |
| CVE-2026-73266 | Awaiting Analysis | 未確認 | CWE-441 | A flaw was found in the clusterclaims-controller component of Multicluster Engine (MCE). An authenticated tenant can exploit this vulnerability by manipulating ClusterClaim labels. |
| CVE-2026-73267 | Awaiting Analysis | 未確認 | CWE-602 | A flaw was found in the clusterclaims-controller component of multicluster engine (MCE). A tenant with standard permissions to create and delete ClusterClaim resources can exploit |
| CVE-2026-73268 | Awaiting Analysis | 未確認 | CWE-94 | A flaw was found in the cluster-curator-controller component of multicluster engine (MCE). A tenant with create or update permissions on ClusterCurator resources can inject an arbi |
| CVE-2026-73269 | Awaiting Analysis | 未確認 | CWE-269 | A flaw was found in the cluster-curator-controller component. A local user, by creating a ClusterCurator resource with a specific naming convention, can trigger the creation of a c |
| CVE-2026-7327 | Analyzed | 未確認 | CWE-269 | An improper privilege management vulnerability in the REST API document processing pipeline of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with |
| CVE-2026-73281 | Analyzed | 未確認 | CWE-669 | In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by |
| CVE-2026-73282 | Analyzed | 未確認 | CWE-416 | In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent. |
| CVE-2026-73283 | Analyzed | 未確認 | CWE-670 | In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not. |
| CVE-2026-73284 | Deferred | 未確認 | CWE-269 | RustFS is a distributed object storage system built in Rust. RustFS AddServiceAccount in rustfs/src/admin/handlers/service_account.rs accepts an attacker-controlled target_user aft |
| CVE-2026-73285 | Deferred | 未確認 | CWE-863 | RustFS is a distributed object storage system built in Rust. From 1.0.0-alpha.64 until 1.0.0-rc.1, RustFS external OPA authorization enabled by RUSTFS_POLICY_PLUGIN_URL in crates/i |
| CVE-2026-73286 | Deferred | 未確認 | CWE-863 | RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.12, RustFS get_condition_values folds attacker-controlled request headers from HeaderMap into serve |
| CVE-2026-73287 | Deferred | 未確認 | CWE-862 | RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.12, RustFS handles FTPS MKD in FtpsDriver::mkd in crates/protocols/src/ftps/driver.rs by calling st |
| CVE-2026-73288 | Deferred | 未確認 | CWE-693, CWE-754 | RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-rc.1, RustFS Object Lock enforcement in crates/ecstore/src/bucket/object_lock/objectlock_sys.rs lets che |
| CVE-2026-73289 | Deferred | 未確認 | CWE-863 | RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.12, RustFS evaluates the ForAllValues: and ForAnyValue: set qualifiers with the negated string oper |
| CVE-2026-7329 | Analyzed | 未確認 | CWE-269 | An improper privilege management vulnerability in the SQL, SPARQL, and Optic REST query interfaces of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated use |
| CVE-2026-73290 | Deferred | 未確認 | CWE-863 | RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.12, an anonymous ListObjectVersions request in rustfs/src/storage/access.rs that lacks a direct buc |
| CVE-2026-73291 | Deferred | 未確認 | CWE-22, CWE-94 | Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby. Prior to version 3.4.0, Seerr's ImageProxy in server/lib/imageproxy.ts uses the upstream E |
| CVE-2026-73292 | Deferred | 未確認 | CWE-352, CWE-620 | Semaphore UI is a web interface for managing DevOps tools. Prior to 2.18.21, the /api/users/{id}/password endpoint accepts a cross-site request using the authenticated user's semap |
| CVE-2026-73293 | Deferred | 未確認 | CWE-269 | Semaphore UI is a web interface for managing DevOps tools. Prior to 2.18.19 and from 2.19.0-alpha3 until 2.19.5-beta5, ProjectMiddleware and GetProjectOrGlobalRoleBySlug allow a p |
| CVE-2026-73294 | Deferred | 未確認 | CWE-78, CWE-88 | Semaphore UI is a web interface for managing DevOps tools. Prior to 2.18.17 and 2.19.5-beta2, repository git_url handling passes an attacker-controlled --upload-pack option to CmdG |
| CVE-2026-73295 | Deferred | 未確認 | CWE-79 | Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/compon |
| CVE-2026-73296 | Awaiting Analysis | 未確認 | CWE-306, CWE-862 | Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, create_mobile_data_collection_server and create_mobile_action_server in |
| CVE-2026-73297 | Awaiting Analysis | 未確認 | CWE-918 | Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, _is_blocked_ip in ufo/utils/url_security.py did not block NAT64 prefixe |
| CVE-2026-73298 | Awaiting Analysis | 未確認 | CWE-639 | The Microsoft Container Migration Solution Accelerator is a multi-service application that provides a multi-agent, AI-driven migration solution for moving container service configu |
| CVE-2026-73299 | Deferred | 未確認 | CWE-1336, CWE-94 | Prompty is a markdown file format (.prompty) for LLM prompts. Prior to 0.1.5 and 2.0.0-beta.5, the TypeScript Nunjucks renderer evaluated untrusted .prompty template bodies with un |
| CVE-2026-73300 | Deferred | 未確認 | CWE-89 | Budibase is an open-source low-code platform. Prior to 3.40.0, the MySQL integration component in Budibase is configured with multipleStatements: true, enabling execution of multip |
| CVE-2026-73301 | Deferred | 未確認 | CWE-862 | Budibase is an open-source low-code platform. Prior to 3.39.25, the GET /api/global/groups endpoint in packages/worker/src/api/routes/global/groups.ts omitted auth.builderOrAdmin, |
| CVE-2026-73302 | Deferred | 未確認 | CWE-287 | Budibase is an open-source low-code platform. Prior to 3.39.30, the OIDC flow in packages/backend-core/src/middleware/passport/sso/oidc.ts resolved an email without getEmailVerifie |
| CVE-2026-73303 | Deferred | 未確認 | CWE-639 | Budibase is an open-source low-code platform. Prior to 3.40.0, POST /api/v2/email on account.budibase.app accepted a client-controlled accountId without binding it to the authentic |
| CVE-2026-73304 | Deferred | 未確認 | CWE-200 | Budibase is an open-source low-code platform. Prior to 3.39.25, GET /api/users/metadata and GET /api/users/metadata/:id returned user objects processed by packages/server/src/utili |
| CVE-2026-73305 | Deferred | 未確認 | CWE-269, CWE-862, CWE-863 | Budibase is an open-source low-code platform. Prior to 3.39.24, POST /api/public/v1/roles/assign called validateGlobalRoleUpdate without checking appBuilder.appId or role.appId in |
| CVE-2026-73306 | Deferred | 未確認 | CWE-204 | Budibase is an open-source low-code platform. Prior to 3.39.25, POST /api/global/auth/:tenantId/login incremented the failure counter in packages/worker/src/api/controllers/global/ |
| CVE-2026-73307 | Deferred | 未確認 | CWE-918 | Budibase is an open-source low-code platform. Prior to 3.39.4, uploadUrl in packages/server/src/utilities/fileUtils.ts used a bare server-side fetch for string attachment values pa |
| CVE-2026-73308 | Deferred | 未確認 | CWE-200 | Budibase is an open-source low-code platform. Prior to 3.39.25, packages/server/src/api/controllers/automation.ts returned automation test results containing trigger.outputs.user.o |
| CVE-2026-73323 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-73325 | Deferred | 未確認 | CWE-502 | Fujitsu Research's OneCompression library before 1.2.1 contains an unsafe deserialization vulnerability that allows attackers to execute arbitrary code by supplying a crafted model |
| CVE-2026-73326 | Deferred | 未確認 | CWE-862 | CamaleonCMS contains a missing authorization vulnerability that allows any authenticated low-privileged user to access and modify plugin settings by reaching four unprotected plugi |
| CVE-2026-73327 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as the reported behavior is intentional. The update process is designed to write files to | |
| CVE-2026-73329 | Deferred | 未確認 | CWE-79 | CamaleonCMS contains a stored cross-site scripting vulnerability that allows authenticated low-privileged users to execute arbitrary JavaScript in an administrator's browser by inj |
| CVE-2026-73330 | Deferred | 未確認 | CWE-1336 | CamaleonCMS 2.9.1 contains a server-side template injection vulnerability that allows authenticated administrators to execute arbitrary commands by embedding ERB tags in the email |
| CVE-2026-73331 | Deferred | 未確認 | CWE-89 | CamaleonCMS 2.9.1 contains an authenticated SQL injection vulnerability that allows authenticated attackers with post creation or editing privileges to submit a crafted slug value |
| CVE-2026-73332 | Deferred | 未確認 | CWE-89 | CamaleonCMS contains a stored cross-site scripting vulnerability in the cama_contact_form plugin that allows low-privileged authenticated attackers to inject arbitrary HTML by subm |
| CVE-2026-73335 | Deferred | 未確認 | CWE-939 | Android application "Myna Point" is vulnerable to Improper Authorization in Handler for Custom URL Scheme (CWE-939). A malicious application installed on the user's Android device |
| CVE-2026-73336 | Analyzed | 未確認 | CWE-79 | Joomla! Core - [20260806] - XSS through schema.org outputs in Joomla 5.1.0-5.4.7, 6.0.0-6.1.2 - Improper escaping flags lead to an XSS vector in schema.org markup outputs. |
| CVE-2026-73337 | Analyzed | 未確認 | CWE-287 | Joomla! Core - [20260807] - MFA Authentication Bypass in Joomla 4.0.0-5.4.7 and 6.0.0-6.1.2 - Insufficient state checks lead to a vector that allows to bypass 2FA checks. |
| CVE-2026-73338 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Autopay <= 5.0.0 versions. |
| CVE-2026-73339 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Modern Events Calendar < 7.35.0 versions. |
| CVE-2026-73340 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Featured Image from URL <= 5.3.3 versions. |
| CVE-2026-73341 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in RegistrationMagic <= 6.0.9.7 versions. |
| CVE-2026-73342 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WP Multilang <= 2.4.31 versions. |
| CVE-2026-73343 | Deferred | 未確認 | CWE-94 | Unauthenticated Remote Code Execution (RCE) in WP Compress < 7.20.01 versions. |
| CVE-2026-73344 | Deferred | 未確認 | CWE-79 | Author Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions. |
| CVE-2026-73345 | Deferred | 未確認 | CWE-89 | Customer SQL Injection in License Manager for WooCommerce <= 3.0.18 versions. |
| CVE-2026-73346 | Deferred | 未確認 | CWE-89 | Administrator SQL Injection in MailChimp For WooCommerce < 6.2 versions. |
| CVE-2026-73347 | Deferred | 未確認 | CWE-266 | Unauthenticated Privilege Escalation in TrueBooker <= 1.2.6 versions. |
| CVE-2026-73348 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in GiveWP < 4.16.6 versions. |
| CVE-2026-73349 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in GiveWP < 4.16.6 versions. |
| CVE-2026-73350 | Deferred | 未確認 | CWE-266 | Unauthenticated Broken Authentication in SupportCandy <= 3.5.1 versions. |
| CVE-2026-73351 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.1 versions. |
| CVE-2026-73352 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in GiveWP <= 4.16.5.1 versions. |
| CVE-2026-73353 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Revolut Gateway for WooCommerce < 4.22.10 versions. |
| CVE-2026-73354 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in SimplyRETS Real Estate IDX <= 3.2.8 versions. |
| CVE-2026-73355 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Affiliates Manager <= 2.9.53 versions. |
| CVE-2026-73356 | Deferred | 未確認 | CWE-862 | Unauthenticated Arbitrary Content Deletion in Breeze <= 2.5.12 versions. |
| CVE-2026-73357 | Deferred | 未確認 | CWE-79 | Donor Cross Site Scripting (XSS) in GiveWP < 4.16.6 versions. |
| CVE-2026-73358 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Affiliates Manager <= 2.9.53 versions. |
| CVE-2026-73359 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.3.9 versions. |
| CVE-2026-73360 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Chaty Pro <= 3.5.8 versions. |
| CVE-2026-73361 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Recipe Card Blocks for Gutenberg & Elementor <= 3.4.18 versions. |
| CVE-2026-73362 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in URL Shortify <= 2.5.0 versions. |
| CVE-2026-73363 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Taxi Booking Manager for WooCommerce < 2.0.8 versions. |
| CVE-2026-73364 | Deferred | 未確認 | CWE-502 | Customer PHP Object Injection in Flexible Subscriptions <= 1.8.1 versions. |
| CVE-2026-73365 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in JetAppointment <= 2.5.2 versions. |
| CVE-2026-73366 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Easy Google Maps <= 1.13.0 versions. |
| CVE-2026-73367 | Deferred | 未確認 | CWE-829 | Unauthenticated Remote File Inclusion in Easy Google Maps < 1.14.2 versions. |
| CVE-2026-73371 | Analyzed | 未確認 | CWE-284 | Joomla! Core - [20260808] - Improper ACL checks for batch copy actions in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows unauthorized users to perform copy batch |
| CVE-2026-73372 | Analyzed | 未確認 | CWE-284 | Joomla! Core - [20260809] - Improper ACL checks when injection schema.org contact data in Joomla 5.1.0-5.4.7 and 6.0.0-6.1.2 - An improper access check injects contact information |
| CVE-2026-73373 | Analyzed | 未確認 | CWE-434 | Joomla! Core - [20260810] - Unrestricted uploads of SHTML files in Joomla 1.0.0-5.4.7, 6.0.0-6.1.2 - The default list of dangerous files did not include SHTML files. On servers tha |
| CVE-2026-73374 | Deferred | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability existed in Vulnerability-Lookup in the render_tag_badges Jinja filter used to display reference tags associated with vulnerability |
| CVE-2026-73375 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Ultimate Maps by Supsystic < 1.5.0 versions. |
| CVE-2026-73376 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Ultimate Maps by Supsystic < 1.5.0 versions. |
| CVE-2026-73377 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Ultimate Maps by Supsystic < 1.5.0 versions. |
| CVE-2026-73378 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Contact Form by Supsystic < 1.10.0 versions. |
| CVE-2026-73379 | Deferred | 未確認 | CWE-288 | Unauthenticated Bypass Vulnerability in Contact Form by Supsystic < 1.10.0 versions. |
| CVE-2026-73380 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Popup by Supsystic <= 1.13.0 versions. |
| CVE-2026-73381 | Deferred | 未確認 | CWE-288 | Unauthenticated Broken Authentication in Popup by Supsystic <= 1.13.0 versions. |
| CVE-2026-73382 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gemini Labs Site Reviews site-reviews allows Stored XSS.This issue affects Sit |
| CVE-2026-73383 | Deferred | 未確認 | CWE-22 | Shop manager Arbitrary File Download in CTX Feed <= 6.6.47 versions. |
| CVE-2026-73384 | Deferred | 未確認 | CWE-201 | Unauthenticated Sensitive Data Exposure in Pay with Contact Form 7 <= 1.0.4 versions. |
| CVE-2026-73385 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Outranking Plugin Options <= 1.1.3 versions. |
| CVE-2026-73386 | Deferred | 未確認 | CWE-201 | Unauthenticated Sensitive Data Exposure in Track Geolocation Of Users Using Contact Form 7 <= 3.0.2 versions. |
| CVE-2026-73387 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Resido <= 1.5 versions. |
| CVE-2026-73388 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Nikstore Core <= 1.5 versions. |
| CVE-2026-73389 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Kalles Addons <= 1.0.6 versions. |
| CVE-2026-73390 | Deferred | 未確認 | CWE-266 | Unauthenticated Privilege Escalation in Total Donations <= 2.0.5 versions. |
| CVE-2026-73391 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Total Donations <= 2.0.5 versions. |
| CVE-2026-73392 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate to CVE-2026-12965. | |
| CVE-2026-73393 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Subscribe2 <= 10.46 versions. |
| CVE-2026-73394 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Stitch Express <= 1.9.0 versions. |
| CVE-2026-73395 | Deferred | 未確認 | CWE-639 | Unauthenticated Insecure Direct Object References (IDOR) in Booking calendar, Appointment Booking System <= 3.2.36 versions. |
| CVE-2026-73396 | Deferred | 未確認 | CWE-288 | Subscriber Broken Authentication in MWB HubSpot for WooCommerce <= 1.6.7 versions. |
| CVE-2026-73397 | Deferred | 未確認 | CWE-502 | Unauthenticated Deserialization of untrusted data in Youzify <= 1.3.7 versions. |
| CVE-2026-73398 | Deferred | 未確認 | CWE-288 | Unauthenticated Broken Authentication in Piraeus Bank WooCommerce Payment Gateway 3.2.0 versions. |
| CVE-2026-73399 | Deferred | 未確認 | CWE-288 | Unauthenticated Broken Authentication in Flutterwave WooCommerce <= 3.3.0 versions. |
| CVE-2026-73400 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Restaurant Menu by MotoPress <= 2.4.11 versions. |
| CVE-2026-73401 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in InstaWP Connect <= 0.1.3.7 versions. |
| CVE-2026-73402 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in WP BASE Booking <= 6.3.2 versions. |
| CVE-2026-73403 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in User Registration <= 5.2.6 versions. |
| CVE-2026-73404 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in MasterStudy LMS <= 3.7.41 versions. |
| CVE-2026-73405 | Deferred | 未確認 | CWE-862 | An authorization bypass vulnerability in Vulnerability-Lookup allowed inactive or unconfirmed accounts to subscribe to Server-Sent Events (SSE) streams through the /pubsub/subscrib |
| CVE-2026-73406 | Deferred | 未確認 | CWE-200 | Budibase is an open-source low-code platform. Prior to 3.39.32, GET /api/global/users/tenant/:id was listed in PUBLIC_ENDPOINTS in packages/worker/src/api/index.ts, and tenantUserL |
| CVE-2026-73407 | Deferred | 未確認 | CWE-22 | Budibase is an open-source low-code platform. Prior to 3.40.1, RestIntegration._req in packages/server/src/integrations/rest.ts attached credentials from getAuthHeaders and default |
| CVE-2026-73408 | Deferred | 未確認 | CWE-89 | Budibase is an open-source low-code platform. Prior to 3.39.18, packages/server/src/integrations/mysql.ts enabled multipleStatements and inserted an unescaped tableName into a DESC |
| CVE-2026-73409 | Deferred | 未確認 | CWE-203 | Budibase is an open-source low-code platform. Prior to 3.40.1, packages/server/src/integrations/mongodb.ts passed builder-controlled tlsCertificateKeyFile and tlsCAFile values dire |
| CVE-2026-73410 | Deferred | 未確認 | CWE-367, CWE-918 | Budibase is an open-source low-code platform. Prior to 3.40.0, packages/backend-core/src/utils/outboundFetch.ts pinned a validated address through a Node agent, but the REST integr |
| CVE-2026-73411 | Deferred | 未確認 | CWE-116, CWE-200 | Shescape is a simple shell escape library for JavaScript. Prior to 2.1.14 and 3.0.1, getEscapeFunction in src/internal/unix/dash.js fails to escape ~ after : or = when applications |
| CVE-2026-73412 | Deferred | 未確認 | CWE-155, CWE-78 | Shescape is a simple shell escape library for JavaScript. Prior to 2.1.14 and 3.0.1, this impacts users of Shescape on Unix systems that explicitly configure shell to Zsh, or true |
| CVE-2026-73413 | Deferred | 未確認 | CWE-400, CWE-407 | Shescape is a simple shell escape library for JavaScript. From 2.1.11 until 2.1.14 and 3.0.1, the flag-protection loop in compose in src/internal/compose.js repeatedly joins and sl |
| CVE-2026-73414 | Deferred | 未確認 | CWE-150, CWE-78 | Shescape is a simple shell escape library for JavaScript. Prior to 2.1.14 and 3.0.1, getEscapeFunction in src/internal/win/cmd.js does not escape `(` and `)` when applications use |
| CVE-2026-73415 | Awaiting Analysis | 未確認 | CWE-79 | jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to 4.5.10 and 4.6.2, in packages/imageviewer/s |
| CVE-2026-73416 | Awaiting Analysis | 未確認 | CWE-178, CWE-180 | jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.5.0 until 4.5.10 and 4.6.2, in jupyterlab/ext |
| CVE-2026-73417 | Awaiting Analysis | 未確認 | CWE-116, CWE-79 | jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 3.3.0 until 4.5.10 and 4.6.2, JupyterLab allows |
| CVE-2026-73418 | Awaiting Analysis | 未確認 | CWE-20, CWE-248 | NextAuth.js provides authentication for Next.js. Prior to @auth/core 0.41.3 and next-auth 4.24.15 and 5.0.0-beta.32, the exported getToken() helper in the next-auth/jwt and @auth/c |
| CVE-2026-73419 | Awaiting Analysis | 未確認 | CWE-345, CWE-346, CWE-940 | NextAuth.js provides authentication for Next.js. Prior to@auth/core 0.41.3 and next-auth 4.24.15 and 5.0.0-beta.32, Auth.js stores the OAuth/OIDC anti-CSRF checks state, nonce, and |
| CVE-2026-73420 | Awaiting Analysis | 未確認 | CWE-180 | NextAuth.js provides authentication for Next.js. Prior to @auth/core 0.41.3 and next-auth 4.24.15 and 5.0.0-beta.32, the defaultNormalizer used by the email and magic-link sign-in |
| CVE-2026-73421 | Awaiting Analysis | 未確認 | CWE-285, CWE-636 | NextAuth.js provides authentication for Next.js. From next-auth 5.0.0-beta.0 until 5.0.0-beta.32, applications that gate access by checking only for the existence of the auth objec |
| CVE-2026-73422 | Deferred | 未確認 | CWE-79 | Astro is a web framework for content-driven websites. From 2.9.0 until 7.1.0, Astro's server-side View Transition CSS generator interpolates animation properties into an inline sty |
| CVE-2026-73423 | Deferred | 未確認 | CWE-352 | Astro is a web framework for content-driven websites. From 7.0.0 until 7.0.6, the composable astro/hono pipeline installs security.checkOrigin only through the middleware() primiti |
| CVE-2026-73424 | Deferred | 未確認 | CWE-441, CWE-862 | Astro is a web framework for content-driven websites. From 10.0.3 until 11.0.3, the Astro Vercel adapter in packages/integrations/vercel/src/serverless/entrypoint.ts accepts x_astr |
| CVE-2026-73425 | Deferred | 未確認 | CWE-185 | Astro is a web framework for content-driven websites. Prior to 8.1.2, the Astro Netlify adapter converts each image.remotePatterns entry into a regular expression written to .netli |
| CVE-2026-73426 | Deferred | 未確認 | CWE-79 | Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Prior to 2.1.17, Trix is vulnerable to cross-site scripting when a data-trix-serialized-attributes att |
| CVE-2026-73427 | Deferred | 未確認 | CWE-79 | Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Prior to 2.1.18, Trix is vulnerable to cross-site scripting when a crafted application/x-trix-document |
| CVE-2026-73428 | Deferred | 未確認 | CWE-79 | Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Prior to 2.1.18, Trix is vulnerable to stored cross-site scripting when crafted HTML is pasted into th |
| CVE-2026-73429 | Deferred | 未確認 | CWE-704, CWE-754 | Russh is a Rust SSH client & server library. Prior to 0.62.4, a malicious SSH server can crash a russh client session with a malformed KEX_ECDH_REPLY containing a server ephemeral |
| CVE-2026-73430 | Deferred | 未確認 | CWE-754 | Russh is a Rust SSH client & server library. Prior to 0.62.4, an unauthenticated SSH client can cause a denial of service by sending SSH_MSG_KEX_ECDH_INIT with a 32-byte all-zero Q |
| CVE-2026-73431 | Deferred | 未確認 | CWE-294 | Vulnerability-Lookup contains an authentication weakness in its account activation and password-recovery mechanism. Activation and recovery links were generated using stateless |
| CVE-2026-73432 | Deferred | 未確認 | CWE-918 | Vulnerability-Lookup contains a server-side request forgery (SSRF) vulnerability in the remote-instance synchronization functionality. Remote instance addresses were validated only |
| CVE-2026-73433 | Undergoing Analysis | 未確認 | CWE-191 | A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an AVI strd chunk, gst_avi_demux_parse_strd() decrements a remaining-length counter by |
| CVE-2026-73434 | Undergoing Analysis | 未確認 | CWE-125 | A flaw was found in GStreamer gst-plugins-good (avidemux). In gst_avi_demux_riff_parse_vprp(), the number of available gst_riff_vprp_video_field_desc entries is calculated by divid |
| CVE-2026-73479 | Deferred | 未確認 | CWE-116 | dua-cli fails to filter terminal escape sequences when printing marked file paths after exiting the TUI interface. Attackers can craft file names containing OSC/CSI escape sequence |
| CVE-2026-73480 | Deferred | 未確認 | CWE-116 | gdu fails to strip terminal escape sequences from directory and file names when printing paths after TUI exit. Attackers can craft malicious directory or file names containing esca |
| CVE-2026-73481 | Deferred | 未確認 | CWE-352 | phpList before 3.7.0-RC5 fail to enforce CSRF token validation on the bounce rule deletion endpoint (bouncerules.php / bouncerule.php). The deletion is performed via a GET request |
| CVE-2026-73482 | Deferred | 未確認 | CWE-352 | phpList before 3.7.0-RC5 contains a cross-site request forgery (CSRF) vulnerability in lists/admin/admins.php. The administrator deletion action is triggered via an unauthenticated |
| CVE-2026-73483 | Analyzed | 未確認 | CWE-78 | Flowise (packages flowise and flowise-components) in versions <= 3.1.2 contain a sandbox escape in the vm2/@flowiseai/nodevm JavaScript sandbox. An authenticated user with access t |
| CVE-2026-73484 | Analyzed | 未確認 | CWE-184 | Flowise before 3.1.3 contains a sandbox escape vulnerability in pythonCodeValidator.ts that fails to block native Pandas DataFrame methods like to_csv, to_json, pipe, and query. Au |
| CVE-2026-73485 | Analyzed | 未確認 | CWE-94 | Flowise before 3.1.3 contains a code injection vulnerability in the Airtable Agent node that allows unauthenticated attackers to execute arbitrary Python code by bypassing the pyth |
| CVE-2026-73486 | Analyzed | 未確認 | CWE-94 | Flowise before 3.1.3 contains a code injection vulnerability in the CSV Agent node's customReadCSV parameter that allows authenticated attackers to execute arbitrary Python code. T |
| CVE-2026-73487 | Analyzed | 未確認 | CWE-94 | Flowise before 3.1.3 contains a regex-based Python code validator bypass in CSV and Airtable Agent nodes that allows unauthenticated attackers to inject malicious code via prompt i |
| CVE-2026-73488 | Analyzed | 未確認 | CWE-639 | Flowise versions before 3.1.3 contain an insecure direct object reference vulnerability in the GET /api/v1/organization/customer-default-source endpoint that allows authenticated a |
| CVE-2026-73489 | Deferred | 未確認 | CWE-129 | Russh is a Rust SSH client & server library. Prior to 0.62.4, an authenticated SSH client can cause a denial of service by sending a pty-req channel request with more than 130 term |
| CVE-2026-73490 | Awaiting Analysis | 未確認 | CWE-79 | Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Prior to 2.25.2, Loofah's HTML5 sanitizer applies its loca |
| CVE-2026-73491 | Awaiting Analysis | 未確認 | CWE-184 | Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. From 2.25.0 until 2.25.2, Loofah::HTML5::Scrub.allowed_uri |
| CVE-2026-73492 | Awaiting Analysis | 未確認 | CWE-184, CWE-79 | Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. From 2.25.0 until 2.25.2, Loofah::HTML5::Scrub.allowed_uri |
| CVE-2026-73493 | Awaiting Analysis | 未確認 | CWE-770 | Http4s (http4s-blaze-server) is a minimal, idiomatic Scala interface for HTTP services. Prior to 0.23.18 and 1.0.0-M42, http4s-blaze-server aggregates fragments of an incoming WebS |
| CVE-2026-73495 | Deferred | 未確認 | CWE-444 | blaze is a Scala library for building asynchronous pipelines, with a focus on network IO. Prior to 0.23.18 and 1.0.0-M42, blaze-server can merge HTTP/1.1 chunked-body trailer field |
| CVE-2026-73498 | Deferred | 未確認 | CWE-22 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, confluence_upload_attachment passes its client-supplied file_p |
| CVE-2026-73499 | Awaiting Analysis | 未確認 | CWE-863 | etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.5.33, 3.6.14, and 3.7.1, a user granted READ permission on a single exact key can us |
| CVE-2026-73500 | Awaiting Analysis | 未確認 | CWE-770 | etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.5.33, 3.6.14, and 3.7.1, a network attacker who can reach an etcd TLS listener can o |
| CVE-2026-73501 | Deferred | 未確認 | CWE-287 | kin-openapi is a Go project for handling OpenAPI files. Prior to 0.144.0, ValidationHandler.Load() in openapi3filter/validation_handler.go silently replaces a nil AuthenticationFun |
| CVE-2026-73502 | Deferred | 未確認 | CWE-476 | kin-openapi is a Go project for handling OpenAPI files. From 0.2.0 until 0.144.0, openapi3filter.ValidateRequest can encounter a NULL-pointer-dereference denial of service when an |
| CVE-2026-73505 | Deferred | 未確認 | CWE-1336, CWE-94 | Oh My Posh is the most customisable and low-latency cross platform/shell prompt renderer. Prior to 29.35.1, the setStyle() function in src/segments/path.go passed pt.Path, which in |
| CVE-2026-73506 | Deferred | 未確認 | CWE-150 | Oh My Posh is the most customisable and low-latency cross platform/shell prompt renderer. Prior to 29.35.1, write(s rune) in src/terminal/writer.go emitted attacker-controlled curr |
| CVE-2026-73507 | Analyzed | 未確認 | CWE-400 | Netty is an asynchronous, event-driven network application framework. Prior to 4.1.136.Final and 4.2.16.Final, io.netty.handler.codec.xml.XmlFrameDecoder.decode() failed to preserv |
| CVE-2026-73508 | Analyzed | 未確認 | CWE-772 | Netty is an asynchronous, event-driven network application framework. Prior to 4.1.136.Final and 4.2.16.Final, io.netty.handler.codec.dns.AbstractDnsRecord, io.netty.handler.codec. |
| CVE-2026-73509 | Deferred | 未確認 | CWE-22 | OpenList a file list program that supports multiple storage. Prior to 4.2.4, the authenticated /api/fs/batch_rename handler in server/handles/fsbatch.go authorizes only the source |
| CVE-2026-73514 | Awaiting Analysis | 未確認 | CWE-787 | The address_standardizer extension for PostGIS through 3.7.0, fixed in commit 423570b, contains an out-of-bounds write vulnerability that allows a database user with the ability to |
| CVE-2026-73515 | Awaiting Analysis | 未確認 | CWE-125 | PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer |
| CVE-2026-73519 | Deferred | 未確認 | CWE-798 | WolfStack before 25.9.2 contains a hard-coded cluster-authentication secret compiled into every build and published as a constant in src/auth/mod.rs, allowing remote unauthenticate |
| CVE-2026-73522 | Deferred | 未確認 | CWE-121 | COVESA Open1722 through 0.9.2 contains a stack buffer overflow vulnerability that allows unauthenticated remote attackers to write past the end of a fixed 15-slot stack array by se |
| CVE-2026-73523 | Deferred | 未確認 | CWE-197 | COVESA Open1722 through 0.9.2 contains an integer truncation vulnerability in acf-can-listener.c that allows unauthenticated remote attackers to cause the CAN listener to transmit |
| CVE-2026-73529 | Deferred | 未確認 | CWE-307 | Plainpad through 1.1.1, fixed in commit d3823fc, contains a missing rate limiting vulnerability that allows unauthenticated attackers to send unbounded login requests to the POST / |
| CVE-2026-73530 | Deferred | 未確認 | CWE-918 | Flyto2 Core before 2.28.0 contains a server-side request forgery guard bypass vulnerability that allows attackers to reach internal services by supplying URLs using the unblocked I |
| CVE-2026-73531 | Deferred | 未確認 | CWE-79 | django-helpdesk before 2.3.3 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject arbitrary JavaScript by submitting HTML-formatted |
| CVE-2026-73532 | Deferred | 未確認 | CWE-506 | Fluent Forms Pro 6.2.7 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build in |
| CVE-2026-73533 | Deferred | 未確認 | CWE-506 | Ninja Tables Pro 5.2.11 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build i |
| CVE-2026-73537 | Deferred | 未確認 | CWE-79 | Cross-site scripting vulnerability exists in Miraikan Assist App. If this vulnerability is exploited, an arbitrary script may be executed in the browser component (WebView) running |
| CVE-2026-73541 | Analyzed | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet through concurrent sponsored payments, den |
| CVE-2026-73542 | Deferred | 未確認 | CWE-296 | Multiple SEIKO EPSON printers and scanners contain revoked root certificates. A man-in-the-middle attack may allow an attacker to obtain communication data transmitted by the produ |
| CVE-2026-73555 | Analyzed | 未確認 | CWE-209 | vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the validation_exception_handler in vllm/entrypoints/openai/server_utils.py converts FastAPI Req |
| CVE-2026-73556 | Analyzed | 未確認 | CWE-1333, CWE-400 | vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the structured_outputs.regex parameter in vllm/v1/structured_output/backend_lm_format_enforcer.p |
| CVE-2026-73557 | Analyzed | 未確認 | CWE-362 | vLLM is an inference and serving engine for large language models. From 0.20.2rc0 until 0.26.0, safe_load_prompt_embeds in vllm/renderers/embed_utils.py uses torch.sparse.check_spa |
| CVE-2026-73558 | Analyzed | 未確認 | CWE-190 | vLLM is an inference and serving engine for large language models. Prior to 0.27.0, an integer overflow in blockIdx.x * 2 * d in activation_kernels.cu can cause act_and_mul_kernel |
| CVE-2026-73559 | Analyzed | 未確認 | CWE-400 | vLLM is an inference and serving engine for large language models. From 0.19.0 until 0.26.0, the /v1/completions CompletionRequest.prompt field in vllm/entrypoints/openai/completio |
| CVE-2026-73560 | Analyzed | 未確認 | CWE-918 | vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the MiMoV2OmniMultiModalProcessor in vllm/transformers_utils/processors/mimo_v2_omni.py passes a |
| CVE-2026-73561 | Awaiting Analysis | 未確認 | CWE-400 | Hub is a Node.js WebSocket server and client with added features. Prior to 0.2.16, every incoming unauthenticated WebSocket connection triggers loadDefaultConnectionEventListeners |
| CVE-2026-73562 | Awaiting Analysis | 未確認 | CWE-1321 | Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to 6.13.10, 7.8.10, 8.24.1, and 9.7.2, passing a user-controlled update such as My |
| CVE-2026-73563 | Analyzed | 未確認 | CWE-601 | Backstage is an open framework for building developer portals. Prior to 0.29.2, the experimental dynamic client registration and client ID metadata document features in the @backst |
| CVE-2026-73564 | Deferred | 未確認 | CWE-129, CWE-190 | frp is a fast reverse proxy. From 0.53.0 until 0.70.1, frp's optional SSH Tunnel Gateway in pkg/ssh/server.go parses an SSH exec channel request by adding 4 to an attacker-controll |
| CVE-2026-73565 | Awaiting Analysis | 未確認 | CWE-401, CWE-770 | @hono/node-server allows running the Hono application on Node.js. From 2.0.0 until 2.0.10, a WebSocket upgrade request to an upgradeWebSocket route with a missing or malformed Sec- |
| CVE-2026-73566 | Deferred | 未確認 | CWE-400, CWE-674 | node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.21, node-tar's filesFilter in src/list.ts uses the recursive mapHas helper to walk an archive entry path up |
| CVE-2026-73567 | Deferred | 未確認 | CWE-338 | sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. Prior to 0.5.0, the default no-argument sm2.generateKeyPairHex() path in No |
| CVE-2026-73568 | Deferred | 未確認 | CWE-400 | py-libp2p is the Python implementation of the libp2p networking stack. In 0.7.0 and earlier, the yamux handle_incoming() method in libp2p/stream_muxer/yamux/yamux.py reads an attac |
| CVE-2026-73569 | Deferred | 未確認 | CWE-776 | fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks. From 5.9.3 until 5.10.1, src/xmlparser/OrderedObjParser.js processes multiple |
| CVE-2026-73570 | Analyzed | 掲載 | CWE-78 | A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due |
| CVE-2026-73571 | Analyzed | 未確認 | CWE-863 | An authorization bypass vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.17 due to improper authorization validation in delegated email sending functionality. An auth |
| CVE-2026-73572 | Analyzed | 未確認 | CWE-79 | In Zimbra Collaboration (ZCS) before 10.1.17, a stored cross-site scripting (XSS) vulnerability exists in the Zimbra Classic Web Client due to insufficient sanitization of specific |
| CVE-2026-73573 | Analyzed | 未確認 | CWE-24 | In Zimbra Collaboration (ZCS) before 10.1.17, a path traversal vulnerability exists in the Zimbra Briefcase document editing functionality due to improper validation of the package |
| CVE-2026-73574 | Analyzed | 未確認 | CWE-669 | In Zimbra Collaboration before 10.1.17, a local file inclusion (LFI) vulnerability exists in the Zimbra Classic Web Client due to improper validation of the fu request parameter. A |
| CVE-2026-73575 | Analyzed | 未確認 | CWE-352 | In Zimbra Collaboration (ZCS) before 10.1.17, a Cross-Site Request Forgery (CSRF) vulnerability exists in the Exchange Web Services (EWS) endpoint of Zimbra Collaboration (ZCS) due |
| CVE-2026-73576 | Analyzed | 未確認 | CWE-1241 | In Zimbra Collaboration (ZCS) before 10.1.17, weak cryptographic key generation vulnerability exists in the OnlyOffice integration. The zimbraDocumentEditingJwtSecret is generated |
| CVE-2026-73583 | Analyzed | 未確認 | CWE-125 | A flaw was found in sblim-sfcb. A local attacker with access to the system can exploit an unsafe deserialization vulnerability in the provider-manager's inter-process communication |
| CVE-2026-73584 | Analyzed | 未確認 | CWE-377 | A flaw was found in sblim-sfcb. A local, low-privileged attacker can exploit a race condition during privileged instance migration by manipulating a temporary file in the `/tmp` di |
| CVE-2026-73585 | Analyzed | 未確認 | CWE-377 | A flaw was found in sblim-cmpi-base. Insecure temporary file creation in the provider registration scripts allows a local unprivileged user to perform a symlink attack. By creating |
| CVE-2026-73601 | Analyzed | 未確認 | CWE-95 | Flowise versions before 3.1.3 contain a remote code execution vulnerability in the Custom MCP node when CUSTOM_MCP_PROTOCOL is set to stdio, allowing authenticated users to execute |
| CVE-2026-73602 | Analyzed | 未確認 | CWE-95 | Flowise before 3.1.3 contains a sandbox escape vulnerability in the vm2 JavaScript sandbox that allows authenticated users to execute arbitrary code by exploiting moment locale val |
| CVE-2026-73603 | Analyzed | 未確認 | CWE-862 | Flowise before 3.1.4 fails to validate chatflow visibility in the unauthenticated text-to-speech endpoint, allowing attackers to abuse private chatflow TTS credentials. Unauthentic |
| CVE-2026-73604 | Analyzed | 未確認 | CWE-200 | Flowise before 3.1.3 contains an incomplete credential redaction vulnerability in the GET /api/v1/credentials/:id endpoint that returns decrypted secrets in plaintext. Authenticate |
| CVE-2026-73605 | Deferred | 未確認 | CWE-862 | SiYuan versions before v3.7.4 contain a path traversal vulnerability in the getUniqueFilename endpoint that allows anonymous readers to probe filesystem existence without validatio |
| CVE-2026-73606 | Deferred | 未確認 | CWE-639 | SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the /api/block/getRefIDs endpoint that fails to check password-protected document tiers. Unauthenti |
| CVE-2026-73607 | Deferred | 未確認 | CWE-862 | SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the /api/storage/getOutlineStorage endpoint that performs no authorization checks. Attackers can re |
| CVE-2026-73608 | Deferred | 未確認 | CWE-862 | SiYuan's development branch (endpoint introduced by commit 9b8e8956f, not present in v3.7.3 or master, patched in v3.7.4) contains a missing-authorization vulnerability in the /api |
| CVE-2026-73609 | Deferred | 未確認 | CWE-862 | SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getBookmarkLabels endpoint that returns all bookmark labels in the workspace without publish-ac |
| CVE-2026-73610 | Deferred | 未確認 | CWE-639 | SiYuan before v3.7.4 contains an information disclosure vulnerability in the local storage filter that returns the administrator's entire storage map with only three keys sanitized |
| CVE-2026-73611 | Deferred | 未確認 | CWE-613 | File Browser versions from 2.50.0 through 2.63.21 fail to validate JWT expiration when proxy authentication is configured with a non-default logout page. Attackers with a previousl |
| CVE-2026-73612 | Deferred | 未確認 | CWE-639 | File Browser before v2.63.22 fails to validate access rules for descendants during recursive copy, rename, and delete operations, allowing authenticated users to bypass path-based |
| CVE-2026-73613 | Deferred | 未確認 | CWE-59 | filebrowser versions before 2.63.19 contain an out-of-scope file deletion vulnerability in the TUS upload cache eviction mechanism that allows authenticated users with only Create |
| CVE-2026-73614 | Awaiting Analysis | 未確認 | CWE-436 | Network-AI ClaudeHookBridge before 5.15.1 truncates the target string to 500 characters before evaluating denyPatterns, while Claude Code executes the full untruncated command. Att |
| CVE-2026-73615 | Awaiting Analysis | 未確認 | CWE-436 | Network-AI versions before 5.15.1 contain a security matcher bypass vulnerability where SandboxPolicy evaluates raw command strings with quotes preserved while the executor tokeniz |
| CVE-2026-73616 | Deferred | 未確認 | CWE-639 | OpenRemote notification deletion endpoints fail to enforce realm boundaries, allowing any realm administrator to delete notifications belonging to other realms. Attackers with writ |
| CVE-2026-73617 | Deferred | 未確認 | CWE-943 | Budibase before 3.40.0 contains a NoSQL injection vulnerability in the MongoDB datasource integration where user-supplied parameters are enriched with handlebars using noEscaping: |
| CVE-2026-73618 | Deferred | 未確認 | CWE-943 | Budibase Server before 3.40.0 contains a NoSQL injection vulnerability in the MongoDB query execution endpoint where user-supplied parameters are interpolated into JSON query templ |
| CVE-2026-73619 | Analyzed | 未確認 | CWE-73 | GitPython before 3.1.57 contains an incomplete denylist in the unsafe_git_archive_options guard that omits --add-file and --add-virtual-file options. Attackers can supply these opt |
| CVE-2026-73620 | Analyzed | 未確認 | CWE-22 | GitPython before 3.1.57 fails to guard git option forwarding in IndexFile.checkout() and TagReference.create(), allowing attackers to pass unsafe options via kwargs. Attackers can |
| CVE-2026-73621 | Analyzed | 未確認 | CWE-88 | GitPython before 3.1.56 contains an argument injection vulnerability in the Commit.count() method, which forwards keyword arguments to 'git rev-list' without the check_unsafe_optio |
| CVE-2026-73622 | Analyzed | 未確認 | CWE-200 | GitPython before 3.1.55 fails to disable environment variable expansion in Remote.create() and Submodule.add() URL handling, allowing attackers to exfiltrate secrets by supplying U |
| CVE-2026-73623 | Analyzed | 未確認 | CWE-78 | GitPython before 3.1.54 contains an incomplete denylist in unsafe_git_clone_options that omits --template, allowing attackers to achieve arbitrary command execution during clone op |
| CVE-2026-73624 | Analyzed | 未確認 | CWE-88 | GitPython versions before 3.1.54 contain an arbitrary file overwrite vulnerability in the Diffable.diff method that fails to validate git options passed through kwargs. Attackers c |
| CVE-2026-73625 | Analyzed | 未確認 | CWE-78 | GitPython versions before 3.1.54 contain a remote code execution vulnerability in the check_unsafe_options guard that can be bypassed by smuggling git options inside single-charact |
| CVE-2026-73626 | Awaiting Analysis | 未確認 | CWE-284 | JupyterLab versions >=4.6.0,<=4.6.1 and <=4.5.9 contain an allowlist/blocklist enforcement gap in PyPIExtensionManager.install(). A missing 'await' caused the is_install_allowed co |
| CVE-2026-73627 | Awaiting Analysis | 未確認 | CWE-602 | JupyterLab (pip package 'jupyterlab') versions >=4.1.0,<=4.5.9 and >=4.6.0,<=4.6.1 contain a plugin manager lock-rule enforcement bypass. Two server-side enforcement gaps allow an |
| CVE-2026-73628 | Deferred | 未確認 | CWE-79 | Serendipity versions >= 2.3.5 and <= 2.6.0 contain a reflected cross-site scripting vulnerability in the search clean-URL route (/search/<term>). In include/functions_routing.inc.p |
| CVE-2026-73629 | Deferred | 未確認 | CWE-918 | Serendipity before 2.6.0 contains a server-side request forgery vulnerability in the serendipity_url_allowed() filter that fails to block hex-encoded IPv4 addresses, IPv6 literals, |
| CVE-2026-73630 | Deferred | 未確認 | CWE-203 | SiYuan before v3.7.4 contains an information disclosure vulnerability in the /api/filetree/authFilePublishAccess endpoint, which is registered with CheckAuth only and is reachable |
| CVE-2026-73631 | Analyzed | 未確認 | CWE-567 | Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-request parsing state could be shared across concurrent requests, allowing data ass |
| CVE-2026-73632 | Analyzed | 未確認 | CWE-567 | Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-response serialization state could be shared across concurrent requests, allowing r |
| CVE-2026-73633 | Analyzed | 未確認 | CWE-400 | Uncontrolled resource consumption vulnerability in the JSON plugin of Apache Struts. When an application is configured to populate actions from a JSON request body, the plugin read |
| CVE-2026-73634 | Analyzed | 未確認 | CWE-400 | Uncontrolled resource consumption vulnerability in Apache Struts. An application that exposes an endpoint collecting Content Security Policy violation reports reads the submitted r |
| CVE-2026-73635 | Analyzed | 未確認 | CWE-770 | Allocation of resources without limits or throttling vulnerability in Apache Struts. When no fixed locale is configured, the locale used for localized-text lookups is taken from th |
| CVE-2026-73643 | Deferred | 未確認 | CWE-407 | js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 until 5.2.2, parsing a small YAML document can take exponential time when an application calls load() or loadAll() on unt |
| CVE-2026-73644 | Deferred | 未確認 | CWE-285, CWE-639 | OpenDJ is an LDAPv3 compliant directory service. Prior to 5.1.2, the SASL PLAIN authorization identity path in opendj-server-legacy/src/main/java/org/opends/server/extensions/Plain |
| CVE-2026-73645 | Deferred | 未確認 | CWE-190 | OpenZeppelin Confidential Contracts is an experimental library for developing applications on the Zama fhEVM. Prior to 0.3.1, the ERC7984 contract tracked confidential total supply |
| CVE-2026-73646 | Awaiting Analysis | 未確認 | CWE-22 | PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Prior to 8.5.18, lib/previous-map.js loadMap() |
| CVE-2026-73647 | Deferred | 未確認 | CWE-1321 | Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.22.0, the public extend() utility in ui/src/utils/extend/extend.js recursively copi |
| CVE-2026-73648 | Awaiting Analysis | 未確認 | CWE-79 | rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. From 1.0.3 until 1.7.1, Rails::HTML::PermitScrubber restricted SVG reference elements in SV |
| CVE-2026-73649 | Deferred | 未確認 | CWE-94 | Velocity.js is a JavaScript implementation of the Apache Velocity template engine. Prior to 2.1.7, the earlier fix for CVE-2026-44966 filtered constructor, __proto__, and prototype |
| CVE-2026-73650 | Deferred | 未確認 | CWE-184, CWE-79 | SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version 1.0.0 until versions 2.8.3, 3.3.4, and 4.0.2, the removeScri |
| CVE-2026-73651 | Awaiting Analysis | 未確認 | CWE-94 | TypeORM is a TypeScript and JavaScript ORM for Node.js that supports PostgreSQL, MySQL, MariaDB, SQLite, SQL Server, Oracle, and other databases. Prior to versions 0.3.31 and 1.1.0 |
| CVE-2026-73652 | Deferred | 未確認 | CWE-863 | vantage6 is an open-source infrastructure for privacy preserving analysis. In version 5.0.2 and earlier, the algorithm-store edit permission lacks an ownership check, allowing one |
| CVE-2026-73653 | Deferred | 未確認 | CWE-22, CWE-552, CWE-862 | Vitest is a testing framework powered by Vite. Prior to versions 3.2.7, 4.1.10, and 5.0.0-beta.6, Browser Mode provider commands including upload, takeScreenshot, screenshotMatcher |
| CVE-2026-73654 | Deferred | 未確認 | CWE-1321 | Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 3.3.8 until 4.5.6, the PUT /api/v1/runs/:runId/metadata endpoint passes attacker-co |
| CVE-2026-73655 | Deferred | 未確認 | CWE-287 | Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. Prior to 4.5.2, addGoogleStrategy() in apps/webapp/app/services/googleAuth.server.ts pas |
| CVE-2026-73656 | Deferred | 未確認 | CWE-639, CWE-862 | Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. Prior to 4.5.6, POST /api/v1/deployments/:deploymentId/background-workers calls CreateDe |
| CVE-2026-73657 | Deferred | 未確認 | CWE-22, CWE-345, CWE-639 | Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 4.4.2 until 4.5.0-rc.4, `POST /api/v1/runs/:runParam/replay` in apps/webapp/app/rou |
| CVE-2026-73658 | Deferred | 未確認 | CWE-20, CWE-22, CWE-862 | Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 4.4.2 until 4.5.0-rc.5, Aws4FetchClient.buildUrl() and Aws4FetchClient.presign() in |
| CVE-2026-73659 | Deferred | 未確認 | CWE-22 | Trigger.dev is the open-source platform for building AI workflows in TypeScript. From 4.4.2 until 4.5.0, the packet presign routes in apps/webapp/app/routes/api.v1.packets.$.ts pas |
| CVE-2026-7366 | Analyzed | 未確認 | CWE-362 | IBM DataPower Gateway 11.0.0.0 through 11.0.0.1 and IBM DataPower Gateway 10.5.0.0 through 10.5.0.21 and IBM DataPower Gateway 10.6.0.0 through 10.6.0.9 allows a race condition tha |
| CVE-2026-73660 | Awaiting Analysis | 未確認 | CWE-78 | FreePBX is an open source IP PBX. Prior to 16.0.6 and 17.0.5.4, the FreePBX Text-To-Speech module allows an authenticated administrator to save a TTS destination name that is HTML- |
| CVE-2026-73661 | Analyzed | 未確認 | CWE-15 | FreePBX is an open source IP PBX. Prior to 16.0.47 and 17.0.30, the FreePBX Framework module permits a crafted backup to restore the hidden AUTHTYPE setting with the value none thr |
| CVE-2026-73662 | Analyzed | 未確認 | CWE-78 | FreePBX is an open source IP PBX. From 17.0.1 until 17.0.7, the FreePBX Music on Hold module permits dangerous command-line options for /usr/bin/mpg123 and other allowed players in |
| CVE-2026-73663 | Analyzed | 未確認 | CWE-89 | FreePBX is an open source IP PBX. From 16.0.0 until 16.0.11 and 17.0.4, the FreePBX missedcall module places the inbound Caller ID name from crafted SIP From headers into the misse |
| CVE-2026-73664 | Awaiting Analysis | 未確認 | CWE-269, CWE-284, CWE-732 | FreePBX is an open source IP PBX. From 17.0.5.34 until 17.0.11, the publicKeySave AJAX endpoint in Backup.class.php accepts an authenticated administrator's SSH public key and appe |
| CVE-2026-73665 | Analyzed | 未確認 | CWE-862 | FreePBX is an open source IP PBX. Prior to 17.0.9, the UCP Node server on ports 8001 and 8003 uses io.use(checkAuth) in node/lib/server.js, but Socket.IO version 4 applies that mid |
| CVE-2026-73666 | Deferred | 未確認 | CWE-306 | OpenChoreo is a developer platform for Kubernetes. Prior to 1.0.4, 1.1.4, and 1.2.1, the OpenChoreo Backstage backend hardcoded backend.auth.dangerouslyDisableDefaultAuthPolicy and |
| CVE-2026-73667 | Deferred | 未確認 | CWE-78 | OpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.0.4, 1.1.4, and 1.2.0-rc.2, OpenChoreo Workflow Plane templates under samples/getting-started/wo |
| CVE-2026-73669 | Awaiting Analysis | 未確認 | CWE-306 | The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker service that listens on all network interfaces without authentication. An unauthenticated attacker with n |
| CVE-2026-73670 | Deferred | 未確認 | CWE-89 | A CMS contains a SQL injection vulnerability in admin/db_data.php at line 509 that allows authenticated administrators to inject arbitrary SQL into a SHOW COLUMNS FROM statement by |
| CVE-2026-73671 | Deferred | 未確認 | CWE-601 | Saurus CMS Community Edition contains an unauthenticated open redirect vulnerability in the logout handling code in classes/port.inc.php, where the url parameter supplied via GET o |
| CVE-2026-73673 | Deferred | 未確認 | CWE-306 | Netis NC63 router firmware V3.0.0.3327 contains an unauthenticated firmware update vulnerability that allows unauthenticated attackers to submit unsigned firmware images by exploit |
| CVE-2026-73678 | Deferred | 未確認 | CWE-94 | MindsDB Minds Platform version 26.1.0 and earlier contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary OS comm |
| CVE-2026-73679 | Deferred | 未確認 | CWE-94 | ImpressCMS contains an authenticated remote code execution vulnerability in the custom tag module that allows authenticated administrators to execute arbitrary PHP code by storing |
| CVE-2026-73680 | Deferred | 未確認 | CWE-78 | Cockpit CMS 2.14.0 and prior contains a command injection vulnerability in the FFmpeg integration that allows authenticated users with only the assets/upload permission to execute |
| CVE-2026-73682 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. CVE-2026-73294 published by GitHub | |
| CVE-2026-73683 | Deferred | 未確認 | CWE-294 | Laravel Socialite's Facebook provider contains an authentication bypass vulnerability that allows unauthenticated attackers to replay captured OIDC id_tokens by exploiting the miss |
| CVE-2026-73692 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-73809 | Deferred | 未確認 | CWE-319 | A cleartext transmission of sensitive information vulnerability exists in certain Ebyte gateway products. The web management interface does not adequately protect sensitive commu |
| CVE-2026-73819 | Deferred | 未確認 | CWE-1390 | The affected Ebyte product's vendor configuration utility permits access to administrative functions without verifying the operator's identity under certain credential conditio |
| CVE-2026-73827 | Deferred | 未確認 | CWE-79 | SOY Calendar contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product. |
| CVE-2026-73829 | Analyzed | 未確認 | CWE-367 | Time-of-check Time-of-use (TOCTOU) Race Condition in ZenHive mpp allows an unauthenticated remote client to redeem one confirmed on-chain payment for multiple paid-resource accesse |
| CVE-2026-73834 | Awaiting Analysis | 未確認 | CWE-312 | A flaw was found in the must-gather component of Red Hat Advanced Cluster Management for Kubernetes. Certain ACM wrapper Custom Resources that embed Secret data are collected witho |
| CVE-2026-73839 | Deferred | 未確認 | CWE-522 | Administrative credentials may be exposed in plaintext within the Ebyte device's management interface, increasing the risk of credential compromise through visual or remote obser |
| CVE-2026-73840 | Deferred | 未確認 | CWE-287, CWE-290, CWE-345 | OpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.0.3, 1.1.3, and 1.2.0-rc.2, the POST /api/v1alpha1/autobuild endpoint in internal/openchoreo-api |
| CVE-2026-73841 | Deferred | 未確認 | CWE-639, CWE-863 | OpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.1.6 and 1.2.3, internal/openchoreo-api/api/handlers/exec.go and internal/openchoreo-api/api/hand |
| CVE-2026-73842 | Deferred | 未確認 | CWE-269, CWE-306, CWE-862 | OpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.0.3, 1.1.3, and 1.2.0-rc.2, internal/cluster-gateway/server.go exposed /api/proxy/, /api/exec/, |
| CVE-2026-73843 | Deferred | 未確認 | CWE-306, CWE-668, CWE-862 | OpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.0.2 and 1.1.2, internal/cluster-gateway/server.go served caller-facing management APIs on the ex |
| CVE-2026-73844 | Deferred | 未確認 | CWE-209, CWE-210 | CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, error paths reflect raw upstream response bodies and internal exception messages back to the caller |
| CVE-2026-73845 | Deferred | 未確認 | CWE-20, CWE-625, CWE-918 | CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, the ckan_get_mqa_quality and ckan_get_mqa_quality_details tools in src/tools/quality.ts use isValid |
| CVE-2026-73846 | Deferred | 未確認 | CWE-345, CWE-436 | CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, canonicalizeParams in src/utils/cache.ts serializes request parameters with unescaped ampersand, eq |
| CVE-2026-73847 | Deferred | 未確認 | CWE-1275, CWE-352, CWE-798 | Emlog is an open source website building system. In 2.6.26 and earlier, missing CSRF protection on the AI Assistant execute_tool action in admin/ai.php lets a remote unauthenticate |
| CVE-2026-73849 | Deferred | 未確認 | CWE-306 | Emlog is an open source website building system. In 2.6.26 and earlier, install.php accepts action=reinstall without authentication and deliberately skips the already-installed che |
| CVE-2026-73850 | Deferred | 未確認 | CWE-89 | Emlog is an open source website building system. In 2.6.20 and earlier, there is a SQL injection vulnerability in the queryDatabase function in ai.php. |
| CVE-2026-73851 | Deferred | 未確認 | CWE-22, CWE-829 | Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.34.0, an attacker who controls or tampers with the OpenAPI description consumed by Kiota can supply a fi |
| CVE-2026-73865 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vuln |
| CVE-2026-73866 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulne |
| CVE-2026-73867 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vuln |
| CVE-2026-73868 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulne |
| CVE-2026-73869 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vuln |
| CVE-2026-73870 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulne |
| CVE-2026-73871 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vuln |
| CVE-2026-73872 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulne |
| CVE-2026-73873 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Difficult to exploit vu |
| CVE-2026-73874 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulne |
| CVE-2026-73875 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.18. Easily exploitable vuln |
| CVE-2026-73876 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.0. Easily exploitable vulne |
| CVE-2026-73877 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vuln |
| CVE-2026-73878 | Modified | 未確認 | CWE-200 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vuln |
| CVE-2026-73879 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.0. Easily exploitable vulne |
| CVE-2026-73880 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.0. Easily exploitable vulne |
| CVE-2026-73881 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulne |
| CVE-2026-73882 | Modified | 未確認 | CWE-400 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.18. Easily exploitable vuln |
| CVE-2026-73883 | Modified | 未確認 | CWE-200 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vuln |
| CVE-2026-73884 | Modified | 未確認 | CWE-200 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulne |
| CVE-2026-73885 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vuln |
| CVE-2026-73886 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulne |
| CVE-2026-73887 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulne |
| CVE-2026-73888 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulne |
| CVE-2026-73889 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulne |
| CVE-2026-73890 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulne |
| CVE-2026-73891 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulne |
| CVE-2026-73892 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulne |
| CVE-2026-73893 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulne |
| CVE-2026-73894 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulne |
| CVE-2026-73895 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vuln |
| CVE-2026-73896 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulne |
| CVE-2026-73897 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulne |
| CVE-2026-73898 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulne |
| CVE-2026-73899 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.18. Easily exploitable vuln |
| CVE-2026-73900 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.0. Easily exploitable vulne |
| CVE-2026-73901 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.0. Difficult to exploit vul |
| CVE-2026-73902 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.18. Easily exploitable vuln |
| CVE-2026-73903 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.0. Easily exploitable vulne |
| CVE-2026-73904 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.0. Easily exploitable vulne |
| CVE-2026-73905 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulne |
| CVE-2026-73906 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulne |
| CVE-2026-73907 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vuln |
| CVE-2026-73908 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulne |
| CVE-2026-73909 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.18. Difficult to exploit vu |
| CVE-2026-73910 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.0. Easily exploitable vulne |
| CVE-2026-73911 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulne |
| CVE-2026-73912 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulne |
| CVE-2026-73913 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulne |
| CVE-2026-73914 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulne |
| CVE-2026-73915 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulne |
| CVE-2026-73916 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vuln |
| CVE-2026-73917 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulne |
| CVE-2026-73918 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulne |
| CVE-2026-73919 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vuln |
| CVE-2026-73920 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulne |
| CVE-2026-73921 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 1.0.0-1.4.19. Easily exploitable vuln |
| CVE-2026-73922 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 1.0.0-1.4.18. Easily exploitable vuln |
| CVE-2026-73923 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 1.0.0-1.4.19. Difficult to exploit vu |
| CVE-2026-73924 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 1.0.0-1.4.18. Easily exploitable vuln |
| CVE-2026-73925 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 1.0.0-1.4.18. Easily exploitable vuln |
| CVE-2026-73927 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.19. Easily exploitable vuln |
| CVE-2026-73928 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.2. Easily exploitable vulne |
| CVE-2026-73929 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.2. Easily exploitable vulne |
| CVE-2026-73930 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.19 and 4.0.0-4.5.2. Easily |
| CVE-2026-73931 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.2. Easily exploitable vulne |
| CVE-2026-73932 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.2. Easily exploitable vulne |
| CVE-2026-73933 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.2. Easily exploitable vulne |
| CVE-2026-73934 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.18. Easily exploitable vuln |
| CVE-2026-73935 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.0. Easily exploitable vulne |
| CVE-2026-73936 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.0. Easily exploitable vulne |
| CVE-2026-73937 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulne |
| CVE-2026-73938 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulne |
| CVE-2026-73939 | Modified | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.19. Easily exploitable vuln |
| CVE-2026-73973 | Deferred | 未確認 | CWE-22, CWE-269 | Linuxfabrik Monitoring Plugins provides monitoring plugins for Icinga, Nagios, and related systems. Prior to version 7.0.0, check-plugins/logfile/logfile accepted a free-form --fil |
| CVE-2026-73974 | Deferred | 未確認 | CWE-22, CWE-269 | linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations, and Linuxfabrik Monitoring Plugins uses its shared testing helper acros |
| CVE-2026-73992 | Deferred | 未確認 | CWE-94 | Subscriber Remote Code Execution (RCE) in Query Wrangler <= 1.5.57 versions. |
| CVE-2026-73993 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in FundEngine <= 1.7.9 versions. |
| CVE-2026-73994 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Charitable <= 1.8.11.3 versions. |
| CVE-2026-73995 | Deferred | 未確認 | CWE-290 | Subscriber Broken Authentication in User Registration <= 5.2.6 versions. |
| CVE-2026-73996 | Deferred | 未確認 | CWE-434 | Unauthenticated Arbitrary File Upload in Masteriyo - LMS <= 2.3.2 versions. |
| CVE-2026-73997 | Deferred | 未確認 | CWE-770 | Unauthenticated Denial of Service Attack in Starter Templates by Kadence WP <= 2.3.3 versions. |
| CVE-2026-73998 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in WP w3all phpBB <= 3.0.5 versions. |
| CVE-2026-74001 | Deferred | 未確認 | CWE-288 | Unauthenticated Broken Authentication in User Registration & Membership Pro <= 5.4.5 versions. |
| CVE-2026-74003 | Deferred | 未確認 | CWE-862 | Contributor Broken Access Control in RomethemeForm For Elementor <= 1.2.6 versions. |
| CVE-2026-74004 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Gravity Booster – Styles & Layouts for Gravity Forms <= 6.0 versions. |
| CVE-2026-74006 | Deferred | 未確認 | CWE-862 | Contributor Broken Access Control in WP Table Builder <= 2.2.0 versions. |
| CVE-2026-74007 | Deferred | 未確認 | CWE-497 | Unauthenticated Sensitive Data Exposure in 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery <= 1.16.20 versions. |
| CVE-2026-74008 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in Averta LTD Shortcodes and extra features for Phlox theme auxin-elements allows Retrieve Embedded Sensitive Data.T |
| CVE-2026-74009 | Deferred | 未確認 | CWE-639 | Unauthenticated Insecure Direct Object References (IDOR) in Razorpay for WooCommerce <= 4.8.7 versions. |
| CVE-2026-74010 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in John James Jacoby bbPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects bbPress: from n/a thro |
| CVE-2026-74011 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in revmakx InfiniteWP Client allows Blind SQL Injection. This issue affects Infi |
| CVE-2026-74012 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in TaxoPress allows Object Injection. This issue affects TaxoPress: from n/a through 3.51.0. |
| CVE-2026-74013 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in eShipper Commerce <= 2.16.13 versions. |
| CVE-2026-74014 | Deferred | 未確認 | CWE-434 | Subscriber Arbitrary File Upload in IT Residence <= 3.2.1 versions. |
| CVE-2026-74015 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Readabler < 2.0.18 versions. |
| CVE-2026-74016 | Deferred | 未確認 | CWE-434 | Subscriber Arbitrary File Upload in Smart Cleaning <= 4.8.6 versions. |
| CVE-2026-74018 | Deferred | 未確認 | CWE-434 | Subscriber Arbitrary File Upload in Warehouse Cargo <= 2.6.9 versions. |
| CVE-2026-74019 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in EPROLO Dropshipping <= 2.4.2 versions. |
| CVE-2026-74020 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Koji <= 2.2.1 versions. |
| CVE-2026-74021 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Chaplin <= 2.6.8 versions. |
| CVE-2026-74038 | Analyzed | 未確認 | CWE-22 | Wazuh 4.0.0 before 4.14.6 contains a path traversal vulnerability that allows unauthenticated remote attackers to cause denial of service by enrolling an agent with a dot-sequence |
| CVE-2026-74039 | Analyzed | 未確認 | CWE-1333, CWE-770 | Wazuh 4.0.0 before 4.14.7 and 5.0.0-beta2 contain a denial of service vulnerability that allows authenticated attackers with allow_run_as enabled to exhaust CPU resources by submit |
| CVE-2026-74044 | Analyzed | 未確認 | CWE-22 | Wazuh 4.0.0 before 4.14.6 contains a path traversal vulnerability that allows authenticated cluster peers to delete arbitrary directory contents by supplying a traversal-shaped nod |
| CVE-2026-74046 | Analyzed | 未確認 | CWE-409 | Wazuh 4.4.0 before 4.14.7 contains a denial of service vulnerability in the fdecompress_files() function within cluster.py that allows authenticated cluster peers to exhaust memory |
| CVE-2026-7405 | Analyzed | 未確認 | CWE-125 | A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an Out-of-Bounds Read in the image handling library. A malicious actor |
| CVE-2026-7406 | Analyzed | 未確認 | CWE-822 | A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can leverage this vulnerab |
| CVE-2026-74226 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-74227 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-74228 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-74232 | Deferred | 未確認 | CWE-300, CWE-506 | Zbtlink L3_V2_8 firmware 3.0.0.4.528, Zbtlink WE826-T2 firmware 19.1101, Zbtlink ZBT-7628 firmware 1.0.0.2.007, Zbtlink ZBT-ZBT7621 firmware 1.0.0.3.001, MoreQuick MQAC-7620, MQAC- |
| CVE-2026-74233 | Deferred | 未確認 | CWE-321, CWE-78 | Zbtlink WE1326, WE357, WE5926, WE5926-WD, WE826-Q, WE826-T2, WE826-WD, WG108, and WG3526 firmware 19.1101, Zbtlink WE2426-C firmware 19.1112, Zbtlink WE5926-EC_QP firmware 20.0516, |
| CVE-2026-74234 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-74238 | Deferred | 未確認 | CWE-125 | TIER IV Nebula through 1.2.0 contains an out-of-bounds read vulnerability in the Vlp32Decoder::unpack() function that allows unauthenticated remote attackers to cause the decoder t |
| CVE-2026-74240 | Analyzed | 未確認 | CWE-287 | A flaw was found in Red Hat Quay's JWT (JSON Web Token) validation for federated robot accounts and single sign-on (SSO) authentication. Multiple issues related to audience verific |
| CVE-2026-74241 | Analyzed | 未確認 | CWE-90 | A flaw was found in Red Hat Quay's external Lightweight Directory Access Protocol (LDAP) authentication handling. When an LDAP referral is returned during authentication, the syste |
| CVE-2026-74242 | Analyzed | 未確認 | CWE-639 | A flaw was found in Red Hat Quay. An administrator of any repository, by knowing or guessing a target notification's Universally Unique Identifier (UUID), can read the notification |
| CVE-2026-74243 | Analyzed | 未確認 | CWE-306 | A flaw was found in Red Hat Quay. When the SECURITY_SCANNER_V4_PSK (pre-shared key) is not set, a remote unauthenticated attacker can send POST requests to the security scanner not |
| CVE-2026-74244 | Analyzed | 未確認 | CWE-347 | A flaw was found in Red Hat Quay's Stripe billing webhook handler. This vulnerability allows an unauthenticated attacker to forge billing events by sending crafted JSON requests to |
| CVE-2026-74245 | Analyzed | 未確認 | CWE-306 | A flaw was found in Red Hat Quay's exported logs feature. An unauthenticated attacker with a valid file ID could download exported action logs without proper authorization. While f |
| CVE-2026-74247 | Analyzed | 未確認 | CWE-918 | A flaw was found in Red Hat Quay. A user with FEATURE_BUILD_SUPPORT enabled and repository write access can exploit a Server-Side Request Forgery (SSRF) vulnerability within the bu |
| CVE-2026-74248 | Awaiting Analysis | 未確認 | CWE-863 | OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization. By associating another project's QoS policy with an amphora, an authenticated user may pr |
| CVE-2026-74250 | Awaiting Analysis | 未確認 | CWE-226 | In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediately after enrollment with, or changing to, the autodetect deploy interface. |
| CVE-2026-74251 | Deferred | 未確認 | CWE-89 | Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6 - The a[] (attribute) and s[] (specification) GET array parameters on Ph |
| CVE-2026-74252 | Deferred | 未確認 | CWE-79 | Joomla Extension - j2commerce.com - Stored XSS in Guest checkout in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - J2Commerce 4.1.5 is vulnerable to Stored Cross-Site Scripting |
| CVE-2026-74253 | Deferred | 未確認 | CWE-94 | Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer < 16.0.0 - Regular Labs Sourcerer before 16.0.0 processes {source} blo |
| CVE-2026-74254 | Deferred | 未確認 | CWE-89 | Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the styles model. |
| CVE-2026-74255 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in tipc_l2_send_msg() Syzbot reported a slab-use-after-free in ipvlan_hard_header() when called | |
| CVE-2026-74256 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check start and len are u32, so u64 last = s | |
| CVE-2026-74257 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sockmap: Fix use-after-free in udp_bpf_recvmsg() syzbot reported use-after-free of struct sk_msg in sk_msg_rec | |
| CVE-2026-74258 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Guard __get_user acesss with access_ok for uprobe_multi data As reported by sashiko [1] we need to use ac | |
| CVE-2026-74259 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-74260 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them Update nft_dup and nft_fwd to use | |
| CVE-2026-74261 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: avoid stale FIFO cells during resize snd_seq_fifo_resize() still needs to publish the replacement p | |
| CVE-2026-74262 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: kcm: use WRITE_ONCE() when changing lower socket callbacks kcm_attach() replaces a live lower TCP socket's sk_ | |
| CVE-2026-74263 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: check skb_clone in control TX t7xx_port_ctrl_tx() clones each skb fragment before passing it | |
| CVE-2026-74264 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: watchdog: fix refcount tracking races Blamed commit converted the untracked dev_hold()/dev_put() calls in | |
| CVE-2026-74265 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: mana: initialize gdma queue id to INVALID_QUEUE_ID mana_gd_create_mana_wq_cq() leaves queue->id as 0 (fro | |
| CVE-2026-74266 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_dualpi2: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Whenever dualp | |
| CVE-2026-74267 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Whenever codel d | |
| CVE-2026-74268 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tcp: clear sock_ops cb flags before force-closing a child socket A child socket inherits the listener's bpf_so | |
| CVE-2026-74269 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bnxt: fix head underflow on XDP head-grow The xdp.py test test_xdp_native_adjst_head_grow_data crashes when ru | |
| CVE-2026-7427 | Analyzed | 未確認 | CWE-770 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.5 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have a |
| CVE-2026-74270 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: handshake: Require admin permission for DONE command ACCEPT and DONE are the two downcalls of the handshake ge | |
| CVE-2026-74271 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: power: supply: core: fix supplied_from allocations If dts property power-supplies has multiple values, then ac | |
| CVE-2026-74272 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cxl/region: Resolve region deletion races Sungwoo noticed that the sysfs trigger to delete a region may try to | |
| CVE-2026-74273 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cxl/region: Block region delete during region creation Expand the range lock, rename it "regions_lock", to dis | |
| CVE-2026-74274 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fill first free targets[] slot during auto-discovery Any invalid endpoint decoder pointer in the t | |
| CVE-2026-74275 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix out-of-bounds access in cxl_cancel_auto_attach() In cxl_cancel_auto_attach(), it assumes cxled | |
| CVE-2026-74276 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: spi: xilinx: use FIFO occupancy register to determine buffer size The method the driver uses to determine the | |
| CVE-2026-74277 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/dma-iommu: Fix wrong scatterlist length assignment in P2PDMA path In iommu_dma_map_sg(), when handling P | |
| CVE-2026-74278 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix kernel heap address leak in bounce_error_event() The comment above bounce_error_event() documen | |
| CVE-2026-74279 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: cavium/cpt - fix DMA cleanup using wrong loop index The sg_cleanup error path used list[i] instead of | |
| CVE-2026-74280 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: marvell/octeontx - fix DMA cleanup using wrong loop index The sg_cleanup path used list[i] instead of | |
| CVE-2026-74281 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tipc: reject inverted service ranges from peer bindings tipc_update_nametbl() inserts a binding advertised by | |
| CVE-2026-74282 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tipc: prevent snt_unacked underflow on CONN_ACK tipc_sk_conn_proto_rcv() subtracts the peer-supplied connectio | |
| CVE-2026-74283 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tipc: require net admin for TIPCv2 netlink mutators TIPCv2 registers mutating generic-netlink operations witho | |
| CVE-2026-74284 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_hfsc: Don't make class passive twice update_vf() is called from two places for the same class d | |
| CVE-2026-74285 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: Stop leased rxq before uninstalling its memory provider netif_rxq_cleanup_unlease() tears down the memory | |
| CVE-2026-74286 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: pfcp: allocate per-cpu tstats for PFCP netdevs PFCP uses dev_get_tstats64() as its ndo_get_stats64 callba | |
| CVE-2026-74287 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sctp: validate embedded address parameter length sctp_verify_asconf() and sctp_verify_param() only validate AD | |
| CVE-2026-74288 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump(). rocker_router_fib_event() calls fib_rule_get() | |
| CVE-2026-74289 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify(). syzbot reported use-after-free in nsim_fib4_prepare | |
| CVE-2026-74290 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_flow: Dont expose folded kernel pointers The flow classifier falls back to addr_fold() for fiel | |
| CVE-2026-74291 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: topology: Check PCM and DAI name strings before use Topology objects store several PCM and DAI names in | |
| CVE-2026-74292 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: tegra: tegra210_ahub: Validate written enum value tegra_ahub_put_value_enum() reads e->values[item[0]] b | |
| CVE-2026-74293 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl: fsl_audmix: Validate written enum values fsl_audmix_put_mix_clk_src() and fsl_audmix_put_out_src() | |
| CVE-2026-74294 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: meson: aiu: Validate written enum values The AIU HDMI and internal codec mux put callbacks use the writt | |
| CVE-2026-74295 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: hdac_hdmi: Validate written enum value hdac_hdmi_set_pin_port_mux() uses the written enum value | |
| CVE-2026-74296 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one Free the UAR index returned by the hardwar | |
| CVE-2026-74297 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix undefined shift of user RQ WQE size set_rq_size() computes the RQ WQE size as "1 << rq_wqe_shif | |
| CVE-2026-74298 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix FRMR set pinned push error path Add destruction of FRMR handles in case the push to the pool fa | |
| CVE-2026-74299 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix FRMR aging push to queue error flow Aging pools with pinned handles requires moving handles fro | |
| CVE-2026-74300 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci: validate codec capability element length Read Local Codec Capabilities returns a sequence of c | |
| CVE-2026-74301 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path When btmtk_isopkt_pad() fails, the previously | |
| CVE-2026-74302 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() hci_unregister_dev() does not disable cmd_timer and ncmd_ | |
| CVE-2026-74303 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_qca: fix NULL pointer dereference in qca_dmp_hdr() for non-serdev device hu->serdev is NULL for | |
| CVE-2026-74304 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_qca: fix NULL pointer dereference in qca_setup() for non-serdev device hu->serdev is NULL for h | |
| CVE-2026-74305 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Tighten cgroup storage cookie checks for prog arrays The fix in commit abad3d0bad72 ("bpf: Fix oob access | |
| CVE-2026-74306 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vfio/qat: fix f_pos race in qat_vf_resume_write() qat_vf_resume_write() checks filp->f_pos before taking migf- | |
| CVE-2026-74307 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT Reject the EXT4_IOC_MOVE_EXT ioctl early if th | |
| CVE-2026-74308 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix kernel BUG in ext4_write_inline_data_end When the data=journal mount option is used, the ext4_journa | |
| CVE-2026-74309 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler Look up the IRQ index in oct_hw->irqs instead of | |
| CVE-2026-74310 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vhost/net: complete zerocopy ubufs only once vhost-net initializes one ubuf_info per outstanding zerocopy TX d | |
| CVE-2026-74311 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: virtio: rtc: tear down old virtqueues before restore virtio_device_restore() resets the device and restores th | |
| CVE-2026-74312 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vhost/vdpa: validate virtqueue index in mmap and fault paths vhost_vdpa_mmap() and vhost_vdpa_fault() use vma- | |
| CVE-2026-74313 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vduse: hold vduse_lock across IDR lookup in open path vduse_dev_open() looks up struct vduse_dev through the I | |
| CVE-2026-74314 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Cancel special fields on map value recycle Map update and delete paths currently call bpf_obj_free_fields | |
| CVE-2026-74315 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: lockd: Avoid hashing uninitialized bytes in nlm4svc_lookup_file() file_hash() digests the first LOCKD_FH_HASH_ | |
| CVE-2026-74316 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Handle layout stid in nfsd4_drop_revoked_stid() nfsd4_drop_revoked_stid() has no SC_TYPE_LAYOUT case, so | |
| CVE-2026-74317 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ixgbe: do not configure xps for XDP queues netif_set_xps_queue() should not be called for an XDP Tx queue, sin | |
| CVE-2026-74318 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock cloning inline extent when using flushoncommit In commit b48c980b6a7e ("btrfs: fix deadloc | |
| CVE-2026-74319 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix deadlock waiting for ticket during data relocation When performing data relocation on a zone | |
| CVE-2026-74320 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fbdev: sm501fb: Fix buffer errors in OF binding code The code that gets the frame buffer mode from OF has 'use | |
| CVE-2026-74321 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs() In the beginning of the loop, we try to o | |
| CVE-2026-74322 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix possible NULL pointer dereference in mt7996_mac_write_txwi_80211() For injected frames | |
| CVE-2026-74323 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix possible token leak in mt7996_tx_prepare_skb() If link_conf or link_sta lookup fails i | |
| CVE-2026-74324 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: validate skb length in testmode query In mt7925_tm_query(), the response skb from mt76_mcu | |
| CVE-2026-74325 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: use kfree_rcu for offchannel link in mt76_put_vif_phy_link mt76_put_vif_phy_link() frees the offch | |
| CVE-2026-74326 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix resource leak in probe error path When pcim_iomap_region() or devm_kmemdup() fail, the | |
| CVE-2026-74327 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vmalloc: fix NULL pointer dereference in is_vm_area_hugepages() find_vm_area() can return NULL if the given ad | |
| CVE-2026-74328 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommufd: Destroy the pages content after detaching from dmabuf Sashiko points out this has gotten out of order | |
| CVE-2026-74329 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: watchdog: unregister PM notifier on watchdog unregister watchdog_register_device() registers wdd->pm_nb when W | |
| CVE-2026-74330 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: configfs: fix lockless traversals of ->s_children Having the parent directory locked protects entries from rem | |
| CVE-2026-74331 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: firmware_loader: Fix recursive lock in device_cache_fw_images() A recursive locking deadlock can occur in the | |
| CVE-2026-74332 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp-sdw-sof: Bound DAI link iteration create_sdw_dailinks() walks sof_dais until it finds an entry | |
| CVE-2026-74333 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp-sdw-legacy: Bound DAI link iteration create_sdw_dailinks() walks soc_dais until it finds an ent | |
| CVE-2026-74334 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/nldev: Fix locking when accessing mr->pd Sashiko points out that, due to rereg_mr, the PD is actually var | |
| CVE-2026-74335 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NULL pointer dereference in bpf_task_from_vpid() bpf_task_from_vpid() looks up a task in the pid name | |
| CVE-2026-74336 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bound S1G TIM PVB walk to the TIM element ieee80211_s1g_check_tim() parses the S1G Partial Vir | |
| CVE-2026-74337 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NMI/tracepoint re-entry deadlock on lru locks NMI and tracepoint BPF programs can re-enter the per-CP | |
| CVE-2026-74338 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject sleepable BPF_LSM_CGROUP programs at load time The cgroup shim runs under rcu_read_lock_dont_migra | |
| CVE-2026-74339 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Clear variable event pointer on read snd_seq_read() copies a queued variable-length event header to | |
| CVE-2026-74340 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication The firmware-controlled rsp->coun | |
| CVE-2026-74341 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix heap overflow from oversized firmware HAL response The firmware response dispatcher copies | |
| CVE-2026-74342 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: kernfs: link kn to its parent before the LSM init hook After commit 12e9e3cd03b5 ("simpe_xattr: use per-sb cac | |
| CVE-2026-74343 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: kernfs: fix xattr race condition with multiple superblocks Multiple superblocks with different namespaces can | |
| CVE-2026-74344 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Clear rb node linkage when freeing bpf_rb_root bpf_rb_root_free() detaches the root by copying the curren | |
| CVE-2026-74345 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix endpoint/socket association handling Disassociating a socket from an endpoint via siw_socket_dis | |
| CVE-2026-74346 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix OOB read during CQ MR registration Sashiko pointed out an unrelated bug during a previous patc | |
| CVE-2026-74347 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount Add a refcount for struct nf_ct_t | |
| CVE-2026-74348 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: require a ref for locking_state debugfs open debug_lockres_open() copies inode->i_private into stru | |
| CVE-2026-74349 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject FITRIM ranges shorter than a cluster ocfs2_trim_mainbm() trims the global bitmap in cluster unit | |
| CVE-2026-74350 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate fast symlink target during inode read ocfs2_validate_inode_block() already rejects several inc | |
| CVE-2026-74351 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: rebase copied fsdlm LVB pointers in locking_state The locking_state debugfs iterator snapshots struct o | |
| CVE-2026-74352 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: of: reserved_mem: avoid post-init UAF when alloc_reserved_mem_array() fails The global pointer 'reserved_mem' | |
| CVE-2026-74353 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: always resume_all after suspend_all Need to restore any good queues even if the suspend_all failed | |
| CVE-2026-74354 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Take mmap_lock in zap_pages() zap_vma_range() requires the owning mm's mmap_lock to be held. Taking mmap | |
| CVE-2026-74355 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix RB-tree corruption in probe error path The info->node RB-tree member is zero-initialized via k | |
| CVE-2026-74356 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vhost: fix vhost_get_avail_idx for a non empty ring vhost_get_avail_idx is supposed to report whether it has u | |
| CVE-2026-74357 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix KASAN slab-out-of-bounds in amdgpu_coredump ring dump The ring content dump in amdgpu_coredump | |
| CVE-2026-74358 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix fast commit wait/wake bit mapping on 64-bit On 64-bit, ext4 dynamic inode states live in the upper h | |
| CVE-2026-74359 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: configfs_lookup(): don't leave ->s_dentry dangling on failure Normally ->s_dentry is cleared when dentry it's | |
| CVE-2026-74360 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject exclusive maps for bpf_map_elem iterators Exclusive maps (aka excl_prog_hash) are meant to be reac | |
| CVE-2026-74361 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvme: fix FDP fdpcidx bounds check The fdpcidx bounds check sets n = NUMFDPC + 1 but used > instead of >=, inc | |
| CVE-2026-74362 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ext2: fix ignored return value of generic_write_sync() Fix ext2_dio_write_iter() to propagate the error return | |
| CVE-2026-74363 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs commit 4f375ade6aa9 ("bpf: Avoid RCU context warn | |
| CVE-2026-74364 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject exclusive maps as inner maps in map-in-map An exclusive map (created with excl_prog_hash) is bound | |
| CVE-2026-74365 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Handle preemption in BTT lane acquisition BTT lanes serialize access to per-lane metadata and work | |
| CVE-2026-74366 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix NULL deref in change_sta_links for unready link _ieee80211_set_active_links() calls _ieee802 | |
| CVE-2026-74367 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix inconsistent arvif state in vdev_create error paths ath12k_mac_vdev_create() has three error | |
| CVE-2026-74368 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() In ath12k_wifi7_dp_rx_h_verify_tkip_mi | |
| CVE-2026-74369 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: liveupdate: fix u-a-f in luo_file_unpreserve_files() and luo_file_finish() In luo_file_unpreserve_files() and | |
| CVE-2026-74370 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: liveupdate: fix TOCTOU race in luo_session_retrieve() Extend the scope of the rwsem_read lock in luo_session_r | |
| CVE-2026-74371 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: fix BPF_PROG_QUERY OOB write and cgroup backward compat BPF_PROG_QUERY writes back the 'query.revision' f | |
| CVE-2026-74372 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: raid1: fix nr_pending leak in REQ_ATOMIC bad-block error path In raid1_write_request(), each per-mirror loop i | |
| CVE-2026-74373 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: md/raid1,raid10: fix bio accounting for split md cloned bios Use md_cloned_bio() to control bio accounting ins | |
| CVE-2026-74374 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: md/raid1,raid10: fix error-path detection with md_cloned_bio() Detect the error path using md_cloned_bio() ins | |
| CVE-2026-74375 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: md/raid1,raid10: fix deadlock in read error recovery path raid1d and raid10d may resubmit a split md cloned bi | |
| CVE-2026-74376 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: md/raid10: reset read_slot when reusing r10bio for discard put_all_bios() always drops devs[i].bio, but it onl | |
| CVE-2026-74377 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path For non-SRQ QPs, the responder reads WQE fields dir | |
| CVE-2026-74378 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe get_srq_wqe() reads wqe->dma.num_sge from the shared receive | |
| CVE-2026-74379 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dax/kmem: account for partial discontiguous resource upon removal When dev_dax_kmem_probe() partially succeeds | |
| CVE-2026-74380 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix iommu_map_sgtable() return value check Commit "iommu: return full error code from iommu_map_s | |
| CVE-2026-74381 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Allow entries in BO caches to be freed When a buffer object is pinned via host1x_bo_pin() with a | |
| CVE-2026-74382 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_bpf: prevent unbounded recursion in offload rollback Quan Sun reported [1] a stack overflow in | |
| CVE-2026-74383 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix out-of-bounds access in nvme_setup_descriptor_pools nvme_setup_descriptor_pools() indexes dev->d | |
| CVE-2026-74384 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix flex array size in struct nvme_ns_head struct nvme_ns_head contains a flexible array membe | |
| CVE-2026-74385 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock The return value of nvmet_tcp_set_queue_sock() is cu | |
| CVE-2026-74386 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: fix page fragment cache leak in error path In nvmet_tcp_alloc_queue(), when a connection is closed | |
| CVE-2026-74387 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: midi: Serialize output teardown with event_input event_process_midi() borrows msynth->output_rfile. | |
| CVE-2026-74388 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data The OSS sequencer processes the input MIDI | |
| CVE-2026-74389 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix log flood after cmd_mbox failure hns_roce_cmd_mbox() is the command interface between driver and | |
| CVE-2026-74390 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs The irdma_copy_user_pgaddrs function loops thro | |
| CVE-2026-74391 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracing: Bound synthetic-field strings with seq_buf The synthetic field helpers build a prefixed synthetic var | |
| CVE-2026-74392 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dm: limit target bio polling to one shot dm_poll_bio() is the ->poll_bio() callback for a stacked dm device. T | |
| CVE-2026-74393 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/syncobj: Fix memory leak in drm_syncobj_find_fence() Commit 18226ba52159 ("drm/syncobj: reject invalid fla | |
| CVE-2026-74394 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: fix integer overflow in immediate data length check imm_buf->len is a user-controlled uint32_t rece | |
| CVE-2026-74395 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference MLX5_IB_METHOD_DEVX_SUBSCRIBE_EVENT() links event_ | |
| CVE-2026-74396 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix UMR XLT cleanup on ODP populate failure mlx5r_umr_update_xlt() allocates and DMA maps an XLT bu | |
| CVE-2026-74397 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier mlx5_ib_alloc_transport_domain() alloca | |
| CVE-2026-74398 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD addrconf_dad_failure() transitions ifp | |
| CVE-2026-74399 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: evm: terminate and bound the evm_xattrs read buffer evm_read_xattrs() allocates size + 1 bytes, fills them fro | |
| CVE-2026-74400 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: fix crash in bpf_[set|remove]_dentry_xattr for negative dentries bpf_set_dentry_xattr and bpf_remove_dent | |
| CVE-2026-74401 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dlm: fix add msg handle in send_queue ordered In a benchmark scenario triggering a lot of requests that trigge | |
| CVE-2026-74402 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - fix blocking and non-blocking rng logic The blocking and non-blocking paths were faili | |
| CVE-2026-74403 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Check for page allocation failure correctly in TIO Sashiko notes: > if __snp_alloc_firmware_pag | |
| CVE-2026-74404 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix snp_filter_reserved_mem_regions() off-by-one Sashiko notes: > regarding the bounds check in | |
| CVE-2026-74405 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: OPP: Fix race between OPP addition and lookup A race exists between dev_pm_opp_add_dynamic() and dev_pm_opp_fi | |
| CVE-2026-74406 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive(). udp_tunnel_sock_release() could set sk->sk | |
| CVE-2026-74407 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: cancel SSR work items during PCI shutdown A reboot can crash the kernel if it overlaps with WLAN | |
| CVE-2026-74408 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: fix OOB access from firmware tx status queue ID ath_tx_edma_tasklet() accesses sc->tx.txq[ts.qid] | |
| CVE-2026-74409 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: add bounds check on firmware mac_id in link lookup The mac_id field in RX descriptors is 8 bits w | |
| CVE-2026-7441 | Deferred | 未確認 | CWE-79 | The Simple Yearly Archive plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `posttype` attribute of the `SimpleYearlyArchive` shortcode in all versions up t |
| CVE-2026-74410 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer In rtw_pci_rx_napi(), new_len is co | |
| CVE-2026-74411 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: Correct data type for scan index to avoid infinite loop A kernel soft lockup was observed during | |
| CVE-2026-74412 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix wrong pci_get_drvdata type in AER handlers rtw88 stores an ieee80211_hw pointer via pci_set_d | |
| CVE-2026-74413 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix wrong pci_get_drvdata type in AER handlers rtw89 stores an ieee80211_hw pointer via pci_set_d | |
| CVE-2026-74414 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hfsplus: Remove the duplicate attr inode dirty marking action Syzbot reported a null-ptr-deref in [1]. If the | |
| CVE-2026-74415 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: spi: atcspi200: fix use-after-free when driver unbind DMA resource is initialized after SPI controller registr | |
| CVE-2026-74416 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix memory leak in radeon_ring_restore() on lock failure radeon_ring_restore() takes ownership of | |
| CVE-2026-74417 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix integer overflow in radeon_align_pitch() radeon_align_pitch() has the same kind of overflow is | |
| CVE-2026-74418 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dma-fence: Fix potential tracepoint null pointer dereferences Trace_dma_fence_signaled, trace_dma_fence_wait_e | |
| CVE-2026-74419 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Adjust size for copy_to_user() The amount of data returned to user space should be limited by t | |
| CVE-2026-74420 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: Reject VMAs with VM_IO or VM_PFNMAP when creating SVM ranges VMAs marked with VM_IO or VM_PFNMAP a | |
| CVE-2026-74421 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: dw_dp: Switch to drmm_kzalloc() Driver makes use of drmm_encoder_init() to initialize the encode | |
| CVE-2026-74422 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: inno-hdmi: Switch to drmm_kzalloc() Driver makes use of drmm_encoder_init() to initialize the en | |
| CVE-2026-74423 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix leak when pinning ubuf pages When pin_user_pages_fast() returns fewer pages than requested, | |
| CVE-2026-74424 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fbcon: fix NULL pointer dereference for a console without vc_data fbcon_new_modelist() runs when a framebuffer | |
| CVE-2026-74425 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: afs: handle CB.InitCallBackState3 requests without a server record The cache manager callback path now attache | |
| CVE-2026-74426 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: afs: fix NULL pointer dereference in afs_get_tree() afs_alloc_sbi() uses kzalloc for memory allocation. And, i | |
| CVE-2026-74427 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix netns teardown to cancel the preallocation charger Fix the teardown of an afs network namespace to ma | |
| CVE-2026-74428 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix double unlock in rxrpc_recvmsg() Fix a double unlock in rxrpc_recvmsg() when dealing with OOB messa | |
| CVE-2026-74429 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix the reception of a reply packet before data transmission Fix rxrpc_receiving_reply() to handle the | |
| CVE-2026-74430 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix ACKALL packet handling rxrpc_input_ackall() accepts ACKALL packets without checking whether the cal | |
| CVE-2026-74431 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix potential infinite loop in rxrpc_recvmsg() Fix the wait in rxrpc_recvmsg() also take check the oob | |
| CVE-2026-74432 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix leak of released call in recvmsg(MSG_PEEK) Fix rxrpc_recvmsg() to also drop the ref it holds on an | |
| CVE-2026-74433 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix UAF in rxgk_issue_challenge() Fix rxgk_issue_challenge() to free the page containing the challenge | |
| CVE-2026-74434 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Don't move a peeked OOB message onto the pending queue rxrpc_recvmsg_oob() takes a received oob message | |
| CVE-2026-74435 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc rxrpc_recvmsg_data() calls rxrpc_verify_data() whenever th | |
| CVE-2026-74436 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: serialize kernel accept preallocation with socket teardown rxrpc_kernel_charge_accept() reads rx->backl | |
| CVE-2026-74437 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix deadlock if uvc_status_stop is called from async_ctrl.work If a UVC camera has an asynchr | |
| CVE-2026-74438 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: sun4i-ss - Remove insecure and unused rng_alg Remove sun4i_ss_rng, as it is insecure and unused: - It | |
| CVE-2026-74439 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry device_pasid_table_teardown() ze | |
| CVE-2026-7444 | Deferred | 未確認 | CWE-352 | The Search Analytics for WP plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.16. This is due to missing or incorrect nonce |
| CVE-2026-74440 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Wait on external BO kernel fences in exec IOCTL Before arming a user job, xe_exec_ioctl() only added t | |
| CVE-2026-74441 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Fix race condition and ordering in port unregistration A synchronization issue exists during | |
| CVE-2026-74442 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: avoid destroy_workqueue(NULL) on vkms init failure Two paths through vmw_vkms_init() can leave vmw | |
| CVE-2026-74443 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: bound DMA command body size against suffix pointer vmw_cmd_dma() locates the DMA suffix at (unsi | |
| CVE-2026-74444 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division vmw_cmd_draw() computes maxnum = (header->s | |
| CVE-2026-74445 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: reject DX_BIND_QUERY without a DX context vmw_cmd_dx_bind_query() unconditionally dereferences sw_ | |
| CVE-2026-74446 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: hold event_mutex while checkpointing CRIU events kfd_criu_checkpoint_events() counts the entries i | |
| CVE-2026-74447 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix uint32_t overflow in EOP ring buffer size alignment eop_ring_buffer_size in struct queue_prope | |
| CVE-2026-74448 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix QID bit leak in pqm_create_queue() When MES is enabled and amdgpu_amdkfd_alloc_kernel_mem() fa | |
| CVE-2026-74449 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport If a plane reaches calculate_ | |
| CVE-2026-74450 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix pptable use-after-free amdgpu_dpm_get_pp_table() returns a pointer to a driver-owned power tab | |
| CVE-2026-74451 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/panthor: validate firmware interface structure sizes iface_fw_to_cpu_addr() only checks that the firmware- | |
| CVE-2026-74452 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/panthor: reject firmware sections with oversized data In panthor_fw_load_section_entry(), the data size to | |
| CVE-2026-74453 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Zero the tile state data array before each BIN job The binner BO is a single 16MB buffer split into 5 | |
| CVE-2026-74454 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size vc4_overflow_mem_work() points BPOA | |
| CVE-2026-74455 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: can: peak_usb: validate uCAN receive record lengths pcan_usb_fd_decode_buf() walks uCAN records packed in one | |
| CVE-2026-74456 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error In peak_usb_start(), e | |
| CVE-2026-74457 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: can: peak_usb: add bounds check for USB channel index The channel control index ctrl_idx is derived from rx->l | |
| CVE-2026-74458 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: can: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents The wait and bulk receive | |
| CVE-2026-74459 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: can: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure es58x_read_bulk_callba | |
| CVE-2026-74460 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: can: ems_usb: validate CPC message lengths ems_usb_read_bulk_callback() walks CPC messages packed in one USB r | |
| CVE-2026-74461 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: i2c: imx: Cancel hrtimer before clearing slave pointer In i2c_imx_unreg_slave(), the slave pointer is set to N | |
| CVE-2026-74462 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: i2c: imx: mark I2C adapter when hardware is powered down On some i.MX platforms, certain I2C client drivers ke | |
| CVE-2026-74463 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: i2c: jz4780: Cache host clock rate at probe to prevent CCF prepare_lock deadlock Fix a severe AB/BA deadlock b | |
| CVE-2026-74464 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix skb leak on flow key update failure during ct ovs_ct_execute() always steals or frees th | |
| CVE-2026-74465 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix potential UAF on meter attach failure While attaching a newly created meter attach_meter | |
| CVE-2026-74466 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Close speculative mem read possibility The domain value is extracted from a given CCA or EP11 ioc | |
| CVE-2026-74467 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/qeth: Check CAP_NET_ADMIN for private ioctls Gate the SIOCDEVPRIVATE ioctl commands SIOC_QETH_ADP_SET_SNM | |
| CVE-2026-74468 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: gpio: pch: use raw_spinlock_t for the register lock pch_irq_type() is registered as the irq_chip .irq_set_type | |
| CVE-2026-74469 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow sctp_assoc_add_peer() increments the association's 16-bit transpor | |
| CVE-2026-74470 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write resp_report_zones() sizes the reply buffer fr | |
| CVE-2026-74471 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracing: Check return value of __register_event() in trace_module_add_events() trace_module_add_events() ignor | |
| CVE-2026-74472 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ublk: reset kernel-owned dev_info fields in ublk_ctrl_add_dev() ublk_ctrl_add_dev() memcpy()s the userspace ub | |
| CVE-2026-74473 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vxlan: use pskb_network_may_pull() in route_shortcircuit() route_shortcircuit() currently calls pskb_may_pull( | |
| CVE-2026-74474 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vxlan: use pskb_network_may_pull() for transmit path header pulls In vxlan_xmit(), arp_reduce(), and vxlan_mdb | |
| CVE-2026-74475 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vxlan: use neigh_ha_snapshot() in route_shortcircuit() The neighbour hardware address n->ha can be updated asy | |
| CVE-2026-74476 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: veth: convert frag_list skbs before running XDP A frag_list skb can reach veth with data_len set but nr_frags | |
| CVE-2026-74477 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: uprobes: Fix NULL pointer dereference in hprobe_expire() Forking a task that has a pending uretprobe can oops | |
| CVE-2026-74478 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: um: vector: fix use-after-free in vector_mmsg_rx() When vector_mmsg_rx() discards a packet whose overlay heade | |
| CVE-2026-74479 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: pktgen: fix proc entry use-after-free pktgen_change_name() replaces pkt_dev->entry while holding t->if_lo | |
| CVE-2026-74480 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: stop fast-leave after deleting a port group br_multicast_leave_group() iterates mp->ports with pp | |
| CVE-2026-74481 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/page_reporting: use system_freezable_wq to fix UAF during suspend During PM freeze (e.g. S3 suspend or S4 | |
| CVE-2026-74482 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios __folio_split() keeps dereferencing th | |
| CVE-2026-74483 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: don't leak the user namespace when the mount fails bm_get_tree() takes a reference to the user na | |
| CVE-2026-74484 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: don't let an 'F' entry pin its own instance An entry registered with 'F' opens its interpreter at | |
| CVE-2026-74485 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: reject a flag character as the field delimiter The registration string starts with a user chosen | |
| CVE-2026-74486 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: use exe_file_deny_write_access() for the interpreter clone For MISC_FMT_OPEN_FILE entries load_mi | |
| CVE-2026-74487 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: restore write access when removing an entry Registering an entry with the MISC_FMT_OPEN_FILE flag | |
| CVE-2026-74488 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames mwifiex_11n_dispatch_amsdu_pkt() splits | |
| CVE-2026-74489 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix tid_tx use-after-free on BA session stop ieee80211_stop_tx_ba_cb() hands tid_tx to kfree_r | |
| CVE-2026-74490 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tipc: avoid use-after-free in poll trace queue dumps TIPC socket tracepoints dump queue state through tipc_sk_ | |
| CVE-2026-74491 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: of/address: Fix NULL bus dereference in of_pci_range_parser_one() The bus matching rework made of_match_bus() | |
| CVE-2026-74492 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: do not update comments from kernel-side hash adds mtype_resize() copies comment pointers wit | |
| CVE-2026-74493 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix socket use-after-free during link group termination __smc_lgr_terminate() drops conns_lock after | |
| CVE-2026-74494 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject repeated SMB2 NEGOTIATE requests Unauthenticated client can send multiple successful SMB2 NEGOTI | |
| CVE-2026-74495 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: igbvf: Fix leak in TX DMA error cleanup If an error is encountered while mapping TX buffers, the driver should | |
| CVE-2026-74496 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fou: Fix use-after-free in fou_create() fou_create() publishes struct fou through sk_user_data before adding t | |
| CVE-2026-74497 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Clamp frame size in implicit-feedback mode snd_usb_handle_sync_urb() scales received sync pac | |
| CVE-2026-74498 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set When a USB audio endpoint requests fu | |
| CVE-2026-74499 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() snd_usbmidi_akai_output() computes its fill-loop b | |
| CVE-2026-74500 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix stack info leak in RME Digiface status snd_rme_digiface_read_status() reads a four-word s | |
| CVE-2026-74501 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix use-after-free in ump_to_endpoint() create_midi2_ump() registers a card-owned snd_ump_end | |
| CVE-2026-74502 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: ump: fix double free of out_cvts on rawmidi error snd_ump_attach_legacy_rawmidi() allocates the legacy c | |
| CVE-2026-74503 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes snd_timer_close_locked() marks an instance w | |
| CVE-2026-74504 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix division by zero in initialize_timer() A userspace-driven ALSA timer (SND_UTIMER) lets an unpri | |
| CVE-2026-74505 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: Fix UAF at error handling during probe Although 6fire driver had a few fixes for dealing with the | |
| CVE-2026-74506 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix UAF when sending a message In afs_make_call(), there's a race with async call reception and destructi | |
| CVE-2026-74507 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HIDP: validate numbered report payloads When hidp_get_raw_report() waits for a numbered report, hid | |
| CVE-2026-74508 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HIDP: reject frames without a transaction header hidp_recv_ctrl_frame() and hidp_recv_intr_frame() | |
| CVE-2026-74509 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Fix advertising data UAFs hci_find_adv_instance() returns an adv_info pointer that is val | |
| CVE-2026-74510 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix UAF in pair command cancellation The pairing completion and authentication failure callba | |
| CVE-2026-74511 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-74512 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: audit: fix potential use-after-free in audit_del_rule() `audit_del_rule()` destroys `e->rule.exe` via `audit_r | |
| CVE-2026-74513 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dibs: fix use-after-free of dmb_node in loopback attach/detach/unregister dibs_lo_attach_dmb(), dibs_lo_detach | |
| CVE-2026-74514 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix memory accounting for pinned/unpinned pages The account_mem() and unaccount_mem() function | |
| CVE-2026-74515 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled The MPCIFC instruction doesn't allow re | |
| CVE-2026-74516 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active Always update x2APIC MSR interc | |
| CVE-2026-74517 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Cancel delayed I/O APIC EOI handling before destroying vCPUs Cancel (and flush) the I/O APIC's delay | |
| CVE-2026-74518 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix list corruption in allocate_file_region_entries() allocate_file_region_entries() tops up resv- | |
| CVE-2026-74519 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: don't free uninitialized dev_name on error path dt_remember_or_free_map() duplicates dev_ | |
| CVE-2026-74520 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/iommufd: Fix IOPF group ownership UAF iopf_group_alloc() links each last-page IOPF group into the generi | |
| CVE-2026-74521 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: use memcmp() to compare ClientGUIDs ClientGUID is a fixed-size binary value and can contain embedded NU | |
| CVE-2026-74522 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in __close_file_table_ids() A ksmbd_file can remain alive after logical close while | |
| CVE-2026-74523 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: qede: sync udp_tunnel ports outside qede_lock in the recovery path A TX timeout on a qede NIC that has VXLAN/G | |
| CVE-2026-74524 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Fix out-of-bounds page-table walk during memory hot-remove remove_pud_mapping() and remove_p4d_mapp | |
| CVE-2026-74525 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: sxgbe: free TX rings on RX allocation failure When RX descriptor ring allocation fails, init_dma_desc_rin | |
| CVE-2026-74526 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix potential deadlock in mpi3mr_fault_uevent_emit mpi3mr_fault_uevent_emit() runs from the faul | |
| CVE-2026-74527 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Block VFs from clobbering special CGX PKIND state PF and VF NIX LFs that share a CGX LMAC reuse | |
| CVE-2026-74528 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold conn in hci_past_sync() callback Avoids giving freed pointers to hci_conn_valid(), w | |
| CVE-2026-74529 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold conn in hci_connect_pa_sync() callback There is theoretical UAF if the conn is freed | |
| CVE-2026-74530 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold conn in hci_connect_big_sync() callback There is theoretical UAF if the conn is free | |
| CVE-2026-74531 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: hold conn reference in abort_conn_sync() There is theoretical UAF if the conn is freed wh | |
| CVE-2026-74532 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: Validate length before parsing diagnostics TLV btintel_diagnostics() accesses tlv->val[0] | |
| CVE-2026-74533 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix race of kfree vs kref_get_unless_zero hci_conn::iso_data is accessed and modified without | |
| CVE-2026-74534 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix refcounting of iso_conn iso_conn_del() and iso_chan_del() have a race that results to doub | |
| CVE-2026-74535 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: avoid deadlocks in iso_sock_timeout iso_sock_timeout() takes lock_sock, so sync disabling the | |
| CVE-2026-74536 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix leaking sk after socket release iso_sock_kill() tests !sock_flag(sk, SOCK_ZAPPED) || sk->s | |
| CVE-2026-74537 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: hold sk properly in iso_conn_ready sk deref in iso_conn_ready must be done either under conn-> | |
| CVE-2026-74538 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: lock sk in iso_connect_ind Accessing iso_pi(sk)->conn requires lock_sock, which is not taken i | |
| CVE-2026-74539 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: lock sk in iso_sock_getname Accessing iso_pi(sk)->conn requires lock_sock, which is not held h | |
| CVE-2026-74540 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp l2cap_le_connect_rsp() obtains a channel via __l2cap_get_cha | |
| CVE-2026-74541 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: clear iso_data always when detaching conn from hcon When setting conn->hcon = NULL, also conn- | |
| CVE-2026-74542 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix folio_queue ENOMEM in writeback by adding a mempool Fix the handling of folio_queue allocation fail | |
| CVE-2026-74543 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: udp_tunnel: fix memory leak in udp_tunnel_nic_unregister() syzbot reported a memory leak [1] in the UDP t | |
| CVE-2026-74544 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds u32_change() copies the user-provided tc_ | |
| CVE-2026-74545 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rtase: fix double free of multi-frag skb on DMA map failure In rtase_start_xmit(), when the head buffer DMA ma | |
| CVE-2026-74546 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read If the fan data becomes 0 between the FAN_D | |
| CVE-2026-74547 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread When userspace configures 'auto_update_interv | |
| CVE-2026-74548 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: forcedeth: fix UAF of txrx_stats in nv_remove nv_remove() frees the per-CPU txrx_stats before unregister_netde | |
| CVE-2026-74549 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (nct6775-core) Prevent access to unsupported weight registers Sashiko reports: During initialization o | |
| CVE-2026-7455 | Analyzed | 未確認 | CWE-787 | A maliciously crafted FLT file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a c |
| CVE-2026-74550 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: do not send ICMP/NDISC Redirects when peer allocation fails When inet_getpeer_v4() or inet_getpeer_v6() f | |
| CVE-2026-74551 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (nzxt-smart2) DMA-align output buffer Sashiko reports: When send_output_report() calls hid_hw_output_r | |
| CVE-2026-74552 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (lm90) Only report alarms if driver is ready Userspace can read sysfs attributes before driver registra | |
| CVE-2026-74553 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 Unlike NCT6106, NCT6116 only has three t | |
| CVE-2026-74554 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix out-of-bounds clear_bit in ath12k_mac_dp_peer_cleanup() ath12k_mac_dp_peer_cleanup() clears | |
| CVE-2026-74555 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race Commit fbefe22811c3 ("scsi: libsas: Don't alw | |
| CVE-2026-74556 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer iscsi_tcp_hdr_dissect() receives | |
| CVE-2026-74557 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer iscsi_scsi_cmd_rsp() copies the sense data of a | |
| CVE-2026-74558 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xsk: reclaim invalid Tx descriptors in ZC batch path The zero-copy Tx batch parser stops when it encounters an | |
| CVE-2026-74559 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xsk: drain continuation descs after overflow in xsk_build_skb() Fix generic xmit path multi-buffer logic when | |
| CVE-2026-7456 | Deferred | 未確認 | CWE-862 | The Udimi Tools plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `ajax_disconnect()` function in all versions up to, |
| CVE-2026-74560 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xsk: fix buffer leak in xsk_drop_skb() for AF_XDP multi-buffer Tx This patch is inspired by the check[1] from | |
| CVE-2026-74561 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nexthop: avoid unlocked f6i_list walk in nh_rt_cache_flush nh_rt_cache_flush() walks nh->f6i_list during an RT | |
| CVE-2026-74562 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nexthop: take nh->lock for f6i_list walks in replace check and notify fib6_check_nh_list() and __nexthop_repla | |
| CVE-2026-74563 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check() rds_tcp_laddr_check() looks up a s | |
| CVE-2026-74564 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH The XT_HASHLIMIT_RATE_MATCH flag | |
| CVE-2026-74565 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: make nft_object rhltable per table The nft_object rhltable is global, this allows for ac | |
| CVE-2026-74566 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: keys: make keyring key-chunk byte order agree with keyring_diff_objects() keyring_get_key_chunk() loads descri | |
| CVE-2026-74567 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: keys: fix out-of-bounds read in keyring_get_key_chunk() For description-level chunks keyring_get_key_chunk() a | |
| CVE-2026-74568 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Fix race between LPI release and re-registration Fix a potential race between decrementing a | |
| CVE-2026-74569 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() sip_help_tcp() stores the size c | |
| CVE-2026-74570 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: harden runlist realloc size calculations Add a shared helper to safely convert runlist element counts to | |
| CVE-2026-74571 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: skip global block reserve accounting for rescue mounts [BUG] Mounting with rescue=ibadroots after corru | |
| CVE-2026-74572 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix deadlock between metadata writeback and transaction commit When writing out metadata extent | |
| CVE-2026-74573 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3-iommufd: Require exactly one Stream ID for a vDEVICE arm_vsmmu_vsid_to_sid() maps a guest's | |
| CVE-2026-74574 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() The failed_dev_add and failed_dev_name pat | |
| CVE-2026-74575 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Prevent XDomain delayed work use-after-free on disconnect tb_xdp_handle_request() runs on system_ | |
| CVE-2026-74576 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/slab: prevent unbounded recursion in free path with new kmalloc type Commit 280ea9c3154b ("mm/slab: avoid a | |
| CVE-2026-74577 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: mpls: initialize rtm_tos in mpls_getroute() mpls_getroute() builds the RTM_NEWROUTE reply to an RTM_GETRO | |
| CVE-2026-74578 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: algif_skcipher - force synchronous processing on trees without ctx->state The AIO/async path in skciph | |
| CVE-2026-74579 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_payload: fix mask build for partial field offload nft_payload_offload_mask() builds the offload | |
| CVE-2026-74580 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vhost: reset the vring metadata cache on vring reconfiguration vq->meta_iotlb[] caches the vhost_iotlb_map tha | |
| CVE-2026-74581 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: ipv6: clear suppressed fib6 rule result fib6_rule_suppress() drops a suppressed route with ip6_rt_put_fla | |
| CVE-2026-74582 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: packet: use consistent hard_header_len in non-ring send paths packet_snd() reads dev->hard_header_len multiple | |
| CVE-2026-74583 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_route: fix fastmap use-after-free on filter The route4 classifier maintains a 16-slot fastmap c | |
| CVE-2026-74584 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: zero shared page before exposing to userspace bnxt_re_alloc_ucontext() allocates uctx->shpg via | |
| CVE-2026-74585 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Bound the DROM dual link port number before indexing sw->ports tb_drom_parse_entry_port() validat | |
| CVE-2026-74586 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sctp: clear new_transport when removing a peer sctp_process_asconf_param() stores a newly added peer transport | |
| CVE-2026-74587 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sctp: fix use-after-free of cached ASCONF chunk addip_last_asconf caches the outstanding outbound ASCONF chunk | |
| CVE-2026-74588 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sctp: keep chunk->transport in step with the list it is queued on __sctp_outq_flush_rtx() moves a gap-acked ch | |
| CVE-2026-74589 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix sk_redir use-after-free in send verdict sk_psock_msg_verdict() takes a socket reference for | |
| CVE-2026-74590 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions The BPF verifier and the dynptr abstraction ensure | |
| CVE-2026-74591 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/filemap: __filemap_add_folio() restore index before retrying In __filemap_add_folio()'s split-a-conflict lo | |
| CVE-2026-74592 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ima: Instantiate file_truncate and path_truncate hooks Instantiate the file_truncate and path_truncate LSM hoo | |
| CVE-2026-74593 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Take cgroup_lock() first in scx_cgroup_lock() scx_cgroup_lock() write-locks scx_cgroup_ops_rwsem an | |
| CVE-2026-74594 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() psi_schedule_rtpoll_work() is called locklessly from th | |
| CVE-2026-74595 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() fscrypt_ioctl_set_policy() call | |
| CVE-2026-74596 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs,fsverity: remove check for fsverity being enabled in setattr_prepare() The check that fs-verity is availabl | |
| CVE-2026-74597 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip6ip6_err() ip6ip6_err() clones an outer IPv6 ICMP error skb, pulls it to the | |
| CVE-2026-74598 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv6: fix Route Information option length validation rt6_route_rcv() validates the Route Information option (R | |
| CVE-2026-74599 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/ptdump: always stabilise against page table freeing using init_mm Previous commits have established the inv | |
| CVE-2026-74600 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/page_table_check: skip special zero mappings page_table_check_set() and page_table_check_clear() account ma | |
| CVE-2026-74601 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Use current_context for safe per-CPU buffer swap The ring_buffer_swap_cpu() function currently ch | |
| CVE-2026-74602 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer() In rb_allocate_cpu_buffer(), bpage->orde | |
| CVE-2026-74603 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Fix board ID over-read The EEPROM board ID is a fixed 13-byte field and is not guaranteed to contain | |
| CVE-2026-74604 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Revert "thermal/drivers/hwmon: Cleanup coding style a bit" Revert commit 030a48b0f6ce ("thermal/drivers/hwmon: | |
| CVE-2026-74605 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: eventfs: Use children field for rcu head and add memory barriers When an eventfs inode is freed, it sets ei->i | |
| CVE-2026-74606 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: eventfs: Fix use-after-free in eventfs_remove_rec() eventfs_remove_rec() recursively removes the child at the | |
| CVE-2026-74607 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Serialize accesses to the owner and mirror list with separate lock Interaction between KVM_CAP_VM_MO | |
| CVE-2026-74608 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free in cifs_try_adding_channels() cifs_try_adding_channels() takes a temporary ref | |
| CVE-2026-74609 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tipc: read le->link under the node lock in tipc_node_link_down() tipc_node_link_down() caches the link pointer | |
| CVE-2026-74610 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tls: don't leave a full plaintext sk_msg ring unpushed When the copy path in tls_sw_sendmsg_locked() adds the | |
| CVE-2026-74611 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tls: rx: restore msg_iter before TLS 1.3 optimistic retry tls_decrypt_sg() advances msg->msg_iter when it maps | |
| CVE-2026-74612 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: veth: fix skb length accounting after XDP frag adjustment veth exposes non-linear skb fragments through an xdp | |
| CVE-2026-74613 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: avoid refilling the RX queue after teardown Commit b917507e5ad9 ("vsock/virtio: stop workers dur | |
| CVE-2026-74614 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: read virtqueues under worker locks Commit bd50c5dc182b ("vsock/virtio: add support for device su | |
| CVE-2026-74615 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vxlan: do not arm the ageing timer on a device that is down vxlan_changelink() arms vxlan->age_timer whenever | |
| CVE-2026-74616 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xdp: reject clones that overrun skb_shared_info tailroom xdpf_clone() clones broadcast copies into a single pa | |
| CVE-2026-74617 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dibs: initialise dibs->lock in dibs_dev_alloc() dibs->lock is initialised by dibs_dev_add(), but a dibs device | |
| CVE-2026-74618 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: don't warn when the mount is completed from another user namespace fsopen() records the caller's | |
| CVE-2026-74619 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ovl: don't warn when the mount is completed from another user namespace fsopen() records the caller's user nam | |
| CVE-2026-74620 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_gact, act_police: range check the fallback control action tcf_action_check_ctrlact() range chec | |
| CVE-2026-74621 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: fix sk_buff leak when the header checks reject a packet tcf_ct_handle_fragments() runs its | |
| CVE-2026-74622 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: atlantic: free RX pages of consumed but not refilled buffers aq_ring_rx_deinit() only walks [sw_head, sw_ | |
| CVE-2026-74623 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: atlantic: free stranded TX buffers on ring deinit aq_vec_deinit() drains the TX rings with a single aq_ri | |
| CVE-2026-74624 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack: defer invalid log until after unlock TCP and SCTP conntrack paths can emit invalid-pa | |
| CVE-2026-74625 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: release template ct on non-IP path A bridge nftables ct zone set rule can attach a conntrac | |
| CVE-2026-74626 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: NTB: ntb_netdev: Preserve RX queue depth on allocation failure ntb_netdev_rx_handler() hands the received skb | |
| CVE-2026-74627 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: devmem: prevent net-iov / page mixing We should either have net_iov or page backed frags in a single skb, | |
| CVE-2026-74628 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/x25: fix use-after-free of the socket by its timers The x25 timers are armed with mod_timer() and cancelle | |
| CVE-2026-74629 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/dibs: Correct freeing of dmb_clientid_arr A dibs device interrupt handler can be active after dibs_dev_del | |
| CVE-2026-74630 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent in6_dev_get() from resurrecting inet6_dev in6_dev_get() reads dev->ip6_ptr under RCU and then un | |
| CVE-2026-74631 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: smc: fix splice entry lifetime imbalance in smc_rx_splice smc_rx_splice() passes pages to splice_to_pipe( | |
| CVE-2026-74632 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix huge_zero_pfn race Patch series "mm/huge_memory: fix huge_zero_pfn race", v2. There is a | |
| CVE-2026-74633 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix NULL pointer dereference in module event cache removal A module-only event filter such as ":mod:f | |
| CVE-2026-74634 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Prevent subbuf order change when resizing is disabled Because ring_buffer_subbuf_order_set() free | |
| CVE-2026-74635 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fbdev: bitblit: bound-check glyph index in bit_cursor() bit_cursor() fetches the glyph under the cursor with | |
| CVE-2026-74636 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix race between update_event_fields and, event_define_fields The following sequence may leads race b | |
| CVE-2026-74637 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix group leader use-after-free after sibling detach perf_group_detach() handles leader and sibling | |
| CVE-2026-74638 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Serialize the scheduler timeout handlers V3D exposes several independent hardware queues (BIN, RENDER | |
| CVE-2026-74639 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: us144mkii: re-anchor capture URBs on resubmission capture_urb_complete() resubmits each capture URB with | |
| CVE-2026-74640 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: fix OOB write in fcp_meter_ctl_get() fcp_ioctl_set_meter_map() bounds the user-supplied Level Meter | |
| CVE-2026-74641 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: bound the hwdep mmap fault offset snd_us428ctls_vm_fault() turns the faulting page offset into a | |
| CVE-2026-74642 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb: Fix UAF at delayed release of MIDI2 EPs The recent fix for UAF in ump_to_endpoint() caused another | |
| CVE-2026-74643 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: error out for zero quota goal target values Patch series "mm/damon: avoid division by zer | |
| CVE-2026-74644 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: putback folios on invalid migrate nid damon_pa_migrate() and damos_va_migrate() isolate f | |
| CVE-2026-74645 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/lru_sort: error out for >10000 active_mem_bp damos_quota_score() can trigger division by zero if the | |
| CVE-2026-74646 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke When an invoke is interrupted by a signal | |
| CVE-2026-74647 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Remove buffer from list prior to unmap operation fastrpc_req_munmap_impl() is called to unmap a | |
| CVE-2026-74648 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: validate monitor transmit frame lengths rtw_cfg80211_monitor_if_xmit_entry() removes the r | |
| CVE-2026-74649 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix missing shared-key auth challenge length check The WEP shared-key authentication handl | |
| CVE-2026-74650 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read in WMM_param_handler() WMM_param_handler() copies a fixed-size WMM parameter | |
| CVE-2026-74651 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie() rtw_get_wpa_ie() reads bytes at fixed offsets into a vend | |
| CVE-2026-74652 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: serial: amba-pl011: cancel RS485 hrtimers after freeing IRQ The RS485 trigger hrtimers are embedded in the dev | |
| CVE-2026-74653 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx The NXP LPC32xx UART (PORT_LPC3220) can latch an | |
| CVE-2026-74654 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: serial: 8250_dma: Clear stale RX state on shutdown serial8250_release_dma() terminates RX DMA and releases the | |
| CVE-2026-74655 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: serial: qcom-geni: fix TX DMA buffer flush When transmit flushing a qcom-geni UART during an ongoing TX DMA, t | |
| CVE-2026-74656 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv4: fix use-after-free in fib_nhc_update_mtu() fib_nhc_update_mtu() walks the nexthop exception table under | |
| CVE-2026-74657 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops fib_nlmsg_size() still estimates nexthop space as if every gat | |
| CVE-2026-74658 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: futex: Prevent robust futex exit race some more A robust futex unlock stores 0 over the whole futex value - wi | |
| CVE-2026-74659 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: mrp: fix uninitialised bytes on the wire br_mrp_alloc_test_skb() builds MRP test frames on an skb | |
| CVE-2026-74660 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ebt_nflog: pin the NFLOG backend nf_log_unregister() runs after the per-net teardown so its final R | |
| CVE-2026-74661 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mac802154: fix netdev use-after-free in beacon worker mac802154_beacon_worker() reads local->beacon_req under | |
| CVE-2026-74662 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: inet: frags: publish queues before arming timer inet_frag_create() arms the fragment queue timer before insert | |
| CVE-2026-74663 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: reject overly deep qdisc hierarchies Deep qdisc hierarchies can lead to excessive recursion in qdis | |
| CVE-2026-74664 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reallocate update replies for mismatched IDs ovs_flow_cmd_new() preallocates the optional re | |
| CVE-2026-74665 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: fix skb length accounting after generic XDP frag adjustment Generic XDP exposes non-linear skb fragments | |
| CVE-2026-74666 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: packet: synchronize pressure clearing with ring reconfiguration packet_set_ring() updates the RX ring state un | |
| CVE-2026-74667 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/packet: reset the MAC header on the packet-socket transmit path packet_parse_headers() resets the MAC head | |
| CVE-2026-74668 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: packet: use consistent hard_header_len in TX_RING send path tpacket_snd() reads dev->hard_header_len independe | |
| CVE-2026-74669 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipvs: clear IPv4 options after rebasing tunnel ICMP errors ip_vs_in_icmp() rebases an skb from the outer ICMP | |
| CVE-2026-74670 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipvs: stop estimator after disabled calc phase IPVS estimator kthread 0 starts with zeroed chain and tick limi | |
| CVE-2026-74671 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ima: fix out-of-bounds read in xattr_verify() The digest-length check in xattr_verify() mixes int and size_t: | |
| CVE-2026-74672 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF Patch series "mm: fix UAF caused by race bet | |
| CVE-2026-74673 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Input: evdev - fix information leak in evdev_pass_values() In evdev_pass_values(), the input_event structure i | |
| CVE-2026-74674 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm: fix incorrect flush address in direct page table reclaim When zap_pte_range reclaims a page table, it does | |
| CVE-2026-74675 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vt: stabilize tty reference in kbd_keycode with tty_port_tty_get kbd_keycode() reads vc->port.tty without acqu | |
| CVE-2026-74676 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vt: add permission check for KDSKBMETA ioctl KDSKBMETA modifies keyboard meta mode but lacks the !perm check t | |
| CVE-2026-74677 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: usb: ipheth: fix carrier_work UAF on disconnect ipheth_sndbulk_callback() re-arms the carrier-check work | |
| CVE-2026-74678 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup() When the interface has NETIF_F_SG enabled and skb_l | |
| CVE-2026-74679 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_ncm: Use unsigned int for ndp_index The variable ndp_index is declared as a signed integer, but | |
| CVE-2026-74680 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm() If cxacru_cm() encounters an error while submi | |
| CVE-2026-74681 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: misc: usbio: check ibuf_len against rxbuf_len in bulk msg ibuf_len is the bulk IN (receive) buffer size, | |
| CVE-2026-74682 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write on Type II inbound URBs data_ep_set_params() sizes each URB transfer buffer bef | |
| CVE-2026-74683 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Input: evdev - sanitize event type index when fetching event masks The user-supplied event type index passed t | |
| CVE-2026-74684 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() The commit 4f61f133f354 ("net: t | |
| CVE-2026-74685 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (ltc4282) Clamp negative current limits When a negative value is passed to ltc4282_write_curr(), the si | |
| CVE-2026-74686 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rqspinlock: Reset tail when preserving queue on deadlock Currently, the destruction of the waiter queue is sup | |
| CVE-2026-74687 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: watchdog: at91sam9_wdt: prevent timer rearm during teardown at91_ping() rearms the watchdog timer from its cal | |
| CVE-2026-74688 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sctp: clear control chunk transport if it is being removed sctp_make_heartbeat_ack() caches the destination tr | |
| CVE-2026-74689 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() vcc_setsockopt() contained an ineffective optlen chec | |
| CVE-2026-74690 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/ism: Fix UAF of sba and ieq during ism_dev_exit() A ism interrupt handler can be active in parallel with | |
| CVE-2026-74691 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Tear down DMA paths before stopping the rings tbnet_tear_down() stops both rings and frees t | |
| CVE-2026-74692 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix TOCTOU race between smc_listen_out() and listener close smc_listen_out() reads lsmc->sk.sk_state | |
| CVE-2026-74693 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: prestera: validate firmware header length prestera_fw_hdr_parse() reads the firmware header before checki | |
| CVE-2026-74694 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length ncsi_send_cmd_nl() takes the number of bytes t | |
| CVE-2026-74695 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() Incoming skbs passing through netfi | |
| CVE-2026-74696 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tcp: fix TFO max_qlen accounting across reuseport migration A listener's TCP_FASTOPEN max_qlen stops being acc | |
| CVE-2026-74697 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Disable EOP for TPA on all chips to prevent data corruption EOP (End of frame padding) on the AGG rin | |
| CVE-2026-74698 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix BQL reset on SQ re-activation mlx5e_queue_start() deactivates and re-activates all channels but | |
| CVE-2026-74699 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix memory leak in exec_queue_set_hang_replay_state() The q->replay_state is blindly overwritten, whic | |
| CVE-2026-74700 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers Another challenge with unlocke | |
| CVE-2026-74701 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/openvswitch: check Ethernet header length in key_extract() When a packet arrives on an ARPHRD_NONE device | |
| CVE-2026-74702 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: reject feature changes after endpoint vhost_scsi_setup_vq_cmds() runs from VHOST_SCSI_SET_ENDPOINT | |
| CVE-2026-74703 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Validate T10 PI scatterlist counts When T10 PI is negotiated, vhost-scsi splits protection bytes f | |
| CVE-2026-74704 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter The sch_cake ACK filter parses packet | |
| CVE-2026-74705 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: udp: fix potential use-after-free in tunnel segmentation __skb_udp_tunnel_segment() gets the UDP header before | |
| CVE-2026-74706 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bnge: Fix NULL pointer dereference in aux device release If allocation of auxr_dev fails during auxiliary devi | |
| CVE-2026-74707 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xsk: validate metadata when processing requests The zero-copy path validates TX metadata while obtaining the d | |
| CVE-2026-74708 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xsk: validate launch-time metadata size Launch-time metadata extends beyond the first 16 bytes of struct xsk_t | |
| CVE-2026-74709 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xsk: clear metadata pointer when no timestamp is requested User space can change metadata flags after request | |
| CVE-2026-74710 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xsk: require at least 16 bytes of TX metadata AF_XDP accepts a TX metadata length as small as eight bytes, but | |
| CVE-2026-74711 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus) Fix type confusion in notification logic Sashiko reports: At the start of the loop in pmbus_no | |
| CVE-2026-74712 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix buffer length in create_direct_keys() We have seen in our CI the following KASAN message: BUG: | |
| CVE-2026-74713 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vhost_iotlb: bound map allocation in add_range vhost_iotlb_add_range_ctx() only retires an old entry when the | |
| CVE-2026-74714 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch() reqsk_queue_hash_req() publishes a TCP_NEW_SY | |
| CVE-2026-74715 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix netns reference imbalance in conntrack kfuncs The opts argument of the BPF conntrack kfuncs can point | |
| CVE-2026-74716 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix locally exploitable BUG_ON in amdxdna_insert_pages() In amdxdna_insert_pages(), vm_flags_mo | |
| CVE-2026-74717 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fw_tracer, return NULL on create error Tracer creation can fail by returning either NULL or ERR_PTR. | |
| CVE-2026-74718 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: devlink: fix net namespace reference leak in reload devlink_nl_reload_doit() calls devlink_netns_get(), which | |
| CVE-2026-74719 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() The SMC_LLC_CONFIR | |
| CVE-2026-74720 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer state for commuted arithmetic When scalar += pointer is handled in adjust_ptr_min_max_va | |
| CVE-2026-74721 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel/amxdna: Fix page-insertion errors in amdxdna_insert_pages() Two error paths in amdxdna_insert_pages() ca | |
| CVE-2026-74722 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leak in btrfs_do_encoded_write() Local fuzzing of 6.12.94 has found the following memory lea | |
| CVE-2026-74723 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject inline extents without valid headers [BUG] For a crafted btrfs image, the following KASAN c | |
| CVE-2026-74724 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipvs: avoid out-of-bounds write in ip_vs_nat_icmp Sashiko warns that local attacker can modify the packet whil | |
| CVE-2026-74725 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: enic: fix tx_hang_reset use-after-free on device removal enic_remove() cancels the reset and change_mtu_work i | |
| CVE-2026-74726 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor bond_alb_monitor() reads primary_is_p | |
| CVE-2026-74727 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ovpn: skip rehash for peers already removed from by_id ovpn_nl_peer_set_doit() resolves the target peer via ov | |
| CVE-2026-74728 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfs: handle NULL b_addr in xfs_buf_free When xfs_buf_alloc_backing_mem() fails, xfs_buf_free() is called with | |
| CVE-2026-74729 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read put_fifo_with_discard() acts as both producer | |
| CVE-2026-74730 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: NFS: Pin the 'struct nfs_server' during a FREE_STATEID call Dan Aloni reports that he was able to hit a use-af | |
| CVE-2026-74731 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Skip sub-disable teardown for never-linked sub-schedulers A sub-scheduler enable can fail before sc | |
| CVE-2026-74732 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-74733 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock Locking is disabled in the regmap config as this dr | |
| CVE-2026-74734 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: fix NULL pointer dereference in ar_context_release During the error handling path of the drive | |
| CVE-2026-74735 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: l2tp: fix tunnel and session refcount leak on seq_file release In pppol2tp_proc_open() and l2tp_dfs_seq_open() | |
| CVE-2026-74736 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_bpf: reject dev-bound programs bound to a different device cls_bpf_prog_from_efd() obtained a S | |
| CVE-2026-74737 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG On the packet reception path, the ID of | |
| CVE-2026-74738 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: regmap: sdw-mbq: don't call an unset readable_reg callback regmap_sdw_mbq_poll_busy() decides whether to poll | |
| CVE-2026-74739 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: skip hash tables in u32_bind_class() u32_walk() enumerates both struct tc_u_hnode and stru | |
| CVE-2026-74740 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain tcf_action_exec() handles TC_ACT_GOTO_CHAIN by firs | |
| CVE-2026-74741 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling In non-MSI-X mode (such as legacy INTx | |
| CVE-2026-74742 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: veth: fix queue index used to wake the peer txq in veth_poll veth_poll() derives the index of the peer TX queu | |
| CVE-2026-74743 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: macvlan: inherit needed_headroom and needed_tailroom from lowerdev macvlan devices inherit hard_header_len fro | |
| CVE-2026-74744 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev ipvlan devices inherit hard_header_len from p | |
| CVE-2026-74745 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: avoid deadlock when canceling IRQ affinity notifier Unregistering IRQ affinity notifiers waits for | |
| CVE-2026-74746 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: publish GC-visible tuple last nf_flow_table_iterate() only treats original-direction tup | |
| CVE-2026-74747 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipvs: revalidate ihl to prevent out-of-bounds access While the outer IP header is already pulled into the skb | |
| CVE-2026-74748 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix refcount race between list:set GC and swap __ip_set_put_byindex() resolved the index to | |
| CVE-2026-74749 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rseq: Prevent hard lockup on granted time slice extension __exit_to_user_mode_loop() invokes rseq_grant_timesl | |
| CVE-2026-74750 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ovpn: defer key slot crypto freeing to workqueue Key slots are released through a kref and the existing releas | |
| CVE-2026-74751 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: riscv: lib: Fix ZBB strnlen reading past count boundary The ZBB-optimized strnlen loop loads one word ahead be | |
| CVE-2026-74752 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sctp: validate cookie AUTH state before use When cookie authentication is disabled, COOKIE_ECHO restores fixed | |
| CVE-2026-74753 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: perf: Reject exited events as group leaders perf_event_remove_on_exec() sets remove-on-exec events to the EXIT | |
| CVE-2026-74754 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: core: pair EH runtime PM get and put shost->eh_noresume is currently consulted twice in one error handli | |
| CVE-2026-74764 | Awaiting Analysis | 未確認 | CWE-22 | Pandora contains a path traversal vulnerability in its TAR archive extraction functionality. When processing a submitted TAR archive, the extractor passed archive member names dire |
| CVE-2026-74767 | Awaiting Analysis | 未確認 | CWE-434 | Pandora contains a denial-of-service vulnerability in its handling of DAA (Direct Access Archive) files. When extracting the internal ISO image from a DAA archive, compressed chunk |
| CVE-2026-74770 | Analyzed | 未確認 | CWE-78 | Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privi |
| CVE-2026-74771 | Analyzed | 未確認 | CWE-639 | Dell PowerProtect One, versions 20.1.0.0 and below, contain an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could po |
| CVE-2026-74774 | Analyzed | 未確認 | CWE-295 | Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially explo |
| CVE-2026-74783 | Deferred | 未確認 | CWE-674 | Scriban versions 6.6.0 through 7.2.0 contain a non-enforcing ExpressionDepthLimit guard that fails to stop recursive descent parsing of deeply nested expressions. Attackers can sup |
| CVE-2026-74784 | Deferred | 未確認 | CWE-770 | Scriban before 7.2.0 contains a denial of service vulnerability in the array.insert_at function that allocates unbounded null entries without respecting LoopLimit or LimitToString |
| CVE-2026-74785 | Deferred | 未確認 | CWE-400 | Scriban before 7.0.0 contains three distinct denial-of-service vulnerabilities in expression evaluation that bypass existing safety controls through unbounded string multiplication |
| CVE-2026-74786 | Deferred | 未確認 | CWE-770 | Scriban before 7.0.0 (affected versions <= 6.6.0) contains a denial-of-service vulnerability in which the LimitToString safety limit (default 1MB) can be bypassed because ObjectToS |
| CVE-2026-74787 | Deferred | 未確認 | CWE-674 | Scriban before 7.0.0 contains an uncontrolled recursion vulnerability in the object.to_json builtin function that lacks depth limits and circular reference detection. Attackers can |
| CVE-2026-74788 | Deferred | 未確認 | CWE-770 | Scriban before 7.0.0 (affected versions <= 6.6.0) contains an uncontrolled memory allocation vulnerability in the string.pad_left and string.pad_right template functions, which per |
| CVE-2026-74789 | Deferred | 未確認 | CWE-400 | Scriban before 7.0.0 (affected <= 6.6.0) applies its LoopLimit constraint only to script loop statements and not to expensive iteration performed inside built-in operators and func |
| CVE-2026-74790 | Deferred | 未確認 | CWE-693 | Scriban before 7.0.0 caches TypedObjectAccessor by Type only without considering MemberFilter changes, allowing reused TemplateContext instances to expose members that should be hi |
| CVE-2026-74791 | Deferred | 未確認 | CWE-226 | Scriban before 7.0.0 fails to clear the CachedTemplates dictionary when TemplateContext.Reset() is called, allowing cached templates to persist across reused contexts. Attackers ca |
| CVE-2026-74792 | Deferred | 未確認 | CWE-674 | Scriban before 7.0.0 (affected versions <= 6.6.0) contains a stack overflow vulnerability in nested array initializer parsing. Deeply nested array initializers recurse through a pa |
| CVE-2026-74793 | Deferred | 未確認 | CWE-79 | justhtml before 3.11.0 contains a cross-site scripting vulnerability where the default sanitizer bypasses event handler removal in selectedcontent projections. Attackers can inject |
| CVE-2026-74794 | Deferred | 未確認 | CWE-674 | Scriban before 6.6.0 contains an infinite recursion vulnerability in object rendering when the ObjectRecursionLimit property defaults to unlimited. Attackers can supply circular re |
| CVE-2026-74795 | Deferred | 未確認 | CWE-674 | Scriban before 6.6.0 contains an uncontrolled recursion vulnerability in its recursive-descent parser. The parser does not enforce a default expression depth limit (the ExpressionD |
| CVE-2026-74796 | Awaiting Analysis | 未確認 | CWE-59 | OpenTofu before 1.11.7 fails to validate existing symlinks in the provider cache directory during initialization. Attackers can place a malicious symlink in a trusted working direc |
| CVE-2026-74797 | Awaiting Analysis | 未確認 | CWE-400 | OpenTofu versions before 1.11.4 contain a denial of service vulnerability in the tofu init command when processing maliciously-crafted .zip archives for provider or module packages |
| CVE-2026-74798 | Deferred | 未確認 | CWE-22 | SiYuan kernel before v3.7.4 contains a path traversal vulnerability in the database_clean MCP tool. The tool performs only an empty-string check on the id parameter before passing |
| CVE-2026-74799 | Deferred | 未確認 | CWE-215 | SiYuan before 3.7.4 registers Go net/http/pprof debug endpoints including heap and goroutine dumps without authentication when --mode flag is not set to exactly prod. Attackers can |
| CVE-2026-74800 | Deferred | 未確認 | CWE-79 | SiYuan before v3.7.4 fails to set Content-Disposition and X-Content-Type-Options headers when serving arbitrary file assets, allowing stored cross-site scripting attacks. Authentic |
| CVE-2026-74801 | Deferred | 未確認 | CWE-78 | SiYuan before 3.7.4 fails to properly escape workspace directory paths when constructing command-line arguments for the elevated elevator.exe helper process. Attackers can create a |
| CVE-2026-74802 | Deferred | 未確認 | CWE-346 | SiYuan versions before 3.7.4 contain a cross-site WebSocket hijacking vulnerability in the admin-only /ws/network/proxy endpoint that explicitly disables origin validation by setti |
| CVE-2026-74803 | Deferred | 未確認 | CWE-434 | Joomla Extension - yootheme.com - Unauthenticated arbitrary file upload in Zoo < 4.1.64 - The image element accepts arbitrary files when the client-supplied Content-Type falls with |
| CVE-2026-74804 | Deferred | 未確認 | CWE-89 | Joomla Extension - yootheme.com - Unauthenticated SQL injection in ItemController::element() in Zoo < 4.1.64 - The filter_type request value is interpolated into the query as a.typ |
| CVE-2026-74820 | Awaiting Analysis | 未確認 | CWE-89 | ServiceNow has remediated a SQL injection vulnerability that was identified in in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain ci |
| CVE-2026-74836 | Awaiting Analysis | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allows an unauthenticated remote attacker to pin an unbounded number of HTTP/2 stream processes |
| CVE-2026-74842 | Deferred | 未確認 | CWE-918 | A vulnerability was found in Kira-Pgr PromptShopMCP up to 5bc0cd17358e19a5415d11a531088170d7b81452. Affected is the function download_image of the file server.py of the component I |
| CVE-2026-74843 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was determined in Wavlink WN531P3 and WN535M1 V250922. Affected by this vulnerability is the function strcpy of the file /etc/lighttpd/www/cgi-bin/export_pingortrac |
| CVE-2026-74845 | Deferred | 未確認 | CWE-434 | Official Document Management System developed by 2100 Technology has an Arbitrary File Upload vulnerability, allowing authenticated remote attackers to upload and execute web shell |
| CVE-2026-74848 | Analyzed | 未確認 | CWE-444 | Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache APISIX. An attacker could make other clients receive attacker-chosen or ot |
| CVE-2026-7485 | Deferred | 未確認 | CWE-863 | Incorrect authorization in frozen BI aggregations in Checkmk <2.5.0p2, <2.4.0p29, <2.3.0p47, and all 2.2.0 versions allows an authenticated user with restricted host and service vi |
| CVE-2026-74851 | Deferred | 未確認 | CWE-94 | The Pods WordPress plugin before 3.3.9.1 does not correctly compare a display callback against its list of blocked functions, allowing users with the author role and above to exec |
| CVE-2026-74858 | Deferred | 未確認 | CWE-918 | A vulnerability has been found in jae-jae fetcher-mcp up to 0.3.9. Impacted is the function fetch_url/fetch_urls of the file /latest/meta-data/iam/security-credentials/ of the comp |
| CVE-2026-74866 | Analyzed | 未確認 | CWE-93 | @fastify/busboy is a multipart form-data parser for Node.js. Its multipart part-header parser splits header lines only on the two-byte carriage-return line-feed sequence, so a lone |
| CVE-2026-74867 | Deferred | 未確認 | CWE-352 | SiYuan versions before 3.7.4 contain a cross-site request forgery vulnerability in the session-cookie authentication branch of CheckAuth() that lacks Origin/Referer validation and |
| CVE-2026-74868 | Deferred | 未確認 | CWE-307 | SiYuan versions before 3.7.4 contain an unthrottled brute-force vulnerability in the Publish Service Basic Auth implementation (PublishServiceTransport.RoundTrip() in kernel/server |
| CVE-2026-74869 | Deferred | 未確認 | CWE-862 | stoatchat before 0.15.0 contains a missing authorization vulnerability in the Subscribe message handler that allows authenticated attackers to enumerate members and monitor profile |
| CVE-2026-7487 | Analyzed | 未確認 | CWE-1280 | GitLab has remediated an issue in GitLab EE affecting all versions from 13.1 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authentica |
| CVE-2026-74870 | Analyzed | 未確認 | CWE-532 | openssl_encrypt (pip) versions <= 1.4.7 contain an information exposure vulnerability where the 'hsm fido2-test' and 'hsm onlykey-test' diagnostic commands unconditionally print th |
| CVE-2026-74871 | Analyzed | 未確認 | CWE-916 | openssl_encrypt versions before 1.4.6 contain a key derivation flaw in sequential XOR composition mode where the last stage cancels out during key generation. When configured with |
| CVE-2026-74872 | Analyzed | 未確認 | CWE-426 | openssl_encrypt versions before 1.4.0 contain an arbitrary code execution vulnerability in the Whirlpool hash implementation that uses broad glob patterns to load .so modules witho |
| CVE-2026-74873 | Analyzed | 未確認 | CWE-214 | openssl_encrypt versions before 1.4.0 expose passwords passed via the --password CLI argument in process listings accessible to all system users. Attackers can read process argumen |
| CVE-2026-74874 | Analyzed | 未確認 | CWE-338 | openssl_encrypt versions before 1.4.0 use Python's non-cryptographic random module for steganographic pixel selection in the generate_pseudorandom_sequence function. Attackers who |
| CVE-2026-74875 | Analyzed | 未確認 | CWE-345 | openssl_encrypt versions before 1.4.0 silently skip JSON schema validation when the jsonschema library is not installed, allowing malformed metadata to be accepted. Attackers can r |
| CVE-2026-74876 | Analyzed | 未確認 | CWE-347 | openssl_encrypt versions before 1.4.0 contain a vulnerability in PublicKeyBundle.from_dict() that creates key bundles from untrusted data without verifying signatures. Attackers ca |
| CVE-2026-74877 | Analyzed | 未確認 | CWE-639 | openssl_encrypt versions before 1.4.0 contain a missing ownership verification vulnerability in the revoke_key method that allows authenticated clients to revoke any other client's |
| CVE-2026-74878 | Analyzed | 未確認 | CWE-770 | openssl_encrypt versions before 1.4.0 use an in-memory rate limiter for TOTP brute-force protection that is not shared across workers and is lost on server restart. Attackers can d |
| CVE-2026-74879 | Analyzed | 未確認 | CWE-209 | openssl_encrypt versions before 1.4.0 contain an information disclosure vulnerability in the /ready endpoint that returns full database exception strings to unauthenticated callers |
| CVE-2026-74880 | Analyzed | 未確認 | CWE-598 | openssl_encrypt versions before 1.4.0 accept refresh tokens as URL query parameters in keyserver and telemetry server routes. Attackers can extract tokens from server logs, proxy l |
| CVE-2026-74881 | Analyzed | 未確認 | CWE-942 | openssl_encrypt versions before 1.4.0 configure CORS with allow_origins set to wildcard and allow_credentials enabled to true. Attackers can create malicious websites that make aut |
| CVE-2026-74882 | Analyzed | 未確認 | CWE-345 | openssl_encrypt versions before 1.4.0 contain an insecure default configuration that trusts the entire RFC 1918 private address space in IntegrityProxyConfig trusted_proxies. Attac |
| CVE-2026-74883 | Analyzed | 未確認 | CWE-693 | openssl_encrypt versions before 1.4.0 contain a sandbox bypass vulnerability where the plugin sandbox fails to restrict alternative file access methods like pathlib.Path and io.ope |
| CVE-2026-74884 | Analyzed | 未確認 | CWE-73 | openssl_encrypt versions before 1.4.0 contain a path traversal vulnerability in the _is_safe_path method where the plugin_id parameter is not sanitized before constructing the plug |
| CVE-2026-74885 | Analyzed | 未確認 | CWE-117 | openssl_encrypt versions before 1.4.0 contain a logging bug in restore_hidden_modules() that logs module counts after clearing, always showing zero restored modules and corrupting |
| CVE-2026-74886 | Analyzed | 未確認 | CWE-184 | openssl_encrypt versions before 1.4.0 contain a plugin sandbox bypass vulnerability where the PluginImportGuard blocks a different set of modules than the AST analyzer's DANGEROUS_ |
| CVE-2026-74887 | Analyzed | 未確認 | CWE-338 | openssl_encrypt before 1.4.0 imports Python's non-cryptographic 'random' module (Mersenne Twister PRNG) at line 15 of openssl_encrypt/modules/pqc.py. No direct calls to random.* we |
| CVE-2026-74888 | Analyzed | 未確認 | CWE-327 | openssl_encrypt versions before 1.4.0 use a non-standard PBKDF2 key derivation construction with iterations=1 per call in an outer loop, creating a KDF whose security properties ha |
| CVE-2026-74889 | Analyzed | 未確認 | CWE-326 | openssl_encrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and determinism. Attackers can exp |
| CVE-2026-74890 | Analyzed | 未確認 | CWE-345 | openssl_encrypt versions before 1.4.0 contain an authentication bypass vulnerability in CamelliaCipher that disables HMAC tag generation and verification when the PYTEST_CURRENT_TE |
| CVE-2026-74891 | Analyzed | 未確認 | CWE-798 | openssl_encrypt versions before 1.4.0 contain hardcoded database credentials in standalone server configuration files. Attackers on the same network can access PostgreSQL databases |
| CVE-2026-74892 | Analyzed | 未確認 | CWE-798 | openssl_encrypt versions before 1.4.0 contain a hardcoded default secret key in the standalone telemetry server configuration that is used for API key hashing. Attackers who know t |
| CVE-2026-74893 | Analyzed | 未確認 | CWE-798 | openssl_encrypt versions before 1.4.0 contain hardcoded default JWT signing secrets in config.py that pass validation checks. Attackers with access to source code can forge valid J |
| CVE-2026-74894 | Analyzed | 未確認 | CWE-287 | openssl_encrypt before 1.4.0 contains an authentication bypass vulnerability in the verify_api_token function that accepts any non-empty Bearer token string without validation. Att |
| CVE-2026-74895 | Analyzed | 未確認 | CWE-693 | openssl_encrypt versions before 1.4.0 fail to apply sandbox restrictions in the default process isolation mode for plugin execution. Attackers can execute malicious plugins with un |
| CVE-2026-74896 | Analyzed | 未確認 | CWE-693 | openssl_encrypt versions before 1.4.0 contain a sandbox escape vulnerability in the DangerousPatternVisitor AST analyzer that fails to detect dunder attribute traversal techniques. |
| CVE-2026-74899 | Analyzed | 未確認 | CWE-95 | openssl_encrypt versions before 1.4.0 contain a sandbox escape vulnerability in IsolatedPluginExecutor that exposes Python type objects in restricted exec() builtins. Attackers can |
| CVE-2026-74900 | Analyzed | 未確認 | CWE-391 | openssl_encrypt versions before 1.4.0 contain a critical vulnerability in pqc.py where KEM decapsulation failures silently fall back to simulation mode, generating a deterministic |
| CVE-2026-74901 | Analyzed | 未確認 | CWE-347 | openssl_encrypt versions before 1.4.0 contain an authentication bypass vulnerability in pqc.py where AES-GCM decryption failures trigger fallback to unauthenticated AES-CTR mode. A |
| CVE-2026-74902 | Deferred | 未確認 | CWE-79 | SiYuan before v3.7.4 contains a cross-site scripting vulnerability in the file upload validation flow that fails to escape filenames before inserting them into HTML via insertAdjac |
| CVE-2026-74903 | Deferred | 未確認 | CWE-400 | SiYuan before v3.7.4 contains an insufficient access control vulnerability in the /api/lute/spinBlockDOM endpoint, which is guarded only by CheckAuth middleware instead of CheckAdm |
| CVE-2026-74904 | Deferred | 未確認 | CWE-862 | SiYuan before v3.7.4 is missing authorization checks in 17 block metadata/content endpoints in kernel/api/block.go (including getRefText, checkBlockExist, and getBlockBreadcrumb). |
| CVE-2026-74905 | Deferred | 未確認 | CWE-918 | SiYuan before v3.7.4 contains a server-side request forgery (SSRF) vulnerability in the isPrivateIP function in kernel/util/net.go, used by SSRFSafeDialer to enforce SSRF protectio |
| CVE-2026-74906 | Deferred | 未確認 | CWE-863 | SiYuan before v3.7.4 contains an incorrect authorization vulnerability in eight publish-mode reader-facing endpoints that filter results using the visibility list instead of the di |
| CVE-2026-74907 | Deferred | 未確認 | CWE-22 | Grav before 2.0.15 contains a path traversal vulnerability in the static asset server within index.php that uses string prefix matching instead of directory-boundary validation. Un |
| CVE-2026-74908 | Deferred | 未確認 | CWE-79 | Grav plugin-api before 1.0.15 contains a script injection vulnerability where the SVG sanitizer only checks for the exact extension 'svg', allowing .svgz and .xhtml files to bypass |
| CVE-2026-74928 | Deferred | 未確認 | CWE-862 | The Project Manager WordPress plugin before 4.0.7 does not have any authorisation check on its import routes, allowing unauthenticated users to create WordPress accounts with a pa |
| CVE-2026-74929 | Deferred | 未確認 | CWE-284 | The Project Manager WordPress plugin before 4.0.7 does not restrict several of its REST API routes to the projects a user belongs to, allowing any authenticated user, such as a su |
| CVE-2026-74930 | Deferred | 未確認 | CWE-639 | The Project Manager WordPress plugin before 4.0.7 does not check that the user whose activity is being requested is the one making the request in one of its REST API routes, allow |
| CVE-2026-74932 | Deferred | 未確認 | CWE-79 | The WP Fastest Cache WordPress plugin before 1.5.1 does not validate the Host header before using it to build the URLs of the asset files it embeds in the pages it caches, and does |
| CVE-2026-74934 | Analyzed | 未確認 | CWE-200, CWE-284, CWE-346 | Site isolation issue in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154 |
| CVE-2026-74935 | Analyzed | 未確認 | CWE-269 | Privilege escalation in the DOM: Networking component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thun |
| CVE-2026-74936 | Modified | 未確認 | CWE-416 | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, an |
| CVE-2026-74937 | Analyzed | 未確認 | CWE-416 | Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1. |
| CVE-2026-74938 | Analyzed | 未確認 | CWE-693 | Mitigation bypass in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1. |
| CVE-2026-74939 | Analyzed | 未確認 | CWE-269 | Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thun |
| CVE-2026-74940 | Modified | 未確認 | CWE-416 | Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird |
| CVE-2026-74941 | Analyzed | 未確認 | CWE-269 | Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14 |
| CVE-2026-74942 | Analyzed | 未確認 | CWE-269 | Privilege escalation in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 15 |
| CVE-2026-74943 | Modified | 未確認 | CWE-416 | Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunder |
| CVE-2026-74944 | Modified | 未確認 | CWE-416 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thund |
| CVE-2026-74945 | Analyzed | 未確認 | CWE-200 | Information disclosure in the Graphics: Text component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thu |
| CVE-2026-74946 | Analyzed | 未確認 | CWE-119 | Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.1 |
| CVE-2026-74947 | Analyzed | 未確認 | CWE-763 | Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1. |
| CVE-2026-74948 | Analyzed | 未確認 | CWE-200 | Information disclosure in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbi |
| CVE-2026-74949 | Modified | 未確認 | CWE-416 | Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, |
| CVE-2026-74950 | Analyzed | 未確認 | CWE-269 | Privilege escalation in the Downloads API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1. |
| CVE-2026-74951 | Analyzed | 未確認 | CWE-1021 | Clickjacking issue in Firefox for Android. This vulnerability was fixed in Firefox 154. |
| CVE-2026-74952 | Modified | 未確認 | CWE-269 | Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 154, Thunderbird 154, Firefox ESR 153.2, and Thunderbird 153.2. |
| CVE-2026-74953 | Analyzed | 未確認 | CWE-269 | Privilege escalation in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, |
| CVE-2026-74954 | Analyzed | 未確認 | CWE-203 | Information disclosure due to side-channel in the Storage: Cache API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153 |
| CVE-2026-74955 | Analyzed | 未確認 | CWE-269 | Privilege escalation in the Request Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1. |
| CVE-2026-74956 | Analyzed | 未確認 | CWE-843 | Same-origin policy bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1. |
| CVE-2026-74957 | Analyzed | 未確認 | CWE-693 | Mitigation bypass in the Safe Browsing component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thund |
| CVE-2026-74958 | Analyzed | 未確認 | CWE-1021 | Information disclosure in the WebRTC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1. |
| CVE-2026-74959 | Analyzed | 未確認 | CWE-693 | Mitigation bypass in the Storage: Cache API component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and |
| CVE-2026-74960 | Analyzed | 未確認 | CWE-284, CWE-346 | Site isolation issue in the WebExtensions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Th |
| CVE-2026-74961 | Undergoing Analysis | 未確認 | CWE-203 | Side-channel in the Web Audio component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1. |
| CVE-2026-74962 | Analyzed | 未確認 | CWE-346 | Site isolation issue in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, |
| CVE-2026-74963 | Analyzed | 未確認 | CWE-346 | Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140 |
| CVE-2026-74964 | Analyzed | 未確認 | CWE-190 | Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird |
| CVE-2026-74965 | Analyzed | 未確認 | CWE-269 | Privilege escalation in the Shell Integration component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, an |
| CVE-2026-74966 | Analyzed | 未確認 | CWE-359 | Information disclosure in the Form Autofill component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1. |
| CVE-2026-74967 | Analyzed | 未確認 | CWE-346 | Same-origin policy bypass in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 1 |
| CVE-2026-74968 | Analyzed | 未確認 | CWE-346 | Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1. |
| CVE-2026-74969 | Modified | 未確認 | CWE-416 | Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thu |
| CVE-2026-74970 | Analyzed | 未確認 | CWE-346 | Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1. |
| CVE-2026-74971 | Analyzed | 未確認 | CWE-200 | Information disclosure in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunde |
| CVE-2026-74972 | Analyzed | 未確認 | CWE-200 | Information disclosure in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 14 |
| CVE-2026-74973 | Analyzed | 未確認 | CWE-362, CWE-416 | Race condition, use-after-free in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, T |
| CVE-2026-74974 | Analyzed | 未確認 | CWE-346 | Same-origin policy bypass in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 1 |
| CVE-2026-74975 | Analyzed | 未確認 | CWE-451 | Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154. |
| CVE-2026-74976 | Analyzed | 未確認 | CWE-843 | JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, |
| CVE-2026-74977 | Analyzed | 未確認 | CWE-190 | Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1. |
| CVE-2026-74978 | Analyzed | 未確認 | CWE-1021 | Clickjacking issue in the Widget component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1. |
| CVE-2026-74979 | Analyzed | 未確認 | CWE-284 | Mitigation bypass in the Add-ons Manager component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1. |
| CVE-2026-74980 | Analyzed | 未確認 | CWE-1021 | Clickjacking issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154. |
| CVE-2026-74981 | Analyzed | 未確認 | CWE-346 | Site isolation issue in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1. |
| CVE-2026-74982 | Analyzed | 未確認 | CWE-400 | Denial-of-service in the Widget component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1. |
| CVE-2026-74983 | Analyzed | 未確認 | CWE-693 | Mitigation bypass in the Data Loss Prevention component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, an |
| CVE-2026-74984 | Analyzed | 未確認 | CWE-362 | Race condition in the JavaScript Engine component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1. |
| CVE-2026-74985 | Analyzed | 未確認 | CWE-269 | Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1. |
| CVE-2026-74986 | Analyzed | 未確認 | CWE-200 | Site isolation issue in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1. |
| CVE-2026-74987 | Modified | 未確認 | CWE-119 | Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-rele |
| CVE-2026-74988 | Modified | 未確認 | CWE-119 | Internally found bugs present in Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presu |
| CVE-2026-74989 | Modified | 未確認 | CWE-119 | Internally found bugs present in Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort |
| CVE-2026-74990 | Modified | 未確認 | CWE-119 | Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-rele |
| CVE-2026-74992 | Deferred | 未確認 | CWE-79 | The Kirki WordPress plugin before 6.2.3 does not properly validate the files contained in archives uploaded by users with the Editor role, and does not remove all unwanted files a |
| CVE-2026-74997 | Analyzed | 未確認 | CWE-78 | In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the cmd_learn driver of the markasjunk plugin is subject to remote code execution via crafted placeholder replacement val |
| CVE-2026-74998 | Analyzed | 未確認 | CWE-79 | In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, responses from the CSS (Cascading Style Sheets) proxy were not validated, which may result in information disclosure or X |
| CVE-2026-74999 | Analyzed | 未確認 | CWE-79 | In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the "Add to address book" action was subject to stored XSS. |
| CVE-2026-75000 | Analyzed | 未確認 | CWE-669 | In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, improper HTML/CSS sanitization of the SVG animate "by" attribute may lead to remote image blocking bypass, which in turn |
| CVE-2026-75002 | Analyzed | 未確認 | CWE-77 | In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, mail search and LITERAL+ byte-count desynchronization could lead to information disclosure or privilege escalation via IM |
| CVE-2026-75003 | Analyzed | 未確認 | CWE-669 | In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, an unclosed url() in a FuncIRI attribute of an SVG image could evade the remote image blocking, which may lead to informa |
| CVE-2026-75004 | Analyzed | 未確認 | CWE-77 | In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, improper rule name quoting could lead to managesieve_disabled_actions setting bypass via a crafted rule name in a Sieve s |
| CVE-2026-75005 | Analyzed | 未確認 | CWE-407 | Inefficient Algorithmic Complexity vulnerability in Apache APISIX. A single small request can pin a gateway worker at 100% CPU for an extended period in graphql-limit-count route |
| CVE-2026-75006 | Analyzed | 未確認 | CWE-918 | In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, insufficient Cascading Style Sheets (CSS) sanitization in HTML e-mail messages may lead to SSRF or Information Disclosure |
| CVE-2026-75007 | Analyzed | 未確認 | CWE-77 | In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the LDAP search filter was subject to injection via unescaped %u/%fu/%d substitution, which may lead to information discl |
| CVE-2026-75010 | Analyzed | 未確認 | CWE-669 | In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the modoboa driver of the password plugin could leak a Modoboa API authentication token to a user-controlled host via cra |
| CVE-2026-75011 | Deferred | 未確認 | CWE-74, CWE-77 | A flaw has been found in kylecui NetForensicMCP 2.1.0. Impacted is the function execAsync of the file index.js. Executing a manipulation of the argument interface/protocol can lead |
| CVE-2026-75012 | Deferred | 未確認 | CWE-404, CWE-476 | A security vulnerability has been detected in TOTOLINK EX1200L 9.3.5u.6146_B20201023. Affected by this issue is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the |
| CVE-2026-75013 | Deferred | 未確認 | CWE-404, CWE-476 | A vulnerability was detected in TOTOLINK EX1200L 9.3.5u.6146_B20201023. This affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi. The manipulation results in null po |
| CVE-2026-75014 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/get_barcode_data.php. This manipulation of |
| CVE-2026-75019 | Deferred | 未確認 | CWE-79 | The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via cozyHoverE |
| CVE-2026-75020 | Analyzed | 未確認 | CWE-90 | Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Apache APISIX. A caller who holds valid credentials for one entry in the LDAP |
| CVE-2026-75027 | Deferred | 未確認 | CWE-862 | The Themify Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.8.0. This is due to the plugin not properly verifying that a |
| CVE-2026-75032 | Awaiting Analysis | 未確認 | CWE-125 | A flaw was found in BlueZ. Insufficient validation of packet length fields in GetFolderItems responses within the Audio/Video Remote Control Profile (AVRCP) implementation allows a |
| CVE-2026-75037 | Awaiting Analysis | 未確認 | CWE-290 | Polkit Authentication Based on UnixProcessSubject / Peer PID in LACT on Linux allows an Authentication Bypass. This issue affects LACT through 0.10.0. Fixed by commit d0478fe42c221 |
| CVE-2026-75038 | Awaiting Analysis | 未確認 | CWE-61 | UNIX symbolic link (symlink) following vulnerability in ilya-zlobintsev/LACT allows for local denial-of-service. This issue affects LACT: through 0.10.0. |
| CVE-2026-75044 | Analyzed | 未確認 | CWE-862 | In JetBrains YouTrack before 2025.3.156085, 2026.1.13914, 2026.2.18095 missing authorisation allowed an authenticated user to delete arbitrary entities via the mailbox endpoint |
| CVE-2026-75045 | Analyzed | 未確認 | CWE-288 | In JetBrains YouTrack before 2025.3.156085, 2026.1.13913, 2026.2.18112 an unauthenticated attacker could download database backups via shared draft signature |
| CVE-2026-75046 | Analyzed | 未確認 | CWE-862 | In JetBrains YouTrack before 2026.2.18112 an authenticated user could enumerate accounts via the users search endpoint |
| CVE-2026-75047 | Analyzed | 未確認 | CWE-409 | In JetBrains YouTrack before 2026.2.18177 doS attack was possible via a decompression bomb in the import endpoint |
| CVE-2026-75048 | Analyzed | 未確認 | CWE-79 | In JetBrains YouTrack before 2026.2.18068 stored XSS via the fenced code-block language label was possible |
| CVE-2026-75049 | Analyzed | 未確認 | CWE-862 | In JetBrains YouTrack before 2026.1.13903, 2026.2.17950 an authenticated user could read restricted articles from other projects via the draft creation endpoint |
| CVE-2026-75050 | Analyzed | 未確認 | CWE-770 | In JetBrains YouTrack before 2026.1.13901, 2026.2.17950 doS attack was possible via crafted type parameters |
| CVE-2026-75051 | Analyzed | 未確認 | CWE-862 | In JetBrains YouTrack before 2026.2.17917 unauthorised project transfer between organisations was possible |
| CVE-2026-75052 | Analyzed | 未確認 | CWE-77 | In JetBrains IntelliJ IDEA before 2026.2.1 command execution via crafted Markdown preview content was possible in trusted projects |
| CVE-2026-75053 | Analyzed | 未確認 | CWE-918 | In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint |
| CVE-2026-75054 | Analyzed | 未確認 | CWE-918 | In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in untrusted projects |
| CVE-2026-75055 | Analyzed | 未確認 | CWE-611 | In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE |
| CVE-2026-75056 | Analyzed | 未確認 | CWE-78 | In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible |
| CVE-2026-75057 | Analyzed | 未確認 | CWE-532 | In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log |
| CVE-2026-75058 | Analyzed | 未確認 | CWE-611 | In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importers |
| CVE-2026-75059 | Analyzed | 未確認 | CWE-79 | In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible |
| CVE-2026-75060 | Analyzed | 未確認 | CWE-306 | In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools |
| CVE-2026-75062 | Awaiting Analysis | 未確認 | CWE-1188, CWE-95 | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in the default lf.query Python protocol in Google langfun versions prior to 0.1.2 allows remo |
| CVE-2026-75077 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /BSCE2.php. Such manipulati |
| CVE-2026-75078 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /BSHRM1.php. Performing a manipulation of the |
| CVE-2026-75079 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /edit_subject2.php. Executing a manipula |
| CVE-2026-75080 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This issue affects some unknown processing of the file /edit_subject1.php. The m |
| CVE-2026-75081 | Deferred | 未確認 | CWE-840, CWE-841 | A vulnerability was detected in Webkul Bagisto up to 2.4.4. Impacted is an unknown function of the file /customer/account/rma/store. The manipulation of the argument rma_qty/resolu |
| CVE-2026-75082 | Deferred | 未確認 | CWE-74, CWE-80 | A flaw has been found in Webkul Bagisto up to 2.4.4. The affected element is an unknown function of the file /customer/register of the component Customer-Registration Notification |
| CVE-2026-75086 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /viewroom.php. Such manipulation of the argum |
| CVE-2026-75087 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /viewdepartment.php. Performing a manipulation of the argumen |
| CVE-2026-75088 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /viewbilling.php. Executing a manipulation of the argume |
| CVE-2026-75089 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in PHPGurukul Complaint Management System 1.0. Affected by this issue is some unknown functionality of the file user/check_availability.php. This man |
| CVE-2026-75090 | Deferred | 未確認 | CWE-119, CWE-125 | A vulnerability was detected in EricLBuehler Mistral.rs up to 0.8.22. Affected by this issue is the function convert_gguf_to_hf_tokenizer of the file mistralrs-core/src/gguf/gguf_t |
| CVE-2026-75091 | Deferred | 未確認 | CWE-79 | The Quill Forms | Conversational Multi Step Forms, Surveys & quizzes plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.7.1 d |
| CVE-2026-75093 | Deferred | 未確認 | CWE-120, CWE-131 | A security vulnerability has been detected in sonos tract up to 0.23.4. This impacts the function Tensor::from_raw_dt_align of the file data/src/tensor.rs of the component ONNX Ini |
| CVE-2026-75094 | Deferred | 未確認 | CWE-77, CWE-78 | A flaw has been found in COMFAST CF-N1-S 2.6.0.1. This impacts the function sub_44B438 of the file /cgi-bin/mbox-config?method=SET§ion=ptest_ssid of the component CGI Interface |
| CVE-2026-75099 | Analyzed | 未確認 | CWE-200 | Unauthenticated REST disclosure of certain content items in Apache Allura. This issue affects Apache Allura: through 1.19.1. Users are recommended to upgrade to version 1.20. |
| CVE-2026-75103 | Deferred | 未確認 | CWE-639 | Crawlab fails to verify user ownership or administrative role on the password-change endpoint, allowing any authenticated user to reset any account's password. Attackers can enumer |
| CVE-2026-75104 | Awaiting Analysis | 未確認 | CWE-22 | Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing attackers to read arbitrary files outside the model directory. Attackers can supply |
| CVE-2026-75105 | Awaiting Analysis | 未確認 | CWE-639 | phpIPAM through 1.8.1 fails to verify that a requested IP address belongs to the subnet a temporary share token was issued for. In app/temp_share/index.php and app/temp_share/addre |
| CVE-2026-75106 | Deferred | 未確認 | CWE-340 | OpnForm derives editable-submission secrets from sequential row identifiers using Hashids with an empty default salt, allowing unauthenticated attackers to compute hashes for any s |
| CVE-2026-75107 | Deferred | 未確認 | CWE-79 | Grav Form Plugin before 9.1.19 fails to escape field-definition properties including prepend, append, spacer text, section text, and select option labels in form templates. Attacke |
| CVE-2026-75108 | Deferred | 未確認 | CWE-862 | Next Terminal fails to enforce per-asset authorization checks on the portal ping and wake-on-LAN endpoints, allowing any authenticated user to probe and wake assets they are not gr |
| CVE-2026-75109 | Deferred | 未確認 | CWE-862 | Determined fails to authorize requests on the generic task kill, pause, and unpause endpoints in the API handlers. Authenticated attackers can disrupt other users' workloads by ter |
| CVE-2026-75110 | Deferred | 未確認 | CWE-697 | MemOS is a memory operating system for LLMs and AI agents. In deployments where authentication is enabled (AUTH_ENABLED=true) but the undocumented, defaultless INTERNAL_SERVICE_SEC |
| CVE-2026-75111 | Deferred | 未確認 | CWE-22 | Evidently UI fails to properly validate the filename parameter in the dataset materialization endpoint, allowing unauthenticated attackers to read arbitrary files outside the works |
| CVE-2026-75112 | Awaiting Analysis | 未確認 | CWE-916 | A security issue exists within OTTO® Fleet Manager. The vulnerability stems from the use of an insufficient work factor in the bcrypt password hashing implementation, which could r |
| CVE-2026-75114 | Deferred | 未確認 | CWE-601 | Joomla Extension - yootheme.com - Open redirect in CommentController::twitterAuthenticate() in Zoo < 4.1.64 - The referer request parameter is passed straight to setRedirect() with |
| CVE-2026-75115 | Deferred | 未確認 | CWE-22 | Joomla Extension - yootheme.com - Authenticated, privileged arbitrary file read in YOOtheme Pro 2.3.0-5.0.40 - The Filesystem source's path filter is vulnerable to glob-based patte |
| CVE-2026-75118 | Deferred | 未確認 | CWE-121 | A pre-authentication stack-based buffer overflow vulnerability exists in the http_gdpr_decrypt function of TL-MR100 V3.20 due to insufficient bounds checking of encrypted requests |
| CVE-2026-75121 | Awaiting Analysis | 未確認 | CWE-78 | PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/dispatcher.cgi. The web_vlan_membership_edit_dialog_po |
| CVE-2026-75122 | Awaiting Analysis | 未確認 | CWE-78 | PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/httpuploadcert.cgi. The certificate password field in |
| CVE-2026-75123 | Awaiting Analysis | 未確認 | CWE-78 | PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/dispatcher.cgi. The web_smtp_test_post handler incorpo |
| CVE-2026-75124 | Awaiting Analysis | 未確認 | CWE-120 | PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains a pre-authentication memory corruption vulnerability in the web management interface where the _readHttpParam function |
| CVE-2026-75125 | Awaiting Analysis | 未確認 | CWE-476 | PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains an authenticated null pointer dereference vulnerability in /cgi-bin/dispatcher.cgi. The web_poe_alive_rmtip_post handl |
| CVE-2026-75126 | Awaiting Analysis | 未確認 | CWE-121 | PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains multiple authenticated stack buffer overflow vulnerabilities in /cgi-bin/dispatcher.cgi. The following handlers copy a |
| CVE-2026-75130 | Deferred | 未確認 | Context7 through 2.1.2 contains a prompt injection vulnerability that allows attackers to execute malicious instructions in connected AI coding agents by injecting unsanitized cont | |
| CVE-2026-75132 | Deferred | 未確認 | CWE-89 | WAPT Server versions 2.6.1.17834 and earlier contains a SQL injection vulnerability in the `columns` parameter of the GET `/api/v3/hosts` endpoint. A remote authenticated user with |
| CVE-2026-75133 | Deferred | 未確認 | CWE-306 | Keep Backup Daily plugin for WordPress before 2.1.4 contains a sensitive information exposure vulnerability that allows unauthenticated attackers to trigger a full MySQL database d |
| CVE-2026-75140 | Awaiting Analysis | 未確認 | CWE-770 | jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows remote attackers to exhaust JVM heap memory |
| CVE-2026-75141 | Awaiting Analysis | 未確認 | CWE-122 | FFmpeg before commit acf5d7c contains a heap buffer overflow in the hvcC box writer. When writing an HEVC configuration record with more NAL units of a single type than the count f |
| CVE-2026-75142 | Awaiting Analysis | 未確認 | CWE-121 | FFmpeg before commit 9d786e4 contains a stack buffer overflow in the MPEG-PS muxer (libavformat/mpegenc.c). When muxing input with more streams than the muxer's fixed-size stack bu |
| CVE-2026-75143 | Awaiting Analysis | 未確認 | CWE-122 | FFmpeg before commit 1c10bcc contains a heap buffer overflow in the RIST protocol reader (libavformat/librist.c). librist_read() ignored its size argument and copied the full recei |
| CVE-2026-75144 | Awaiting Analysis | 未確認 | CWE-122 | FFmpeg before commit 1cdeb3c contains a heap buffer overflow vulnerability in the VC-2/Dirac RTP packetizer (libavformat/rtpenc_vc2hq.c) that allows attackers to trigger memory cor |
| CVE-2026-75145 | Awaiting Analysis | 未確認 | CWE-681 | FFmpeg before commit b4c199c contains an incorrect integer narrowing conversion in the AV1 RTP packetizer (libavformat/rtpenc_av1.c). The OBU size is cast to long before comparison |
| CVE-2026-75146 | Awaiting Analysis | 未確認 | CWE-125 | FFmpeg before commit 65b0dab contains an out-of-bounds read in the DASH demuxer (libavformat/dashdec.c). When a live DASH manifest is refreshed with a startNumber that is lower tha |
| CVE-2026-75147 | Awaiting Analysis | 未確認 | CWE-125 | FFmpeg before commit 983dae9 contains an out-of-bounds read in the AV1 RTP packetizer (libavformat/rtpenc_av1.c). The keyframe detection loop that searches for a sequence header OB |
| CVE-2026-75148 | Deferred | 未確認 | CWE-190 | cgltf through 1.15 contains an integer overflow vulnerability in the non-sparse accessor bounds check within cgltf_validate() that allows remote attackers to cause memory disclosur |
| CVE-2026-75149 | Deferred | 未確認 | CWE-94 | marimo before 0.23.15 contains a code injection vulnerability in the notebook configuration handler that allows attackers to execute arbitrary commands by supplying a crafted MCP s |
| CVE-2026-75151 | Deferred | 未確認 | CWE-352, CWE-862 | A vulnerability has been found in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this vulnerability is an unknown functionality. The manipulation le |
| CVE-2026-75159 | Analyzed | 未確認 | CWE-415 | An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a crafted authenticatio |
| CVE-2026-7520 | Deferred | 未確認 | CWE-862 | The MailChimp Forms by MailMunch plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `sign_in()` and `sign_up()` AJAX h |
| CVE-2026-7529 | Deferred | 未確認 | CWE-862 | The wiseCampaign – WooCommerce Conversions Made Easy plugin for WordPress is vulnerable to unauthorized modification and disclosure of data due to every one of its REST API endpoin |
| CVE-2026-75325 | Deferred | 未確認 | CWE-287 | DWSurvey v6.14.0 is is vulnerable to authentication bypass via the '/api/dwsurvey/none/' and '/api/dwsurvey/up/**' parameters. |
| CVE-2026-75327 | Deferred | 未確認 | CWE-434 | In DocSys-master V2.02.85, the uploadMarkdownPic interface in src/com/DocSystem/controller/DocController.java has an arbitrary file upload vulnerability: |
| CVE-2026-75328 | Deferred | 未確認 | CWE-22 | In DocSys-master V2.02.85, the downloadDocEx interface in src/com/DocSystem/controller/DocController.java has an arbitrary file read vulnerability: |
| CVE-2026-75329 | Deferred | 未確認 | CWE-306 | The Netty configuration distribution service (port 8283) of super-diamond-server <= 1.3.3 has no authentication mechanism. Attackers can directly obtain the full configuration of a |
| CVE-2026-75330 | Deferred | 未確認 | CWE-89 | The front-end interface /superdiamond/preview/{projectCode}/{module}/{type} of super-diamond-server <= 1.3.3 is vulnerable to SQL injection. The module parameter is directly concat |
| CVE-2026-75331 | Deferred | 未確認 | CWE-434 | tamguo 1.5.3 is vulnerable to Unrestricted File Upload Leading to Stored XSS. The /uploadFile and /imgUpload endpoints in FileUploadController.java and UEditorController.java have |
| CVE-2026-75332 | Deferred | 未確認 | CWE-918 | Zyplayer-Doc <=1.0.0 is vulnerable to Server-Side Request Forgery (SSRF) via WikiPageWebService.download(). |
| CVE-2026-75333 | Deferred | 未確認 | CWE-22 | yx-image-recognition v1.0 is vulnerable to Path Traversal. Parameters such as dir, filePath are directly passed to new File() for file system operations without any path sanitizati |
| CVE-2026-75334 | Deferred | 未確認 | CWE-89 | The report module in the backend of smart-web2 v1.3.1 is vulnerable to arbitrary SQL execution. The sqlResource.sql parameter is stored in the t_report_sql_resource table through t |
| CVE-2026-75336 | Deferred | 未確認 | CWE-89 | Funiture 1.0.0 is vulnerable to SQL Injection in the backend tool interfaces /sys/tool/select.json and /sys/tool/update.json. |
| CVE-2026-75337 | Deferred | 未確認 | CWE-22 | The static resource interface /api/static/{deployKey}/ of Yu AI Code Mother v4.3 is vulnerable to path traversal. The user-controlled path is concatenated to the preview root direc |
| CVE-2026-75338 | Deferred | 未確認 | CWE-284 | disconf (Distributed Configuration Management Platform) 2.6.36 is vulnerable to Incorrect Access Control. The config-fetching APIs /api/config/item, /api/config/file, /api/config/l |
| CVE-2026-75339 | Deferred | 未確認 | CWE-862 | The storage endpoint /storage/upload of cjbi admin3 v3.0.0 are missing permission checks. /Any logged-in user can upload arbitrary files, and any anonymous attacker can download th |
| CVE-2026-75340 | Deferred | 未確認 | CWE-918 | The device metadata import interface /device/instance/{productId}/property-metadata/import of jetlinks community 2.11 is vulnerable to Server-side request forgery (SSRF). |
| CVE-2026-75357 | Deferred | 未確認 | CWE-94 | An issue in Bilibili Desktop v.1.17.9 allows a remote attacker to execute arbitrary code via the bili-inject.js and bili-bridge.js components. |
| CVE-2026-75363 | Deferred | 未確認 | CWE-78 | An issue in Comfast CF-WR630AX v.2.7.0.2 allows a remote attacker to execute arbitrary code via the /usr/bin/webmgnt, /cgi-bin/mbox-config, and the parameters timestr, display_n. |
| CVE-2026-75364 | Deferred | 未確認 | CWE-78 | Comfast CF-N1-S firmware 2.6.0.1 and CF-WR630AX (2024-01-30 build), the update_interface_png SET handler in /usr/bin/webmgnt fails to sanitize the display_name parameter. User-cont |
| CVE-2026-75368 | Deferred | 未確認 | CWE-121 | A stack overflow in the loadRawData function of SpaceDot AcubeSAT OBC software commit eaf90ec allows attackers to cause a Denial of Service (DoS) via supplying a crafted ECSS TC me |
| CVE-2026-75369 | Deferred | 未確認 | CWE-125 | An out-of-bounds read vulnerability in the CAN::Application::parsePerformFunctionMessage component of SpaceDot AcubeSAT OBC software commit eaf90ec allows attackers to cause a Deni |
| CVE-2026-75370 | Deferred | 未確認 | CWE-125 | An out-of-bounds read/write vulnerability in the MessageParser::parseECSSTCHeader component of SpaceDot AcubeSAT OBC software commit eaf90ec allows attackers to cause a Denial of S |
| CVE-2026-75371 | Deferred | 未確認 | CWE-400 | An integer handling flaw in the cobs_decode function of SpaceDot AcubeSAT OBC software commit eaf90ec allows physically-proximate attackers with UART access to cause a Denial of Se |
| CVE-2026-75411 | Deferred | 未確認 | CWE-94 | JeecgBoot v3.9.2 is vulnerable to Remote command execution. The CodeNode component of the AI Flow module supports Groovy script execution. While the `SecurityCheck` class employs a |
| CVE-2026-75413 | Deferred | 未確認 | CWE-552 | DocSys V2.02.80 is vulnerable to Any File Download. An attacker does not need to go through authentication to utilize the downloadDocEx.do interface and download any file via the p |
| CVE-2026-75414 | Deferred | 未確認 | CWE-94 | In AntFlow V2.0.0, ActivitiTest.java enables users to execute JUEL expressions without filtering the user input, which leads to a command execution vulnerability. |
| CVE-2026-75415 | Deferred | 未確認 | CWE-639 | AntFlow V2.0.0 is vulnerable to Incorrect Access Control. JiMuMDCCommonsRequestLoggingFilter.java retrieves the userid from the request header as the core of the identity verificat |
| CVE-2026-75417 | Deferred | 未確認 | CWE-89 | A SQL injection vulnerability was found in YzmCMS 7.5. The issue occurs in the get_arrchildid() function within application/admin/controller/category.class.php, where the user-cont |
| CVE-2026-75418 | Deferred | 未確認 | CWE-22 | A path traversal vulnerability exists in the built-in preview/development web server of Lektor <3.3.14 on Windows. An attacker with network access to the server can send a crafted |
| CVE-2026-75419 | Deferred | 未確認 | CWE-113 | go-wind-cms (GoWind) before 1.0.0 has a missing authorization vulnerability. The NewAuthorizer() function in app/admin/service/internal/data/data.go and app/app/service/internal/da |
| CVE-2026-75421 | Deferred | 未確認 | CWE-121 | aria2 <=1.37.0 has a stack-buffer-underflow vulnerability in the IOFile::getLine() function. |
| CVE-2026-75458 | Deferred | 未確認 | CWE-639 | The teacher-end interface POST /api/teacher/user/delete/{id} in XueZhiSi Open Source Exam System <= 3.9.0 contains a vertical privilege escalatio vulnerability. This interface acce |
| CVE-2026-75460 | Deferred | 未確認 | CWE-639 | XueZhiSi Open Source Exam System <= 3.9.0 has a privilege escalation vulnerability in the teacher-end interface POST /api/teacher/user/page/list. The role parameter in UserPageRequ |
| CVE-2026-75464 | Awaiting Analysis | 未確認 | CWE-552 | OneNav 1.2.4 contains an authenticated arbitrary file deletion vulnerability via import_link(). |
| CVE-2026-75465 | Deferred | 未確認 | CWE-284 | The /api.php/user/get_list endpoint in Maccms v10 v2026.1000.4055 is vulnerable to an Incorrect Access Control issue. The interface fails to perform any authentication or authoriza |
| CVE-2026-75466 | Deferred | 未確認 | CWE-369 | libjpeg-turbo 3.2.0 contains an integer division-by-zero vulnerability in the PNG loader. When processing a valid indexed-color PNG image with a non-gray palette through tj3LoadIma |
| CVE-2026-75476 | Awaiting Analysis | 未確認 | CWE-409 | Tanium addressed a compression bomb vulnerability in Threat Response. |
| CVE-2026-75479 | Deferred | 未確認 | CWE-306 | JimuReport contains an authentication bypass vulnerability in the report folder template listing endpoint that allows unauthenticated attackers to enumerate all reports and retriev |
| CVE-2026-75480 | Deferred | 未確認 | CWE-863 | OpenViking debug vector scroll and count endpoints apply only account-level scoping without user-level access controls, allowing authenticated users to read all co-tenant records. |
| CVE-2026-75481 | Deferred | 未確認 | CWE-269 | SkyPilot fails to validate that authenticated users are entitled to grant administrator roles when updating service account permissions. Attackers can create a service account, esc |
| CVE-2026-75482 | Deferred | 未確認 | CWE-22 | SWE-agent's trajectory inspector (sweagent inspector), confirmed in v1.1.0, is an HTTP server that joins request paths to the trajectory directory in its /trajectory/ handler witho |
| CVE-2026-75483 | Deferred | 未確認 | CWE-150 | powerlevel10k fails to neutralize control characters in the package.json version field when rendering the package prompt segment. Attackers can inject raw escape bytes in the versi |
| CVE-2026-75484 | Awaiting Analysis | 未確認 | CWE-93 | Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in mtrudel bandit allows an unauthenticated remote attacker to smuggle CR, LF, or NUL characters into app |
| CVE-2026-75485 | Awaiting Analysis | 未確認 | CWE-532 | A flaw was found in the must-gather component of Red Hat Advanced Cluster Management for Kubernetes. The cluster Proxy object is dumped in raw form, bypassing the oc inspect redact |
| CVE-2026-75486 | Deferred | 未確認 | CWE-78 | Synk Sweater Comb before 3.8.8 contains a command injection vulnerability that allows an attacker who controls the .vervet.yaml configuration file to execute arbitrary OS commands |
| CVE-2026-75496 | Awaiting Analysis | 未確認 | CWE-434 | Webkul QloApps does not perform proper validation on uploaded file extensions or MIME types before moving the file to a publicly accessible directory. A remote, authenticated attac |
| CVE-2026-75497 | Awaiting Analysis | 未確認 | CWE-89 | Webkul QloApps does not validate request parameters before a database query. A remote, authenticated attacker with administrative privileges could send a crafted SQL query to the ' |
| CVE-2026-75498 | Awaiting Analysis | 未確認 | CWE-89 | Webkul QloApps does not validate request parameters before a database query. A remote, authenticated attacker with administrative privileges could send a crafted SQL query to the ' |
| CVE-2026-75501 | Rejected | 未確認 | Rejected reason: Vendor could not replicate the vul, and reporter is unavailable to comment. | |
| CVE-2026-75509 | Deferred | 未確認 | CWE-290, CWE-345 | joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards. Prior to version 1.7.3, JWTClaimsRegistry applies member |
| CVE-2026-75514 | Deferred | 未確認 | CWE-350 | BunkerWeb is an open-source, next-generation Web Application Firewall. Prior to 1.6.13, the blacklist, greylist, and antibot modules in src/common/core/blacklist/blacklist.lua, src |
| CVE-2026-75526 | Awaiting Analysis | 未確認 | CWE-79 | django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. From 5.0.8 until 5.0.9, ContentRenderer.render_placeholder in cms/plugin |
| CVE-2026-75529 | Awaiting Analysis | 未確認 | CWE-79 | Pandora is affected by a stored cross-site scripting vulnerability in the PDF download functionality. The /task-download/<task_id>/.../pdf endpoint verifies that the submitted file |
| CVE-2026-75531 | Awaiting Analysis | 未確認 | CWE-79 | Pandora contains a stored cross-site scripting (XSS) vulnerability in the rendering of URL observables. A URL extracted from or associated with an analyzed file was inserted direct |
| CVE-2026-75542 | Deferred | 未確認 | CWE-863 | Incorrect Authorization vulnerability in the OAuth token endpoint in hexpm hexpm allows an API key holding the repositories permission to read another organization's private packag |
| CVE-2026-75548 | Deferred | 未確認 | CWE-1021 | The affected Ebyte device web management interface does not restrict the interface from being rendered within an external frame. An unauthenticated remote attacker could use a cr |
| CVE-2026-75554 | Deferred | 未確認 | CWE-613 | Insufficient Session Expiration vulnerability in the OAuth token refresh grant in hexpm hexpm allows a user removed from an organization to keep reading its private packages. expa |
| CVE-2026-75569 | Awaiting Analysis | 未確認 | CWE-1357 | A flaw was found in mce-operator-bundle. The build process fetches and executes scripts from a remote repository without performing integrity checks, such as commit pinning or sign |
| CVE-2026-7557 | Analyzed | 未確認 | CWE-347 | An improper verification of cryptographic signature vulnerability in the SAML authentication module of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an unauthenticated |
| CVE-2026-75573 | Analyzed | 未確認 | CWE-532 | In MongoDB Connector for BI, mongodrdl may write a TLS private-key password to standard error when the password is supplied through both the connection URI and the corresponding co |
| CVE-2026-75574 | Deferred | 未確認 | CWE-1336 | The Grav Email plugin (getgrav/grav-plugin-email) before 4.2.2 renders page-editor-controlled Email action parameters as unsandboxed Twig templates. An authenticated remote user wi |
| CVE-2026-75575 | Awaiting Analysis | 未確認 | CWE-204, CWE-307 | Rocket.Chat exposes the sendForgotPasswordEmail Meteor method without a DDP rate limit, so an unauthenticated caller may invoke it as often as it likes. The method is reachable ove |
| CVE-2026-75583 | Deferred | 未確認 | CWE-918 | keeper.sh's calendar module version prior to 2.18.14 contains a server-side request forgery (SSRF) guard bypass vulnerability that allows authenticated attackers to reach private n |
| CVE-2026-75587 | Analyzed | 未確認 | CWE-200 | Mattermost Desktop App versions <=6.2 6.2.2.0 fail to redact the pre-auth secret when generating a diagnostics report, which allows a local attacker with access to a user's diagnos |
| CVE-2026-75589 | Deferred | 未確認 | CWE-208 | Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant-time comparison in verify. Each of the three compares the signat |
| CVE-2026-75592 | Deferred | 未確認 | CWE-22 | Kirby is an open-source content management system. Prior to 4.9.5 and 5.5.2, depending on the release line, Kirby's media handler used incomplete filesystem containment checks in s |
| CVE-2026-75593 | Deferred | 未確認 | CWE-22 | BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.2, a custom client can produce such an upload r |
| CVE-2026-75594 | Deferred | 未確認 | CWE-22 | Kirby is an open-source content management system. Prior to 4.9.5 and 5.5.2, depending on the release line, Kirby's media handler in src/Cms/Media.php allowed Kirby\Cms\Media::thum |
| CVE-2026-75595 | Analyzed | 未確認 | CWE-754 | Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Fina and 4.2.17.Final, io.netty.handler.ssl.SslClientHelloHandler#decode checks the wrong off |
| CVE-2026-75596 | Analyzed | 未確認 | CWE-407 | Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, the default io.netty.handler.ssl.SniHandler constructors use the pre- |
| CVE-2026-75601 | Deferred | 未確認 | CWE-306 | Static Web Server (SWS) is a production-ready web server suitable for static web files or assets. Through 2.43.0, instances with both basic-auth and metrics features enabled proces |
| CVE-2026-75616 | Analyzed | 未確認 | CWE-78 | An OS command injection vulnerability exists in the web management interface of Archer C20 v6 firmware when processing certain WAN-related configuration operations. An authenticate |
| CVE-2026-75618 | Analyzed | 未確認 | CWE-476 | Tapo C100/C101 V5 contains a null pointer dereference vulnerability in the RTSP service. An attacker on the local network can send specially crafted requests that cause the service |
| CVE-2026-75619 | Analyzed | 未確認 | CWE-122 | Tapo C100/C101 V5 contains a heap-based buffer overflow vulnerability in the RTSP service. An authenticated attacker on the local network can send specially crafted RTSP frame data |
| CVE-2026-75625 | Deferred | 未確認 | CWE-354 | Kraken agents fail to verify peer-to-peer downloaded blobs against their requested SHA-256 digest before committing to the content-addressable cache, relying only on CRC32 checksum |
| CVE-2026-75626 | Deferred | 未確認 | CWE-79 | SpiderFoot fails to HTML-escape correlation titles built from external scan data sources including server banners and metadata. Attackers can inject malicious HTML elements with ev |
| CVE-2026-75627 | Deferred | 未確認 | CWE-288 | Bastillion fails to properly validate request URI paths in its controller dispatcher, allowing unauthenticated attackers to bypass authentication filters by prefixing requests with |
| CVE-2026-75628 | Deferred | 未確認 | CWE-601 | Punk::OAuth2 versions before 0.03 for Perl allow an attacker-chosen off-site redirect after login because same_origin_path accepts a backslash or tab in the return parameter. oaut |
| CVE-2026-75749 | Analyzed | 未確認 | CWE-787 | Substance3D - Painter is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this iss |
| CVE-2026-75750 | Analyzed | 未確認 | CWE-122 | Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th |
| CVE-2026-75752 | Analyzed | 未確認 | CWE-125 | Substance3D - Painter is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclos |
| CVE-2026-75757 | Deferred | 未確認 | CWE-565 | Reliance on Cookies without Validation and Integrity Checking vulnerability in ash-project ash_admin lets an attacker who controls a sibling subdomain rebind an admin's session to |
| CVE-2026-75758 | Deferred | 未確認 | CWE-674 | Uncontrolled Recursion vulnerability in the Elixir standard library allows an attacker who controls a list passed to inspect/1, List.to_string/1, or List.to_charlist/1 to exhaust a |
| CVE-2026-75759 | Deferred | 未確認 | CWE-347 | Improper Verification of Cryptographic Signature vulnerability in erlef oidcc allows an unauthenticated attacker to impersonate an arbitrary user via an encrypted ID token or JARM |
| CVE-2026-75760 | Deferred | 未確認 | CWE-209 | Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_ai discloses provider request state and credentials in a user-facing validation error. |
| CVE-2026-75766 | Analyzed | 未確認 | CWE-122 | Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th |
| CVE-2026-75767 | Analyzed | 未確認 | CWE-122 | Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th |
| CVE-2026-75768 | Analyzed | 未確認 | CWE-426 | Substance3D - Painter is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could expl |
| CVE-2026-75769 | Analyzed | 未確認 | CWE-122 | Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th |
| CVE-2026-75770 | Analyzed | 未確認 | CWE-787 | Substance3D - Painter is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this iss |
| CVE-2026-75773 | Deferred | 未確認 | CWE-307, CWE-799 | A vulnerability was found in karakeep-app karakeep up to 0.32.0. The affected element is the function authorize of the file apps/web/server/auth.ts of the component Login Endpoint. |
| CVE-2026-75774 | Deferred | 未確認 | CWE-287 | A vulnerability was determined in karakeep-app karakeep up to 0.32.0. The impacted element is an unknown function of the file apps/web/server/auth.ts of the component OAuth Sign-In |
| CVE-2026-75778 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in code-projects Task Management System 1.0. This affects the function Operation::select_with_multiple_condition of the file /index.php of the compon |
| CVE-2026-75783 | Deferred | 未確認 | CWE-119, CWE-121 | A security vulnerability has been detected in TRENDnet TEW-WLC100P 12.07b01. Affected by this vulnerability is an unknown functionality of the file /sbin/netifd of the component DH |
| CVE-2026-75784 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in TRENDnet TEW-WLC100 1v2.07b01. Affected by this issue is the function FUN_0040da4c of the file /usr/nginx/sbin/nginx of the component HTTP Header Ha |
| CVE-2026-75796 | Deferred | 未確認 | CWE-269 | The AI Engine WordPress plugin before 3.6.1 does not verify that the requesting user is authorized to act on the targeted account before performing privileged user management oper |
| CVE-2026-75797 | Deferred | 未確認 | CWE-22 | The AI Engine WordPress plugin before 3.7.2 does not confine a caller-supplied URL when mapping it to a local filesystem path before reading the file and forwarding its contents t |
| CVE-2026-75798 | Deferred | 未確認 | CWE-862 | The AI Engine WordPress plugin before 3.7.2 does not perform an authorisation check on one of its administration-only features, relying instead on a token it hands out to anonymou |
| CVE-2026-75802 | Analyzed | 未確認 | CWE-79 | AjaxEditableChoiceLabel in wicket-extensions, when constructed with a non-null IChoiceRenderer, writes the display value obtained from that renderer into the label's markup without |
| CVE-2026-75803 | Analyzed | 未確認 | CWE-354 | Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalize |
| CVE-2026-75807 | Deferred | 未確認 | CWE-287 | The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.4.6. This is due to the mo_saml_login_validate() |
| CVE-2026-75813 | Deferred | 未確認 | CWE-862 | Certain configuration endpoints may lack proper server-side authorization checks, allowing unauthorized users to access or modify sensitive device settings. This could result in |
| CVE-2026-75814 | Deferred | 未確認 | CWE-352 | The Ebyte device does not adequately verify the origin or authenticity of requests submitted to the web management interface. An unauthenticated remote attacker could persuade an |
| CVE-2026-75827 | Deferred | 未確認 | CWE-94 | Grav before 2.0.15 contains an arbitrary file write vulnerability in the Blueprint dynamic-data bare-function validation that uses an incomplete denylist instead of a positive allo |
| CVE-2026-75828 | Deferred | 未確認 | CWE-79 | Grav before 2.0.15 contains a stored cross-site scripting vulnerability in the detectXss() function where unpaired quotes in unquoted attribute values bypass event-handler detectio |
| CVE-2026-75829 | Deferred | 未確認 | CWE-1336 | grav-plugin-api versions before 1.0.15 fail to validate Twig content in the translate() endpoint, allowing attackers with api.pages.write permission to persist pages with process.t |
| CVE-2026-75830 | Deferred | 未確認 | CWE-73 | grav-plugin-api (getgrav/grav-plugin-api) versions >= 1.0.0-beta.10 and <= 1.0.14 contain a path traversal vulnerability in the PagesController::batchCopy() method. An incomplete f |
| CVE-2026-75831 | Deferred | 未確認 | CWE-79 | Grav before 2.0.15 contains a stored cross-site scripting vulnerability in the audio and video media rendering through the sourceParsedownElement method. The media URL fragment is |
| CVE-2026-75832 | Deferred | 未確認 | CWE-862 | The Grav API plugin (getgrav/grav-plugin-api, bundled with Grav 2.0) before version 1.0.14 (fixed in 1.0.15) contains a missing authorization vulnerability in BlueprintPathResolver |
| CVE-2026-75833 | Deferred | 未確認 | CWE-601 | The Grav API plugin (getgrav/grav-plugin-api, bundled with Grav 2.0's admin-next/API stack) before version 1.0.14 contains an open redirect weakness in SsoController::sanitizeRetur |
| CVE-2026-75834 | Deferred | 未確認 | CWE-79 | Grav before 2.0.14 contains a stored cross-site scripting vulnerability in the Security::detectXss() function (system/src/Grav/Common/Security.php). All XSS detection patterns use |
| CVE-2026-75835 | Deferred | 未確認 | CWE-862 | Grav API plugin (getgrav/grav-plugin-api) before 1.0.14 contains a missing authorization vulnerability in userPassesAuthorize() (AbstractApiController.php). The function fails to c |
| CVE-2026-75836 | Deferred | 未確認 | CWE-862 | The Grav API plugin (getgrav/grav-plugin-api, bundled with Grav's admin-next/API stack) before 1.0.14 fails to enforce the authorize requirement in MenubarController::executeAction |
| CVE-2026-75837 | Deferred | 未確認 | CWE-269 | Grav before 2.0.14 fails to guard the access field in the core group blueprint with the required security@: admin.super restriction. A delegated admin.users operator can save a gro |
| CVE-2026-75838 | Awaiting Analysis | 未確認 | CWE-79 | DOMPurify before 3.4.13 contains a cross-site scripting vulnerability in IN_PLACE sanitization where element-removal hooks fail to neutralize detached subtrees. Attackers can suppl |
| CVE-2026-75839 | Deferred | 未確認 | CWE-200 | ArcadeDB (com.arcadedb:arcadedb-server) versions <= 26.7.3 contain an insecure direct object reference (IDOR) vulnerability in the Raft cluster-info endpoints (GetClusterHandler an |
| CVE-2026-75840 | Deferred | 未確認 | CWE-1025 | ArcadeDB before 26.8.1 contains an arbitrary file read vulnerability in the GraalVM JavaScript sandbox allowlist enforcement, which uses unescaped regular expressions to validate p |
| CVE-2026-75841 | Deferred | 未確認 | CWE-770 | ArcadeDB before 26.8.1 contains a denial of service vulnerability in the Cypher range() function that allows authenticated users to exhaust server heap memory. Attackers can submit |
| CVE-2026-75842 | Deferred | 未確認 | CWE-22 | ArcadeDB versions before 26.8.1 contain an arbitrary file read vulnerability in the OpenCypher LOAD CSV FROM clause that allows authenticated users to read local files. Attackers w |
| CVE-2026-75843 | Deferred | 未確認 | CWE-269 | ArcadeDB before 26.8.1 fails to bind the authenticated principal on the gRPC transaction executor thread in beginTransaction, allowing authenticated readers to execute JavaScript c |
| CVE-2026-75844 | Deferred | 未確認 | CWE-918 | ArcadeDB versions before 26.8.1 contain a server-side request forgery vulnerability in the IMPORT DATABASE command where the security validator resolves and checks hostnames but th |
| CVE-2026-75845 | Deferred | 未確認 | CWE-269 | ArcadeDB versions 26.4.2 through 26.7.3 contain an authorization bypass vulnerability in the set_server_setting MCP server-level tool. SetServerSettingTool.execute() gates only on |
| CVE-2026-75846 | Deferred | 未確認 | CWE-862 | ArcadeDB before 26.8.1 (affected versions <= 26.7.3) contains a missing authorization vulnerability in the DELETE FUNCTION SQL statement. DeleteFunctionStatement.executeSimple unre |
| CVE-2026-75847 | Deferred | 未確認 | CWE-312 | Cleartext Storage of Sensitive Information vulnerability in ash-project ash_paper_trail allows an attacker with read access to the generated version resource to recover the plainte |
| CVE-2026-75850 | Deferred | 未確認 | CWE-862 | ArcadeDB before 26.8.1 fails to bind the authenticated principal (setCurrentUser) on its batch and time-series HTTP handlers. Because no principal is bound on the worker thread, th |
| CVE-2026-75851 | Deferred | 未確認 | CWE-269 | ArcadeDB server (com.arcadedb:arcadedb-server) in versions 26.7.3 and earlier fails to propagate the authenticated principal to asynchronous command worker threads. When an HTTP co |
| CVE-2026-75852 | Deferred | 未確認 | CWE-306 | ArcadeDB versions before 26.8.1 fail to enforce SASL authentication on data commands in the MongoDB wire-protocol plugin. Unauthenticated attackers can issue insert, find, update, |
| CVE-2026-75853 | Deferred | 未確認 | CWE-862 | ArcadeDB's Gremlin wire-protocol plugin (com.arcadedb:arcadedb-gremlin) in versions <= 26.7.3 enforces authentication (SASL PLAIN) but performs no authorization: it never checks da |
| CVE-2026-75854 | Deferred | 未確認 | CWE-306 | ArcadeDB versions before 26.8.1 contain a missing authentication vulnerability in the Redis wire-protocol plugin that allows unauthenticated attackers to read, write, and delete da |
| CVE-2026-75855 | Deferred | 未確認 | CWE-22 | ArcadeDB versions before 26.8.1 fail to sanitize database names in the POST /api/v1/server endpoint's create database and drop database commands, allowing authenticated root users |
| CVE-2026-75856 | Deferred | 未確認 | CWE-918 | CodeWhale before 0.8.64 contains a server-side request forgery bypass vulnerability in DNS pinning logic that fails to prevent time-of-check-time-of-use attacks. Attackers can mani |
| CVE-2026-75857 | Deferred | 未確認 | CWE-269 | CodeWhale versions >= 0.8.41 and < 0.8.64 contain a vulnerability in the exec_shell_interact (alias exec_interact) tool, whose approval_requirement returns ApprovalRequirement::Aut |
| CVE-2026-75858 | Deferred | 未確認 | CWE-94 | CodeWhale (packages codewhale / codewhale-tui) versions >= 0.8.41 and < 0.8.64 contain a remote code execution vulnerability in the rlm_eval tool. The tool's approval_requirement() |
| CVE-2026-75859 | Deferred | 未確認 | CWE-22 | CodeWhale versions before 0.8.64 fail to validate file paths in the project config instructions field, allowing attackers to read arbitrary files on the victim's system. A maliciou |
| CVE-2026-75860 | Deferred | 未確認 | CWE-269 | The JSON Options WordPress plugin through 0.0.4 does not have any capability check or nonce verification on one of its actions, which runs on every request and is available to unau |
| CVE-2026-75866 | Deferred | 未確認 | CWE-862 | Punk::OAuth2::Server versions through 0.03 for Perl issue access tokens outside a client's registered scopes and grant types because no authorization path reads them. Punk::OAuth2 |
| CVE-2026-75870 | Deferred | 未確認 | CWE-1394 | Punk versions before 0.18 for Perl allow session cookie forgery via an empty default HMAC key when a session is declared without a secret. The session keyword freezes its options |
| CVE-2026-75871 | Analyzed | 未確認 | CWE-918 | GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.10 to 19.0.12, 19.1 to 19.1.7, and 19.2 to 19.2.2 that cou |
| CVE-2026-75872 | Deferred | 未確認 | CWE-80 | HTML Injection in the public subscription form in maalfer MailerUp before 1.1.3 allows unauthenticated remote attackers to have the application send a message carrying arbitrary HT |
| CVE-2026-75874 | Modified | 未確認 | CWE-693 | Sandbox escape in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Thunderbird 154, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thu |
| CVE-2026-75876 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in xianrendzw EasyReport up to 2.0.17.0522_Beta. Affected by this issue is some unknown functionality of the file ModuleController.java o |
| CVE-2026-75877 | Deferred | 未確認 | CWE-119, CWE-121 | A flaw has been found in TRENDnet TV-IP751WIC 11.03.03. This vulnerability affects the function SystemNetworkChanged/SystemDDNSChanged/SystemEmailChanged/SystemFTPChanged/websCheck |
| CVE-2026-75889 | Awaiting Analysis | 未確認 | CWE-552 | Grafana Alloy’s prometheus.operator.servicemonitors component allows a user who can create or modify ServiceMonitor resources in a watched namespace to specify an arbitrary local f |
| CVE-2026-75890 | Rejected | 未確認 | Rejected reason: Duplicate of CVE-2026-50236. This CVE ID was reserved in error for a finding that already had an existing CVE assignment. | |
| CVE-2026-75896 | Deferred | 未確認 | CWE-798 | Use of Hard-coded Credentials vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows Try Common or Default Usernames and Passwords. This issue |
| CVE-2026-75897 | Awaiting Analysis | 未確認 | CWE-1284 | Improper input validation in the capabilities route handler in OpenSearch Dashboards - the size of the request payload is not bounded - might allow remote attackers to cause a deni |
| CVE-2026-75898 | Deferred | 未確認 | CWE-918 | RAGFlow before 0.26.3 contains a server-side request forgery vulnerability in the agent workflow "Invoke" component (agent/component/invoke.py). The component builds an outbound re |
| CVE-2026-75899 | Analyzed | 未確認 | CWE-174, CWE-918 | fast-uri is a URI parser for Node.js. It decodes percent escapes in a hostname during parsing and then decodes the parsed hostname a second time during authority recomposition, so |
| CVE-2026-75900 | Awaiting Analysis | 未確認 | CWE-125 | An out-of-bounds read vulnerability was found in swtpm's SWTPM_NVRAM_CheckHeader() function. The entry guard checks the buffer length against sizeof(bh), where bh is a pointer, ins |
| CVE-2026-75904 | Deferred | 未確認 | CWE-125 | libmodplug through 0.8.9.1 contains an out-of-bounds read in pat_smplooped in src/load_pat.cpp. The function validates only the upper bound of its sample index against MAXSMP and t |
| CVE-2026-75908 | Deferred | 未確認 | CWE-862 | The Newsletters plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.17. This is due to the plugin not properly verifying that a user |
| CVE-2026-75910 | Awaiting Analysis | 未確認 | CWE-266 | Incorrect privilege assignment in the ClickHouse connector deployment template in Amazon Athena Federated Query prior to v2026.17.1 could allow an authenticated remote user to read |
| CVE-2026-75911 | Deferred | 未確認 | CWE-94 | CodeWhale versions before 0.8.64 fail to properly validate the allow_shell configuration parameter from project config files, allowing attackers to enable arbitrary shell command e |
| CVE-2026-75912 | Deferred | 未確認 | CWE-88 | CodeWhale versions before 0.8.64 contain an argument injection vulnerability in the git_blame tool that allows attackers to read arbitrary files by injecting git options into the u |
| CVE-2026-75913 | Deferred | 未確認 | CWE-73 | CodeWhale (codewhale / codewhale-tui) versions >= 0.8.41 and < 0.8.64 contain an argument injection vulnerability in the git_show tool. The model-supplied rev parameter is passed u |
| CVE-2026-75914 | Deferred | 未確認 | CWE-22 | CodeWhale versions before 0.8.64 contain a path traversal vulnerability in the image_analyze tool that fails to canonicalize symlinks before reading files. Attackers can create wor |
| CVE-2026-75915 | Deferred | 未確認 | CWE-200 | CodeWhale versions before 0.8.64 contain an environment variable exposure vulnerability in the js_execution tool that fails to scrub parent process environment variables before spa |
| CVE-2026-75916 | Deferred | 未確認 | CWE-79 | SiYuan through 3.7.3 contains a cross-site scripting vulnerability in the '((' block-reference autocomplete hint popup. In genHintItemHTML() (app/src/protyle/hint/extend.ts), a can |
| CVE-2026-75917 | Deferred | 未確認 | CWE-79 | SiYuan before v3.7.4 contains a cross-site scripting vulnerability in the file-tree picker's hover-tooltip generation (app/src/util/pathName.ts, getLeaf()/movePathTo()) used by the |
| CVE-2026-75918 | Analyzed | 未確認 | CWE-200 | phpMyFAQ before 4.1.7 stores password reset tokens in a publicly accessible tracking file when user tracking is enabled. Unauthenticated attackers can read the tracking file at con |
| CVE-2026-75919 | Analyzed | 未確認 | CWE-306 | phpMyFAQ before 4.1.7 contains an authentication bypass vulnerability in SetupController that allows unauthenticated attackers to run database migrations and create configuration b |
| CVE-2026-75920 | Analyzed | 未確認 | CWE-377 | phpMyFAQ before v4.1.6 writes content backup ZIP archives to the web-accessible document root at content.zip, exposing sensitive files including database credentials. Unauthenticat |
| CVE-2026-75922 | Deferred | 未確認 | CWE-444, CWE-93 | Reverse::Proxy versions before 0.04 for Perl allow HTTP request smuggling via a percent-decoded PATH_INFO written unencoded to the upstream request line. PSGI hands PATH_INFO to a |
| CVE-2026-75924 | Awaiting Analysis | 未確認 | CWE-269 | A flaw was found in managed-serviceaccount. A compromised addon-manager pod, due to its ClusterRole granting excessive permissions, can read any secret across all namespaces. Addit |
| CVE-2026-75926 | Analyzed | 未確認 | CWE-1188 | Hugo 0.161.0 placed the Node asset pipelines behind the Node.js permission model so that code running through PostCSS, Babel, or TailwindCSS could not reach the file system outside |
| CVE-2026-75928 | Awaiting Analysis | 未確認 | CWE-497 | The Brushfire platform's video content streaming application (https://online.brushfire.com) exposes database path in requests to users, allowing a remote, unauthenticated attacker |
| CVE-2026-75930 | Deferred | 未確認 | CWE-862 | The FundEngine – Donation and Crowdfunding Platform plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.8.1. This is due to the plugi |
| CVE-2026-75931 | Analyzed | 未確認 | CWE-436 | fast-uri is a URI parser for Node.js. It canonicalizes a host to its ASCII form only when the input carries an explicit scheme, so a scheme-relative reference such as a host preced |
| CVE-2026-75932 | Awaiting Analysis | 未確認 | CWE-862 | Jet Admin allows an attacker to create a malicious app and connect it to a target user's custom domain, edit the authentication configuration, and reroute traffic to the attacker-c |
| CVE-2026-75933 | Awaiting Analysis | 未確認 | CWE-79 | Jet Admin allows an authenticated attacker to inject JavaScript via the sign-in page's scripts and styles option. Injected script is executed in the context of any visiting user's |
| CVE-2026-75935 | Awaiting Analysis | 未確認 | CWE-789 | Uncontrolled memory allocation in the binary Ion stream cursor in Amazon ion-java before 1.12.0 might allow remote actors to cause a denial of service via a crafted Ion binary docu |
| CVE-2026-75936 | Awaiting Analysis | 未確認 | CWE-409 | Improper handling of highly compressed data in the GZIP auto-decompression handler in Amazon ion-java before 1.12.0 might allow remote actors to cause a denial of service via a cra |
| CVE-2026-75946 | Deferred | 未確認 | CWE-347 | A potential security vulnerability has been identified in the OMEN Gaming Hub for versions prior to 1101.2608.0.0. The vulnerability could potentially allow a local attacker to esc |
| CVE-2026-75948 | Deferred | 未確認 | CWE-79 | Joomla Extension - icagenda.com - Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12 - The frontend "Submit an Event" form stores the `image` and `file` fields as raw strings wi |
| CVE-2026-75949 | Deferred | 未確認 | CWE-434 | Joomla Extension - cmsjunkie.com - Arbitrary file upload / deletion (path traversal) in J-BusinessDirectory < 6.2.3 - Upload/remove accepted a client-controlled root (_path_type c |
| CVE-2026-75950 | Deferred | 未確認 | CWE-284, CWE-639 | Joomla Extension - cmsjunkie.com - Unauthenticated listing ownership takeover in J-BusinessDirectory < 6.2.3 - Ownership could be changed using attacker-supplied company and user I |
| CVE-2026-75951 | Deferred | 未確認 | CWE-639 | Joomla Extension - cmsjunkie.com - Insecure Direct Object Reference (multiple frontend/API actions) in J-BusinessDirectory < 6.2.3 |
| CVE-2026-75952 | Deferred | 未確認 | CWE-352 | Joomla Extension - cmsjunkie.com - Cross-site request forgery in J-BusinessDirectory < 6.2.3 - Tokens were missing on many AJAX/state-changing tasks: contact/quote forms, cart, bo |
| CVE-2026-75953 | Deferred | 未確認 | CWE-201 | Joomla Extension - cmsjunkie.com - Open mail relay in J-BusinessDirectory < 6.2.3 - Recipient address was taken from the request (contact_id_offer / contact_id_event) instead of t |
| CVE-2026-75954 | Deferred | 未確認 | CWE-89 | Joomla Extension - cmsjunkie.com - SQL injection in trips search in J-BusinessDirectory < 6.2.3 - Search keywords and ORDER BY were concatenated into SQL. 6.2.3 quotes keywords an |
| CVE-2026-75955 | Deferred | 未確認 | CWE-79 | Joomla Extension - cmsjunkie.com - Reflected XSS / XML injection in J-BusinessDirectory < 6.2.3 - companyName from the request was written unescaped into an XML attribute. |
| CVE-2026-75956 | Deferred | 未確認 | CWE-770 | Joomla Extension - cmsjunkie.com - DOS vector in pagination parameter handling in J-BusinessDirectory < 6.2.3 - Pagination values were not strictly typed. Array/non-numeric values |
| CVE-2026-75960 | Deferred | 未確認 | CWE-522 | Rently Smart Home versions 20.1.0 and prior are vulnerable to an Insufficiently Protected Credentials vulnerability. This could allow an attacker to retrieve pins including the Mas |
| CVE-2026-75963 | Deferred | 未確認 | CWE-98 | The Events Made Easy plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.2.5 via the eme_single_event_page_template function. This ma |
| CVE-2026-75971 | Deferred | 未確認 | CWE-269 | The ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including |
| CVE-2026-75975 | Analyzed | 未確認 | CWE-20, CWE-918 | fast-uri is a URI parser for Node.js. Its custom parser for bracketed IPv6 literals does not validate the complete IPv6 grammar, so invalid trailing text in an authority can be sil |
| CVE-2026-75976 | Deferred | 未確認 | CWE-119, CWE-121 | A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. Impacted is the function strcpy of the file /cgi-bin/wan.cgi of the component NVRAM. This manipulation of the argum |
| CVE-2026-75977 | Deferred | 未確認 | CWE-269 | The Mang Board WP plugin for WordPress is vulnerable to Missing Authorization via Authentication Cookie Forgery in all versions up to, and including, 2.3.7. This is due to flawed H |
| CVE-2026-75978 | Deferred | 未確認 | CWE-266, CWE-275 | A security vulnerability has been detected in xianrendzw EasyReport up to 2.0.17.0522_Beta. The affected element is the function DataSourceController.add of the file DataSourceCont |
| CVE-2026-75979 | Deferred | 未確認 | CWE-1336, CWE-791 | A vulnerability was found in xianrendzw EasyReport up to 2.0.17.0522_Beta. Affected is the function execSqlText/previewSqlText of the file DesignerController.java of the component |
| CVE-2026-75981 | Deferred | 未確認 | CWE-79 | The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to unauthenticated Stored Cross-Site Scripting in versions up to and includ |
| CVE-2026-75982 | Deferred | 未確認 | CWE-862 | The LearnPress plugin for WordPress is vulnerable to unauthorized modification of arbitrary WordPress options in versions up to, and including, 4.4.4 via the learnpress_create_page |
| CVE-2026-75984 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was detected in TRENDnet TEW-823DRU 1.1.02b01. Impacted is an unknown function of the file /cgi-bin/admin.cgi. The manipulation of the argument Hostname results in |
| CVE-2026-75985 | Deferred | 未確認 | CWE-74, CWE-77 | A flaw has been found in TRENDnet Router 1.1.02b01. The affected element is an unknown function of the file /cgi-bin/ping.cgi. This manipulation of the argument wan_type causes com |
| CVE-2026-75986 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in code-projects Online Job Portal System 1.0. The impacted element is an unknown function of the file /ForPass.php of the component Password Recover |
| CVE-2026-75987 | Deferred | 未確認 | CWE-20, CWE-502 | A vulnerability was found in SPLWare esProc up to 20260507. This affects the function ObjectInputStream.readUnshared of the file src/main/java/com/scudata/parallel/SocketData.java. |
| CVE-2026-76003 | Deferred | 未確認 | CWE-119, CWE-121 | A weakness has been identified in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcpy of the file /goform/formGroupConfig. Executing a manipulation of the argument |
| CVE-2026-76004 | Deferred | 未確認 | CWE-119, CWE-121 | A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this vulnerability is the function strcpy of the file /goform/aspApBasicConfig |
| CVE-2026-76008 | Deferred | 未確認 | CWE-119, CWE-121 | A flaw has been found in Comfast CF-N1-S 2.6.0.1. This affects the function get_para_from_uri of the file /cgi-bin/mbox-config of the component URI Parameter Parsing. This manipula |
| CVE-2026-76014 | Deferred | 未確認 | CWE-404, CWE-476 | A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATURE_WGET_TIMEOUT Handler. Such ma |
| CVE-2026-76017 | Analyzed | 未確認 | CWE-416 | Use after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium |
| CVE-2026-76018 | Analyzed | 未確認 | CWE-250 | Privilege elevation in Import in Google Chrome prior to 151.0.7922.173 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the san |
| CVE-2026-76019 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Workers in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to b |
| CVE-2026-76020 | Analyzed | 未確認 | CWE-367 | Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-76021 | Analyzed | 未確認 | CWE-416 | Use after free in DOM in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-76022 | Analyzed | 未確認 | CWE-122 | Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium secur |
| CVE-2026-76023 | Analyzed | 未確認 | CWE-913 | Improper resource control in Linux Toolkit Theming in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process to execute arbitrary |
| CVE-2026-76032 | Deferred | 未確認 | CWE-862 | Pydio Cells 5.0.0 through 5.0.2 returns share-link details to any authenticated user. The REST handler for GET /a/share/link/{Uuid} in idm/share/rest/handler.go reads the workspace |
| CVE-2026-76033 | Analyzed | 未確認 | CWE-20 | Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a craf |
| CVE-2026-76034 | Analyzed | 未確認 | CWE-122 | Buffer overflow in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium securit |
| CVE-2026-76035 | Analyzed | 未確認 | CWE-20 | Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML |
| CVE-2026-76036 | Analyzed | 未確認 | CWE-122 | Buffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chr |
| CVE-2026-76037 | Analyzed | 未確認 | CWE-59 | Link following in CredentialProvider in Google Chrome on on Windows prior to 151.0.7922.169 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a |
| CVE-2026-76038 | Analyzed | 未確認 | CWE-843 | Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-76039 | Analyzed | 未確認 | CWE-706 | Incorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to obtain sensitive informatio |
| CVE-2026-76040 | Analyzed | 未確認 | CWE-416 | Use after free in Browser in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox v |
| CVE-2026-76041 | Analyzed | 未確認 | CWE-200 | Information leak in Skia in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security seve |
| CVE-2026-76042 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in GPU in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox |
| CVE-2026-76043 | Analyzed | 未確認 | CWE-682 | Incorrect calculation in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secur |
| CVE-2026-76044 | Analyzed | 未確認 | CWE-367 | Race condition in USB in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the |
| CVE-2026-76045 | Analyzed | 未確認 | CWE-416 | Use after free in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-76046 | Analyzed | 未確認 | CWE-122 | Buffer overflow in ANGLE in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside |
| CVE-2026-76047 | Analyzed | 未確認 | CWE-843 | Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-76048 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in SourceCodester Simple Online Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/ajax.php?action=login. Executing a ma |
| CVE-2026-76049 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0. This affects an unknown function of the file /admin/ajax.php?action=save_menu. The manipula |
| CVE-2026-76050 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This impacts an unknown function of the file /admin/ajax.php?action=delete_menu. The manipulatio |
| CVE-2026-76053 | Deferred | 未確認 | CWE-79 | The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Noise-Key Injection into HTML Pa |
| CVE-2026-76054 | Awaiting Analysis | 未確認 | CWE-214 | Invocation of Process Using Visible Sensitive Information in Black Duck blackduck-c-cpp 1.0.17 through 3.0.6 allows an actor able to execute code within the scanned project's build |
| CVE-2026-76055 | Awaiting Analysis | 未確認 | CWE-78 | Improper Neutralization of Special Elements used in an OS Command in the package manager component of Black Duck blackduck-c-cpp before 3.0.7 allows an actor able to create a file |
| CVE-2026-76057 | Deferred | 未確認 | CWE-862 | The AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress plugin for WordPress is vulnerable to authorization bypass in all versions u |
| CVE-2026-76060 | Deferred | 未確認 | CWE-78 | An authenticated OS command injection vulnerability exists in ZoneMinder's event export functionality. The exportFile HTTP request parameter is passed unsanitized into a shell comm |
| CVE-2026-76063 | Deferred | 未確認 | CWE-79 | The FundEngine – Donation and Crowdfunding Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wfp_featured_video_url' parameter in all versions up |
| CVE-2026-76069 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-76070 | Deferred | 未確認 | CWE-121 | Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by submitti |
| CVE-2026-76071 | Deferred | 未確認 | CWE-121 | Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by supplyin |
| CVE-2026-76072 | Deferred | 未確認 | CWE-184 | The Continue CLI applies an incomplete denylist as its only barrier to destructive shell commands when running unattended. In headless mode and auto mode the default policy in exte |
| CVE-2026-76073 | Deferred | 未確認 | CWE-639 | Label Studio does not scope the annotation detail endpoint to the requesting user's organization. AnnotationAPI in label_studio/tasks/api.py declares queryset = Annotation.objects. |
| CVE-2026-76074 | Deferred | 未確認 | CWE-862 | The AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress plugin for WordPress is vulnerable to authorization bypass in all versions u |
| CVE-2026-76098 | Deferred | 未確認 | CWE-674 | Mistune is a Python Markdown parser with renderers and plugins. Versions 3.3.0 through 3.3.2 are vulnerable to DoS through deeply nested tokens. HTML rendering creates deeply neste |
| CVE-2026-76128 | Deferred | 未確認 | CWE-79 | The eCommerce Product Catalog plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'style' Shortcode Attribute in all versions up to, and including, 3.5.10 due to |
| CVE-2026-76131 | Deferred | 未確認 | CWE-798 | Use of hard-coded credentials issue exists in VOCALOID6 , which may allow an attacker to impersonate a legitimate VOCALOID6 Editor and gain access to Yamaha's activation and conten |
| CVE-2026-76133 | Deferred | 未確認 | CWE-327 | The affected Ebyte product uses a deprecated hashing algorithm in an authentication-related operation. Under conditions where an attacker can manipulate or predict the authent |
| CVE-2026-76137 | Deferred | 未確認 | CWE-306 | Missing authentication for critical function vulnerability exists in VOCALOID6. Any process running under the same local user account as a running VOCALOID6 Editor instance may esc |
| CVE-2026-76139 | Awaiting Analysis | 未確認 | CWE-829 | A flaw was found in acm-operator-bundle. The build process for this component downloads and runs a script from a remote source without verifying its authenticity or integrity. This |
| CVE-2026-76148 | Deferred | 未確認 | CWE-94 | CorvusSKK contains a code injection vulnerability, which may lead to arbitrary code execution on the affected product. |
| CVE-2026-76149 | Deferred | 未確認 | CWE-190 | CorvusSKK contains an integer overflow vulnerability, which may allow malicious data to be written to a dictionary file. |
| CVE-2026-76155 | Deferred | 未確認 | CWE-1392 | Use of default credentials in Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to gain administrative access to the management platform by logging |
| CVE-2026-76156 | Deferred | 未確認 | CWE-78 | OS command injection in the api endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an authenticated administrator to execute arbitrary operating system co |
| CVE-2026-76157 | Deferred | 未確認 | CWE-306 | Missing authentication for a critical function in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an unauthenticated remote attacker to |
| CVE-2026-76158 | Deferred | 未確認 | CWE-73 | External Control of File Name or Path in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to write files to arbitrary l |
| CVE-2026-76164 | Deferred | 未確認 | CWE-918 | AIL Framework contains a server-side request forgery (SSRF) vulnerability in its crawler submission functionality. A low-privileged authenticated user with access to the crawler in |
| CVE-2026-76166 | Awaiting Analysis | 未確認 | CWE-476 | A flaw was found in mod_cluster's AdvertiseListenerImpl (org.jboss.modcluster core module). A single crafted UDP multicast datagram with a valid HTTP status line and a "Server:" he |
| CVE-2026-76172 | Analyzed | 未確認 | CWE-177 | fast-uri is a URI parser for Node.js. During parsing it runs a legacy decoding pass over the scheme component and never re-escapes the result, and serialization writes the scheme b |
| CVE-2026-76179 | Deferred | 未確認 | CWE-598 | An improper protection of authentication tokens vulnerability exists in certain Ebyte gateway products. Authentication tokens used by the web management interface are insufficien |
| CVE-2026-76189 | Analyzed | 未確認 | CWE-191 | CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit this |
| CVE-2026-76193 | Analyzed | 未確認 | CWE-918 | Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary code execution in the context of the current user. An |
| CVE-2026-76195 | Analyzed | 未確認 | CWE-78 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitra |
| CVE-2026-76197 | Analyzed | 未確認 | CWE-78 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitra |
| CVE-2026-76198 | Analyzed | 未確認 | CWE-20 | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to acc |
| CVE-2026-76203 | Deferred | 未確認 | CWE-180 | Incorrect Behavior Order: Validate Before Canonicalize in the report theme CSS sanitizer in maalfer Pentestify 1.2.0 through 2.3.2 allows an authenticated user to force outbound HT |
| CVE-2026-76205 | Analyzed | 未確認 | CWE-89 | phpMyFAQ before 4.1.7 contains a SQL injection vulnerability in the glossary create and update endpoints caused by truncating an escaped string before embedding it in a SQL literal |
| CVE-2026-76206 | Analyzed | 未確認 | CWE-200 | phpMyFAQ versions before 4.1.7 fail to validate active status in the PDF export endpoint, allowing unauthenticated attackers to retrieve draft FAQ metadata. Attackers can access th |
| CVE-2026-76207 | Analyzed | 未確認 | CWE-304 | phpMyFAQ before 4.1.7 contains a two-factor authentication bypass vulnerability where remember-me tokens are issued before 2FA verification completes. Attackers with valid credenti |
| CVE-2026-76208 | Analyzed | 未確認 | CWE-778 | phpMyFAQ versions 3.1.0 through 4.1.6 contain an authentication bypass vulnerability in AuthLdap::create(). When LDAP authentication is enabled, after a successful LDAP bind the co |
| CVE-2026-76209 | Analyzed | 未確認 | CWE-862 | phpMyFAQ versions before v4.1.6 fail to validate the security.enableRegistration setting in API endpoints, allowing attackers to create user accounts when registration is disabled. |
| CVE-2026-76210 | Analyzed | 未確認 | CWE-73 | phpMyFAQ before 4.1.6 does not adequately sanitize HTML in FAQ answers before generating PDFs via TCPDF. An attacker with permission to create or edit FAQ content can embed an <img |
| CVE-2026-76211 | Analyzed | 未確認 | CWE-862 | phpMyFAQ before 4.1.7 fails to properly enforce CONFIGURATION_EDIT permission on admin API read endpoints for LDAP, Elasticsearch, OpenSearch, and dashboard configuration, allowing |
| CVE-2026-76212 | Analyzed | 未確認 | CWE-88 | phpMyFAQ before 4.1.7, when configured to use PostgreSQL via the native pgsql PHP extension, declares an incorrect LIKE ESCAPE character ('=') in the Search/Database/Pgsql.php back |
| CVE-2026-76213 | Analyzed | 未確認 | CWE-307 | phpMyFAQ before 4.1.7 contains a brute-force vulnerability in the two-factor authentication step where the failure counter is session-scoped and reset on each successful password r |
| CVE-2026-76214 | Analyzed | 未確認 | CWE-294 | phpMyFAQ before 4.1.7 fails to persist the WebAuthn login challenge generated by prepareForLogin, because neither WebAuthn controller saves the mutated key objects back to the data |
| CVE-2026-76215 | Analyzed | 未確認 | CWE-862 | phpMyFAQ before 4.1.7 fails to apply parent FAQ visibility checks before returning child resources including comments and attachments. Unauthenticated attackers can retrieve restri |
| CVE-2026-76216 | Deferred | 未確認 | CWE-639 | Vikunja through 2.4.0 contains a principal-type confusion vulnerability where LinkSharing principals with id N are treated as user principals with users.id == N at three permission |
| CVE-2026-76217 | Analyzed | 未確認 | CWE-73 | GitPython versions before 3.1.58 fail to validate options passed to git rm and git checkout commands in IndexFile.remove() and Head.checkout(). Attackers can supply --pathspec-from |
| CVE-2026-76218 | Analyzed | 未確認 | CWE-88 | GitPython before 3.1.58 contains a remote code execution vulnerability in Repo.init that forwards unsafe git options without validation. Attackers can supply a template parameter p |
| CVE-2026-76219 | Analyzed | 未確認 | CWE-88 | GitPython versions before 3.1.58 contain an arbitrary file overwrite vulnerability in IndexFile.from_tree, IndexFile.reset, and IndexFile.merge_tree methods that append caller-infl |
| CVE-2026-76220 | Analyzed | 未確認 | CWE-88 | GitPython before 3.1.58 contains a command execution vulnerability in the check_unsafe_options guard that can be bypassed by combining a single-character kwarg with split_single_ch |
| CVE-2026-76221 | Analyzed | 未確認 | CWE-74 | GitPython before 3.1.58 contains a config-name injection vulnerability in the option-name validator that allows attackers to forge arbitrary git-config directives by injecting equa |
| CVE-2026-76222 | Analyzed | 未確認 | CWE-22 | GitPython before 3.1.58 fails to validate submodule names from .gitmodules files, allowing attackers to create Git repositories at arbitrary filesystem paths outside the intended c |
| CVE-2026-76223 | Deferred | 未確認 | CWE-862 | ArcadeDB (com.arcadedb) versions 26.7.3 and earlier fail to enforce the UPDATE_SCHEMA permission check when a DEFINE FUNCTION statement targets an already-existing function library |
| CVE-2026-76224 | Deferred | 未確認 | CWE-94 | ArcadeDB before 26.8.1 (arcadedb-gremlin, affected <= 26.7.3) contains a remote code execution vulnerability in its Gremlin query engine. Although the engine defaults to the docume |
| CVE-2026-76225 | Deferred | 未確認 | CWE-918 | ArcadeDB before 26.8.1 contains a server-side request forgery vulnerability in the OpenCypher LOAD CSV implementation that fails to validate HTTP/HTTPS URLs. Authenticated attacker |
| CVE-2026-76226 | Awaiting Analysis | 未確認 | CWE-78 | Renovate versions from 43.65.0 before 43.102.11 contain a remote code execution vulnerability in bazel-module and bazelisk managers when using lockFileMaintenance. Attackers can ex |
| CVE-2026-76227 | Awaiting Analysis | 未確認 | CWE-526 | Renovate versions from 42.68.1 before 42.96.3 and from 43.0.0 before 43.4.4, including the renovate/renovate Docker images, and Mend Renovate CE/EE images (renovate-ce, renovate-ee |
| CVE-2026-76228 | Awaiting Analysis | 未確認 | CWE-78 | Renovate versions >=32.124.0 and before 42.68.5 (and Mend renovate-ce/renovate-ee before 13.3.0) contain a command injection vulnerability in Gradle Wrapper artifact handling. When |
| CVE-2026-76229 | Awaiting Analysis | 未確認 | CWE-77 | Renovate versions from 39.218.0 before 40.33.0 contain an arbitrary command injection vulnerability in the kustomize manager where user-provided chart names are appended to helm pu |
| CVE-2026-7623 | Deferred | 未確認 | CWE-79 | The SureForms – Contact Form, Payment Form & Other Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'headingWrapper' parameter in all v |
| CVE-2026-76230 | Awaiting Analysis | 未確認 | CWE-77 | Renovate versions from 35.63.0 before 40.33.0 contain a command injection vulnerability in the npm manager where user-provided packageName values are appended to npm install comman |
| CVE-2026-76231 | Awaiting Analysis | 未確認 | CWE-77 | Renovate versions from 32.135.0 before 40.33.0 contain a command injection vulnerability in the hermit manager where user-provided dependency names are appended to install and unin |
| CVE-2026-76232 | Awaiting Analysis | 未確認 | CWE-77 | Renovate versions from 31.51.0 before 40.33.0 contain a command injection vulnerability in the helmv3 manager where the repository parameter is appended to helm registry login comm |
| CVE-2026-76233 | Awaiting Analysis | 未確認 | CWE-77 | Renovate versions from 39.53.0 before 40.33.0 contain a command injection vulnerability in the gleam manager where the depName parameter is appended to gleam deps update commands w |
| CVE-2026-76234 | Deferred | 未確認 | CWE-347 | libcrux-ecdh and libcrux-ed25519 before 0.0.6, and libcrux-psq before 0.0.7, contain cryptographic implementation bugs. libcrux-ecdh did not properly check length and clamping duri |
| CVE-2026-76235 | Awaiting Analysis | 未確認 | CWE-401 | A memory leak flaw was found in cockpit-ws. The login page handler leaks a heap allocation on every unauthenticated request that carries a CockpitLang cookie, allowing a remote una |
| CVE-2026-76236 | Deferred | 未確認 | CWE-639 | stigmem-node before 0.9.0a12 contains a cross-tenant broken object level authorization (BOLA) flaw in the RTBF (right-to-be-forgotten) tombstone mechanism. issue_tombstone defaulte |
| CVE-2026-76237 | Deferred | 未確認 | CWE-639 | stigmem-node before 0.9.0a12 contains a broken object level authorization (cross-tenant BOLA) vulnerability in the quarantine review endpoints. On multi-tenant deployments running |
| CVE-2026-76238 | Deferred | 未確認 | CWE-863 | stigmem versions before 0.9.0a12 contain a broken object level authorization vulnerability in the decay sweep endpoint that allows authenticated attackers with write credentials fo |
| CVE-2026-76239 | Deferred | 未確認 | CWE-918 | Stigmem before 0.9.0a11 fails to validate the delivery_address parameter when creating webhook subscriptions, allowing authenticated users to specify internal loopback and private |
| CVE-2026-76240 | Deferred | 未確認 | CWE-89 | stigmem-node 0.9.0a1 interpolates Postgres backend schema identifiers into SQL strings without defensive quoting. In the affected code path the schema value is operator-controlled, |
| CVE-2026-76241 | Deferred | 未確認 | CWE-494 | stigmem-node 0.9.0a1 allows plugin signature enforcement to be disabled via a single configuration flag without a second explicit acknowledgment. If that setting is carried into an |
| CVE-2026-76242 | Deferred | 未確認 | CWE-295 | stigmem-node 0.9.0a1 accepts federation peer key material during peer registration without a separate administrator out-of-band fingerprint approval step. On nodes that accept fede |
| CVE-2026-76243 | Deferred | 未確認 | CWE-285 | stigmem versions before 0.9.0a2 allow unauthenticated access when authentication is disabled on non-loopback deployments. Attackers can perform read, write, and federation operatio |
| CVE-2026-76244 | Deferred | 未確認 | CWE-319 | stigmem-node contains an insecure default configuration vulnerability that allows federation traffic to traverse networks without mTLS protection when non-loopback endpoints are en |
| CVE-2026-76245 | Deferred | 未確認 | CWE-345 | stigmem (pip package stigmem-node) version 0.9.0a1 contains a timestamp-handling mismatch in federation peer-token validation that can cause valid peer tokens to be incorrectly tre |
| CVE-2026-76251 | Analyzed | 未確認 | CWE-862 | In Splunk Enterprise versions below 10.4.2, 10.2.6, and 10.0.9, a user who does not hold the "admin" or "power" Splunk roles could cause the Splunk App for Splunk Observability Clo |
| CVE-2026-76252 | Analyzed | 未確認 | CWE-79 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.13, an unauthenticated user who tricks another user into visiting a malicious web page could run unauthorized Ja |
| CVE-2026-76253 | Analyzed | 未確認 | CWE-269 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role with the schedule_search capability could run arbitrary Search Processing Language |
| CVE-2026-76254 | Analyzed | 未確認 | CWE-943 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, 9.4.14, and 9.3.14, an unauthenticated user could cause another user to dispatch arbitrary Search Processing Language (S |
| CVE-2026-76255 | Analyzed | 未確認 | CWE-862 | In Splunk Enterprise versions below 10.4.1, 10.2.6, 10.0.8, and 9.4.13, a user who does not hold the "admin" or "power" Splunk roles could trick another user into running arbitrary |
| CVE-2026-76256 | Analyzed | 未確認 | CWE-200 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user who does not hold the "admin" or |
| CVE-2026-76257 | Analyzed | 未確認 | CWE-862 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.10, 3.9.24, and 3.8.71, a user who holds a Splunk role with pe |
| CVE-2026-76258 | Analyzed | 未確認 | CWE-321 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.10, 3.9.24, and 3.8.71, a user who does not hold the "admin" o |
| CVE-2026-76259 | Analyzed | 未確認 | CWE-269 | In Splunk Enterprise for Windows versions below 10.4.2, 10.2.6, 10.0.9, 9.4.13, and 9.3.14, a local user with access to the Windows host could bind to the management port before Sp |
| CVE-2026-76260 | Analyzed | 未確認 | CWE-732 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role with the rest_properties_get capability could read encrypted stored credentials thr |
| CVE-2026-76261 | Analyzed | 未確認 | CWE-732 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user who does not hold the "admin" or |
| CVE-2026-76262 | Analyzed | 未確認 | CWE-200 | In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could read Prometheus service metrics from the Edge Processor SPL2 Preview sidecar, including service detai |
| CVE-2026-76263 | Analyzed | 未確認 | CWE-639 | In Splunk Enterprise versions below 10.4.2 and 10.2.6, a user who does not hold the "admin" or "power" Splunk roles could delete Splunk Processing Language version 2 (SPL2) modules |
| CVE-2026-76309 | Analyzed | 未確認 | CWE-89 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a low-privileged user that does not hold the "admin" or "power" Splunk roles could inject Structured Query L |
| CVE-2026-76310 | Analyzed | 未確認 | CWE-284 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who has an embedded report token could download the associated search job dispatch a |
| CVE-2026-76311 | Analyzed | 未確認 | CWE-284 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who has an embedded report token could download the dispatch archive for an embedded |
| CVE-2026-76312 | Analyzed | 未確認 | CWE-284 | In Splunk Enterprise versions below 10.4.1, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who can read the Hypertext Markup Language (HTML) source of a page that embeds a Spl |
| CVE-2026-76313 | Analyzed | 未確認 | CWE-284 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could perform Remote Code Execution (RCE) by up |
| CVE-2026-76314 | Analyzed | 未確認 | CWE-94 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could perform Remote Code Execution (RCE) by su |
| CVE-2026-76315 | Analyzed | 未確認 | CWE-94 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could execute arbitrary code on the Splunk plat |
| CVE-2026-76316 | Analyzed | 未確認 | CWE-943 | In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.9, and 9.4.14, an unauthenticated user who can reach the Splunk management port could store a Search Processing Language (S |
| CVE-2026-76317 | Analyzed | 未確認 | CWE-26 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could move files that the user account running |
| CVE-2026-76318 | Analyzed | 未確認 | CWE-79 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role with the schedule_search capability could store a malicious script in an alert trig |
| CVE-2026-76319 | Analyzed | 未確認 | CWE-862 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a low-privileged user that does not hold the fsh_manage capability could perform Remote Code Execution throu |
| CVE-2026-76320 | Analyzed | 未確認 | CWE-943 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user could cause an authenticated user to run arbitrary Search Processing Language (SPL) |
| CVE-2026-76321 | Analyzed | 未確認 | CWE-77 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user could inject arbitrary Search Processing Language (SPL) into requests that search fo |
| CVE-2026-76322 | Analyzed | 未確認 | CWE-862 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "user" Splunk role could craft a Dashboard Studio dashboard that runs attacker-controll |
| CVE-2026-76323 | Analyzed | 未確認 | CWE-20 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could bypass Search Processing Language (SPL) s |
| CVE-2026-76324 | Analyzed | 未確認 | CWE-79 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could create a malicious Splunk Web tour and cause arbitrary JavaSc |
| CVE-2026-76325 | Analyzed | 未確認 | CWE-79 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store a malicious ui-tour knowledge object that matches an au |
| CVE-2026-76326 | Analyzed | 未確認 | CWE-79 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could store a dashboard view that runs JavaScri |
| CVE-2026-76327 | Analyzed | 未確認 | CWE-943 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, an unauthenticated user could trick a u |
| CVE-2026-76328 | Analyzed | 未確認 | CWE-77 | In Splunk Enterprise versions below 10.4.1, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store attacker-controlled Search Processing Language (SPL) in |
| CVE-2026-76329 | Analyzed | 未確認 | CWE-943 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user could trick a user who holds the "admin" Splunk role into opening a crafted link to |
| CVE-2026-76330 | Analyzed | 未確認 | CWE-20 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user could trick an authenticated user into opening a crafted link to Monitoring Console. |
| CVE-2026-76331 | Analyzed | 未確認 | CWE-943 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could inject Search Processing Language (SPL) i |
| CVE-2026-76332 | Analyzed | 未確認 | CWE-20 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user could trick an authenticated user into opening a crafted link to Analytics Workspace |
| CVE-2026-76333 | Analyzed | 未確認 | CWE-79 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store a Dashboard Studio workflow action with a crafted Unifo |
| CVE-2026-76334 | Analyzed | 未確認 | CWE-352 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store a Dashboard Studio workflow action containing attacker- |
| CVE-2026-76335 | Analyzed | 未確認 | CWE-94 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an authenticated user who does not hold a role with the edit_manager_xml capability could write a malicious |
| CVE-2026-76336 | Analyzed | 未確認 | CWE-862 | In Splunk Enterprise versions below 10.4.2 and 10.2.6, a user who does not hold the "admin" or "power" Splunk roles could delete all Search Processing Language 2 (SPL2) modules acr |
| CVE-2026-76337 | Analyzed | 未確認 | CWE-22 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user could read JavaScript files outside the Splunk Web static directory. The vulnerabili |
| CVE-2026-76338 | Analyzed | 未確認 | CWE-287 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who has access to a trusted distributed search private key could forge an administra |
| CVE-2026-76339 | Analyzed | 未確認 | CWE-77 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could inject arbitrary Search Processing Langua |
| CVE-2026-76340 | Analyzed | 未確認 | CWE-862 | In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could cause Splunk Enterprise to reload token-signing keys through the Representational State Transfer (RES |
| CVE-2026-76341 | Analyzed | 未確認 | CWE-863 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store attacker-controlled Search Processing Language (SPL) in |
| CVE-2026-76342 | Analyzed | 未確認 | CWE-863 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store risky Search Processing Language (SPL) commands in a Ta |
| CVE-2026-76343 | Analyzed | 未確認 | CWE-89 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could execute attacker-chosen Structured Query |
| CVE-2026-76344 | Analyzed | 未確認 | CWE-27 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could write dispatch metadata to an arbitrary l |
| CVE-2026-76345 | Analyzed | 未確認 | CWE-284 | In Splunk Enterprise versions below 10.4.2, a user with a high-privilege Splunk role that can manage search head clustering could use the search head cluster member bundle Represen |
| CVE-2026-76346 | Analyzed | 未確認 | CWE-79 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store a malicious script in dashboard sparkline format option |
| CVE-2026-76347 | Analyzed | 未確認 | CWE-918 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user who does not hold the "admin" or |
| CVE-2026-76348 | Analyzed | 未確認 | CWE-862 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds a Splunk role that contains the high-privilege list_search_head_clustering capability could |
| CVE-2026-76349 | Analyzed | 未確認 | CWE-943 | In Splunk Enterprise versions below 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user could trick an authenticated user into running arbitrary Search Processing Language (SPL) co |
| CVE-2026-76350 | Analyzed | 未確認 | CWE-269 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role with the schedule_search capability could configure Portable Document Format (PDF) |
| CVE-2026-76351 | Analyzed | 未確認 | CWE-918 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user who does not hold the "admin" or |
| CVE-2026-76352 | Analyzed | 未確認 | CWE-285 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could create or modify a scripted lookup throug |
| CVE-2026-76353 | Analyzed | 未確認 | CWE-24 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could submit a crafted knowledge bundle delta t |
| CVE-2026-76354 | Analyzed | 未確認 | CWE-158 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could affect system integrity and availability |
| CVE-2026-76355 | Analyzed | 未確認 | CWE-306 | In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could retrieve the information contained in Edge Processor pipeline configurations through a Representation |
| CVE-2026-76356 | Analyzed | 未確認 | CWE-290 | In Splunk SOAR versions below 8.6.0, an unauthenticated user could spoof the source IP address in a crafted request to an Automation Broker notification endpoint and execute arbitr |
| CVE-2026-76357 | Analyzed | 未確認 | CWE-22 | In Splunk SOAR versions below 8.6.0, an authenticated user with no role assigned could submit a crafted file path to the Representational State Transfer (REST) API and execute arbi |
| CVE-2026-76358 | Analyzed | 未確認 | CWE-22 | In Splunk SOAR versions below 8.6.0, a user with app-install privileges could use path traversal during app installation to write files outside the intended temporary directory. Th |
| CVE-2026-76359 | Analyzed | 未確認 | CWE-22 | In Splunk SOAR versions below 8.6.0, a user who holds the Administrator role could use path traversal in the Universal Forwarder installer's archive extraction to write files outsi |
| CVE-2026-76360 | Analyzed | 未確認 | CWE-862 | In Splunk SOAR versions below 8.6.0, an authenticated user with no role assigned could use the /rest/health endpoint to gather system and cluster telemetry that should be restricte |
| CVE-2026-76361 | Analyzed | 未確認 | CWE-918 | In Splunk SOAR versions below 8.6.0, a user with the "Administrator" role could use the /rest/support/connectivity/.../check_connectivity endpoint to make Splunk SOAR initiate outb |
| CVE-2026-76362 | Analyzed | 未確認 | CWE-295 | In Splunk SOAR versions below 8.6.0, an unauthenticated user who can observe or alter network traffic between Splunk SOAR and a configured CyberArk Representational State Transfer |
| CVE-2026-76363 | Analyzed | 未確認 | CWE-943 | In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" role could run arbitrary Structured Query Language (SQL) statements against the Splunk SOAR database |
| CVE-2026-76364 | Analyzed | 未確認 | CWE-89 | In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role could run arbitrary Structured Query Language (SQL) statements against the Splunk S |
| CVE-2026-76365 | Analyzed | 未確認 | CWE-74 | In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role could run arbitrary Structured Query Language (SQL) statements against the Splunk S |
| CVE-2026-76366 | Analyzed | 未確認 | CWE-200 | In Splunk SOAR versions below 8.6.0, a user with a valid Splunk SOAR account could use Representational State Transfer (REST) API filtering on playbook runs to recover session toke |
| CVE-2026-76367 | Analyzed | 未確認 | CWE-79 | In Splunk SOAR versions below 8.6.0, a user who holds the "Incident Commander" Splunk SOAR role could store JavaScript in a note and run it in the browser of another user when that |
| CVE-2026-76368 | Analyzed | 未確認 | CWE-862 | In Splunk SOAR versions below 8.6.0, a user who holds a role that contains the playbooks:view permission could view metadata about a playbook repository that they are not authorize |
| CVE-2026-76369 | Analyzed | 未確認 | CWE-22 | In Splunk SOAR versions below 8.6.0, a user who holds the OnPrem Broker role could write files outside the intended Automation Broker log directory. The vulnerability is possible b |
| CVE-2026-76370 | Analyzed | 未確認 | CWE-863 | In Splunk SOAR versions below 8.6.0, an authenticated user with restricted tenant access could use the Representational State Transfer (REST) API to view the names and identifiers |
| CVE-2026-76371 | Awaiting Analysis | 未確認 | CWE-732 | In FireAMP versions below 2.1.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR could run the add listitem action in a Safe Mode playbook while tha |
| CVE-2026-76372 | Awaiting Analysis | 未確認 | CWE-732 | In Nmap Scanner versions below 3.0.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR could run the scan network action in a Safe Mode playbook whil |
| CVE-2026-76373 | Awaiting Analysis | 未確認 | CWE-90 | In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission to run actions could inject crafted input into an Active Directory query to enum |
| CVE-2026-76374 | Awaiting Analysis | 未確認 | CWE-532 | In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission to run actions could cause sensitive Active Directory response data to be writte |
| CVE-2026-76375 | Awaiting Analysis | 未確認 | CWE-532 | In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission to run actions could expose sensitive credentials by invoking an action that cau |
| CVE-2026-76376 | Awaiting Analysis | 未確認 | CWE-312 | In versions below 2.1.9 of the AWS IAM app for Splunk SOAR, a user who holds a role with permission to run actions could expose sensitive AWS credentials by invoking an action that |
| CVE-2026-76377 | Awaiting Analysis | 未確認 | CWE-312 | In versions below 2.5.3 of the Azure AD Graph app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive password by invoking the reset pa |
| CVE-2026-76378 | Awaiting Analysis | 未確認 | CWE-312 | In versions below 2.4.5 of the Cisco Secure Malware Analytics app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive sample password b |
| CVE-2026-76379 | Awaiting Analysis | 未確認 | CWE-312 | In versions below 2.2.1 of the Cisco Webex app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive meeting password by invoking the sch |
| CVE-2026-76380 | Awaiting Analysis | 未確認 | CWE-312 | In versions below 5.1.3 of the CrowdStrike OAuth API app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive document password by invok |
| CVE-2026-76381 | Awaiting Analysis | 未確認 | CWE-312 | In versions below 1.5.2 of the MS Graph for Active Directory app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive password by invoki |
| CVE-2026-76382 | Awaiting Analysis | 未確認 | CWE-312 | In versions below 3.8.5 of the Phantom app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive archive password by invoking the deflate |
| CVE-2026-76383 | Awaiting Analysis | 未確認 | CWE-312 | In versions below 1.0.5 of the RSA SecurID Authentication Manager app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive token serial |
| CVE-2026-76384 | Awaiting Analysis | 未確認 | CWE-312 | In versions below 2.2.1 of the Splunk Attack Analyzer Connector for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive archive password by |
| CVE-2026-76385 | Awaiting Analysis | 未確認 | CWE-312 | In versions below 2.1.4 of the Venafi app for Splunk SOAR, a user who holds a role with permission to run actions could expose keystore and private-key passwords by invoking the ge |
| CVE-2026-76386 | Awaiting Analysis | 未確認 | CWE-312 | In versions below 3.2.2 of the Zoom app for Splunk SOAR, a user who holds a role with permission to run actions could expose meeting and personal meeting ID passwords by invoking o |
| CVE-2026-76387 | Analyzed | 未確認 | CWE-20 | In Splunk Enterprise Security versions below 8.6.1, a user who holds a Splunk Enterprise Security role that contains the mc_investigation_read capability could inject Search Proces |
| CVE-2026-76388 | Analyzed | 未確認 | CWE-732 | In Splunk Enterprise Security versions below 8.6.1, a user who holds the ess_analyst Splunk Enterprise Security role could change User and Entity Behavior Analytics (UEBA) search m |
| CVE-2026-76389 | Analyzed | 未確認 | CWE-918 | In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, a user that holds a role with the get_talos_enrichment capability could send a crafted request to th |
| CVE-2026-76390 | Analyzed | 未確認 | CWE-200 | In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, an unauthenticated user could access the add-on OpenAPI specification through Splunk Web static file |
| CVE-2026-76391 | Undergoing Analysis | 未確認 | CWE-863 | In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk roles could run searches with system-level privileges, access all relevant data, a |
| CVE-2026-76392 | Analyzed | 未確認 | CWE-798 | In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk roles could obtain predictable or default credentials for connected container serv |
| CVE-2026-76393 | Analyzed | 未確認 | CWE-362 | In Splunk AI Toolkit versions below 6.0.0, a user who can upload models could overwrite a model being uploaded by another user by sending a concurrent upload request for the same m |
| CVE-2026-76394 | Analyzed | 未確認 | CWE-862 | In Splunk AI Toolkit versions below 6.0.0, a low-privileged user who does not hold the "admin" or "power" Splunk roles could start, stop, and configure containers, and read or modi |
| CVE-2026-76395 | Analyzed | 未確認 | CWE-502 | In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could execute arbitrary code on the Splunk server by loading a model file containing crafted spa |
| CVE-2026-76396 | Analyzed | 未確認 | CWE-269 | In Splunk AI Toolkit versions below 6.0.0, a user that holds a role with the schedule_search capability could cause a scheduled search to load and deserialize a model file through |
| CVE-2026-76397 | Analyzed | 未確認 | CWE-639 | In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could access and delete all relevant data in experiment history, including data associated with |
| CVE-2026-76398 | Analyzed | 未確認 | CWE-862 | In Splunk AI Toolkit versions below 6.0.1, a user who does not hold the "admin" or "power" Splunk roles could delete the experiment history of another user without permission throu |
| CVE-2026-76399 | Analyzed | 未確認 | CWE-732 | In Splunk AI Toolkit versions below 6.0.1, a user who holds the "power" Splunk role could modify app-provided scheduled searches to run arbitrary Search Processing Language (SPL) u |
| CVE-2026-76400 | Analyzed | 未確認 | CWE-400 | In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representational State Transfer (REST) API and influence responses from a |
| CVE-2026-76401 | Analyzed | 未確認 | CWE-407 | In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representational State Transfer (REST) API could configure timestamp extra |
| CVE-2026-76402 | Analyzed | 未確認 | CWE-918 | In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representational State Transfer (REST) API could configure a non-secure Hy |
| CVE-2026-76403 | Analyzed | 未確認 | CWE-295 | In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user positioned in the network path could read or alter all relevant data sent from the connector when Kerberos |
| CVE-2026-76404 | Analyzed | 未確認 | CWE-502 | In Splunk MCP Server app versions below 1.2.1, a user who holds the "admin" Splunk role could execute arbitrary commands on the underlying operating system. The vulnerability is po |
| CVE-2026-76405 | Analyzed | 未確認 | CWE-312 | In Splunk On-Call (VictorOps) app versions below 1.0.43 on Splunkbase, a user who does not hold the "admin" or "power" Splunk roles could read a partially masked Application Progra |
| CVE-2026-7646 | Analyzed | 未確認 | CWE-22 | IBM Langflow OSS 1.0.0 through 1.10.3 allows users to read arbitrary files from the server filesystem, including other users' uploaded documents, the JWT signing secret, the SQLite |
| CVE-2026-76546 | Deferred | 未確認 | CWE-79 | The User Profile Builder WordPress plugin before 4.0.1 does not escape the output of one of its optional shortcodes, allowing users with a role as low as contributor to perform St |
| CVE-2026-76547 | Deferred | 未確認 | CWE-502 | The User Profile Builder WordPress plugin before 4.0.1 does not validate the type of data being deserialized when importing a configuration file, allowing high privilege users suc |
| CVE-2026-76548 | Deferred | 未確認 | CWE-287 | The User Profile Builder WordPress plugin before 4.0.1 does not properly restrict its front-end file upload feature, granting unauthenticated visitors capabilities reserved to pri |
| CVE-2026-76549 | Deferred | 未確認 | CWE-352 | The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 1.26.7 does not have CSRF checks in one of its backup management actions, which could allow attackers to make |
| CVE-2026-76564 | Deferred | 未確認 | CWE-79 | Joomla Extension - phoca.cz - Stored XSS via User-Agent header in Admin Order View in Phoca Cart 5.0.0-6.1.7 |
| CVE-2026-76565 | Deferred | 未確認 | CWE-79 | Joomla Extension - phoca.cz - Reflected XSS via price_from & price_to filter parameters in Phoca Cart 5.0.0-6.1.7 |
| CVE-2026-76569 | Deferred | 未確認 | CWE-79 | Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4 |
| CVE-2026-7657 | Analyzed | 未確認 | CWE-918 | IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow server-side request forgery (SSRF) due to incomplete and ineffective SSRF protection enforcement. |
| CVE-2026-76571 | Deferred | 未確認 | CWE-89 | Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik < 4.7.2 - The condition parameter passed to a list filter is concatenat |
| CVE-2026-76572 | Deferred | 未確認 | CWE-610, CWE-611 | A vulnerability was detected in pkp pkp-lib up to 3.3.0-22/3.4.0-10/3.5.0-4. The affected element is the function _transformPHP of the file classes/xslt/XSLTransformer.php. The man |
| CVE-2026-76574 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in code-projects Hospital Information System 1.0. The impacted element is the function User::login of the file includes/users/UsersController.php of the compo |
| CVE-2026-76576 | Deferred | 未確認 | CWE-22 | A vulnerability was found in yangzongzhuan RuoYi-Vue up to 3.9.2. This impacts the function fileDownload/resourceDownload of the file ruoyi-admin/src/main/java/com/ruoyi/web/contro |
| CVE-2026-7658 | Analyzed | 未確認 | CWE-22 | IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate the username field, allowing attackers to inject path traversal sequences and bypass containment checks. This enabl |
| CVE-2026-76581 | Deferred | 未確認 | CWE-347 | The WPMU DEV Dashboard plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.0.1. This is due to inconsistent and ambiguous HMAC messa |
| CVE-2026-76582 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected is the function popen/system of the file /cgi-bin/ping.cgi of the component ssi. Executing a manipulation |
| CVE-2026-76583 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was identified in TRENDnet TV-IP751WIC 11.03.03. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/admin/set_time.cgi of the component |
| CVE-2026-76584 | Deferred | 未確認 | CWE-119, CWE-121 | A security flaw has been discovered in TRENDnet TV-IP751WIC 11.03.03. Affected by this issue is some unknown functionality of the file /cgi-bin/admin/set_time.cgi of the component |
| CVE-2026-76585 | Deferred | 未確認 | CWE-79 | The Customer Reviews for WooCommerce WordPress plugin before 5.118.0 does not sanitise and escape the content of customer reviews received via one of its endpoints, which could all |
| CVE-2026-76586 | Deferred | 未確認 | CWE-284 | The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin before 1.6.3 does not verify the amount actually paid against the server-side price staged for a boo |
| CVE-2026-76589 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was found in TRENDnet TEW-755AP up to 20260702. Affected is the function FUN_401000 of the file /sbin/mycli. The manipulation of the argument ssid results in stack- |
| CVE-2026-76590 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was identified in TRENDnet TEW-755AP up to 20260702. Affected by this issue is some unknown functionality of the file /cgi-bin/wan.cgi of the component ssi. Such ma |
| CVE-2026-76591 | Deferred | 未確認 | CWE-74, CWE-77 | A security flaw has been discovered in TRENDnet TEW-755AP up to 20260702. This affects the function log_email_server of the file /cgi-bin/email.cgi of the component ssi. Performing |
| CVE-2026-76596 | Deferred | 未確認 | CWE-284 | Joomla Extension - fabrikar.com - Unauthenticated table truncation via list.doempty in Fabrik < 4.7.2- The list controllers doemtpy endpoints lacks ACL gates, a plain GET empties t |
| CVE-2026-76597 | Deferred | 未確認 | CWE-284 | Joomla Extension - fabrikar.com - Unauthenticated arbitrary file upload to web root via list email plugin in Fabrik < 4.7.2 - The list email plugin controller allows to upload non- |
| CVE-2026-76598 | Deferred | 未確認 | CWE-22, CWE-284 | Joomla Extension - fabrikar.com - Unauthenticated arbitrary directory listing via onAjax_getFolders in Fabrik < 4.7.2 - The onAjax_getFolders method of the elements model allows ar |
| CVE-2026-76599 | Deferred | 未確認 | CWE-284 | Joomla Extension - fabrikar.com - Unauthenticated database table list and table-prefix disclosure in Fabrik < 4.7.2 - The ajax_tables method of the elements model allows listings o |
| CVE-2026-76600 | Deferred | 未確認 | CWE-284 | Joomla Extension - fabrikar.com - Unauthenticated deletion of any comment in Fabrik < 4.7.2 - The DeleteComment endpoint did not perform any access checks. |
| CVE-2026-76601 | Deferred | 未確認 | CWE-284 | Joomla Extension - fabrikar.com - Unauthenticated row reordering in Fabrik < 4.7.2 - The order plugin did not perform any access checks. |
| CVE-2026-76602 | Deferred | 未確認 | CWE-89 | Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik < 4.7.2 - The order parameter in list models is used in queries without validation, allowing r |
| CVE-2026-76603 | Deferred | 未確認 | CWE-284 | Joomla Extension - fabrikar.com - Unauthenticated row disclosure via form.inlineedit in Fabrik < 4.7.2 - The inineedit form controller does not perform any access checks, disclosin |
| CVE-2026-76604 | Deferred | 未確認 | CWE-94 | Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik < 4.7.2 - The PHP form element is vulnerable to the execution of user provide |
| CVE-2026-76605 | Deferred | 未確認 | CWE-94 | Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.2. |
| CVE-2026-76606 | Deferred | 未確認 | CWE-22 | Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.2. |
| CVE-2026-76607 | Deferred | 未確認 | CWE-284 | Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik < 4.7.2. |
| CVE-2026-76608 | Deferred | 未確認 | CWE-284 | Joomla Extension - fabrikar.com - Unauthenticated disclosure of any commenter's email address in Fabrik < 4.7.2 - The onGetEmail endpoint did not perform any access checks. |
| CVE-2026-76609 | Deferred | 未確認 | CWE-284 | Joomla Extension - fabrikar.com - Unauthenticated modification of any comment in Fabrik < 4.7.2 - The onUpdateComment endpoint did not perform any access checks. |
| CVE-2026-76610 | Deferred | 未確認 | CWE-284, CWE-352 | Joomla Extension - yootheme.com - Unauthenticated tag modifications in Zoo < 4.1.65 - The comment controller endpoint lacked ACL checks, allowing unauthorized tag modifications by |
| CVE-2026-76611 | Deferred | 未確認 | CWE-22 | Joomla Extension - yootheme.com - Unauthenticated arbitrary directory listing via the Gallery element in Zoo < 4.1.66. |
| CVE-2026-76612 | Deferred | 未確認 | CWE-79 | Joomla Extension - yootheme.com - Unauthenticated stored XSS via user-controlled fields in Zoo < 4.1.66 - User supplied input in comments and user supplied field elements weren't e |
| CVE-2026-76613 | Deferred | 未確認 | CWE-89 | Joomla Extension - yootheme.com - Authenticated, privileged SQL injection in YOOtheme Pro 1.0.0-5.0.40 - An SQL injection allowed any contributor-level user to inject own content i |
| CVE-2026-76614 | Deferred | 未確認 | CWE-22 | OpenEMR before 8.3.0 contains a path traversal vulnerability in the EDI archive restore function. The archrestore_sel POST parameter is passed to the archive restore handler withou |
| CVE-2026-76632 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-76633 | Deferred | 未確認 | CWE-620, CWE-862 | WeGIA before 3.9.2 contains an authorization bypass vulnerability in the password change flow that allows any authenticated user to change their account password without providing |
| CVE-2026-76634 | Deferred | 未確認 | CWE-639 | WeGIA before 3.9.2 contains an insecure direct object reference vulnerability in the employee profile page that allows authenticated attackers to access arbitrary employee records |
| CVE-2026-76635 | Deferred | 未確認 | CWE-89, CWE-94 | baserCMS before 5.3.0 contains a SQL injection vulnerability in BcDatabaseService.php that allows authenticated administrators to inject attacker-controlled table names and configu |
| CVE-2026-76639 | Deferred | 未確認 | CWE-22, CWE-306 | Unitree G1 EDU firmware through 1.5.2 contains an unauthenticated remote code execution vulnerability that allows network-adjacent attackers to execute arbitrary commands as root b |
| CVE-2026-76640 | Deferred | 未確認 | CWE-306, CWE-787 | Unitree G1 EDU firmware through 1.5.2 contains multiple chained vulnerabilities in the BLE GATT server and WiFi provisioning stack that allow unauthenticated proximate attackers to |
| CVE-2026-76641 | Awaiting Analysis | 未確認 | CWE-125 | Expat through 2.8.3 contains an out-of-bounds read vulnerability that allows attackers to trigger memory corruption by processing XML with external entity parsers created via XML_E |
| CVE-2026-76647 | Deferred | 未確認 | CWE-200, CWE-639, CWE-862 | Leantime JSON-RPC API through version 3.9.0 contains a missing authorization vulnerability in the JSON-RPC dispatcher in app/Domain/Api/Controllers/Jsonrpc.php. The dispatcher does |
| CVE-2026-76649 | Deferred | 未確認 | CWE-476 | A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP action requests. A specially crafted SOAP action request containing unexpe |
| CVE-2026-76650 | Deferred | 未確認 | CWE-476 | A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP state variable query requests. A specially crafted SOAP query may trigger |
| CVE-2026-76651 | Deferred | 未確認 | CWE-120 | A buffer overflow vulnerability exists in the embedded HTTP service in TL-WR841N v14 when processing multipart/form-data requests. Insufficient validation of an attacker-controlled |
| CVE-2026-76760 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability was found in chenhg5 cc-connect up to 1.4.1. Affected by this vulnerability is the function Authenticate of the file core/webhook.go. The manipulation of the argume |
| CVE-2026-76761 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in chenhg5 cc-connect up to 1.4.1. This affects the function shellExecCommand of the file core/engine.go of the component Management API. Such manipu |
| CVE-2026-76762 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in code-projects Assessment Management 1.0. The affected element is an unknown function of the file /welcome.php. The manipulation of the argument user |
| CVE-2026-76763 | Awaiting Analysis | 未確認 | CWE-1284 | A flaw was found in SmallRye GraphQL. The number scalar coercion for BigInteger does not properly validate the magnitude of float or string inputs. An unauthenticated remote attack |
| CVE-2026-76764 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in code-projects Employee Management System 1.0. The impacted element is an unknown function of the file /process/aprocess.php of the component Admin Login En |
| CVE-2026-76783 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in DeDeCMS 53_1_UTF8. This vulnerability affects unknown code of the file /plus/advancedsearch.php. Such manipulation of the argument sql |
| CVE-2026-76784 | Awaiting Analysis | 未確認 | CWE-325 | Multiple TP-Link Kasa smart home devices contain insufficient cryptographic protections in the local device communication protocol. An adjacent network attacker may intercept, repl |
| CVE-2026-76785 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in amirsanni Mini-Inventory-and-Sales-Management-System 0.1. Affected is the function Transaction::getAll of the file application/models/Transac |
| CVE-2026-76789 | Deferred | 未確認 | CWE-79 | The Slider Hero with Video Background, Animation WordPress plugin before 9.1.3 does not have authorisation and nonce checks on two of its request handlers, and does not escape a st |
| CVE-2026-76793 | Deferred | 未確認 | CWE-287 | The Firebase Authentication WordPress plugin before 1.7.1 does not require the email address in an authentication token to be verified before matching it to a WordPress account and |
| CVE-2026-76794 | Analyzed | 未確認 | CWE-79 | MongoSQL Transition Readiness Tool does not sufficiently encode database metadata before including it in generated HTML. A MongoDB user with write access can introduce crafted meta |
| CVE-2026-76795 | Deferred | 未確認 | CWE-918 | A vulnerability has been found in AeternaLabsHQ PullMD 3.2.0. This impacts an unknown function of the file /api of the component REST API Endpoint. The manipulation of the argument |
| CVE-2026-76797 | Analyzed | 未確認 | CWE-1236 | The MongoSQL Transition Readiness Tool writes database and collection names into its generated CSV reports without neutralizing leading characters that spreadsheet applications tre |
| CVE-2026-76798 | Analyzed | 未確認 | CWE-79 | The MongoSQL Transition Readiness Tool writes query text and user names read from BI Connector log files into its generated HTML report without encoding them for that output contex |
| CVE-2026-76799 | Deferred | 未確認 | CWE-425, CWE-552 | A weakness has been identified in code-projects Login Registration System 1.0. This affects an unknown function of the file /loginsystem/database/login_registration_system.sql of t |
| CVE-2026-76800 | Deferred | 未確認 | CWE-284, CWE-434 | A flaw has been found in DeDeCMS 3. Affected by this vulnerability is an unknown functionality of the file /include/dialog/select_media_post.php. Executing a manipulation of the ar |
| CVE-2026-76816 | Deferred | 未確認 | CWE-20, CWE-626 | Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.137.Final and 4.2.17.Final, MqttEncoder does not validate client identifiers, will topic |
| CVE-2026-76827 | Awaiting Analysis | 未確認 | CWE-693 | A flaw was found in search-indexer. This vulnerability allows a registered and authenticated managed cluster to tamper with or delete another cluster's indexed search data. This is |
| CVE-2026-76829 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-76830 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-76831 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-76832 | Deferred | 未確認 | CWE-22 | Agno's PythonTools in libs/agno/agno/tools/python.py contains a path traversal vulnerability that allows attackers to read, write, or execute arbitrary files by supplying parent-di |
| CVE-2026-76833 | Deferred | 未確認 | CWE-95 | @cgauge/yaml npm package contains an arbitrary code execution vulnerability that allows attackers to execute arbitrary JavaScript by embedding a custom !js YAML tag whose construct |
| CVE-2026-76835 | Deferred | 未確認 | CWE-290 | OAuth2 Proxy honours a client-supplied X-Forwarded-Uri header when deciding whether a request may skip authentication, because the guard added for CVE-2026-40575 is inert in the de |
| CVE-2026-76836 | Deferred | 未確認 | CWE-863, CWE-94 | AzuraCast exposes the Liquidsoap custom configuration fields through an endpoint that does not require the permission guarding them. The backend_config property in backend/src/Enti |
| CVE-2026-76837 | Deferred | 未確認 | CWE-79 | Baserow interpolates a user's display name into the rich-text mention markup without HTML encoding. PATCH /api/user/account/ stores the first_name value verbatim, and the mention r |
| CVE-2026-76838 | Deferred | 未確認 | CWE-918 | Hi.Events validates a webhook destination only when it is registered, never when it is used. NoInternalUrlRule in backend/app/Validators/Rules/NoInternalUrlRule.php resolves the ho |
| CVE-2026-76839 | Deferred | 未確認 | CWE-522 | Grav before 2.0.16 allows sandboxed Twig templates to access sensitive User fields through allow-listed offsetGet() and offsetexists() methods that lack field filtering. Attackers |
| CVE-2026-76840 | Deferred | 未確認 | CWE-20, CWE-787 | RustDesk's Windows clipboard redirection copies a peer-supplied length into a fixed-size caller buffer without an upper bound check. When an OLE paste consumer such as explorer.exe |
| CVE-2026-76841 | Deferred | 未確認 | CWE-94 | Xinference loads models with Hugging Face remote code execution unconditionally enabled, and before version 2.12.0 exposes no setting to disable it. Six loader call sites pass trus |
| CVE-2026-76842 | Deferred | 未確認 | CWE-22 | The Mercado Pago Node.js SDK interpolates caller-supplied identifiers into API request paths without percent-encoding them, so characters that are structural in a URL survive into |
| CVE-2026-76843 | Deferred | 未確認 | CWE-502 | The official Flair wheels for 0.15.0 and 0.15.1 still contain flair/models/clustering.py, whose ClusteringModel.load static method returns pickle.loads(joblib.load(str(model_file)) |
| CVE-2026-76844 | Deferred | 未確認 | CWE-787 | zlib 1.2.11 through 1.3.2 contains a heap buffer overflow: after an underlying write() fails, gz_write() returns without resetting strm.next_in, leaving it pointed at the caller's |
| CVE-2026-76845 | Deferred | 未確認 | CWE-59 | adm-zip 0.5.9 through 0.6.0 follows symbolic links at the extraction destination. Utils.sanitize in util/utils.js enforces containment by comparing only the string form of an archi |
| CVE-2026-76846 | Deferred | 未確認 | CWE-522 | Grav before 2.0.16 contains an incomplete default denylist in the Twig sandbox configuration that fails to block access to system configuration secrets. Attackers with page-edit pe |
| CVE-2026-76847 | Deferred | 未確認 | CWE-321, CWE-862 | act starts an HTTP Artifacts V4 backend whenever a workflow uses actions/upload-artifact@v4 or actions/download-artifact@v4. The control-plane RPCs of that backend, including Creat |
| CVE-2026-76848 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-76850 | Deferred | 未確認 | CWE-502 | LMDeploy deserializes disaggregated-serving peer messages with pickle. The handle_zmq_recv coroutine in lmdeploy/pytorch/disagg/conn/engine_conn.py reads peer-to-peer cache-free re |
| CVE-2026-76876 | Deferred | 未確認 | CWE-862 | Craftplan before 0.5.1 contains a broken access control vulnerability that allows unauthenticated attackers to read sensitive credentials by exploiting an unconditional authorizati |
| CVE-2026-76878 | Awaiting Analysis | 未確認 | CWE-688 | In OpenStack Aodh before 22.0.1, the alarm list API bypasses project scoping when the all_projects query parameter is set to false. The API checks for the presence of the all_proje |
| CVE-2026-76879 | Analyzed | 未確認 | CWE-121 | C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76880 | Analyzed | 未確認 | CWE-787 | RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76881 | Analyzed | 未確認 | CWE-476 | CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76882 | Analyzed | 未確認 | CWE-125 | Bluetooth Attribute Protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76883 | Analyzed | 未確認 | CWE-122 | Catapult DCT2000 file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76884 | Analyzed | 未確認 | CWE-126 | ERF file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76885 | Analyzed | 未確認 | CWE-126 | Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76886 | Analyzed | 未確認 | CWE-122 | C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76887 | Analyzed | 未確認 | CWE-122 | Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76888 | Analyzed | 未確認 | CWE-122 | RDP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76889 | Analyzed | 未確認 | CWE-122 | UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76890 | Analyzed | 未確認 | CWE-825 | Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76891 | Analyzed | 未確認 | CWE-825 | Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76904 | Deferred | 未確認 | CWE-89 | GeoTools is an open source Java library that provides tools for geospatial data. Starting in version 30.5 and prior to versions 33.6, 34.5, and 33.6, an SQL Injection Vulnerability |
| CVE-2026-76905 | Deferred | 未確認 | CWE-476 | kin-openapi is a Go project for handling OpenAPI files. From 0.10.0 until 0.141.0, openapi3filter.convertParseError in openapi3filter/validation_error_encoder.go dereferences e.Par |
| CVE-2026-76917 | Analyzed | 未確認 | CWE-122 | Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76918 | Analyzed | 未確認 | CWE-122 | SSH protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76919 | Analyzed | 未確認 | CWE-457 | ESS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76920 | Analyzed | 未確認 | CWE-787 | 3gpp phone log file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76921 | Analyzed | 未確認 | CWE-416 | CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76922 | Analyzed | 未確認 | CWE-476 | Bluetooth BR/EDR FHS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76923 | Analyzed | 未確認 | CWE-125 | Bluetooth HFP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76924 | Analyzed | 未確認 | CWE-125 | Kerberos protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76926 | Analyzed | 未確認 | CWE-617 | BUSMASTER file parser abnormal exit in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76927 | Analyzed | 未確認 | CWE-476 | H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76928 | Analyzed | 未確認 | CWE-476 | X.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76929 | Analyzed | 未確認 | CWE-125 | Pcapng file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-7693 | Deferred | 未確認 | CWE-77 | The Backup Migration plugin for WordPress is vulnerable to OS Command Injection in all versions up to, and including, 2.1.5.1 due to insufficient sanitization of the `file` POST pa |
| CVE-2026-76940 | Deferred | 未確認 | CWE-307 | The affected Ebyte device does not restrict repeated authentication attempts through rate limiting or account lockout mechanisms. This could allow an attacker to perform automate |
| CVE-2026-76943 | Deferred | 未確認 | CWE-288 | Xiiaozet LK100Wt contains an authentication weakness within an administrative service that may allow an attacker to bypass intended access controls and obtain command execution c |
| CVE-2026-76945 | Deferred | 未確認 | CWE-603 | The affected Ebyte device relies on client-managed authentication tokens without sufficient server-side validation. An attacker may replay or manipulate authentication tokens to |
| CVE-2026-76956 | Analyzed | 未確認 | CWE-394 | In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, which results in being vulnerable to hash flooding attacks, c |
| CVE-2026-76957 | Analyzed | 未確認 | CWE-416 | libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a use-after-free can occur. NOTE: this is similar to CVE-2026-50219, CVE-2026-56131 an |
| CVE-2026-76982 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.markup.html.form.Button clears the escape-model-strings flag in its constructor, so |
| CVE-2026-76983 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation in Apache Wicket. The <wicket:label> tag is provided by org.apache.wicket.markup.html.form.AutoLabelTextResolver, which |
| CVE-2026-76984 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.markup.head.MetaDataHeaderItem generates <meta> and <link> header tags. It escaped |
| CVE-2026-76985 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.extensions.markup.html.form.palette.component.AbstractOptions, which renders the tw |
| CVE-2026-76986 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.markup.html.form.AbstractSingleSelectChoice, the base class of DropDownChoice, writ |
| CVE-2026-76987 | Deferred | 未確認 | CWE-119 | A security flaw has been discovered in liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892. The impacted element is the function CipAttribute::GetAttrData/CipAttribute::Set |
| CVE-2026-76988 | Deferred | 未確認 | CWE-119, CWE-125 | A weakness has been identified in liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892. This affects the function CipConnMgrClass::forward_open of the file cipconnectionmana |
| CVE-2026-76989 | Deferred | 未確認 | CWE-119, CWE-125 | A security vulnerability has been detected in liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892. This impacts an unknown function of the file source/src/enet_encap/encap. |
| CVE-2026-76990 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in code-projects Simple Inventory System 1.0. Affected by this issue is some unknown functionality of the file /delete.php. Such manipulation of the |
| CVE-2026-76991 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown part of the file /viewappointmentapproved.php. Performing a manipulation of the ar |
| CVE-2026-76993 | Deferred | 未確認 | CWE-707, CWE-74 | A vulnerability was determined in GreyDGL PentestGPT up to 1.0.0. This vulnerability affects unknown code of the component Web-Page Crawling. Executing a manipulation of the argume |
| CVE-2026-76995 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was identified in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /admin/ajax.php?action=save_menu. Th |
| CVE-2026-76996 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function of the file /fos/admin/view_order.php. The manipulatio |
| CVE-2026-76997 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in SourceCodester Simple Online Food Ordering System 1.0. The affected element is an unknown function of the file /admin/ajax.php?action=save_categor |
| CVE-2026-76998 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in SourceCodester Simple Online Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/ajax.php?action= |
| CVE-2026-76999 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This affects the function add_grade of the file /index.php. Performing |
| CVE-2026-77000 | Deferred | 未確認 | CWE-287 | The WP Social Media Login WordPress plugin through 1.0.6 does not verify that a social login was actually completed with the identity provider before authenticating a visitor, allo |
| CVE-2026-77001 | Deferred | 未確認 | CWE-287 | The Social Login & Sharing buttons with Analytics By SoClever WordPress plugin through 1.2.0 does not perform any authentication, authorisation or nonce checks in one of its public |
| CVE-2026-77002 | Deferred | 未確認 | CWE-287 | The SmilePass Selfie Login WordPress plugin through 1.0.2 does not perform any server-side verification of the identity it is asked to authenticate, allowing unauthenticated users |
| CVE-2026-77003 | Deferred | 未確認 | CWE-269 | The Content Mask WordPress plugin before 1.8.5.5 does not check the capability required to publish the post type being created, allowing users with a role as low as Contributor to |
| CVE-2026-77004 | Deferred | 未確認 | CWE-74, CWE-77 | A flaw has been found in Comfast CF-N1-S 2.6.0.1. This impacts the function sprintf of the file /cgi-bin/mbox-config?method=SET§ion=ptest_sn. Executing a manipulation of the ar |
| CVE-2026-77007 | Deferred | 未確認 | CWE-200 | The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not perform any authorisation check on one of its REST API routes, allowing unauthenticat |
| CVE-2026-77008 | Deferred | 未確認 | CWE-284 | The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not have any authorisation or authentication check when saving its settings, allowing una |
| CVE-2026-77010 | Deferred | 未確認 | CWE-284 | The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not perform authorisation checks on its REST API routes and does not consistently enforce |
| CVE-2026-77012 | Deferred | 未確認 | CWE-918 | The 爱采集数据采集和发布插件 WordPress plugin through 1.0.0 does not require a per-install secret for one of its unauthenticated endpoints, relying on a hardcoded default, and does not validat |
| CVE-2026-77013 | Deferred | 未確認 | CWE-862 | The 爱采集数据采集和发布插件 WordPress plugin through 1.0.0 does not restrict which of its handler methods a request may invoke, and performs no capability or nonce check on them, allowing una |
| CVE-2026-77014 | Awaiting Analysis | 未確認 | CWE-197 | A flaw was found in libsoup's SoupServer HTTP Range header processing. The sort_ranges() comparator in soup-message-headers.c truncates a 64-bit subtraction result to 32-bit int, f |
| CVE-2026-77016 | Deferred | 未確認 | CWE-73 | The Workeera WordPress plugin before 1.0.6 does not restrict which values may be written to a user's own candidate profile, and does not validate or contain the stored file path b |
| CVE-2026-77017 | Deferred | 未確認 | CWE-200 | The Workeera WordPress plugin before 1.0.6 does not restrict which profile values a candidate may submit, nor confine the stored file location to an allowed directory before servi |
| CVE-2026-77018 | Deferred | 未確認 | CWE-434 | The Workeera WordPress plugin before 1.0.6 does not restrict which profile values a candidate may submit, nor validate the type of the file it subsequently writes into a publicly |
| CVE-2026-77019 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in CodeAstro Apartment Visitor Management System 1.0. Affected is an unknown function of the file /apartment-visitor/forgotpw.php. Executing a manipu |
| CVE-2026-77020 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in CodeAstro Apartment Visitor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file password-recovery.php. T |
| CVE-2026-77022 | Deferred | 未確認 | CWE-119, CWE-121 | A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function sub_44B438 of the file /cgi-bin/mbox-config?method=SET§ion=ptest_ssid of |
| CVE-2026-77025 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in itsourcecode Hospital Management System 1.0. This affects an unknown part of the file /viewappointmentpending.php. This manipulation of the argume |
| CVE-2026-77026 | Deferred | 未確認 | CWE-602 | Joomla Extension - tassos.gr - Client-controlled validation bypass in Convert Forms extension < 5.2.5 - The front-end Submissions view did not enforce access control. An unauthenti |
| CVE-2026-77027 | Deferred | 未確認 | CWE-79 | Joomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik < 4.7.2 - The handling of user supplied input in the jsactions feature leads to an stored XSS vector. |
| CVE-2026-77028 | Deferred | 未確認 | CWE-601, CWE-79 | Joomla Extension - yootheme.com - Reflected XSS and open redirect via the submission redirect parameter in Zoo < 4.1.66 |
| CVE-2026-77029 | Deferred | 未確認 | CWE-352 | Joomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo < 4.1.66 |
| CVE-2026-77031 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability has been found in Tenda CH22 1.0.0.1. The affected element is the function formcreateFileName of the file /goform/formcreateFileName. The manipulation of the argume |
| CVE-2026-77034 | Deferred | 未確認 | CWE-284 | Joomla Extension - joomlaeventmanager.net - Unauthenticated article overwrite and force-publish in Joomla Event Manager < 5.0.1 - Any visitor holding their own session token can re |
| CVE-2026-77035 | Deferred | 未確認 | CWE-639 | Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager < 5.0.1 - A registered user with edit-own rights |
| CVE-2026-77036 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was found in elunez eladmin up to 2.7. The impacted element is the function EmailController/AliPayController/GeneratorController/GenConfigController. The manipulati |
| CVE-2026-77037 | Analyzed | 未確認 | CWE-400, CWE-459 | multer is a middleware for handling multipart/form-data in Node.js. In version 2.2.0, when a disk-backed upload is aborted or truncated before the write stream finishes, multer's d |
| CVE-2026-77063 | Analyzed | 未確認 | CWE-362 | multer is a middleware for handling multipart/form-data in Node.js. When an application uses an asynchronous fileFilter together with the fileSize limit, a race condition in multer |
| CVE-2026-77066 | Deferred | 未確認 | CWE-918 | The scanFeedsResolver in packages/api/src/resolvers/subscriptions/index.ts passes the caller-supplied url straight to axios.get(url, rssParserConfig()) with no address validation. |
| CVE-2026-77067 | Deferred | 未確認 | CWE-918 | The setWebhookResolver in packages/api/src/resolvers/webhooks/index.ts stores the caller-supplied url without any address validation, and the file imports no validation helper. Whe |
| CVE-2026-77068 | Analyzed | 未確認 | CWE-22 | n8n before 2.33.4 and 2.34.x before 2.34.1 contain a remote code execution vulnerability in the @n8n/workflow-sdk node-schema loader used for MCP node-schema loading. The loader de |
| CVE-2026-77069 | Analyzed | 未確認 | CWE-918 | n8n before 1.123.69, 2.33.4, and 2.34.1 contains an SSRF protection bypass in the OAuth2 credential authorization-code-to-access-token exchange. While OAuth2 discovery and dynamic- |
| CVE-2026-77070 | Analyzed | 未確認 | CWE-943 | n8n before 1.123.69, 2.33.4, and 2.34.1 contains a NoSQL injection vulnerability in the MongoDB node's Find, Delete, and Aggregate operations, which parse the Query parameter as JS |
| CVE-2026-77071 | Analyzed | 未確認 | CWE-89 | n8n before 1.123.69, 2.33.4, and 2.34.1 contains a PostgREST filter injection vulnerability in the Supabase node's Row Get Many, Delete, and Update operations, which built filter q |
| CVE-2026-77072 | Analyzed | 未確認 | CWE-79 | n8n before 1.123.69, 2.33.4, and 2.34.1 contains a stored cross-site scripting vulnerability in the Form node's completion page. The completion page applied its sandboxing Content- |
| CVE-2026-77073 | Analyzed | 未確認 | CWE-639 | n8n versions before 2.34.1 contain a credential validation bypass in the MCP create_workflow_from_code tool when authentication type is set to an expression. Attackers with a valid |
| CVE-2026-77074 | Analyzed | 未確認 | CWE-94 | n8n versions before 1.123.69 contain a server-side request forgery vulnerability in the Edit Image node's Draw Text operation that allows authenticated users to inject MVG primitiv |
| CVE-2026-77075 | Analyzed | 未確認 | CWE-94 | n8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contain an expression injection vulnerability in resource-locator field link preview rendering. The editor spliced |
| CVE-2026-77076 | Analyzed | 未確認 | CWE-209 | n8n versions before 1.123.69, 2.33.4, and 2.34.1 contain an information disclosure vulnerability in the GraphQL node. When a GraphQL request fails at the connection level, the node |
| CVE-2026-77077 | Analyzed | 未確認 | CWE-94 | n8n versions before 1.123.69, 2.33.4, and 2.34.1 contain a JavaScript task runner VM sandbox escape. The runner's prototype-freezing routine covers globalThis functions but not int |
| CVE-2026-77078 | Analyzed | 未確認 | CWE-248 | multer is a middleware for handling multipart/form-data in Node.js. A small multipart request containing two specially crafted text field names can cause an uncaught RangeError (In |
| CVE-2026-77079 | Analyzed | 未確認 | CWE-639 | n8n before 2.34.1 and 2.33.4 contains an authorization bypass in the custom project role deletion (reassignment) path. When deleting a custom project role with a reassignment targe |
| CVE-2026-77080 | Analyzed | 未確認 | CWE-78 | n8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contain an arbitrary file read and write vulnerability in the Snowflake node, which passes free-form Execute Query |
| CVE-2026-77081 | Analyzed | 未確認 | CWE-639 | n8n before 1.123.69, 2.x before 2.33.4, and 2.x before 2.34.1 contain an allowed-domains bypass in the GraphQL node. When the node's Authentication parameter is set to expression m |
| CVE-2026-77082 | Analyzed | 未確認 | CWE-1333 | n8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contains a regular expression denial of service (ReDoS) vulnerability in the Filter and Switch nodes, which compile |
| CVE-2026-77083 | Analyzed | 未確認 | CWE-1321 | n8n is a workflow automation platform. In versions prior to 1.123.69, 2.33.4, and 2.34.1, the JavaScript Code node's VM sandbox did not freeze the sandbox's Function.prototype, all |
| CVE-2026-77084 | Analyzed | 未確認 | CWE-78 | n8n before 1.123.69 (and 2.x before 2.33.4 / 2.34.1) contains a code execution vulnerability in the Git node. The Git node executed certain repository-local git configuration value |
| CVE-2026-77085 | Analyzed | 未確認 | CWE-918 | n8n before 2.34.1 and 2.33.x before 2.33.4 contains an SSRF protection bypass in the SearXNG Agent tool. The tool sent requests to the user-supplied API URL using a raw HTTP client |
| CVE-2026-77086 | Deferred | 未確認 | CWE-22 | SiYuan before v3.7.4 fails to validate the packageName parameter in Bazaar install and uninstall endpoints, allowing authenticated administrators to perform path traversal via dire |
| CVE-2026-77087 | Deferred | 未確認 | CWE-862 | Paperclip before 0.3.1 in default local_trusted mode fails to validate Host headers, allowing attackers to execute arbitrary commands via DNS rebinding. An attacker can craft a mal |
| CVE-2026-77088 | Deferred | 未確認 | CWE-79 | justhtml versions 0.9.0 through 1.21.0 contain a cross-site scripting vulnerability in to_markdown() where inline code spans fail to account for blank lines as block boundaries. At |
| CVE-2026-77113 | Awaiting Analysis | 未確認 | CWE-23 | Path traversal in apport-unpack in Canonical Apport before 2.36.0, 2.34.2, and 2.28.4 on Linux allows an attacker to create or overwrite arbitrary files with the privileges of the |
| CVE-2026-77115 | Deferred | 未確認 | CWE-79 | Brave Popup Builder (brave-popup-builder) up to version 0.8.5 reflects UTM query parameters into popup form HTML without escaping them. |
| CVE-2026-77116 | Deferred | 未確認 | CWE-639 | Brave Popup Builder (slug: brave-popup-builder) has a broken access control issue in versions through 0.8.5. Any logged-in user - Subscriber or WooCommerce Customer is enough — can |
| CVE-2026-77118 | Deferred | 未確認 | CWE-787 | A heap out-of-bounds write exists in the Photo CD (PCD) decoder of GraphicsMagick. In DecodeImage() (coders/pcd.c), the Huffman delta loop advances its output pointer with q++ afte |
| CVE-2026-77127 | Deferred | 未確認 | CWE-639 | The extension fails to restrict a backend AJAX endpoint for inline editing to fields the current user is permitted to see or edit. An authenticated, low-privileged backend user can |
| CVE-2026-77128 | Deferred | 未確認 | CWE-862 | The extension fails to enforce enable-field restrictions on a repository query parameter. An unauthenticated remote user can pass a demand-override parameter to view hidden or time |
| CVE-2026-77129 | Deferred | 未確認 | CWE-1336 | The extension passes an editor-configurable email subject string directly into a Fluid template source without restriction. A backend user with edit access to the event plugin or B |
| CVE-2026-77130 | Deferred | 未確認 | CWE-613 | The extension fails to properly validate the expiration of a client-supplied JWT token, allowing an attacker in control of a valid API key to authenticate with an expired token. Ex |
| CVE-2026-77131 | Deferred | 未確認 | CWE-319 | When OpenSSL is unavailable on the server, the extension transmits TYPO3 system information in cleartext instead of encrypting it. Exploitation requires the attacker to already be |
| CVE-2026-77133 | Deferred | 未確認 | CWE-862 | The extension fails to restrict which frontend usergroups a logged-in user may assign to their own account when the profile edit plugin uses its default field configuration, allowi |
| CVE-2026-77134 | Deferred | 未確認 | CWE-863 | The extension fails to require the dedicated admin confirmation token when processing an admin-approval request, so a regular user confirmation hash, obtainable by any visitor thro |
| CVE-2026-77135 | Deferred | 未確認 | CWE-639 | The extension's user detail view fails to verify that a requested user record matches the configured or logged-in target, allowing any visitor with access to the Detail or List plu |
| CVE-2026-77136 | Deferred | 未確認 | CWE-1336 | The extension passes the raw value of a form field configured as "This field contains the name of the sender" directly into a Fluid View as template source, without any sanitizatio |
| CVE-2026-77137 | Deferred | 未確認 | CWE-89 | The extension fails to properly sanitize user input before using it in a database query. As a result, a low-privileged backend user can inject arbitrary SQL through a URL parameter |
| CVE-2026-77138 | Deferred | 未確認 | CWE-502 | The extension fails to safely process untrusted client input of an attacker-controlled cookie directly to PHP's unserialize(). A remote, unauthenticated attacker can supply a craft |
| CVE-2026-77139 | Deferred | 未確認 | CWE-22, CWE-73 | The extension fails to validate a client-supplied template element key before using it to build file paths for saving and deleting Mask template files. An authenticated backend use |
| CVE-2026-77140 | Deferred | 未確認 | CWE-639, CWE-862 | The extension validates the HMAC of a frontend employee edit link only in the action that renders the edit form, not in the action that persists the change. An unauthenticated visi |
| CVE-2026-77141 | Deferred | 未確認 | CWE-639, CWE-862 | The extension resolves the targeted club record from a user-supplied request argument in its frontend edit, update, and activate actions, but performs no ownership check in any of |
| CVE-2026-77142 | Deferred | 未確認 | CWE-639, CWE-862 | The frontend company self-service editing feature relies on a template-level visibility flag to hide the edit form for company records a visitor does not own, but the corresponding |
| CVE-2026-77143 | Deferred | 未確認 | CWE-639, CWE-862 | The frontend topic editing flow does not verify on the server side that the requesting visitor owns the topic being modified. As a result, a visitor who knows the identifier of a t |
| CVE-2026-77144 | Deferred | 未確認 | CWE-915 | The frontend management plugin attributed a newly created event to the submitting user's organizer record only when the request supplied no organizer of its own. The accompanying p |
| CVE-2026-77145 | Deferred | 未確認 | CWE-639 | The permission check for the frontend management update flow verified a different event than the one the request went on to modify. A user with frontend event management access cou |
| CVE-2026-77146 | Deferred | 未確認 | CWE-862 | The extension's invitation controller fails to stop processing after redirecting on invalid input (missing hash, non-existent, disabled, or deleted users), allowing an unauthentica |
| CVE-2026-77148 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was found in Comfast CF-N1-S 2.6.0.1. This impacts the function sub_44B50C of the file /cgi-bin/mbox-config?method=SET§ion=ptest_channel of the component Web Ma |
| CVE-2026-77151 | Deferred | 未確認 | CWE-310, CWE-327 | A security flaw has been discovered in lin-snow Ech0 up to 5.4.1. Affected by this issue is the function MD5Encrypt of the file internal/util/crypto/crypto.go. Performing a manipul |
| CVE-2026-77176 | Awaiting Analysis | 未確認 | CWE-73 | A flaw was found in Kata Containers. In configurations utilizing genpolicy for Confidential Containers guest protection, a malicious host operator can exploit insufficient validati |
| CVE-2026-77184 | Analyzed | 未確認 | CWE-89 | In MongoDB Connector for BI, the description text of a collection's JSON schema validator is incorporated into the comment text of the DDL returned by SHOW CREATE statements withou |
| CVE-2026-77217 | Awaiting Analysis | 未確認 | CWE-121, CWE-476 | PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains authenticated stack buffer overflow and null pointer dereference vulnerabilities in /cgi-bin/dispatcher.cgi. The web_r |
| CVE-2026-77218 | Awaiting Analysis | 未確認 | CWE-121 | PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains authenticated stack buffer overflow vulnerabilities in /cgi-bin/dispatcher.cgi. The web_login_first_post handler copie |
| CVE-2026-77219 | Deferred | 未確認 | CWE-125, CWE-190 | GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large d |
| CVE-2026-77220 | Deferred | 未確認 | CWE-825 | PDFio before 1.6.5 contains a dangling pointer vulnerability in the dictionary string-formatting function that stores a pointer to a stack-local buffer in the document dictionary w |
| CVE-2026-77234 | Analyzed | 未確認 | CWE-863 | Improper input validation in FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports to execute code in privileged kernel context. To remediate this iss |
| CVE-2026-77235 | Analyzed | 未確認 | CWE-416 | Missing privilege verification in the secure context cleanup handler in FreeRTOS-Kernel before 11.3.1 might allow local users to cause a use-after-free condition in secure-world me |
| CVE-2026-77236 | Analyzed | 未確認 | CWE-787 | Missing minimum size validation in secure context allocation in FreeRTOS-Kernel before 11.3.1 might allow local users to corrupt secure-world heap metadata via an out-of-bounds wri |
| CVE-2026-77237 | Analyzed | 未確認 | CWE-125, CWE-843 | Missing queue-set type validation in xQueueAddToSet() in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSE_QUEUE_SETS=1 to read |
| CVE-2026-7726 | Deferred | 未確認 | CWE-862 | The Layouts for WPBakery plugin for WordPress is vulnerable to unauthorized actions due to a missing capability check on the `Layouts_WPB_Remote::template_sync()` callback register |
| CVE-2026-77264 | Deferred | 未確認 | CWE-640 | The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and includ |
| CVE-2026-77298 | Deferred | 未確認 | CWE-863 | SeaweedFS is a distributed storage system for files and blobs. In versions 4.39 and earlier, the S3 API accepts an external OIDC JWT sent directly in the Authorization header and m |
| CVE-2026-77310 | Deferred | 未確認 | CWE-918 | jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. Prior to versions 2.18.9, 2.21.5, 2.22.1, 3.1.5, and 3.2.1 on th |
| CVE-2026-77317 | Deferred | 未確認 | CWE-863 | SeaweedFS is a distributed storage system for files and blobs. In versions from 3.88 through 4.39, the SFTP server evaluates configured path permissions with a literal string-prefi |
| CVE-2026-77337 | Deferred | 未確認 | CWE-290, CWE-770 | CakePHP Authentication is an authentication plugin for CakePHP that can also be used in PSR-7 based applications. Versions before 2.11.2, from 3.0.0 through 3.3.6, and from 4.0.0 t |
| CVE-2026-77341 | Deferred | 未確認 | CWE-113, CWE-93 | cpp-httplib is a C++ header-only HTTP/HTTPS library. In version 0.49.0, the chunked-response trailer output path writes trailer header names and values directly to the socket witho |
| CVE-2026-77348 | Deferred | 未確認 | CWE-1188, CWE-441, CWE-918 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 5.0.0, the fix for CVE-2026-33407 (GHSA-hhjq-82f8-m6rc, "SSRF via HTTP Proxy Environment Var |
| CVE-2026-77351 | Deferred | 未確認 | CWE-918 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 5.0.0, Wallos lets any authenticated user store an arbitrary SMTP host — including private a |
| CVE-2026-77352 | Deferred | 未確認 | CWE-918 | Wallos is an open-source, self-hostable personal subscription tracker. From version 2.0.0 to before version 5.0.0, any authenticated Wallos user (no admin rights required) can make |
| CVE-2026-77353 | Deferred | 未確認 | CWE-116, CWE-74 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 5.0.0, Wallos allows authenticated users to inject arbitrary iCalendar properties and events |
| CVE-2026-77354 | Deferred | 未確認 | CWE-400, CWE-789 | kin-openapi is a Go project for handling OpenAPI files. From 0.124.0 until 0.142.0, openapi3filter.sliceMapToSlice in openapi3filter/req_resp_decoder.go converts attacker-controlle |
| CVE-2026-77357 | Deferred | 未確認 | CWE-400, CWE-834 | Mesop is a Python-based UI framework that allows users to build web applications. Prior to 1.3.3, applications running in debug mode expose a GET /hot-reload endpoint whose unbound |
| CVE-2026-77358 | Deferred | 未確認 | CWE-416 | cpp-httplib is a C++ header-only HTTP/HTTPS library. In versions 0.33.0 through 0.50.0, the TLS-enabled WebSocket client frees the TLS session before closing the WebSocket that sti |
| CVE-2026-77365 | Deferred | 未確認 | CWE-79 | The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'a' (above_fol |
| CVE-2026-77368 | Deferred | 未確認 | CWE-639 | SeaweedFS is a distributed storage system for files and blobs. In version 4.39, the filer's TUS resumable-upload handler checks JWT allowed_prefixes scoping only when a session is |
| CVE-2026-77384 | Deferred | 未確認 | CWE-400, CWE-772 | libp2p is a JavaScript implementation of the libp2p networking stack. Prior to version 4.2.9, the reservation refresh path in reservation-store.ts reuses the same retimeableSignal |
| CVE-2026-77391 | Deferred | 未確認 | CWE-352, CWE-862 | A security flaw has been discovered in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0. This affects an unknown function. The manipulation results in cros |
| CVE-2026-77392 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0. This impacts the function saveUser of the file /public/submit.php. This |
| CVE-2026-77413 | Deferred | 未確認 | CWE-94 | JSONata is a JSON query and transformation language. Prior to 1.8.8 and 2.2.0, the src/functions.js lookup function lacked an Object.prototype.hasOwnProperty check and allowed craf |
| CVE-2026-77414 | Deferred | 未確認 | CWE-94 | JSONata is a JSON query and transformation language. Prior to 1.8.8 and 2.2.1, the src/jsonata.js environment.lookup function used a bypassable hasOwnProperty check. Crafted expres |
| CVE-2026-77415 | Deferred | 未確認 | CWE-94 | JSONata is a JSON query and transformation language. Prior to 1.8.8 and 2.2.1, crafted JSONata expressions could chain several object-integrity weaknesses to execute arbitrary code |
| CVE-2026-77438 | Analyzed | 未確認 | CWE-200, CWE-863 | Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the public share-search endpoint does not enforce the per-note shareCredent |
| CVE-2026-77454 | Deferred | 未確認 | CWE-863 | Incorrect Authorization vulnerability in ash-project ash_sql allows a caller to bypass a scoping or authorization filter expressed as exists/2 over a relationship that declares bot |
| CVE-2026-77506 | Deferred | 未確認 | CWE-79 | Znuny before LTS 6.5.22 allows AgentTicketEmailResend template XSS. |
| CVE-2026-77507 | Deferred | 未確認 | CWE-200, CWE-862, CWE-863 | Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.8, Weblate's object-scoped RSS feeds do not apply the permis |
| CVE-2026-77508 | Deferred | 未確認 | CWE-302, CWE-841 | Weblate is a web based localization tool. Prior to 2026.8, an authenticated user can change the account's primary email through PUT or PATCH requests to /api/users/{username}/ with |
| CVE-2026-7753 | Deferred | 未確認 | CWE-862 | The Cost Calculator Builder plugin for WordPress is vulnerable to unauthorized access of sensitive data due to a missing capability check on the `cost-calculator-custom-export-run` |
| CVE-2026-77532 | Deferred | 未確認 | CWE-122 | A malicious actor with access to an adjacent network could exploit a Buffer Overflow vulnerability found in a DHCPv6-enabled EdgeMAX EdgeSwitch to initiate a Remote Code Execution |
| CVE-2026-77533 | Deferred | 未確認 | CWE-20 | A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Inj |
| CVE-2026-77534 | Deferred | 未確認 | CWE-284 | A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privile |
| CVE-2026-77535 | Deferred | 未確認 | CWE-20 | A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command In |
| CVE-2026-77536 | Deferred | 未確認 | CWE-284 | A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privile |
| CVE-2026-77537 | Deferred | 未確認 | CWE-20 | A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host |
| CVE-2026-77538 | Deferred | 未確認 | CWE-284 | A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to escalate privileges within the UniFi Conne |
| CVE-2026-77539 | Deferred | 未確認 | CWE-20 | A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on |
| CVE-2026-77540 | Deferred | 未確認 | CWE-20 | A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on |
| CVE-2026-77541 | Deferred | 未確認 | CWE-284 | A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges wi |
| CVE-2026-77542 | Deferred | 未確認 | CWE-20 | A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UID Enterprise Agent to execute a Command Injecti |
| CVE-2026-77543 | Deferred | 未確認 | CWE-20 | A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Inje |
| CVE-2026-77545 | Deferred | 未確認 | CWE-489 | A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability found in certain devices running UniFi OS |
| CVE-2026-77546 | Deferred | 未確認 | CWE-20 | A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Inje |
| CVE-2026-77547 | Deferred | 未確認 | CWE-20 | A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Inje |
| CVE-2026-77548 | Deferred | 未確認 | CWE-20 | A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Inj |
| CVE-2026-77549 | Deferred | 未確認 | CWE-93 | A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running |
| CVE-2026-77550 | Deferred | 未確認 | CWE-93 | A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentica |
| CVE-2026-77551 | Deferred | 未確認 | CWE-284 | A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Connect Display Cast Pro to escalate |
| CVE-2026-77552 | Deferred | 未確認 | CWE-20 | A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video Bridge to execute a Command Injection on |
| CVE-2026-77553 | Deferred | 未確認 | CWE-284 | A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on t |
| CVE-2026-77554 | Deferred | 未確認 | CWE-20 | A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Talk Application to execute a Command Injection on the host dev |
| CVE-2026-77557 | Deferred | 未確認 | CWE-284 | A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to escalate privileges on the device. |
| CVE-2026-77567 | Deferred | 未確認 | CWE-287 | Filament is a collection of full-stack components for accelerated Laravel development. Prior to versions 4.12.0 and 5.7.0, incorrect challenge-form required-field handling allows a |
| CVE-2026-77573 | Deferred | 未確認 | CWE-367, CWE-918 | Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.8, a user permitted to manage component repository URLs can |
| CVE-2026-77584 | Analyzed | 未確認 | CWE-821 | Tor before 0.4.9.10 did not reject a CONFLUX_LINK cell that arrives on a circuit which already has attached streams. A malicious client could send a RELAY_COMMAND_BEGIN before the |
| CVE-2026-77585 | Awaiting Analysis | 未確認 | CWE-78 | The Okta Privileged Access client does not reject a leading hyphen in the username portion of an SSH target. As a result, the value may be interpreted as a command-line option by t |
| CVE-2026-77586 | Analyzed | 未確認 | CWE-89 | In MongoDB Connector for BI, MongoDB object names such as collection, field, and index names are placed into the quoted identifiers of the DDL text returned by SHOW CREATE statemen |
| CVE-2026-77587 | Analyzed | 未確認 | CWE-416, CWE-911 | Tor before 0.4.9.11 is prone to a use-after-free (and potential double free) of a conflux object when a recovery leg revives a conflux set whose last linked leg has already been cl |
| CVE-2026-77611 | Deferred | 未確認 | CWE-863 | SeaweedFS is a distributed storage system for files and blobs. In versions prior to 4.40, an authenticated S3 principal with permissions scoped to a nested object key can overwrite |
| CVE-2026-77634 | Deferred | 未確認 | CWE-93 | CakePHP is a rapid development framework for PHP. Prior to versions 4.5.12, 4.6.5, 5.1.8, 5.2.14, and 5.3.7 on their respective release lines, custom mail headers added with Messag |
| CVE-2026-77635 | Deferred | 未確認 | CWE-89 | CakePHP is a rapid development framework for PHP. Prior to versions 5.1.10, 5.2.15, and 5.3.7 on their respective release lines, FunctionsBuilder::jsonValue() with PostgresDriver i |
| CVE-2026-77638 | Analyzed | 未確認 | CWE-362 | Tor before 0.4.9.11 is prone to a race condition where in just the right circumstances a rendezvous point could man-in-the-middle (impersonate) the onion service that the client wa |
| CVE-2026-77639 | Analyzed | 未確認 | CWE-420 | Tor before 0.4.9.9 was prone to a compression bomb bypass where an attacker could concatenate many gzip or zlib sub-streams, each just under the per-stream detection threshold, to |
| CVE-2026-77640 | Analyzed | 未確認 | CWE-1284 | tor before 0.4.9.9 was prone to an infinite loop when decompressing a truncated zlib/gzip stream with done=1. A truncated stream never reaches Z_STREAM_END, causing zlib to retur |
| CVE-2026-77641 | Analyzed | 未確認 | CWE-252 | tor before 0.4.9.9 was prone to a NULL write after free when sending a CONFLUX_SWITCH cell fails. The return value of relay_send_command_from_edge() was ignored, so a send failur |
| CVE-2026-77642 | Analyzed | 未確認 | CWE-787 | tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached signature with unexpected signature digest type. Impact is minor for most Tor roles, b |
| CVE-2026-77643 | Deferred | 未確認 | CWE-79 | A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 2.1.0 and before 1.4.32 exists due to incomplete HTML escaping by Xapian |
| CVE-2026-77644 | Deferred | 未確認 | CWE-306, CWE-620 | A critical bypass access control vulnerability has been reported in PTC Windchill Risk and Reliability (WRR) Enterprise Edition. |
| CVE-2026-77645 | Deferred | 未確認 | CWE-20, CWE-502 | A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted |
| CVE-2026-77646 | Deferred | 未確認 | CWE-502, CWE-918 | A Server-Side Request Forgery (SSRF) vulnerability has been reported in PTC Windchill PDMLink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of unt |
| CVE-2026-77647 | Deferred | 未確認 | CWE-94 | SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to incorrect identification of <?php |
| CVE-2026-77648 | Awaiting Analysis | 未確認 | CWE-918 | In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass import_filtering_opts, allowing an admin to fetch internal URLs from the Glance service |
| CVE-2026-77649 | Deferred | 未確認 | CWE-506 | The internment crate 0.8.7 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency that registers with a co |
| CVE-2026-77650 | Deferred | 未確認 | CWE-506 | The append-only-vec crate 0.1.9 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency that registers with |
| CVE-2026-77651 | Deferred | 未確認 | CWE-506 | The arrayref crate 0.3.10 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency that registers with a com |
| CVE-2026-77652 | Awaiting Analysis | 未確認 | CWE-122 | A heap-based buffer overflow vulnerability exists in the Dia diagram editor WPG file format importer. In plug-ins/wpg/wpg-import.c, the WPG import renderer allocates a fixed palet |
| CVE-2026-77658 | Awaiting Analysis | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability exists in the Dia diagram editor when processing Network Bus objects from Dia XML project files. In objects/network/bus.c, bus_load() r |
| CVE-2026-77680 | Awaiting Analysis | 未確認 | CWE-407 | An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a cl |
| CVE-2026-77681 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was identified in CodeAstro Online Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /users/update-profile.php. The manipulatio |
| CVE-2026-77683 | Deferred | 未確認 | CWE-74, CWE-77 | A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function system of the file /cgi-bin/mbox-config?method=SET§ion=ntp_timezone. The |
| CVE-2026-77686 | Deferred | 未確認 | CWE-266, CWE-285 | A weakness has been identified in Dolibarr up to 23.0.4. This affects an unknown part of the file htdocs/user/card.php of the component Account Handler. This manipulation of the ar |
| CVE-2026-77693 | Deferred | 未確認 | CWE-73 | The Order Tip for WooCommerce WordPress plugin before 1.6.0 does not check the capability of the user requesting a file deletion, nor does it restrict which path may be deleted, al |
| CVE-2026-77694 | Deferred | 未確認 | CWE-862 | The Eventin WordPress plugin before 4.1.19 does not properly restrict which changes a guest checkout token is allowed to authorise on an order, allowing unauthenticated users to m |
| CVE-2026-77695 | Deferred | 未確認 | CWE-284 | The Return Refund and Exchange For WooCommerce WordPress plugin before 4.6.4 does not correctly verify the ownership of guest orders in some of the AJAX actions it exposes to unaut |
| CVE-2026-77701 | Deferred | 未確認 | CWE-862 | The WCFM Marketplace WordPress plugin before 3.8.2 does not correctly verify that the person requesting a refund owns the order, allowing unauthenticated users to create refund re |
| CVE-2026-77704 | Deferred | 未確認 | CWE-863 | The Booking for Appointments and Events Calendar WordPress plugin before 2.4.9 does not check that a user holds the required capability before letting them change an appointment's |
| CVE-2026-77710 | Deferred | 未確認 | CWE-20 | A vulnerability in misp-stix could allow a crafted STIX document to influence security-sensitive MISP attribute metadata during import. The STIX import logic automatically selecte |
| CVE-2026-77751 | Deferred | 未確認 | CWE-22 | A path traversal vulnerability existed in the handling of MISP object template names during STIX 2 import and MISP-to-STIX 2 export. MISP object names are passed to PyMISP's objec |
| CVE-2026-77754 | Deferred | 未確認 | CWE-200 | The Kirki WordPress plugin before 6.0.14 does not perform a capability check on some endpoints of one of its public AJAX actions, allowing unauthenticated users to retrieve the em |
| CVE-2026-77755 | Deferred | 未確認 | CWE-400 | A denial-of-service vulnerability was identified in misp-stix when processing attacker-controlled STIX 1 or STIX 2 documents. The STIX import code used sys.exit() to handle severa |
| CVE-2026-77757 | Deferred | 未確認 | CWE-22 | The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.3 does not sanitize a user-supplied image reference before using it as the sou |
| CVE-2026-77758 | Deferred | 未確認 | CWE-200 | The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.1 does not properly verify that a customer portal session has completed its confirmation step before returning |
| CVE-2026-77759 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key in the transaction API in Roskus Prospero Flow CRM 5.0.0 through 5.3.5 allows an authenticated user to read the transactions of oth |
| CVE-2026-77761 | Deferred | 未確認 | CWE-459 | A parser state isolation vulnerability in misp-stix could cause data from a previously processed STIX document to be retained and incorporated into the MISP event generated from a |
| CVE-2026-77763 | Deferred | 未確認 | CWE-22 | The filestore backend in pkg/object/file.go, used for file:// stores and as a common juicefs sync destination, derived every operation's target from path(key), which returned eithe |
| CVE-2026-77767 | Deferred | 未確認 | CWE-862 | Reconmap's API applies a fallback authorization policy in apps/api/app/Program.cs that requires an authenticated user holding the administrator role, so controllers without their o |
| CVE-2026-77768 | Deferred | 未確認 | CWE-639 | The report.get procedure in packages/trpc/src/routers/report.ts accepted only a reportId and returned getReportById(reportId) directly. The enforceAccess middleware in packages/trp |
| CVE-2026-77769 | Deferred | 未確認 | CWE-639 | The report.list procedure in packages/trpc/src/routers/report.ts accepted a projectId and a dashboardId and returned getReportsByDashboardId(dashboardId). The enforceAccess middlew |
| CVE-2026-77775 | Deferred | 未確認 | CWE-918 | Headroom's LLM proxy lets a client choose the upstream destination with the x-headroom-base-url request header. _resolve_openai_upstream_base in headroom/proxy/handlers/openai.py a |
| CVE-2026-77776 | Deferred | 未確認 | CWE-639 | Headroom's LLM proxy derives the memory owner from the x-headroom-user-id request header. The header is read directly at several points in headroom/proxy/handlers/openai.py, includ |
| CVE-2026-77780 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key in the transaction save endpoint in Roskus Prospero Flow CRM 4.9.1 through 5.14.0 allows a user with transaction and accounting cre |
| CVE-2026-77781 | Deferred | 未確認 | CWE-248 | Tie::Hash::Regex versions before 2.0.0 for Perl will throw an exception on unparseable lookup keys. The FETCH, EXISTS and DELETE methods throw an exception when on malformed regul |
| CVE-2026-77786 | Deferred | 未確認 | CWE-863 | The Rank Math SEO WordPress plugin before 1.0.277 does not check that the user requesting an automated SEO fix holds the capability WordPress itself requires for the settings bein |
| CVE-2026-77789 | Deferred | 未確認 | CWE-639 | The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.1 does not verify that a subscription belongs to the customer bound to the requesting customer-portal session b |
| CVE-2026-77790 | Deferred | 未確認 | CWE-89 | The RegistrationMagic WordPress plugin before 6.0.9.4 does not sanitise and escape a parameter before using it in a SQL statement, which could allow high privilege users such as a |
| CVE-2026-77795 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.6.2. This issue affects the function FlwInstanceController/FlwDefinitionController/FlwCategoryController/FlwSpelCon |
| CVE-2026-77801 | Analyzed | 未確認 | CWE-770 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.8 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, could have |
| CVE-2026-77806 | Deferred | 未確認 | CWE-94 | SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to code injection via an X-Spip-Filtr |
| CVE-2026-77810 | Awaiting Analysis | 未確認 | CWE-95 | In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. To rem |
| CVE-2026-77811 | Awaiting Analysis | 未確認 | CWE-79 | Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write permissions to OpenSearch Dashboards saved o |
| CVE-2026-77812 | Deferred | 未確認 | CWE-311 | DJI drones transmit DUML (DJI Universal Markup Language) protocol messages over BLE (Bluetooth Low Energy) without encryption. When a client attempts to connect to the drone over W |
| CVE-2026-77814 | Deferred | 未確認 | CWE-22 | is_path_trusted in scripts/iib/api.py compares the requested path against each allowed parent directory with path.startswith(parent_path), without appending a path separator. A dir |
| CVE-2026-77815 | Deferred | 未確認 | CWE-59 | to_abs_path in scripts/iib/tool.py normalised the requested path with os.path.normpath, which collapses dot segments but does not resolve symbolic links. A symlink placed inside a |
| CVE-2026-77824 | Deferred | 未確認 | CWE-89 | The Media Sweep – WordPress Media Cleaner plugin for WordPress is vulnerable to generic SQL Injection via the 'fields' parameter in all versions up to, and including, 1.1.3 due to |
| CVE-2026-77831 | Deferred | 未確認 | CWE-407 | Inefficient Algorithmic Complexity vulnerability in ash-project ash_paper_trail allows a user who can submit a large array attribute to a paper-trailed create or update action to c |
| CVE-2026-77838 | Deferred | 未確認 | CWE-79 | SOY Calendar contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product. |
| CVE-2026-77846 | Deferred | 未確認 | CWE-943 | Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ash_sqlite allows an attacker who controls a get_path/2 segment to traverse into nested |
| CVE-2026-77850 | Deferred | 未確認 | CWE-79 | Stored Cross-site Scripting vulnerability in ash-project ash_admin executes attacker-supplied record content as script in an administrator's browser. The relationship typeahead co |
| CVE-2026-77914 | Awaiting Analysis | 未確認 | CWE-22 | rConfig Core 8.0.0 before 8.2.13 contains a path traversal vulnerability that allows authenticated users to read arbitrary files by supplying crafted filenames containing directory |
| CVE-2026-77915 | Deferred | 未確認 | CWE-1188, CWE-306 | rConfig Core 8.0.0 before 8.2.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register accounts with full Administrator privileges |
| CVE-2026-77923 | Analyzed | 未確認 | CWE-863 | Dolibarr 21.0.0 before 24.0.0 contains an authorization bypass vulnerability caused by an inverted boolean condition in the private-project membership check within the clonetasks m |
| CVE-2026-77939 | Deferred | 未確認 | CWE-1336, CWE-94 | Flextype CMS through v1.0.0-dev contains an expression language injection vulnerability that allows authenticated attackers with a valid API token to read arbitrary files by passin |
| CVE-2026-77945 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was found in TRENDnet TEW-821DAP 2.2.01b05. Affected is an unknown function of the file /cgi-bin/upload.cgi of the component ssi. Performing a manipulation of the a |
| CVE-2026-77946 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected by this vulnerability is the function uci_safe_get of the file /cgi-bin/apply_time.cgi of the component NT |
| CVE-2026-77956 | Deferred | 未確認 | CWE-94 | Improper Control of Generation of Code (Code Injection) vulnerability in ash-project ash_ai allows a remote, unauthenticated client to execute arbitrary Elixir code. AshAi.Actions |
| CVE-2026-77966 | Deferred | 未確認 | CWE-862 | The affected Ebyte product does not provide separation between limited and administrative management functions. A low privileged authenticated attacker could access security se |
| CVE-2026-77970 | Deferred | 未確認 | CWE-312 | Cleartext Storage of Sensitive Information vulnerability in ash-project ash_paper_trail allows an attacker with read access to the generated version resource to recover sensitive v |
| CVE-2026-77975 | Deferred | 未確認 | CWE-312 | The affected Ebyte product exports administrative credentials and other sensitive configuration information without adequate protection. An unauthenticated attacker on the adja |
| CVE-2026-77977 | Deferred | 未確認 | CWE-306 | Ebyte gateway product's vendor configuration utility does not require authentication before allowing certain disruptive administrative actions when default credentials remain con |
| CVE-2026-77988 | Deferred | 未確認 | CWE-74, CWE-77 | A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvram_get of the component CLI Configuration Tool. This manipulation causes |
| CVE-2026-77989 | Deferred | 未確認 | CWE-79 | Joomla Extension - joomlaeventmanager.net - Reflected XSS via the PDF export link in Joomla Events Manager < 5.0.1 - buildCurrentPdfLink copies the current request query string int |
| CVE-2026-77990 | Deferred | 未確認 | CWE-639 | Joomla Extension - joomlaeventmanager.net - Attendee lists readable by any logged-in user in Joomla Event Manager < 5.0.1 - A non-manager can therefore read attendee names, usernam |
| CVE-2026-77991 | Deferred | 未確認 | CWE-434 | Joomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager < 5.0.1 - The administrator source model allows to write dangerous file type in |
| CVE-2026-77992 | Deferred | 未確認 | CWE-94 | Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2 - The onUpdateComment endpoint did not perform any access checks. |
| CVE-2026-77993 | Deferred | 未確認 | CWE-79 | Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a reflected XSS via the iscontenttype parameter. |
| CVE-2026-77994 | Deferred | 未確認 | CWE-89 | Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the |
| CVE-2026-77995 | Deferred | 未確認 | CWE-639 | Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0, OAuth Single Sign-On – OIDC SSO < 1.2.2, Login with Keycloak OAuth Single Sign-On |
| CVE-2026-77996 | Deferred | 未確認 | CWE-79 | Joomla Extension - yootheme.com - Authenticated, privileged stored XSS in YOOtheme Pro 1.0.0-5.0.41 - Lack of escaping in the location custom field lead to a XSS vector. |
| CVE-2026-77997 | Deferred | 未確認 | CWE-284 | Joomla Extension - yootheme.com - Authenticated, privileged information disclosure in YOOtheme Pro 1.0.0-5.0.41 - A missing access check allowed users with com_template editing per |
| CVE-2026-77998 | Deferred | 未確認 | CWE-639 | Joomla Extension - miniorange.com - Unauthenticated Authentication Bypass via SAMLResponse Parameter in miniOrange SAML SSO < 11.0.2, SAML SP Single Sign On – Login with ADFS < 6.4 |
| CVE-2026-78002 | Awaiting Analysis | 未確認 | CWE-131 | A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript `replace()` function by sending specially crafted syslog mess |
| CVE-2026-78003 | Deferred | 未確認 | CWE-918 | The Mailgun for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery (SSRF) via path traversal in versions up to and including 2.2.0. This is due to insuffic |
| CVE-2026-78008 | Deferred | 未確認 | CWE-787 | A buffer overflow vulnerability in the WatchGuard Fireware OS Management Web UI allows an authenticated administrator with network access to cause a denial of service (DoS) conditi |
| CVE-2026-78009 | Deferred | 未確認 | CWE-125, CWE-20 | An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN process |
| CVE-2026-78010 | Deferred | 未確認 | CWE-121, CWE-1284, CWE-787 | A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process iallows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VP |
| CVE-2026-78011 | Deferred | 未確認 | CWE-191, CWE-787 | An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processi |
| CVE-2026-78032 | Deferred | 未確認 | CWE-502 | SOY CMS contains an issue with deserialization of untrusted data. An arbitrary code may be executed by an attacker with the web server privilege. |
| CVE-2026-78037 | Deferred | 未確認 | CWE-78 | Xiiaozet LK100W is vulnerable to OS command injection through its web-based management interface. An authenticated attacker may be able to execute arbitrary operating system comm |
| CVE-2026-78038 | Deferred | 未確認 | CWE-915 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in ash-project ash_oban allows a user whose input reaches the :args option of AshOban.b |
| CVE-2026-78047 | Deferred | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability in WatchGuard Dimension's task scheduling feature allows a low-privileged authenticated administrator to inject arbitrary HTML/Jav |
| CVE-2026-78049 | Deferred | 未確認 | CWE-119, CWE-125 | A vulnerability has been found in Systerel S2OPC up to 1.7.3. Impacted is the function SOPC_NodeMgtHelperInternal_AddVariableNodeAttributes of the file src/ClientServer/address_spa |
| CVE-2026-78050 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was found in Comfast CF-N1-S 2.6.0.1. The affected element is the function sub_41AD7C of the file /cgi-bin/mbox-config?method=SET§ion=ntp_timezone of the compon |
| CVE-2026-78051 | Deferred | 未確認 | CWE-425, CWE-552 | A vulnerability was determined in alexta69 MeTube up to 2026.06.10. The impacted element is an unknown function of the file /download/.metube/cookies.txt of the component Cookie Fi |
| CVE-2026-78054 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /BSIS1.php. Executing a manipulation of the argu |
| CVE-2026-78055 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /BSIT2.ph |
| CVE-2026-78056 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. Affected by this issue is some unknown functionality of the comp |
| CVE-2026-78057 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affects an unknown part of the component Management Mutation Handl |
| CVE-2026-78059 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in SourceCodester Stock Management System 1.0. This vulnerability affects unknown code of the file /php_action/printOrder.php. Such manipulation of t |
| CVE-2026-78060 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /php_action/getOrderReport.php. Performing a manipul |
| CVE-2026-78061 | Deferred | 未確認 | CWE-918 | A vulnerability was determined in vas3k TaxHacker up to 0.8.2. Impacted is the function buildImapConfig of the file lib/email-sync/imap-client.ts of the component Email Sync. Execu |
| CVE-2026-78062 | Deferred | 未確認 | CWE-259, CWE-798 | A vulnerability was identified in vas3k TaxHacker up to 0.8.2. The affected element is the function envSchema.parse of the file lib/config.ts of the component JWT Secret Handler. T |
| CVE-2026-78063 | Deferred | 未確認 | CWE-74, CWE-77 | A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formeditFileName of the file /goform/editFileName. The manipulation of the argument |
| CVE-2026-78070 | Deferred | 未確認 | CWE-89 | Joomla Extension - digital-peak.com - Authenticated, privileged blind SQL injection in DP Calendar 5.5.0 - 10.11.2 - Saving an article can trigger a blind SQL injection with conten |
| CVE-2026-78071 | Deferred | 未確認 | CWE-79 | Joomla Extension - digital-peak.com - Authenticated, privileged stored XSS in DP Calendar 7.0.0-8.19.5, 9.0.0-10.12.0 - Location title is rendered in data attribute without escapin |
| CVE-2026-78072 | Deferred | 未確認 | CWE-89 | Joomla Extension - Jefferson49 - Unauthenticated blind SQLi in Sexy Polling Reloaded < 5.6.1 |
| CVE-2026-78073 | Deferred | 未確認 | CWE-79 | Joomla Extension - mrvinoth.com - Reflected XSS in All Video Share 1.0.0-4.5.0 - Various user supplied inputs lacked escaping, leading to reflected XSS vectors |
| CVE-2026-78074 | Deferred | 未確認 | CWE-284 | Joomla Extension - miniorgange.com - Unauthenticated arbitrary extension deinstallation via various miniOrange extensions - a missing authentication check allows unauthenticated ac |
| CVE-2026-78075 | Deferred | 未確認 | CWE-639 | Joomla Extension - joomshaper.com - Broken Object-Level Authorization in Blog Image Deletion in Helix Ultimate < 2.2.10 - `Blog::remove_image()` checked whether the user was author |
| CVE-2026-78076 | Deferred | 未確認 | CWE-284 | Joomla Extension - joomshaper.com - Broken Access Control & Missing Authorization in MegaMenu Settings in Helix Ultimate < 2.2.10 - The AJAX endpoint save-megamenu-settings failed |
| CVE-2026-78077 | Deferred | 未確認 | CWE-79 | Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in MegaMenu Layout Container & Embed Inputs in Helix Ultimate < 2.2.10 - Unsanitized column and item configur |
| CVE-2026-78078 | Deferred | 未確認 | CWE-434 | Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10 - Image uploads previously validated only file extension and basic |
| CVE-2026-78079 | Deferred | 未確認 | CWE-601 | Joomla Extension - joomshaper.com - Open Redirect via Base64 Return Parameter in Helix Ultimate < 2.2.10 - Return redirect parameters accepted arbitrary Base64 strings without veri |
| CVE-2026-7808 | Deferred | 未確認 | CWE-20 | justhtml before 1.16.0 contains multiple HTML sanitization bypass issues that can allow active/dangerous content (e.g., script or style) to survive sanitization, potentially leadin |
| CVE-2026-78103 | Deferred | 未確認 | CWE-841 | WatchGuard Dimension provides a client-side lock/unlock UI control for management changes. The server-side configuration endpoint does not enforce this lock/unlock workflow state, |
| CVE-2026-78112 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of the file /viewservicetype.php. This manipulation of the arg |
| CVE-2026-78115 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /admin/edit_user_account.php of the component Us |
| CVE-2026-78122 | Deferred | 未確認 | CWE-1220 | docker-socket-proxy fails to properly gate read endpoints in the /containers Docker API namespace when the CONTAINERS environment variable is set. Attackers can use GET requests to |
| CVE-2026-78125 | Deferred | 未確認 | CWE-200 | The LearnPress WordPress plugin before 4.0.3 does not perform any authorization check on one of its REST endpoints in all versions up to, and including, 4.0.2, allowing unauthenti |
| CVE-2026-78136 | Deferred | 未確認 | CWE-95 | chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in _clean_tmode in drivers/kenwood_itm.py. |
| CVE-2026-78137 | Deferred | 未確認 | CWE-862 | The StoreGrowth WordPress plugin before 2.1.2 does not validate a browser-supplied product price on two of its unauthenticated actions, allowing unauthenticated attackers to add a |
| CVE-2026-78138 | Deferred | 未確認 | CWE-200 | The Finale Lite WordPress plugin before 2.21.0 does not perform a capability check on an AJAX action that returns a sales-campaign's configuration for an arbitrary post ID, allowi |
| CVE-2026-78139 | Deferred | 未確認 | CWE-639 | The Notifima WordPress plugin before 3.1.4 does not verify that the caller owns the subscription being modified on one of its REST endpoints in all versions up to, and including, |
| CVE-2026-78140 | Deferred | 未確認 | CWE-1336, CWE-791 | A flaw has been found in Dromara UJCMS up to 10.1.3. The impacted element is the function update of the file src/main/java/com/ujcms/cms/ext/web/backendapi/WebFileTemplateControlle |
| CVE-2026-78141 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to co |
| CVE-2026-78142 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was found in code-projects Barangay Resident Profiling Management System 1.0. This impacts an unknown function of the file /archived_records.php of the component Re |
| CVE-2026-78143 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0. Affected is an unknown function of the file residents.php of the component Reside |
| CVE-2026-78144 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was identified in code-projects Barangay Resident Profiling Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /boarders. |
| CVE-2026-78145 | Deferred | 未確認 | CWE-601 | A vulnerability has been found in CTFd up to 3.8.4. The affected element is the function _is_safe_url of the file CTFd/utils/validators/__init__.py. Such manipulation of the argume |
| CVE-2026-78146 | Deferred | 未確認 | CWE-200 | The Simple Newsletter Plugin WordPress plugin before 4.3.3 does not verify that the requester is the subscriber named in a public request before rendering that subscriber's stored |
| CVE-2026-78147 | Deferred | 未確認 | CWE-20, CWE-502 | A vulnerability was found in ggml-org llama.cpp bec4772f6. The impacted element is the function deserialize_tensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component ggml- |
| CVE-2026-78148 | Deferred | 未確認 | CWE-404, CWE-476 | A vulnerability was determined in ggml-org llama.cpp bec4772f6. This affects the function rpc_server::graph_compute of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component ggml |
| CVE-2026-78154 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a se | |
| CVE-2026-78155 | Analyzed | 未確認 | CWE-426 | privilege escalation in StackGres operator allows a low-privilege tenant who owns a database to gain administrator privileges |
| CVE-2026-78156 | Deferred | 未確認 | CWE-119, CWE-122 | A security vulnerability has been detected in Open5GS 2.8.0. Affected by this issue is the function hss_ogs_diam_s6a_air_cb of the file src/hss/hss-s6a-path.c of the component S6a |
| CVE-2026-78157 | Deferred | 未確認 | CWE-119, CWE-125 | A vulnerability was detected in Open5GS 2.8.0. This affects the function pcrf_rx_aar_cb of the file src/pcrf/pcrf-rx-path.c of the component Rx AA-Request Handler. Performing a man |
| CVE-2026-78158 | Deferred | 未確認 | CWE-266, CWE-285 | A flaw has been found in Open5GS 2.8.0. This vulnerability affects unknown code of the component AMF UEContextReleaseRequest Path Handler. Executing a manipulation can lead to impr |
| CVE-2026-78160 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability has been found in Dolibarr ERP up to 18.0.10/22.0.5/23.0.3. This issue affects some unknown processing of the file /user/note.php of the component User Notes Handle |
| CVE-2026-78161 | Deferred | 未確認 | CWE-119, CWE-787 | A vulnerability was found in warmcat libwebsockets 4.5.0. Impacted is the function report_raw_cbor of the file lib/misc/lecp.c of the component LECP CBOR Recording. The manipulatio |
| CVE-2026-78166 | Deferred | 未確認 | CWE-74, CWE-94 | A security flaw has been discovered in provectus kafka-ui up to 0.7.2. The affected element is the function executeSmartFilterTest of the file kafka-ui-api/src/main/java/com/provec |
| CVE-2026-78167 | Deferred | 未確認 | CWE-287 | A weakness has been identified in EFM ipTIME T16000M 14.20.2. The impacted element is the function httpcon_check_session_url of the component Session Validation Handler. This manip |
| CVE-2026-78168 | Deferred | 未確認 | CWE-287 | A security vulnerability has been detected in EFM ipTIME T24000M up to 14.20.0. This affects the function httpcon_check_session_url of the component Session Validation Handler. Suc |
| CVE-2026-78169 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This impacts the function strcpy of the file /goform/aspRemoteApConfTempSend of the component HTTP Reque |
| CVE-2026-78170 | Deferred | 未確認 | CWE-119, CWE-120 | A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcpy of the file /goform/formConfigFastDirectionW. Executing a manipulation of the argument |
| CVE-2026-78171 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/processlogin.php. The m |
| CVE-2026-78174 | Deferred | 未確認 | CWE-200, CWE-269, CWE-532 | WatchGuard Dimension records unredacted session identifiers for logged-in users in its web UI diagnostic log. A low-privileged Dimension Administrator can retrieve this log and ext |
| CVE-2026-78177 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was found in TanStack devtools-vite 0.7.0. Affected by this issue is the function installPackage of the file packages/devtools-bundler-core/src/package-manager.ts o |
| CVE-2026-78178 | Deferred | 未確認 | CWE-1321, CWE-94 | A vulnerability was determined in jQWidgets up to 24.0.1. This affects the function JQXLite.extend/jqxBaseFramework.extend of the file jqwidgets/jqx-all.js. This manipulation cause |
| CVE-2026-78179 | Deferred | 未確認 | CWE-1321, CWE-94 | A vulnerability was identified in rexrainbow phaser3-rex-notes up to 1.80.17. This vulnerability affects the function SetValue of the file plugins/utils/object/SetValue.js of the c |
| CVE-2026-78180 | Deferred | 未確認 | CWE-1321, CWE-94 | A security flaw has been discovered in alibaba-fusion next up to 1.27.34. This issue affects the function ConfigProvider.getContextProps of the file components/dialog/index.tsx of |
| CVE-2026-78181 | Deferred | 未確認 | CWE-1321, CWE-94 | A weakness has been identified in ractivejs ractive up to 1.4.4. Impacted is the function Ractive#set of the component Keypath Handler. Executing a manipulation can lead to imprope |
| CVE-2026-78182 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System up to 300R004C00B300. The affected element is the function P |
| CVE-2026-78183 | Deferred | 未確認 | CWE-787 | DBD::Pg version 3.21.0 for Perl has a heap out-of-bounds write in quote_float. quote_float() allocates the length of the string + 1, which is the size of the bare numeric symbol p |
| CVE-2026-78185 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/cust_edit.php. The manipulation of the a |
| CVE-2026-78186 | Deferred | 未確認 | CWE-617 | A flaw has been found in Open5GS up to 2.8.0. This affects an unknown function of the file src/hss/hss-cx-path.c of the component HSS. This manipulation of the argument User-Name c |
| CVE-2026-78187 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in Piwigo 16.3.0. This impacts an unknown function of the component Public Authentication Page. Such manipulation of the argument lang leads to cross |
| CVE-2026-78195 | Rejected | 未確認 | Rejected reason: Rejecting as a duplicate of CVE-2026-78047 | |
| CVE-2026-78196 | Deferred | 未確認 | CWE-22 | A security flaw has been discovered in achorein expo-share-intent up to 8.0.0. This affects the function getDataColumn of the file ExpoShareIntentModule.kt of the component Android |
| CVE-2026-78197 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in SourceCodester Simple Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /fos/admin/ajax.php?action=save_user. T |
| CVE-2026-78198 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /fos/admin/ajax.php?acti |
| CVE-2026-78199 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function of the file /fos/view_prod.php. Performing a manipulation of |
| CVE-2026-78200 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in itsourcecode Library Management System 1.0. The affected element is an unknown function of the file editbooks.php. Executing a manipulation of the argument |
| CVE-2026-78201 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in itsourcecode Payroll System 1.0. The impacted element is the function Login of the file admin_class.php. The manipulation of the argument Username |
| CVE-2026-78202 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was found in itsourcecode Payroll System 1.0. This affects the function save_settings of the file admin_class.php. The manipulation of the argument img results in u |
| CVE-2026-78203 | Deferred | 未確認 | CWE-639 | Ghostwriter before 7.1.2 fails to validate template ownership in the report template swap endpoint, allowing attackers to attach client-scoped templates from other clients to their |
| CVE-2026-78204 | Deferred | 未確認 | CWE-862 | Ghostwriter through 7.2.6 does not apply per-object authorization on its report template lint endpoints. RoleBasedAccessControlMixin.test_func returns only request.user.is_active u |
| CVE-2026-78205 | Awaiting Analysis | 未確認 | CWE-918 | BentoML's outbound connection safeguard (make_safe_connect in _internal/utils/uri.py) blocks private, loopback, and link-local IP addresses but fails to reject the RFC 6598 shared |
| CVE-2026-78206 | Deferred | 未確認 | CWE-409 | exceljs through 4.4.0 decompresses all entries from supplied xlsx archives into memory without limits on entry size, total size, or compression ratio. Attackers can upload highly c |
| CVE-2026-78207 | Deferred | 未確認 | CWE-1321 | exceljs through 4.4.0 contains a prototype pollution vulnerability in the deepMerge helper that fails to reject __proto__, constructor, or prototype keys when merging note objects. |
| CVE-2026-78208 | Deferred | 未確認 | CWE-73 | exceljs through 4.4.0 contains a path traversal vulnerability in the Workbook.addImage() function that fails to validate file paths. Attackers can supply arbitrary file paths to re |
| CVE-2026-78209 | Deferred | 未確認 | CWE-1236 | exceljs through 4.4.0 fails to neutralize leading equals, plus, minus, or at signs in cell values written to CSV output. Attackers who can influence exported cell values can inject |
| CVE-2026-78211 | Deferred | 未確認 | CWE-78 | 4MOSAn GCB Doctor developed by 4MOSAn Security Technology has a OS Command Injection vulnerability. Unauthenticated remote attackers can inject malicious commands through an unremo |
| CVE-2026-78212 | Deferred | 未確認 | CWE-23 | 4MOSAn developed by 4MOSAn Security Technology Co., Ltd. has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit a Relative Path Traversal flaw to do |
| CVE-2026-78213 | Deferred | 未確認 | CWE-79 | Heptabase developed by Hepta Platforms, Inc. has a Stored Cross-Site Scripting vulnerability. Authenticated remote attackers can inject persistent malicious content into specific p |
| CVE-2026-78228 | Deferred | 未確認 | CWE-674 | Uncontrolled Recursion vulnerability in ash-project ash_oban allows a user who can drive a trigger's on_error action to fail on the final attempt to exhaust worker CPU and memory, |
| CVE-2026-78236 | Deferred | 未確認 | CWE-284, CWE-285, CWE-287, CWE-327 | An insecure PIN derivation mechanism in ABR allows a low-privileged user to escalate privileges to administrator by communicating over Cross-Process Communication (XPC) while masqu |
| CVE-2026-78237 | Deferred | 未確認 | CWE-20 | Insufficient input validation in ABR allows a low-privileged user to inject malicious entries into the sudoers file, resulting in persistent root access that remained effective aft |
| CVE-2026-78238 | Deferred | 未確認 | CWE-79 | SOY Gallery contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product. |
| CVE-2026-78239 | Deferred | 未確認 | CWE-306 | Xiiaozet LK100W exposes a critical management function that can be invoked without authentication, allowing a remote attacker to enable administrative services that should be res |
| CVE-2026-78244 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in itsourcecode Real Estate Management System 1.0. Affected by this issue is some unknown functionality of the file search.php. Performing a manipulati |
| CVE-2026-78245 | Deferred | 未確認 | CWE-284, CWE-434 | A flaw has been found in itsourcecode Online Pharmacy System 1.0. This affects the function move_uploaded_file of the file all_users/register.php of the component User Registration |
| CVE-2026-78246 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file success/login.php of the component Admin Log |
| CVE-2026-78247 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /fos/admin/ajax.php?action=confirm_order. |
| CVE-2026-78248 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function of the file /fos/admin/ajax.php?action=save_settings. This |
| CVE-2026-78250 | Deferred | 未確認 | CWE-404, CWE-835 | A vulnerability was identified in bytebot-ai bytebot 0.0.1. The affected element is an unknown function of the component Agent Execution Workflow. Such manipulation leads to infini |
| CVE-2026-78251 | Deferred | 未確認 | CWE-798 | DJI drones contain an FTP service that uses hardcoded credentials shared across affected models and permits authenticated users to upload files without limits on file size, file co |
| CVE-2026-78255 | Deferred | 未確認 | CWE-306 | The HTTP media server running on DJI drones serves stored photos and videos through the `/v2` endpoint without authenticating the requesting client. Filenames follow a predictable |
| CVE-2026-78257 | Deferred | 未確認 | CWE-502 | Contributor PHP Object Injection in Booking and Rental Manager <= 2.7.5 versions. |
| CVE-2026-78258 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Booking and Rental Manager <= 2.7.5 versions. |
| CVE-2026-78259 | Deferred | 未確認 | CWE-288 | Unauthenticated Broken Authentication in WPLegalPages <= 3.7.0 versions. |
| CVE-2026-78260 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Epayco <= 8.4.6 versions. |
| CVE-2026-78261 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Realtyna Organic IDX plugin <= 5.4.1 versions. |
| CVE-2026-78262 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in WP Project Manager <= 4.0.6 versions. |
| CVE-2026-78263 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Event Tickets <= 5.29.2.1 versions. |
| CVE-2026-78264 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Toolset Blocks <= 1.6.26 versions. |
| CVE-2026-78265 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in The Events Calendar <= 6.17.2 versions. |
| CVE-2026-78266 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in AutomatorWP <= 5.8.3 versions. |
| CVE-2026-78267 | Deferred | 未確認 | CWE-266 | Unauthenticated Privilege Escalation in TranslatePress <= 3.3.2 versions. |
| CVE-2026-78268 | Deferred | 未確認 | CWE-497 | Unauthenticated Sensitive Data Exposure in Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads <= 1.2.0 versions. |
| CVE-2026-78269 | Deferred | 未確認 | CWE-918 | Contributor Server Side Request Forgery (SSRF) in Shared Files <= 1.7.69 versions. |
| CVE-2026-78270 | Deferred | 未確認 | CWE-89 | Author SQL Injection in FluentCRM Pro <= 3.1.12 versions. |
| CVE-2026-78271 | Deferred | 未確認 | CWE-266 | Editor Privilege Escalation in FluentCRM Pro <= 3.1.12 versions. |
| CVE-2026-78272 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Fluent Support Pro <= 2.3.1 versions. |
| CVE-2026-78273 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in Fluent Boards Pro <= 2.0.11 versions. |
| CVE-2026-78274 | Deferred | 未確認 | CWE-434 | Editor Arbitrary File Upload in Fluent Boards Pro <= 2.0.11 versions. |
| CVE-2026-78275 | Deferred | 未確認 | CWE-22 | Editor Arbitrary File Deletion in Fluent Boards Pro <= 2.0.11 versions. |
| CVE-2026-78276 | Deferred | 未確認 | CWE-502 | Editor PHP Object Injection in Fluent Boards Pro <= 2.0.11 versions. |
| CVE-2026-78277 | Deferred | 未確認 | CWE-918 | Subscriber Server Side Request Forgery (SSRF) in FluentCRM Pro <= 3.1.12 versions. |
| CVE-2026-78278 | Deferred | 未確認 | CWE-639 | Subscriber Insecure Direct Object References (IDOR) in Fluent Boards Pro <= 2.0.11 versions. |
| CVE-2026-78279 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in Fluent Support Pro <= 2.3.1 versions. |
| CVE-2026-78280 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in Hash Form <= 1.4.0 versions. |
| CVE-2026-78281 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in CP Media Player <= 1.3.0 versions. |
| CVE-2026-78282 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Stripe Payments <= 2.1.2 versions. |
| CVE-2026-78283 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Music Player for WooCommerce <= 1.8.9 versions. |
| CVE-2026-78284 | Deferred | 未確認 | CWE-22 | Unauthenticated Arbitrary File Deletion in MasterStudy LMS <= 3.7.42 versions. |
| CVE-2026-78285 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in Like Button Rating <= 2.6.61 versions. |
| CVE-2026-78286 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Geo Controller <= 8.9.8 versions. |
| CVE-2026-78288 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Beautiful Taxonomy Filters <= 2.4.6 versions. |
| CVE-2026-78289 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in CozyStay <= 1.10.0 versions. |
| CVE-2026-78290 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Magazine Blocks <= 1.8.6 versions. |
| CVE-2026-78291 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in RepairBuddy <= 4.1223 versions. |
| CVE-2026-78292 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Hash Form <= 1.4.1 versions. |
| CVE-2026-78293 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WP w3all phpBB <= 3.0.6 versions. |
| CVE-2026-78306 | Deferred | 未確認 | CWE-306 | DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an attacker within Bluetooth range to modify Wi-Fi configuration parameters, including the SS |
| CVE-2026-78314 | Deferred | 未確認 | CWE-89 | SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution. |
| CVE-2026-78315 | Deferred | 未確認 | CWE-89 | SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution. |
| CVE-2026-78316 | Deferred | 未確認 | CWE-89 | SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution. |
| CVE-2026-78317 | Deferred | 未確認 | CWE-89 | SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution. |
| CVE-2026-78321 | Deferred | 未確認 | CWE-770 | The HTTP media server on DJI drones does not enforce sufficient limits on incoming connections or request rates. An attacker with access to the drone's internal network can exhaust |
| CVE-2026-78322 | Awaiting Analysis | 未確認 | CWE-120 | A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller's progress-line parsing |
| CVE-2026-78323 | Awaiting Analysis | 未確認 | CWE-295 | A flaw was found in JSS (Java Security Services). The JSSTrustManager class does not verify NSS trust flags when validating CA certificates, allowing certificates present in the NS |
| CVE-2026-78329 | Analyzed | 未確認 | CWE-20 | Improper input validation vulnerability in Apache Camel Undertow component. This issue affects Apache Camel: from 4.11.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 be |
| CVE-2026-78333 | Deferred | 未確認 | CWE-79 | The 12 Step Meeting List WordPress plugin before 3.19.17 does not sanitise and escape a value submitted by unauthenticated users before storing it in its activity log and outputtin |
| CVE-2026-78337 | Deferred | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type in the company logo upload in Roskus Prospero Flow CRM before 5.15.13 allows an authenticated user holding the create company and up |
| CVE-2026-78364 | Deferred | 未確認 | CWE-79 | The MW WP Form WordPress plugin before 5.1.6 does not sanitise and escape some of its form settings before outputting them back in an admin dashboard page, which could allow users |
| CVE-2026-78365 | Deferred | 未確認 | CWE-639, CWE-862 | Authorization Bypass Through User-Controlled Key in the supplier API in Roskus Prospero Flow CRM 4.0.0 through 5.3.1 allows any authenticated user to read and modify another compan |
| CVE-2026-78367 | Awaiting Analysis | 未確認 | CWE-94 | A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec() function in tools/rpmbuild.cc passes an attacker-controll |
| CVE-2026-78369 | Deferred | 未確認 | CWE-306 | RansomLook contains a missing authentication vulnerability in the /admin/crypto/group/new endpoint. While the endpoint provides an administrative function for creating new crypto g |
| CVE-2026-78370 | Deferred | 未確認 | CWE-862 | RansomLook contains an authorization flaw in its legacy database export functionality that can allow unauthenticated remote users to retrieve information intended to remain private |
| CVE-2026-78372 | Deferred | 未確認 | CWE-862 | RansomLook does not consistently enforce authorization checks when accessing groups, markets, and ransom notes marked as private. An unauthenticated or otherwise unauthorized re |
| CVE-2026-78376 | Awaiting Analysis | 未確認 | CWE-416 | A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in memory corruption. |
| CVE-2026-78378 | Deferred | 未確認 | CWE-200 | Ransomlook contains a Redis glob pattern injection vulnerability caused by insufficient neutralization of user-controlled input before it is incorporated into Redis SCAN MATCH patt |
| CVE-2026-78379 | Awaiting Analysis | 未確認 | Improper neutralization of input used for LLM prompting in the python_repl tool in Amazon Strands Agents Tools before 0.8.5 might allow remote actors to execute arbitrary Python co | |
| CVE-2026-78380 | Deferred | 未確認 | CWE-862 | RansomLook fails to enforce the privacy status of ransomware groups and markets when distributing newly collected victim posts to external notification channels. The post-processin |
| CVE-2026-78381 | Deferred | 未確認 | CWE-22 | RansomLook contains a path traversal vulnerability in the handling of the screen field associated with group posts. The GroupPost.get API handler concatenates the database-controll |
| CVE-2026-78385 | Deferred | 未確認 | CWE-918 | RansomLook contains insufficient resource validation in the analysis PDF generation functionality. Analysis documents are converted from Markdown to HTML and passed to WeasyPrint f |
| CVE-2026-78386 | Deferred | 未確認 | CWE-200 | RansomLook exposed sensitive operator-side scraping configuration through multiple unauthenticated API responses. Location records associated with ransomware groups and markets wer |
| CVE-2026-78387 | Deferred | 未確認 | CWE-862 | RansomLook contains an authorization weakness in the web-based configuration editor exposed through the /admin/config endpoint. The endpoint requires an authenticated session but d |
| CVE-2026-78391 | Deferred | 未確認 | CWE-79 | RansomLook contains a stored cross-site scripting (XSS) vulnerability in the cryptocurrency wallet detail view. Cryptocurrency addresses and blockchain names originating from exter |
| CVE-2026-78414 | Awaiting Analysis | 未確認 | CWE-79 | Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to exe |
| CVE-2026-78416 | Deferred | 未確認 | CWE-915 | Craft CMS versions from 4.0.0-RC1 before 4.18.2 and from 5.0.0-RC1 before 5.10.6 contain an authenticated remote code execution vulnerability in control panel element-search condit |
| CVE-2026-78417 | Awaiting Analysis | 未確認 | CWE-345 | Insufficient verification of data authenticity in the IronVNC client in Devolutions Remote Desktop Manager 2026.2.17.0 and earlier, 2026.1.24.0 and earlier, allows an on-path attac |
| CVE-2026-78422 | Awaiting Analysis | 未確認 | CWE-367, CWE-686 | Subject::new_for_owner() in the zbus_polkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer (D-Bus type u), whereas the org.freedesktop.P |
| CVE-2026-78430 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1. This affects the function handleToolCall of the file src/tools/handlers.ts of the component Tool Handl |
| CVE-2026-78434 | Deferred | 未確認 | CWE-287, CWE-306 | A flaw has been found in Faveo Helpdesk up to 2.0.3. This impacts the function FormController::post_ticket_reply of the file app/Http/Controllers/Client/helpdesk/FormController.php |
| CVE-2026-78435 | Deferred | 未確認 | CWE-22 | A vulnerability has been found in Faveo Helpdesk up to 2.0.3. Affected is the function unlink of the file app/Http/Controllers/Admin/helpdesk/SettingsController.php of the componen |
| CVE-2026-78465 | Analyzed | 未確認 | CWE-190 | A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only. When processing a PCX image file, the plugin calculates memory allocation sizes based on the image di |
| CVE-2026-78466 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-78278. Reason: This candidate is a reservation duplicate of CVE-2026-78278. Notes: All CVE user | |
| CVE-2026-78467 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-78272. Reason: This candidate is a reservation duplicate of CVE-2026-78272. Notes: All CVE user | |
| CVE-2026-78468 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-78270. Reason: This candidate is a reservation duplicate of CVE-2026-78270. Notes: All CVE user | |
| CVE-2026-78470 | Deferred | 未確認 | CWE-89 | The WP Project Manager Pro plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 4.0.1 due to insufficient escaping on the user supplied paramet |
| CVE-2026-78475 | Analyzed | 未確認 | CWE-125 | A flaw was found in the file-pix (ESM) plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array (VLA) on the stack without p |
| CVE-2026-78477 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-78478 | Deferred | 未確認 | CWE-98 | The Mane theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.7. This makes it possible for unauthenticated attackers to include and ex |
| CVE-2026-78495 | Deferred | 未確認 | CWE-918 | A server-side request forgery (SSRF) vulnerability WatchGuard Dimension Remote Backup Connection Test configuration allows an authenticated privileged attacker to enumerate exposed |
| CVE-2026-78498 | Deferred | 未確認 | CWE-918 | A server-side request forgery (SSRF) vulnerability WatchGuard Dimension Email Server Test configuration allows an authenticated privileged attacker to enumerate exposed network ser |
| CVE-2026-78499 | Deferred | 未確認 | CWE-918 | A server-side request forgery (SSRF) vulnerability WatchGuard Dimension FTP Server Test configuration allows an authenticated privileged attacker to enumerate exposed network servi |
| CVE-2026-78500 | Deferred | 未確認 | CWE-208, CWE-918 | A blind server-side request forgery (SSRF) vulnerability WatchGuard Dimension Database Server Test configuration allows an authenticated privileged attacker to enumerate exposed ne |
| CVE-2026-78541 | Awaiting Analysis | 未確認 | CWE-78 | A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store |
| CVE-2026-78551 | Deferred | 未確認 | CWE-307, CWE-400 | RansomLook contains multiple weaknesses in its authentication endpoint that allow an unauthenticated remote attacker to enumerate valid usernames, perform unrestricted password-gue |
| CVE-2026-78553 | Deferred | 未確認 | CWE-276, CWE-732 | RansomLook created its Flask session-signing key without explicitly restricting the file permissions. The secret_key file was created using the process's default permissions and um |
| CVE-2026-78555 | Deferred | 未確認 | CWE-200, CWE-522 | RansomLook exposed complete API keys in the HTML source of the authenticated /admin/apikeys administration page. Although the interface displayed only a shortened representation of |
| CVE-2026-78562 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-78563 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-78566 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-78568 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-78570 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-78572 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-78576 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-78581 | Analyzed | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized data modification via Accessing Functionality Not Properly Constrained by ACLs (CAPEC- |
| CVE-2026-78610 | Deferred | 未確認 | CWE-352 | WatchGuard Dimension's Web UI exposes an administrator passphrase change action that lacks CSRF protection. An attacker who can induce an authenticated global administrator's brows |
| CVE-2026-78612 | Deferred | 未確認 | CWE-502, CWE-89 | WatchGuard Dimension contains an authenticated SQL injection vulnerability in the scheduled report feature which allows an authenticated user with report administration permissions |
| CVE-2026-78613 | Deferred | 未確認 | CWE-89 | WatchGuard Dimension contains an authenticated SQL injection vulnerability in the log viewer feature which allows an authenticated user with report administration permissions gain |
| CVE-2026-78614 | Deferred | 未確認 | CWE-502, CWE-89 | WatchGuard Dimension contains an authenticated SQL injection vulnerability in the audit report feature which allows an authenticated user with report administration permissions gai |
| CVE-2026-78615 | Deferred | 未確認 | CWE-79 | A Reflected Cross-Site Scripting (XSS) vulnerability in WatchGuard Dimension's report detail page allows an attacker to execute arbitrary JavaScript in a authenticated user's brows |
| CVE-2026-78616 | Deferred | 未確認 | CWE-79 | A Stored Cross-Site Scripting (XSS) vulnerability in WatchGuard Dimension's Trusted CA certificate configuration allows an authenticated administrator to execute arbitrary JavaScri |
| CVE-2026-78617 | Deferred | 未確認 | CWE-203, CWE-307 | WatchGuard Dimension's web login endpoint does not enforce effective rate-limiting or account lockout by default allowing a remote attacker to perform automated password guessing a |
| CVE-2026-78618 | Deferred | 未確認 | CWE-284, CWE-841 | A business logic flaw in WatchGuard Dimension allows an authenticated administrator to trigger multiple backend operations within a single logical flow by sending a specially craft |
| CVE-2026-78619 | Deferred | 未確認 | CWE-1025, CWE-305 | Punk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code at the two-factor challenge because totp_use_recovery compares user identifiers numerically. |
| CVE-2026-78637 | Deferred | 未確認 | CWE-74, CWE-88 | A vulnerability was detected in Fdawgs node-poppler up to 9.1.2/10.0.1. The impacted element is the function pdfInfo/pdfToText/pdfToCairo/pdfToPpm/pdfImages/pdfToHtml/pdfToPs/pdfFo |
| CVE-2026-78638 | Deferred | 未確認 | CWE-22 | A flaw has been found in peerigon unzip-crx and unzip-crx-3 up to 0.2.0. This affects the function unzip of the file dist/index.js of the component Archive Extraction. Executing a |
| CVE-2026-78654 | Deferred | 未確認 | CWE-1321, CWE-94 | A vulnerability has been found in cleverbrush framework and deep up to 4.4.0. This impacts the function deepExtend of the file libs/deep/src/deepExtend.ts. The manipulation leads t |
| CVE-2026-78655 | Deferred | 未確認 | CWE-307, CWE-642 | Punk::Plugin::TOTP versions before 0.05 for Perl allow the second-factor attempt limit to be reset by replaying an earlier session cookie because the challenge route counts failure |
| CVE-2026-78656 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/cust_del.php. The manipulation of the argument ID resul |
| CVE-2026-7867 | Awaiting Analysis | 未確認 | CWE-863 | A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization checking on the 'as-user' option in the org.freedesktop.UDisks2. |
| CVE-2026-78675 | Analyzed | 未確認 | CWE-73 | GitPython before 3.1.59 fails to disable merge_includes when parsing .gitmodules, allowing attackers to disclose local file content by including arbitrary file paths via [include] |
| CVE-2026-78676 | Analyzed | 未確認 | CWE-88 | GitPython before 3.1.59 fails to safely re-serialize multi-line git-config values during write operations, corrupting dormant quoted values into injected directives like core.hooks |
| CVE-2026-78677 | Analyzed | 未確認 | CWE-22 | GitPython before 3.1.59 omits --separate-git-dir from unsafe_git_clone_options, allowing attackers to create arbitrary git directories outside the intended clone destination. Attac |
| CVE-2026-78678 | Analyzed | 未確認 | CWE-88 | GitPython versions before 3.1.59 contain an incomplete denylist in the unsafe_git_revision_options guard that omits --contents and -S options, allowing attackers to read arbitrary |
| CVE-2026-78679 | Awaiting Analysis | 未確認 | CWE-73 | GitPython before 3.1.59 contains an arbitrary file read vulnerability in TagReference.create() where a positional reference parameter bypasses the unsafe option guard. Attackers ca |
| CVE-2026-78680 | Awaiting Analysis | 未確認 | CWE-426 | NLTK versions before 3.10.3 fail to use validated absolute paths when invoking the Graphviz dot binary in dependencygraph.dot2img and AlignedSent._repr_svg_, allowing attackers to |
| CVE-2026-78681 | Analyzed | 未確認 | CWE-776 | NLTK versions before 3.10.3 use xml.etree.ElementTree to parse XML in multiple modules, which honors entity declarations in document DTDs. Attackers can craft XML payloads with nes |
| CVE-2026-78682 | Analyzed | 未確認 | CWE-918 | NLTK before 3.10.3 contains a server-side request forgery vulnerability in nltk.pathsec.urlopen (and callers nltk.data.load, nltk.downloader.Downloader.index/download) when an HTTP |
| CVE-2026-78683 | Analyzed | 未確認 | CWE-502 | NLTK before 3.10.0 (affected versions <=3.9.4) contains an unsafe pickle deserialization vulnerability in the TransitionParser.parse() method (nltk/parse/transitionparser.py). The |
| CVE-2026-78684 | Analyzed | 未確認 | CWE-400 | vLLM before 0.27.0 fails to properly classify DeepStream as a GPU backend and omits pixel-limit enforcement in its decode path. Unauthenticated attackers can activate DeepStream at |
| CVE-2026-78685 | Deferred | 未確認 | CWE-940 | Medical Practice Management System developed by Le-yan has a Remote Code Execution vulnerability. Unauthenticated remote attackers can execute arbitrary OS commamnds via a crafted |
| CVE-2026-7869 | Analyzed | 未確認 | CWE-22 | IBM Langflow OSS 1.0.0 through 1.10.3 is vulnerable to Path Traversal in the Knowledge Bases API (`POST /api/v1/knowledge_bases`). This occurs because user-supplied knowledge base |
| CVE-2026-78691 | Deferred | 未確認 | CWE-943 | Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ash_sql allows a user who supplies a search term to contains/2, string_starts_with/2, o |
| CVE-2026-78693 | Deferred | 未確認 | CWE-209 | Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_graphql allows a remote client to read internal field names that an application config |
| CVE-2026-78699 | Deferred | 未確認 | CWE-252 | Unchecked Return Value vulnerability in ash-project ash_postgres allows a user who can drive a tenant rename to a name that collides with an existing tenant's schema to have their |
| CVE-2026-78701 | Awaiting Analysis | 未確認 | CWE-787 | A flaw was found in 389-ds-base. A remote, authenticated attacker could exploit a vulnerability in the Simple Authentication and Security Layer (SASL) UNBIND process. By sending a |
| CVE-2026-78863 | Deferred | 未確認 | CWE-287 | A vulnerability was found in liketrek TREK up to 3.0.22. Impacted is the function loginUser of the file server/src/services/authService.ts of the component Pre-2FA mfa_token Handle |
| CVE-2026-78864 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in liketrek TREK up to 3.0.22. The affected element is the function journeyService.updateEntry of the file server/src/nest/journey/journey.controller |
| CVE-2026-78885 | Deferred | 未確認 | CWE-287 | A vulnerability was identified in liketrek TREK up to 3.0.22. The impacted element is the function findOrCreateUser of the file server/src/services/oidcService.ts of the component |
| CVE-2026-78886 | Deferred | 未確認 | CWE-22 | A security flaw has been discovered in liketrek TREK up to 3.0.22. This affects an unknown function of the file server/src/nest/journey/journey-public.controller.ts of the componen |
| CVE-2026-78887 | Deferred | 未確認 | CWE-285, CWE-863 | A weakness has been identified in liketrek TREK up to 3.0.22. This impacts the function validateShareTokenForAsset of the component Journey Photo Proxy. Executing a manipulation ca |
| CVE-2026-78891 | Analyzed | 未確認 | CWE-122 | Buffer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-78892 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a local attacker to bypass system access restrictions via a local program. (Chro |
| CVE-2026-78893 | Analyzed | 未確認 | CWE-200 | Information leak in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Mediu |
| CVE-2026-78894 | Analyzed | 未確認 | CWE-367 | Race condition in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML p |
| CVE-2026-78895 | Analyzed | 未確認 | CWE-200 | Information leak in Paint in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-78896 | Analyzed | 未確認 | CWE-200 | Information leak in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security sever |
| CVE-2026-78897 | Analyzed | 未確認 | CWE-862 | Missing authorization in BrowserTag in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Ch |
| CVE-2026-78898 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Downloads in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a craf |
| CVE-2026-78899 | Analyzed | 未確認 | CWE-416 | Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-78900 | Analyzed | 未確認 | CWE-20 | Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML pa |
| CVE-2026-78901 | Analyzed | 未確認 | CWE-362 | Race condition in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-78903 | Analyzed | 未確認 | CWE-459 | Incomplete cleanup in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafte |
| CVE-2026-78904 | Analyzed | 未確認 | CWE-843 | Type confusion in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromi |
| CVE-2026-78905 | Analyzed | 未確認 | CWE-843 | Type confusion in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromi |
| CVE-2026-78906 | Analyzed | 未確認 | CWE-362 | Race condition in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromi |
| CVE-2026-78907 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security se |
| CVE-2026-78908 | Analyzed | 未確認 | CWE-200 | Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-78909 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted |
| CVE-2026-78910 | Analyzed | 未確認 | CWE-121 | Buffer overflow in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-78911 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in USB in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potent |
| CVE-2026-78912 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-78913 | Analyzed | 未確認 | CWE-416 | Use after free in Chromoting in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic |
| CVE-2026-78914 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium se |
| CVE-2026-78915 | Analyzed | 未確認 | CWE-362 | Race condition in Enterprise in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafte |
| CVE-2026-78934 | Analyzed | 未確認 | CWE-362 | Race condition in ReadAloud in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a craft |
| CVE-2026-78935 | Analyzed | 未確認 | CWE-457 | Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a |
| CVE-2026-78936 | Analyzed | 未確認 | CWE-203 | Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. (Chromium se |
| CVE-2026-78937 | Analyzed | 未確認 | CWE-416 | Use after free in Search in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside |
| CVE-2026-78938 | Analyzed | 未確認 | CWE-843 | Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-78939 | Analyzed | 未確認 | CWE-416 | Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbo |
| CVE-2026-78940 | Analyzed | 未確認 | CWE-665 | Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severit |
| CVE-2026-78941 | Analyzed | 未確認 | CWE-200 | Information leak in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page |
| CVE-2026-78942 | Analyzed | 未確認 | CWE-706 | Incorrect reference resolution in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. (Chromium securi |
| CVE-2026-78943 | Analyzed | 未確認 | CWE-20 | Improper input validation in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to |
| CVE-2026-78944 | Analyzed | 未確認 | CWE-416 | Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafte |
| CVE-2026-78945 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox vi |
| CVE-2026-78946 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Select in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity |
| CVE-2026-78947 | Analyzed | 未確認 | CWE-459 | Incomplete cleanup in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome exte |
| CVE-2026-78948 | Analyzed | 未確認 | CWE-122 | Buffer overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-78949 | Analyzed | 未確認 | CWE-203 | Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. (Chromium se |
| CVE-2026-78950 | Analyzed | 未確認 | CWE-190 | Integer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chro |
| CVE-2026-78951 | Analyzed | 未確認 | CWE-416 | Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium s |
| CVE-2026-78952 | Analyzed | 未確認 | CWE-787 | Out of bounds write in Crashpad in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code o |
| CVE-2026-78953 | Modified | 未確認 | CWE-862 | Missing authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a cra |
| CVE-2026-78954 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a c |
| CVE-2026-78955 | Analyzed | 未確認 | CWE-203 | Observable discrepancy in PerformanceAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. (Chromi |
| CVE-2026-78956 | Analyzed | 未確認 | CWE-843 | Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML |
| CVE-2026-78957 | Analyzed | 未確認 | CWE-200 | Information leak in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a local attacker to obtain sensitive information via a crafted file. (Chromium security severit |
| CVE-2026-78958 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data vi |
| CVE-2026-78959 | Analyzed | 未確認 | CWE-178 | Improper handling of case sensitivity in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrict |
| CVE-2026-78960 | Analyzed | 未確認 | CWE-200 | Information leak in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted Chrome exte |
| CVE-2026-78961 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypas |
| CVE-2026-78962 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially leak cross-origin data via a crafted |
| CVE-2026-78963 | Analyzed | 未確認 | CWE-20 | Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML pa |
| CVE-2026-78964 | Analyzed | 未確認 | CWE-416 | Use after free in Sync in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page |
| CVE-2026-78965 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: |
| CVE-2026-78966 | Analyzed | 未確認 | CWE-610 | Externally controlled reference in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security se |
| CVE-2026-78967 | Analyzed | 未確認 | CWE-862 | Missing authorization in BFCache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via |
| CVE-2026-78968 | Analyzed | 未確認 | CWE-862 | Missing authorization in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially spoof address bar via a craf |
| CVE-2026-78969 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in Video in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-78974 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in Linux Toolkit Theming in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions v |
| CVE-2026-78975 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severit |
| CVE-2026-78976 | Analyzed | 未確認 | CWE-20 | Improper input validation in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy |
| CVE-2026-78977 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. |
| CVE-2026-78978 | Analyzed | 未確認 | CWE-125 | Out of bounds read in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted |
| CVE-2026-78979 | Analyzed | 未確認 | CWE-362 | Race condition in Core in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML |
| CVE-2026-78980 | Analyzed | 未確認 | CWE-20 | Improper input validation in ReaderMode in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy into a privilege |
| CVE-2026-78981 | Analyzed | 未確認 | CWE-200 | Information leak in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a local attacker to potentially obtain sensitive information via a local program. (Chromium sec |
| CVE-2026-78983 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via |
| CVE-2026-78984 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially read memory outside the sand |
| CVE-2026-78985 | Analyzed | 未確認 | CWE-706 | Incorrect reference resolution in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code o |
| CVE-2026-78986 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via |
| CVE-2026-78987 | Analyzed | 未確認 | CWE-200 | Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Mediu |
| CVE-2026-78989 | Analyzed | 未確認 | CWE-125 | Out of bounds read in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted |
| CVE-2026-78990 | Analyzed | 未確認 | CWE-416 | Use after free in Compositing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secu |
| CVE-2026-78991 | Analyzed | 未確認 | CWE-367 | Race condition in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafte |
| CVE-2026-78999 | Analyzed | 未確認 | CWE-269 | Improper privilege management in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineer |
| CVE-2026-79000 | Analyzed | 未確認 | CWE-20 | Improper input validation in DeviceBoundSessionCredentials in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin poli |
| CVE-2026-79001 | Analyzed | 未確認 | CWE-200 | Information leak in Bluetooth in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering |
| CVE-2026-79002 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a c |
| CVE-2026-79003 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Device in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted |
| CVE-2026-79004 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a craf |
| CVE-2026-79005 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy v |
| CVE-2026-79006 | Analyzed | 未確認 | CWE-693 | Protection mechanism failure in HttpsUpgrades in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. (Chromium s |
| CVE-2026-79007 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially read memory outside the sand |
| CVE-2026-79008 | Analyzed | 未確認 | CWE-20 | Improper input validation in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arb |
| CVE-2026-79009 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in UI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium s |
| CVE-2026-79010 | Analyzed | 未確認 | CWE-672 | Operation on a resource after expiration or release in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass |
| CVE-2026-79011 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted H |
| CVE-2026-79012 | Analyzed | 未確認 | CWE-416 | Use after free in Safebrowsing in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandb |
| CVE-2026-79013 | Analyzed | 未確認 | CWE-20 | Improper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. (Chromium security |
| CVE-2026-79014 | Analyzed | 未確認 | CWE-362 | Race condition in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML |
| CVE-2026-79015 | Analyzed | 未確認 | CWE-20 | Improper input validation in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium |
| CVE-2026-79016 | Analyzed | 未確認 | CWE-203 | Observable discrepancy in SVG in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Me |
| CVE-2026-79017 | Analyzed | 未確認 | CWE-367 | Race condition in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. (Chromium securi |
| CVE-2026-79018 | Analyzed | 未確認 | CWE-200 | Information leak in FoldableAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security sever |
| CVE-2026-79019 | Analyzed | 未確認 | CWE-787 | Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted |
| CVE-2026-79020 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted media file. (Chromium secur |
| CVE-2026-79021 | Analyzed | 未確認 | CWE-862 | Missing authorization in InterestGroups in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restricti |
| CVE-2026-79022 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in Transactions Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially spoof UI elements via a |
| CVE-2026-79023 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security sev |
| CVE-2026-79024 | Analyzed | 未確認 | CWE-200 | Information leak in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security seve |
| CVE-2026-79025 | Analyzed | 未確認 | CWE-20 | Improper input validation in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions |
| CVE-2026-79026 | Analyzed | 未確認 | CWE-416 | Use after free in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandb |
| CVE-2026-79027 | Analyzed | 未確認 | CWE-416 | Use after free in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via crafted network traffic. (Chromium secur |
| CVE-2026-79028 | Undergoing Analysis | 未確認 | CWE-203 | Observable discrepancy in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security seve |
| CVE-2026-79030 | Analyzed | 未確認 | CWE-203 | Observable discrepancy in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security sev |
| CVE-2026-79031 | Analyzed | 未確認 | CWE-668 | Improper resource exposure in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severit |
| CVE-2026-79032 | Analyzed | 未確認 | CWE-20 | Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions |
| CVE-2026-79033 | Analyzed | 未確認 | CWE-691 | Insufficient control flow management in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary co |
| CVE-2026-79034 | Analyzed | 未確認 | CWE-200 | Information leak in CORS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML pag |
| CVE-2026-79038 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security |
| CVE-2026-79039 | Analyzed | 未確認 | CWE-416 | Use after free in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chr |
| CVE-2026-79040 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium |
| CVE-2026-79041 | Analyzed | 未確認 | CWE-862 | Missing authorization in Browser in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy into a privil |
| CVE-2026-79042 | Analyzed | 未確認 | CWE-862 | Missing authorization in Payments in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially bypass system access |
| CVE-2026-79043 | Analyzed | 未確認 | CWE-787 | Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (C |
| CVE-2026-79044 | Analyzed | 未確認 | CWE-862 | Missing authorization in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive |
| CVE-2026-79045 | Analyzed | 未確認 | CWE-843 | Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to read memory inside the sandbox via a crafted HTML page. (Chr |
| CVE-2026-79046 | Analyzed | 未確認 | CWE-367 | Race condition in Permissions in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafte |
| CVE-2026-79047 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted |
| CVE-2026-79048 | Analyzed | 未確認 | CWE-787 | Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted |
| CVE-2026-79049 | Analyzed | 未確認 | CWE-706 | Incorrect reference resolution in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted file. (Chromium sec |
| CVE-2026-79050 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium securit |
| CVE-2026-79051 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity |
| CVE-2026-79052 | Analyzed | 未確認 | CWE-416 | Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-79053 | Analyzed | 未確認 | CWE-862 | Missing authorization in Lighthouse in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to b |
| CVE-2026-79054 | Analyzed | 未確認 | CWE-416 | Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbo |
| CVE-2026-79055 | Analyzed | 未確認 | CWE-200 | Information leak in Sharing in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker leveraging social engineering to obtain sensitive information via a co-in |
| CVE-2026-79056 | Analyzed | 未確認 | CWE-416 | Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. |
| CVE-2026-79057 | Analyzed | 未確認 | CWE-367 | Race condition in Start in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker leveraging social engineering to potentially execute arbitrary code outside t |
| CVE-2026-79058 | Analyzed | 未確認 | CWE-862 | Missing authorization in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTM |
| CVE-2026-79059 | Analyzed | 未確認 | CWE-200 | Information leak in BFCache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTM |
| CVE-2026-79060 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy v |
| CVE-2026-79064 | Analyzed | 未確認 | CWE-416 | Use after free in Network in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox vi |
| CVE-2026-79065 | Analyzed | 未確認 | CWE-20 | Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a cr |
| CVE-2026-79066 | Analyzed | 未確認 | CWE-20 | Improper input validation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a cr |
| CVE-2026-79067 | Analyzed | 未確認 | CWE-862 | Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via |
| CVE-2026-79068 | Analyzed | 未確認 | CWE-668 | Improper resource exposure in StreamsAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy into a privileged page via a craf |
| CVE-2026-79069 | Analyzed | 未確認 | CWE-119 | Memory corruption in Tint in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML p |
| CVE-2026-79070 | Analyzed | 未確認 | CWE-706 | Incorrect reference resolution in Cache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security se |
| CVE-2026-79071 | Analyzed | 未確認 | CWE-367 | Race condition in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the s |
| CVE-2026-79072 | Analyzed | 未確認 | CWE-754 | Improper state validation in Performance in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (C |
| CVE-2026-79073 | Analyzed | 未確認 | CWE-754 | Improper state validation in Parser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML pa |
| CVE-2026-79074 | Analyzed | 未確認 | CWE-200 | Information leak in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted |
| CVE-2026-79075 | Analyzed | 未確認 | CWE-200 | Information leak in Geolocation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML p |
| CVE-2026-79076 | Analyzed | 未確認 | CWE-20 | Improper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. (Chromium security |
| CVE-2026-79077 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium secu |
| CVE-2026-79078 | Analyzed | 未確認 | CWE-416 | Use after free in FedCM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted |
| CVE-2026-79082 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Transactions Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin pol |
| CVE-2026-79083 | Analyzed | 未確認 | CWE-841 | Improper enforcement of behavioral workflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execu |
| CVE-2026-79084 | Analyzed | 未確認 | CWE-326 | Inadequate encryption strength in Notifications in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin p |
| CVE-2026-79085 | Analyzed | 未確認 | CWE-862 | Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafte |
| CVE-2026-79086 | Analyzed | 未確認 | CWE-862 | Missing authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain sensitive information via a co-installed app. (Chromium |
| CVE-2026-79087 | Analyzed | 未確認 | CWE-74 | Injection in Chrome Tabs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass system access restrictions via a crafted HTML page. (Chromium secur |
| CVE-2026-79088 | Modified | 未確認 | CWE-863 | Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a cra |
| CVE-2026-79089 | Analyzed | 未確認 | CWE-367 | Race condition in Transactions Platform in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restri |
| CVE-2026-79090 | Analyzed | 未確認 | CWE-269 | Improper privilege management in Actor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a cr |
| CVE-2026-79091 | Analyzed | 未確認 | CWE-416 | Use after free in Bluetooth in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox |
| CVE-2026-79093 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Paint in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium securi |
| CVE-2026-79094 | Analyzed | 未確認 | CWE-362 | Race condition in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severit |
| CVE-2026-79095 | Analyzed | 未確認 | CWE-200 | Information leak in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Med |
| CVE-2026-79097 | Analyzed | 未確認 | CWE-416 | Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-79098 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in PermissionElement in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML pa |
| CVE-2026-79099 | Analyzed | 未確認 | CWE-862 | Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security |
| CVE-2026-79103 | Analyzed | 未確認 | CWE-706 | Incorrect reference resolution in Speech in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a c |
| CVE-2026-79104 | Analyzed | 未確認 | CWE-862 | Missing authorization in Sensor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a cra |
| CVE-2026-79105 | Analyzed | 未確認 | CWE-20 | Improper input validation in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chrom |
| CVE-2026-79106 | Analyzed | 未確認 | CWE-20 | Improper input validation in Input in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to by |
| CVE-2026-79107 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in TabGroups in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially leak sensitive information via crafted network traffic. (Chrom |
| CVE-2026-79108 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in Web Authentication (Passkeys & Security Keys) in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass syst |
| CVE-2026-79109 | Analyzed | 未確認 | CWE-20 | Improper input validation in Printing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary co |
| CVE-2026-79110 | Analyzed | 未確認 | CWE-862 | Missing authorization in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: |
| CVE-2026-79111 | Analyzed | 未確認 | CWE-20 | Improper input validation in Dawn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML pag |
| CVE-2026-79112 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafte |
| CVE-2026-79116 | Analyzed | 未確認 | CWE-862 | Missing authorization in Viz in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HT |
| CVE-2026-79117 | Analyzed | 未確認 | CWE-362 | Race condition in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a co- |
| CVE-2026-79118 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: |
| CVE-2026-79119 | Analyzed | 未確認 | CWE-416 | Use after free in PDF in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security seve |
| CVE-2026-79120 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. (Chromium securit |
| CVE-2026-79121 | Analyzed | 未確認 | CWE-20 | Improper input validation in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary |
| CVE-2026-79122 | Analyzed | 未確認 | CWE-200 | Information leak in SignIn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. (Chromium security severit |
| CVE-2026-79123 | Analyzed | 未確認 | CWE-20 | Improper input validation in NTP Footer in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origi |
| CVE-2026-79124 | Analyzed | 未確認 | CWE-200 | Information leak in Intents in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium securit |
| CVE-2026-79125 | Analyzed | 未確認 | CWE-200 | Information leak in XR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low) |
| CVE-2026-79126 | Analyzed | 未確認 | CWE-684 | Incorrect provision of specified functionality in Proxy in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially obtain sensitive informati |
| CVE-2026-79127 | Analyzed | 未確認 | CWE-787 | Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium secu |
| CVE-2026-79128 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium |
| CVE-2026-79129 | Analyzed | 未確認 | CWE-416 | Use after free in Sessions in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandb |
| CVE-2026-79130 | Analyzed | 未確認 | CWE-122 | Buffer overflow in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-79131 | Analyzed | 未確認 | CWE-787 | Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium secu |
| CVE-2026-79132 | Analyzed | 未確認 | CWE-20 | Improper input validation in Input in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute a |
| CVE-2026-79133 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security sever |
| CVE-2026-79134 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium securit |
| CVE-2026-79136 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security s |
| CVE-2026-79137 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a cra |
| CVE-2026-79138 | Analyzed | 未確認 | CWE-787 | Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted |
| CVE-2026-79139 | Analyzed | 未確認 | CWE-20 | Improper input validation in Media in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute a |
| CVE-2026-79140 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium |
| CVE-2026-79141 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severit |
| CVE-2026-79142 | Analyzed | 未確認 | CWE-122 | Buffer overflow in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chr |
| CVE-2026-79143 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a cra |
| CVE-2026-79144 | Analyzed | 未確認 | CWE-200 | Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-79146 | Analyzed | 未確認 | CWE-200 | Information leak in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. (Chromium security |
| CVE-2026-79147 | Analyzed | 未確認 | CWE-200 | Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via |
| CVE-2026-79148 | Analyzed | 未確認 | CWE-193 | Off-by-one error in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially read memory inside the sandbox via a cra |
| CVE-2026-79149 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-79150 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium |
| CVE-2026-79151 | Analyzed | 未確認 | CWE-20 | Improper input validation in Safebrowsing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted file. (Chromium secur |
| CVE-2026-79152 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to bypass web origin policy via a co-installed app. (Chromium s |
| CVE-2026-79154 | Analyzed | 未確認 | CWE-862 | Missing authorization in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via UI Interaction |
| CVE-2026-79155 | Analyzed | 未確認 | CWE-367 | Race condition in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outsid |
| CVE-2026-79173 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in WebAppInstalls in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: |
| CVE-2026-79174 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy into a |
| CVE-2026-79175 | Analyzed | 未確認 | CWE-843 | Type confusion in Accessibility in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code o |
| CVE-2026-79176 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chr |
| CVE-2026-79177 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Media in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access re |
| CVE-2026-79178 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Web Authentication (Passkeys & Security Keys) in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted |
| CVE-2026-79179 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. (Chromium securi |
| CVE-2026-79180 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted |
| CVE-2026-79181 | Analyzed | 未確認 | CWE-203 | Observable discrepancy in Glic in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severit |
| CVE-2026-79182 | Analyzed | 未確認 | CWE-20 | Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML pa |
| CVE-2026-79183 | Analyzed | 未確認 | CWE-416 | Use after free in Accessibility in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI |
| CVE-2026-79184 | Analyzed | 未確認 | CWE-862 | Missing authorization in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafte |
| CVE-2026-79185 | Analyzed | 未確認 | CWE-200 | Information leak in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-79186 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted |
| CVE-2026-79187 | Analyzed | 未確認 | CWE-416 | Use after free in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-79188 | Analyzed | 未確認 | CWE-787 | Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (C |
| CVE-2026-79189 | Analyzed | 未確認 | CWE-787 | Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (C |
| CVE-2026-79190 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a c |
| CVE-2026-79191 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering |
| CVE-2026-79192 | Analyzed | 未確認 | CWE-20 | Improper input validation in Variations in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via crafted network traffic. (Chro |
| CVE-2026-79193 | Analyzed | 未確認 | CWE-200 | Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-79194 | Analyzed | 未確認 | CWE-416 | Use after free in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traff |
| CVE-2026-79195 | Analyzed | 未確認 | CWE-416 | Use after free in Script in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-79196 | Analyzed | 未確認 | CWE-367 | Race condition in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. ( |
| CVE-2026-79197 | Analyzed | 未確認 | CWE-416 | Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-79198 | Analyzed | 未確認 | CWE-416 | Use after free in Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securit |
| CVE-2026-79199 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium securit |
| CVE-2026-79200 | Analyzed | 未確認 | CWE-416 | Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-79201 | Analyzed | 未確認 | CWE-284 | Improper access control in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severit |
| CVE-2026-79202 | Analyzed | 未確認 | CWE-416 | Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secur |
| CVE-2026-79203 | Analyzed | 未確認 | CWE-20 | Improper input validation in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a craf |
| CVE-2026-79204 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in Input in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: |
| CVE-2026-79205 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severit |
| CVE-2026-79206 | Analyzed | 未確認 | CWE-125 | Out of bounds read in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to read memory outside the sandbox via a crafted HT |
| CVE-2026-79207 | Analyzed | 未確認 | CWE-200 | Information leak in Passwords in Google Chrome on on iOS prior to 152.0.7977.65 allowed a local attacker to obtain sensitive information via a crafted file. (Chromium security seve |
| CVE-2026-79208 | Analyzed | 未確認 | CWE-862 | Missing authorization in HTTP2 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via crafted network traffic. (Chromium security sever |
| CVE-2026-79209 | Analyzed | 未確認 | CWE-843 | Type confusion in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chr |
| CVE-2026-79210 | Analyzed | 未確認 | CWE-416 | Use after free in Audio in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside t |
| CVE-2026-79211 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in USB in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HT |
| CVE-2026-79212 | Analyzed | 未確認 | CWE-862 | Missing authorization in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to by |
| CVE-2026-79213 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML pa |
| CVE-2026-79214 | Analyzed | 未確認 | CWE-20 | Improper input validation in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a cr |
| CVE-2026-79215 | Analyzed | 未確認 | CWE-190 | Integer overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chro |
| CVE-2026-79216 | Analyzed | 未確認 | CWE-122 | Buffer overflow in Blink in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside the sandbox via |
| CVE-2026-79217 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromiu |
| CVE-2026-79218 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Sandbox in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code |
| CVE-2026-79219 | Analyzed | 未確認 | CWE-416 | Use after free in Bluetooth in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a craf |
| CVE-2026-79220 | Analyzed | 未確認 | CWE-200 | Information leak in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted |
| CVE-2026-79221 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in Dawn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium se |
| CVE-2026-79222 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to bypass web origin policy via a co-installed app. (Chromium s |
| CVE-2026-79223 | Analyzed | 未確認 | CWE-190 | Integer overflow in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory inside the sandbox via a crafted file. (Chromium security severity: Lo |
| CVE-2026-79224 | Analyzed | 未確認 | CWE-416 | Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbo |
| CVE-2026-79225 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Browser in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restriction |
| CVE-2026-79226 | Analyzed | 未確認 | CWE-269 | Improper privilege management in Regional Capabilities in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restr |
| CVE-2026-79227 | Analyzed | 未確認 | CWE-843 | Type confusion in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafte |
| CVE-2026-79228 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation into a |
| CVE-2026-79229 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a |
| CVE-2026-79230 | Analyzed | 未確認 | CWE-20 | Improper input validation in ANGLE in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a craft |
| CVE-2026-79231 | Analyzed | 未確認 | CWE-122 | Buffer overflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-79232 | Analyzed | 未確認 | CWE-416 | Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromiu |
| CVE-2026-79233 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security |
| CVE-2026-79234 | Analyzed | 未確認 | CWE-74 | Injection in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain sensitive information via a crafted HTML page. (Chromium security severity: |
| CVE-2026-79235 | Analyzed | 未確認 | CWE-416 | Use after free in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-79236 | Analyzed | 未確認 | CWE-843 | Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-79237 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security seve |
| CVE-2026-79238 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted C |
| CVE-2026-79239 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Tint in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (C |
| CVE-2026-79240 | Analyzed | 未確認 | CWE-787 | Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted |
| CVE-2026-79241 | Analyzed | 未確認 | CWE-125 | Out of bounds read in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium secu |
| CVE-2026-79242 | Analyzed | 未確認 | CWE-203 | Observable discrepancy in HTML in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severit |
| CVE-2026-79243 | Analyzed | 未確認 | CWE-20 | Improper input validation in ReadingList in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web orig |
| CVE-2026-79244 | Analyzed | 未確認 | CWE-416 | Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securi |
| CVE-2026-79245 | Analyzed | 未確認 | CWE-416 | Use after free in UI in Google Chrome prior to 152.0.7977.65 allowed a local attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a l |
| CVE-2026-79246 | Analyzed | 未確認 | CWE-200 | Information leak in DataTransfer in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security sever |
| CVE-2026-79247 | Analyzed | 未確認 | CWE-416 | Use after free in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outs |
| CVE-2026-79248 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Input in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafte |
| CVE-2026-79249 | Analyzed | 未確認 | CWE-94 | Code injection in Bisection in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted file. (Chromium security severity: Mediu |
| CVE-2026-79250 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Medi |
| CVE-2026-79251 | Analyzed | 未確認 | CWE-20 | Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium se |
| CVE-2026-79252 | Analyzed | 未確認 | CWE-200 | Information leak in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity |
| CVE-2026-79253 | Analyzed | 未確認 | CWE-20 | Improper input validation in Network in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to leak sensitive information via |
| CVE-2026-79254 | Analyzed | 未確認 | CWE-706 | Incorrect reference resolution in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML |
| CVE-2026-79255 | Analyzed | 未確認 | CWE-20 | Improper input validation in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a cra |
| CVE-2026-79256 | Analyzed | 未確認 | CWE-610 | Externally controlled reference in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially e |
| CVE-2026-79257 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-79258 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted HTML page |
| CVE-2026-79259 | Analyzed | 未確認 | CWE-20 | Improper input validation in Safebrowsing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted file. (Chromium secur |
| CVE-2026-79260 | Analyzed | 未確認 | CWE-20 | Improper input validation in Cookies in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a cr |
| CVE-2026-79261 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Controls in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severi |
| CVE-2026-79262 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severit |
| CVE-2026-79263 | Analyzed | 未確認 | CWE-367 | Race condition in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via crafted network traffic. (Chromium s |
| CVE-2026-79264 | Analyzed | 未確認 | CWE-706 | Incorrect reference resolution in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security |
| CVE-2026-79265 | Analyzed | 未確認 | CWE-459 | Incomplete cleanup in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to ob |
| CVE-2026-79266 | Analyzed | 未確認 | CWE-416 | Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafte |
| CVE-2026-79267 | Analyzed | 未確認 | CWE-367 | Race condition in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML |
| CVE-2026-79269 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium securit |
| CVE-2026-79270 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-79271 | Analyzed | 未確認 | CWE-200 | Information leak in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Ch |
| CVE-2026-79272 | Analyzed | 未確認 | CWE-20 | Improper input validation in FindInPage in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a c |
| CVE-2026-79273 | Analyzed | 未確認 | CWE-706 | Incorrect reference resolution in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML |
| CVE-2026-79274 | Analyzed | 未確認 | CWE-200 | Information leak in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-79275 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-79276 | Analyzed | 未確認 | CWE-269 | Improper privilege management in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via |
| CVE-2026-79282 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chro |
| CVE-2026-79283 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in Geometry in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium |
| CVE-2026-79284 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in Core in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted |
| CVE-2026-79285 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium secur |
| CVE-2026-79286 | Analyzed | 未確認 | CWE-862 | Missing authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a c |
| CVE-2026-79287 | Analyzed | 未確認 | CWE-203 | Observable discrepancy in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severi |
| CVE-2026-79288 | Analyzed | 未確認 | CWE-20 | Improper input validation in Autofill in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chro |
| CVE-2026-79289 | Analyzed | 未確認 | CWE-664 | Improper control of a resource through its lifetime in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass |
| CVE-2026-79290 | Analyzed | 未確認 | CWE-416 | Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-79291 | Analyzed | 未確認 | CWE-200 | Information leak in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medi |
| CVE-2026-79292 | Analyzed | 未確認 | CWE-190 | Integer overflow in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outs |
| CVE-2026-79293 | Analyzed | 未確認 | CWE-200 | Information leak in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity |
| CVE-2026-79406 | Deferred | 未確認 | CWE-840 | A security vulnerability has been detected in macrozheng mall up to 1.0.3. Affected is the function OmsCartItemServiceImpl.updateQuantity of the file /cart/update/quantity. The man |
| CVE-2026-79407 | Deferred | 未確認 | CWE-22 | A path traversal vulnerability in the SPO extension of MetaGPT 0.8.1 allows an attacker to read arbitrary files via the FILE_NAME value used by set_file_name() and load_meta_data() |
| CVE-2026-79408 | Deferred | 未確認 | CWE-78 | An OS command injection vulnerability in MetaGPT 0.8.1 allows an attacker to execute arbitrary commands via the path argument of RepoParser.rebuild_class_views() in metagpt/repo_pa |
| CVE-2026-79483 | Deferred | 未確認 | CWE-943 | FastGPT Community Edition 4.10.0 through 4.14.0 are vulnerable to a NoSQL injection in the POST /api/core/chat/getHistories endpoint. An unauthenticated attacker can inject malicio |
| CVE-2026-79615 | Deferred | 未確認 | CWE-639 | The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not check authorisation when returning question bank entries through one of its REST API routes, allowing user |
| CVE-2026-79619 | Awaiting Analysis | 未確認 | CWE-863 | On Linux, several OpenZFS ioctl authorization checks accept a capability held only within a user-created, unprivileged namespace as equivalent to real host privilege, allowing an u |
| CVE-2026-79622 | Deferred | 未確認 | CWE-22 | A weakness has been identified in dekdee adobe-xd-mcp 1.0.0. Impacted is an unknown function of the file src/parsers/xd-parser.ts of the component file-access-from-request Endpoint |
| CVE-2026-79623 | Deferred | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in FishCodeTech Muteki up to 0.2.5. The affected element is an unknown function of the file .claude/settings.json of the component Defaul |
| CVE-2026-79652 | Awaiting Analysis | 未確認 | CWE-862 | A flaw was found in the JWT Bearer authorization grant implementation within the keycloak-services component of Red Hat Build of Keycloak. This component handles various OAuth2 and |
| CVE-2026-79653 | Deferred | 未確認 | CWE-22, CWE-73 | In Eclipse SW360 versions 19.0.0, 19.1.0, 19.2.0, 20.0.0, 20.1.0, if the system is configured to use file system storage with config key enable.attachment.store.to.file.system, the |
| CVE-2026-79654 | Awaiting Analysis | 未確認 | CWE-639 | A flaw was found in Katello where the Content View History API does not properly enforce authorization when accessing a Content View specified by the user. An authenticated user wi |
| CVE-2026-79655 | Awaiting Analysis | 未確認 | CWE-59 | A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By crafting a malicious |
| CVE-2026-79657 | Analyzed | 未確認 | CWE-502 | NLTK versions before 3.10.3 contain a remote code execution vulnerability in allowlisted pickle loaders that trust entire module namespaces instead of specific safe callables. Atta |
| CVE-2026-79658 | Deferred | 未確認 | CWE-400 | Ech0 before 5.0.1 does not impose any size or shape limit on the Accept-Language header processed by its i18n middleware, which runs on every HTTP request. The header is passed unf |
| CVE-2026-79659 | Awaiting Analysis | 未確認 | CWE-918 | Ech0 before 4.7.3 contains a server-side request forgery vulnerability in the fetchPeerConnectInfo function that uses unvalidated HTTP requests instead of safe request methods with |
| CVE-2026-79660 | Deferred | 未確認 | CWE-200 | Ech0 versions before 4.7.3 expose guest commenter email addresses through public API endpoints due to improper JSON serialization tags on the Comment model. Unauthenticated attacke |
| CVE-2026-79661 | Deferred | 未確認 | CWE-770 | Ech0 through 4.5.6 registers the PUT /api/echo/like/:id endpoint on the public router group without authentication or rate limiting. Unauthenticated attackers can increment the fav |
| CVE-2026-79662 | Deferred | 未確認 | CWE-601 | Ech0 through 4.5.6 contains an OAuth redirect URI validation vulnerability in parseAndValidateClientRedirect (internal/service/auth/auth.go) that compares only the scheme and host |
| CVE-2026-79663 | Deferred | 未確認 | CWE-79 | Ech0 before 4.7.3 contains a stored cross-site scripting vulnerability in the public RSS feed where tag names and markdown content are rendered without HTML escaping. Attackers wit |
| CVE-2026-79664 | Awaiting Analysis | 未確認 | CWE-613 | Ech0 before 4.7.3 fails to properly revoke access tokens created with never-expire option, allowing attackers to maintain perpetual authenticated access after token theft. Three in |
| CVE-2026-79665 | Deferred | 未確認 | CWE-862 | Ech0 before 4.5.1 contains an authorization bypass vulnerability where session tokens skip scope validation in RequireScopes middleware, allowing logged-in non-admin users to acces |
| CVE-2026-79666 | Deferred | 未確認 | CWE-862 | Ech0 before 4.4.3 fails to enforce administrator authorization on dashboard log endpoints, allowing any authenticated user to access system logs. Attackers with valid user sessions |
| CVE-2026-79667 | Deferred | 未確認 | CWE-285 | Ech0 version 4.3.4 and earlier fails to reliably enforce scoped access token (least-privilege) restrictions on several privileged admin routes. Multiple privileged endpoints (e.g., |
| CVE-2026-79668 | Deferred | 未確認 | CWE-306 | Ech0 before 4.7.3 contains an authentication bypass vulnerability in the PUT /api/echo/like/:id endpoint that allows unauthenticated attackers to increment engagement metrics witho |
| CVE-2026-79669 | Awaiting Analysis | 未確認 | CWE-862 | Ech0 before 4.4.3 lacks authorization checks on system log endpoints allowing any authenticated non-admin user to read and stream all server logs. Attackers can access historical l |
| CVE-2026-79670 | Deferred | 未確認 | CWE-434 | Ech0 before 4.4.3 contains a stored cross-site scripting vulnerability in the file upload endpoint that validates Content-Type using only client-supplied headers without server-sid |
| CVE-2026-79671 | Deferred | 未確認 | CWE-918 | Ech0 before 4.4.3 contains a server-side request forgery vulnerability in the validateWebhookURL function (webhook_setting_service.go), which only validates literal IP addresses vi |
| CVE-2026-79672 | Deferred | 未確認 | CWE-862 | Ech0 before 4.4.3 fails to enforce scope-based authorization on nine comment panel admin endpoints, allowing access tokens with minimal scopes to perform full comment moderation op |
| CVE-2026-79673 | Deferred | 未確認 | CWE-863 | Ech0 before 4.4.3 protects the PUT /user endpoint with the profile:read scope, a read-only scope, but allows write operations including password changes. An attacker with an admin' |
| CVE-2026-79674 | Analyzed | 未確認 | CWE-73 | NLTK versions before 3.10.3 contain a path sandbox bypass vulnerability in corpus-reader constructors that allows attackers to read files outside the intended data root. Attackers |
| CVE-2026-79675 | Analyzed | 未確認 | CWE-88 | NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java() function, allowing attackers to inject dangerous JVM flags. Attackers c |
| CVE-2026-79676 | Analyzed | 未確認 | CWE-22 | NLTK versions before 3.10.3 contain a path traversal vulnerability in corpus readers that reopen root-derived paths using built-in open() instead of nltk.pathsec.open(), allowing s |
| CVE-2026-79706 | Deferred | 未確認 | CWE-434 | The Breeze Cache WordPress plugin before 2.5.13 does not sanitise a value taken from the request before using it to build the paths of the files it caches, allowing unauthenticated |
| CVE-2026-79717 | Awaiting Analysis | 未確認 | CWE-918 | A server-side request forgery (SSRF) vulnerability was found in galaxy_ng, the Ansible Galaxy server plugin for Pulp. An authenticated user with namespace management permissions ca |
| CVE-2026-79718 | Analyzed | 未確認 | CWE-79 | Reflected XSS in Netron versions <=9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perform port scanning or abuse a Chrome n-d |
| CVE-2026-79719 | Analyzed | 未確認 | CWE-79 | Reflected XSS in Netron versions <=9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perform port scanning or abuse a Chrome n-d |
| CVE-2026-79720 | Analyzed | 未確認 | CWE-79 | Reflected XSS in Netron versions <=9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perform port scanning or abuse a Chrome n-d |
| CVE-2026-79743 | Awaiting Analysis | 未確認 | CWE-22 | MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 0. |
| CVE-2026-79744 | Awaiting Analysis | 未確認 | CWE-269, CWE-862 | MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1. |
| CVE-2026-79745 | Awaiting Analysis | 未確認 | CWE-862 | MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1. |
| CVE-2026-79746 | Awaiting Analysis | 未確認 | CWE-863 | MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1. |
| CVE-2026-79747 | Awaiting Analysis | 未確認 | CWE-918 | MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1. |
| CVE-2026-79748 | Awaiting Analysis | 未確認 | CWE-862 | MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 0. |
| CVE-2026-79749 | Awaiting Analysis | 未確認 | CWE-918 | MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1. |
| CVE-2026-79750 | Awaiting Analysis | 未確認 | CWE-639 | MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1. |
| CVE-2026-79769 | Deferred | 未確認 | CWE-843 | Nokogiri versions before 1.19.4 contain a possible invalid (out-of-bounds) memory read in the protected internal Node#initialize_copy_with_args helper behind Node#dup and #clone, w |
| CVE-2026-79770 | Analyzed | 未確認 | CWE-1333 | Nokogiri versions before 1.19.3 contain regular expression denial of service vulnerabilities in the CSS selector tokenizer affecting string-literal and identifier tokenization. Att |
| CVE-2026-79771 | Analyzed | 未確認 | CWE-401 | Nokogiri versions before 1.19.3 contain a memory leak in the XSLT Stylesheet transform method when processing Ruby strings containing null bytes. Attackers can exploit this by pass |
| CVE-2026-79772 | Analyzed | 未確認 | CWE-252 | Nokogiri versions before 1.19.1 fail to check the return value from xmlC14NExecute in the canonicalize method, returning an empty string on failure instead of raising an exception. |
| CVE-2026-79773 | Deferred | 未確認 | CWE-22 | Winter CMS before 1.2.13 contains a local file inclusion vulnerability in the JavascriptImporter filter that allows authenticated users with cms.manage_assets permission to disclos |
| CVE-2026-79774 | Deferred | 未確認 | CWE-693 | Winter CMS versions before 1.2.13 contain an incomplete fix for a Twig sandbox escape vulnerability in System\\Twig\\SecurityPolicy that allows authenticated backend users with tem |
| CVE-2026-79775 | Awaiting Analysis | 未確認 | CWE-129 | rclone versions >= v1.72.0 and <= v1.74.4 (fixed in v1.75.0) contain multiple denial-of-service vulnerabilities in the archive backend's SquashFS parser, which relies on the github |
| CVE-2026-79776 | Awaiting Analysis | 未確認 | CWE-200 | rclone before 1.75.0 mounts the pprof debug handler as its own router route, bypassing the fail-closed authentication rule in the main handler. Attackers can access the /debug/ppro |
| CVE-2026-79777 | Awaiting Analysis | 未確認 | CWE-209 | rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occur. Attackers can trigger panics to leak internal file paths, module versions, goroutin |
| CVE-2026-79778 | Awaiting Analysis | 未確認 | CWE-248 | rclone before v1.75.0 contains a denial of service vulnerability in the WebDAV TUS creation handler that dereferences a nil response before checking for transport errors. A malicio |
| CVE-2026-79779 | Awaiting Analysis | 未確認 | CWE-319 | rclone versions before v1.75.0 fail to reject transport downgrades in redirect handling, allowing Basic authorization and Cookie headers to be replayed over plaintext HTTP after sa |
| CVE-2026-79780 | Awaiting Analysis | 未確認 | CWE-200 | rclone before v1.75.0 fails to sanitize IBM IAM bearer tokens and SSE-C encryption keys during S3 redirect callbacks, allowing credentials to be preserved across scheme or host cha |
| CVE-2026-79781 | Awaiting Analysis | 未確認 | CWE-22 | rclone serve s3 before 1.74.4 contains a path traversal vulnerability that allows attackers to read and overwrite root-level files by using dot-dot segments in S3 object keys. Atta |
| CVE-2026-79782 | Awaiting Analysis | 未確認 | CWE-319 | rclone before 1.74.4 fails to strip the X-Amz-Security-Token header when an S3 redirect changes scheme from HTTPS to HTTP on the same host. Attackers can intercept plaintext HTTP t |
| CVE-2026-79783 | Awaiting Analysis | 未確認 | CWE-732 | rclone before 1.74.4 fails to mask special permission bits when applying source-supplied mode metadata in the local backend, allowing attackers to set setuid/setgid bits on attacke |
| CVE-2026-79784 | Deferred | 未確認 | CWE-470 | Vocos instantiates a class named by a configuration file without restricting which class may be named. instantiate_class in vocos/pretrained.py takes the class_path value from the |
| CVE-2026-79785 | Deferred | 未確認 | CWE-295 | X-AnyLabeling's model downloader disabled TLS certificate verification. download_with_retry in anylabeling/services/auto_labeling/model.py built a context with ssl._create_unverifi |
| CVE-2026-79786 | Deferred | 未確認 | CWE-601 | Coroot's unauthenticated MCP OAuth dynamic client registration endpoint accepts any syntactically valid redirect URI without validation, allowing attackers to register clients poin |
| CVE-2026-79787 | Deferred | 未確認 | CWE-287 | Alluxio's S3 REST proxy fails to verify AWS Signature Version 4 signatures in its default configuration, allowing unauthenticated attackers to spoof user identity. Attackers can ex |
| CVE-2026-79788 | Deferred | 未確認 | CWE-918 | In Dradis Community Edition, the ProvidersController and AgentsController gate their admin_required before_action on `defined?(Dradis::Pro)`, a constant that is never defined in CE |
| CVE-2026-79792 | Deferred | 未確認 | CWE-77, CWE-78 | A flaw has been found in zackees transcribe-anything up to 4.1.0. Affected is the function ytdlp_download of the file src/transcribe_anything/ytldp_download.py of the component Yt- |
| CVE-2026-79793 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/sumit_form.php. Such manip |
| CVE-2026-79804 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in SililaWijesinghe Food Ordering System up to ba314e897e3365600461e5ea59432e39ceaa0fa5. Affected by this issue is some unknown functionality of the file |
| CVE-2026-79845 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in code-projects Simple Inventory System 1.0. This vulnerability affects unknown code of the file /InventoryManagement/edit.php. The manipulation of |
| CVE-2026-79902 | Analyzed | 未確認 | CWE-190 | A flaw was found in the Seattle FilmWorks plugin in GIMP. When processing a specially crafted SFW image file, the plugin allocates a Variable-Length Array (VLA) on the stack withou |
| CVE-2026-79911 | Deferred | 未確認 | CWE-119, CWE-121 | A security vulnerability has been detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The affected element is the function setSystemConfig of the file /cgi-bin/cstecgi.cgi of the co |
| CVE-2026-79912 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The impacted element is the function getCurrentTime of the file /cgi-bin/cstecgi.cgi. Performing a manipulati |
| CVE-2026-79921 | Deferred | 未確認 | CWE-770 | amqp091-go is a Go AMQP 0.9.1 client. Before version 1.13.0, a compromised or malicious AMQP broker can force the client to allocate resources for and process content body frames t |
| CVE-2026-79938 | Analyzed | 未確認 | CWE-287 | Dell PowerProtect Cyber Recovery, versions prior to 20.3, contain an Improper Authentication vulnerability. A low privileged attacker with remote access could potentially exploit t |
| CVE-2026-79939 | Analyzed | 未確認 | CWE-61 | Dell PowerProtect Cyber Recovery, versions Prior to 20.3, contain an UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potenti |
| CVE-2026-79940 | Awaiting Analysis | 未確認 | CWE-284 | Dell iDRAC9, 14G versions prior to 7.00.00.182 and 15G/16G versions prior to 7.20.30.50, contains an Improper Access Control vulnerability. An unauthenticated attacker with remote |
| CVE-2026-79988 | Deferred | 未確認 | CWE-693 | The Twig sandbox mechanism in Craft CMS is configured to allow dangerous functionality from the Yii framework, leading to authenticated RCE similar to previously disclosed vulnerab |
| CVE-2026-79992 | Awaiting Analysis | 未確認 | CWE-78 | A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login argumen |
| CVE-2026-79995 | Deferred | 未確認 | CWE-639 | The User Registration & Membership WordPress plugin before 5.2.5 does not verify that the account whose pending email change is being cancelled belongs to the user making the requ |
| CVE-2026-79996 | Deferred | 未確認 | CWE-269 | The User Registration & Membership WordPress plugin before 5.2.6 does not perform a capability check when saving its login settings, allowing authenticated users who have been gra |
| CVE-2026-80049 | Deferred | 未確認 | CWE-639 | Airbyte Platform resolves the workspace used for its authorization decision from a field the caller supplies. AuthorizationServerHandler copies recognised identifiers out of the ra |
| CVE-2026-80050 | Deferred | 未確認 | CWE-434 | ContiNew Admin fails to apply file-upload permission checks or file-type allowlist validation to multipart upload endpoints, allowing authenticated users to store files with arbitr |
| CVE-2026-80051 | Awaiting Analysis | 未確認 | CWE-1287 | github.com/graphql-go/graphql (GraphQL for Go) through 0.8.1 does not validate that a scalar variable value matches its declared type. The built-in coerceString and coerceBool func |
| CVE-2026-80101 | Modified | 未確認 | CWE-125 | A flaw was found in the file-xwd plugin in GIMP. When processing a specially crafted XWD image file, the plugin validates the image width and bytes-per-line parameters independentl |
| CVE-2026-80104 | Deferred | 未確認 | CWE-22 | DB-GPT builds the destination path for an uploaded skill from the multipart filename without constraining it to the upload directory. skill_upload in packages/dbgpt-app/src/dbgpt_a |
| CVE-2026-80138 | Deferred | 未確認 | CWE-78 | ClipBucket V5's web installer fails to properly validate or escape the php_cli_filepath parameter before passing it to shell execution. Unauthenticated attackers can submit a craft |
| CVE-2026-80153 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-80158 | Awaiting Analysis | 未確認 | CWE-214 | A flaw was found in the ipa_getkeytab module of the community.general Ansible collection. The module's bind_pw parameter, used to supply the LDAP simple-bind password when retrievi |
| CVE-2026-80179 | Awaiting Analysis | 未確認 | CWE-770 | A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption (JWE) token containing numerous period delimiters. This malformed token can force t |
| CVE-2026-80182 | Awaiting Analysis | 未確認 | CWE-863 | In OpenStack Keystone before 29.0.3, tokens obtained via OAuth1 access token, application credential, or trust-scoped authentication could create new long-lived credentials or auth |
| CVE-2026-80183 | Awaiting Analysis | 未確認 | CWE-843 | In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can list every project-scoped role assignment under any domain by passing a domain ID |
| CVE-2026-80184 | Awaiting Analysis | 未確認 | CWE-863 | In OpenStack Keystone before 29.0.3, tokens obtained via delegated authentication mechanisms (OAuth1 access tokens, application credentials, trusts) could be submitted to the token |
| CVE-2026-80185 | Awaiting Analysis | 未確認 | CWE-843 | BlueZ sdp-xml.c type confusion via RegisterProfile(ServiceRecord) can crash bluetoothd (local DoS): a crafted nested ServiceRecord can corrupt the SDP XML parser stack so scalar un |
| CVE-2026-80186 | Awaiting Analysis | 未確認 | CWE-120 | A stack-based buffer overflow vulnerability exists in BlueZ, the Linux Bluetooth protocol stack. A remote user within Bluetooth radio range can send a specially crafted Extended In |
| CVE-2026-80189 | Deferred | 未確認 | CWE-409 | LeafWiki extracts an uploaded ZIP archive without limiting how much data it will write. ZipExtractor.ExtractToDir in internal/importer/zip_extractor.go opens each entry and copies |
| CVE-2026-80191 | Deferred | 未確認 | CWE-862 | GROWI applies its page-viewer permission check to attachment requests only when the request carries an authenticated user. retrieveAttachmentFromIdParam in apps/app/src/server/rout |
| CVE-2026-80192 | Deferred | 未確認 | CWE-287 | @better-auth/sso before 1.6.27 (and before 1.4.8 in the 1.4.x line and before 1.7.0-rc.5 in the 1.7 prerelease line) contains two domain-ownership flaws. When domain verification i |
| CVE-2026-80193 | Deferred | 未確認 | CWE-862 | Kimai before 2.62.0 fails to validate create_other_timesheet permission in the QuickEntry controller when creating new timesheets. Authenticated users with view_other_timesheet and |
| CVE-2026-80194 | Deferred | 未確認 | CWE-200 | Kimai before 2.64.0 contains a missing authorization vulnerability in the ProjectViewController export route (report_project_view_export). The authorization guards are attached to |
| CVE-2026-80195 | Deferred | 未確認 | CWE-841 | Kimai before 2.63.0 contains a business logic / improper authorization vulnerability in the team update API endpoint (PATCH /api/teams/{id}), which removes all existing team member |
| CVE-2026-80196 | Deferred | 未確認 | CWE-640 | Kimai before 2.58.0 contains an authentication bypass vulnerability where password reset links remain valid after password changes because the LoginLink signature covers only the u |
| CVE-2026-80197 | Deferred | 未確認 | CWE-639 | Kimai before 2.57.0 contains an improper authorization vulnerability in the favorite timesheet add and remove endpoints that allows authenticated users to manipulate other users' b |
| CVE-2026-80198 | Deferred | 未確認 | CWE-693 | Kimai versions before 2.56.0 fail to restrict the config() Twig function in sandboxed invoice and export templates, allowing administrators to access arbitrary configuration keys. |
| CVE-2026-80199 | Deferred | 未確認 | CWE-208 | Kimai before 2.54.0 contains a timing oracle vulnerability in TokenAuthenticator that allows unauthenticated attackers to enumerate valid usernames via X-AUTH-USER header. Attacker |
| CVE-2026-80200 | Deferred | 未確認 | CWE-601 | Kimai before 2.53.0 contains an open redirect vulnerability in the SAML authentication success handler that accepts unvalidated RelayState POST parameters as redirect destinations. |
| CVE-2026-80201 | Deferred | 未確認 | CWE-94 | Kimai before 2.53.0 fails to block sensitive User methods in the Twig invoice template sandbox, allowing admins to call getApiToken() and getPlainApiToken() methods. Attackers with |
| CVE-2026-80202 | Deferred | 未確認 | CWE-863 | Kimai before 2.56.0 does not enforce team-membership checks in TimesheetVoter::voteOnAttribute(), which maps permissions only to own_timesheet or other_timesheet. As a result, any |
| CVE-2026-80203 | Deferred | 未確認 | CWE-863 | The getgrav/grav-plugin-api plugin before 1.0.18 does not enforce API-key scope in the requireNotSuperTarget() function in UsersController.php across seven sensitive user-managemen |
| CVE-2026-80204 | Deferred | 未確認 | CWE-863 | The Grav API plugin (getgrav/grav-plugin-api) before 1.0.18 does not apply the API-key scope cap in the injectSecurityTab() function of BlueprintController when deciding whether a |
| CVE-2026-80205 | Modified | 未確認 | CWE-1333 | NLTK versions before 3.10.0 contain a regular expression denial of service vulnerability in Text.findall() and TokenSearcher.findall() methods that accept user-supplied regular exp |
| CVE-2026-80206 | Analyzed | 未確認 | CWE-1333 | NLTK before 3.10.3 contains a regular expression denial of service (ReDoS) vulnerability in the tgrep module. The _tgrep_node_action function compiles user-supplied regular express |
| CVE-2026-80207 | Deferred | 未確認 | CWE-306 | APITable through 1.13.0-beta.1 annotates the create handler of InternalNotifyController with requiredLogin = false. ResourceInterceptor honours that annotation by returning before |
| CVE-2026-80208 | Deferred | 未確認 | CWE-306 | APITable through 1.13.0-beta.1 annotates both getUserHistories and closePausedUserAccount in InternalUserController with requiredLogin = false. ResourceInterceptor honours that ann |
| CVE-2026-80209 | Deferred | 未確認 | CWE-863 | The updateWorkspace handler in mods/identity/src/workspaces/createUpdateWorkspace.ts in Fonoster through 0.22.7 invokes the gRPC callback with PERMISSION_DENIED when createIsWorksp |
| CVE-2026-80210 | Deferred | 未確認 | CWE-352 | FrontAccounting through 2.4.20 generates a CSRF token in end_form() in includes/ui/ui_controls.inc and embeds it as the _token hidden field in every form it renders, but only admin |
| CVE-2026-80211 | Deferred | 未確認 | CWE-916 | FrontAccounting through 2.4.20 stores and verifies user passwords as unsalted MD5 digests. admin/users.php passes md5($_POST['password']) to add_user() and update_user_password(), |
| CVE-2026-80212 | Deferred | 未確認 | CWE-770 | An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.get_class, Resolv::DNS::Resource::Generic.create, and Resolv::DNS::SvcParam::Generic.create g |
| CVE-2026-80213 | Deferred | 未確認 | CWE-197 | An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::MessageEncoder wrote a DNS label's length into a single octet without checking its range. A label long |
| CVE-2026-80214 | Deferred | 未確認 | CWE-78 | LibreNMS’s Virtualization Discovery module is vulnerable to command line injection. An authenticated admin user can execute arbitrary code on the host server. |
| CVE-2026-80216 | Rejected | 未確認 | Rejected reason: duplicate record | |
| CVE-2026-80223 | Deferred | 未確認 | CWE-863 | Incorrect Authorization vulnerability in ash-project ash_graphql allows an authenticated subscriber in one tenant to receive another tenant's records over GraphQL subscriptions. T |
| CVE-2026-80227 | Deferred | 未確認 | CWE-697 | Incorrect Comparison vulnerability in ash-project ash_sql allows a user to pad a string field with tab, newline, carriage-return, or form-feed characters and pass a trimmed uniquen |
| CVE-2026-80233 | Deferred | 未確認 | CWE-434 | CAYIN CMS-WS, CMS-SE, and SMP series products developed by CAYIN Technology have an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shel |
| CVE-2026-80234 | Deferred | 未確認 | CWE-306 | CAYIN CMS-WS and CMS-SE developed by CAYIN Technology have a Missing Authentication vulnerability. Unauthenticated remote attackers can obtain media file lists via specific functio |
| CVE-2026-80235 | Deferred | 未確認 | CWE-434 | EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload and execute web shell backdoors, thereby en |
| CVE-2026-80236 | Deferred | 未確認 | CWE-89 | Efence developed by Thinking Software Technology has a SQL Injection vulnerability. Unauthenticated remote attackers can access file upload functionality and read database contents |
| CVE-2026-80237 | Deferred | 未確認 | CWE-434 | EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Authenticated remote attackers can upload and execute web shell backdoors, thereby enab |
| CVE-2026-8029 | Deferred | 未確認 | CWE-89 | The ZTE Smart Life app contains an SQL injection vulnerability that allows attackers to execute UNION SELECT statements to query sensitive data in the feedback.db database across t |
| CVE-2026-80311 | Deferred | 未確認 | CWE-639 | The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.5 does not verify that a subscription belongs to the customer bound to the requesting customer-portal session b |
| CVE-2026-80346 | Deferred | 未確認 | CWE-862 | StarRocks performs no privilege check when a legacy synchronous materialized view is dropped. Every other statement type routed through AuthorizerStmtVisitor calls into Authorizer |
| CVE-2026-80347 | Deferred | 未確認 | CWE-918 | mcp-fetch checks a fetch target against its SSRF guard without removing the brackets that surround an IPv6 literal. isSafeUrl reads the hostname from the parsed URL, which for a li |
| CVE-2026-80348 | Deferred | 未確認 | CWE-862 | TarsWeb enforces its per-application roles by calling AuthService from individual controller methods, and four methods in app/controller/patch/PatchController.js make no such call. |
| CVE-2026-80349 | Deferred | 未確認 | CWE-290 | TarsWeb decides whether a request comes from a trusted local caller using a client-controlled header. app.js sets Koa's proxy option to true without naming which upstream proxies m |
| CVE-2026-80350 | Deferred | 未確認 | CWE-918 | OneUptime's webhook target check rejects private and loopback addresses given in IPv4 form and a small set of IPv6 forms, but has no case for the IPv4-mapped IPv6 range. The webhoo |
| CVE-2026-80426 | Deferred | 未確認 | CWE-79 | FiftyOne renders a dataset field's description as markup. The sidebar field-information component at app/packages/core/src/components/FieldLabelAndInfo/index.tsx passes the descrip |
| CVE-2026-80427 | Deferred | 未確認 | CWE-88 | bestzip builds the argument list for the system zip utility without separating options from operands. The destination archive path and the caller-supplied source paths are passed t |
| CVE-2026-80428 | Awaiting Analysis | 未確認 | CWE-502 | ILIAS before versions 9.22, 10.10, and 11.3 contains an unauthenticated PHP object injection vulnerability that allows unauthenticated attackers to execute arbitrary code by inject |
| CVE-2026-80433 | Deferred | 未確認 | CWE-862 | Subscriber Sensitive Data Exposure in SureFeedback Client Site <= 1.2.12 versions. |
| CVE-2026-80488 | Deferred | 未確認 | CWE-89 | The WP Ultimate CSV Importer WordPress plugin before 9.0 does not properly sanitise and escape imported field values before using them in a SQL statement, which could allow high p |
| CVE-2026-80519 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ovpn: finish crypto callback cleanup before peer release Crypto completion callbacks hold both key-slot and pe | |
| CVE-2026-80520 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ovpn: fix NULL dereference when killing missing key ovpn_crypto_kill_key assumes both crypto slots are populat | |
| CVE-2026-80521 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Unlink scc_entry in unix_del_edge(). Kyle Zeng reported that GC could free a dead SCC partially. The | |
| CVE-2026-80522 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() Perform rctx->cryptlen calculation in | |
| CVE-2026-80523 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: clk: spacemit: k3: set hdma clock as critical HDMA clock is responsible for the internal TCM access path of X1 | |
| CVE-2026-80524 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: optee: ffa: Add NULL check in optee_ffa_lend_protmem Sashiko (locally) reports a possible null dereference und | |
| CVE-2026-80525 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Refresh copier IPC payload before widget setup The ipc_config_data buffer for copier | |
| CVE-2026-80526 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: tas2562: Validate values for volume writes tas2562_volume_control_put() does not do any validation of th | |
| CVE-2026-80527 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ceph: fix hanging __ceph_get_caps() with stale mds_wanted A reader can hang forever in __ceph_get_caps() when | |
| CVE-2026-80528 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ceph: avoid fs reclaim while using current->journal_info handle_reply() stores a `ceph_mds_request` pointer in | |
| CVE-2026-80529 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfs: don't swallow dquot recovery verification errors xlog_recover_dquot_commit_pass2() validates the recovere | |
| CVE-2026-80530 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN When exchanging two full-file ranges, xm | |
| CVE-2026-80531 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfs: avoid UAF on sc->tempip in xrep_tempfile_create LOLLM noticed a potential UAF if the tempfile creation co | |
| CVE-2026-80532 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfs: fix another iunlink infinite loop bug in online fsck xrep_iunlink_resolve_bucket is supposed to reconstru | |
| CVE-2026-80533 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfs: don't walk off the end of a null sc->sa.agi_bp in AGI repair LOLLM noticed a longstanding bug where xrep_ | |
| CVE-2026-80534 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfs: fix ilock leak on error in xfs_dq_get_next_id xfs_dq_get_next_id() takes the quota inode ILOCK before cal | |
| CVE-2026-80535 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfs: don't double-lock when deleting a self-referential directory LOLLM notices that the dirtree scrubber can | |
| CVE-2026-80536 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfs: bounds-check buffer log item's dirty bitmap xlog_recover_do_reg_buffer() replays each dirty region descri | |
| CVE-2026-80537 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfs: fix off-by-one in rtrefcount btree root level validation xfs_rtrefcountbt_compute_maxlevels() sets mp-> | |
| CVE-2026-80538 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfs: propagate errors from xfs_rtginode_load xfs_rtginode_ensure() treats every xfs_rtginode_load() error othe | |
| CVE-2026-80539 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: disallow multiple FENCE chunks in one submit amdgpu_cs_pass1() dispatches on chunk_id once per chu | |
| CVE-2026-80540 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD decode image min size calculation This needs to use pitch instead of width. Also reject pi | |
| CVE-2026-80541 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate GEM_CREATE domain combinations AMDGPU_GEM_CREATE checked domain bits against AMDGPU_GEM_D | |
| CVE-2026-80542 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL pointer dereference in amdgpu_dm_crtc_set_vblank() amdgpu_dm_crtc_set_vblank() deref | |
| CVE-2026-80543 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Pad trailing CCA or EP11 message with zeros The both functions xcrb_msg_to_type6cprb_msgx() and x | |
| CVE-2026-80544 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing The zcrypt_msgtype6_send_ep11_cprb() functio | |
| CVE-2026-80545 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB length and overflow checks The xcrb_msg_to_type6_ep11cprb_msgx() function lacks | |
| CVE-2026-80546 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve CCA CPRB length and overflow checks The xcrb_msg_to_type6cprb_msgx() function lacks prope | |
| CVE-2026-80547 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Implement a crw lock Unlike the channel_program struct, which covers synchronous I/O submission | |
| CVE-2026-80548 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Selectively expand io_mutex The io_mutex was defined to serialize the io_regions, but then has | |
| CVE-2026-80549 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Move cp cleanup out of not operational The fsm_notoper() routine is called when the device has | |
| CVE-2026-80550 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Fix out of bounds check on CCW array The routine ccwchain_calc_length() counts the number of ch | |
| CVE-2026-80551 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Ensure first IDAW remains constant The first IDAW in a list does not need to be on a 2K/4K boun | |
| CVE-2026-80552 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Ensure index for read/write regions are within range The introduction of the capability chain r | |
| CVE-2026-80553 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Cancel existing workqueues The initialization of the io_work and crw_work workqueues begs the q | |
| CVE-2026-80554 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Limit the number of channel program segments The processing of channel programs, and the CCWs w | |
| CVE-2026-80555 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Free all memory if cp_init() fails The routine cp_free() is called to unpin/free any memory onc | |
| CVE-2026-80556 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mmc: atmel-mci: Fix use-after-free in atmci_remove due to race condition In atmci_probe, &host->bh_work is bou | |
| CVE-2026-80557 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: libceph: fix OOB read in decode_watchers() via missing bounds check ceph_start_decoding() validates that struc | |
| CVE-2026-80558 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: libceph: Avoid using invalid osd indices from primary_temp A corrupted osdmap received from a Ceph monitor or | |
| CVE-2026-80559 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Input: sur40 - fix input device registration ordering In sur40_probe(), input_register_device() was previously | |
| CVE-2026-80560 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: openrisc: signal: do not restore privileged SR bits on sigreturn restore_sigcontext() copies the whole supervi | |
| CVE-2026-80561 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: libceph: fix multiple unsafe decodes in decode_locker() decode_locker() in cls_lock_client.c contains three un | |
| CVE-2026-80562 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: gpio: ml-ioh: use raw_spinlock_t for the register lock ioh_irq_type() is registered as the irq_chip .irq_set_t | |
| CVE-2026-80563 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: gpio: sloppy-logic-analyzer: fix use-after-free via debugfs trigger on unbind The "trigger" debugfs file has a | |
| CVE-2026-80564 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: gve: fix NULL dereference due to missing ptp adjfine Fix NULL dereference due to missing implementation of adj | |
| CVE-2026-80565 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix error path in devm_qce_register_algs If ops->register_algs() fails, the error path repeatedl | |
| CVE-2026-80566 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Input: hynitron_cstxxx - validate touch count and finger IDs The driver allocates max_touch_num input slots, w | |
| CVE-2026-80567 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue Previously, rmi_f54_buffer_queue() waited fo | |
| CVE-2026-80568 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - block s_input when F54 queue is busy Changing the input (diagnostic report type) mid-s | |
| CVE-2026-80569 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer rmi_f54_work() reads a diagnostics r | |
| CVE-2026-80570 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - zero report size on F54 work error In rmi_f54_work(), if an error occurs during report | |
| CVE-2026-80571 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak In papr_phy_attest_create_handle(), the | |
| CVE-2026-80572 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Input: byd - synchronize timer deletion before freeing private data byd_disconnect() uses timer_delete() befor | |
| CVE-2026-80573 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Input: iforce - validate input packet lengths iforce_process_packet() reads fixed fields from joystick, wheel | |
| CVE-2026-80574 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet Make finger2 (and also finger1) uns | |
| CVE-2026-80575 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Input: cs40l50-vibra - validate custom data from user space cs40l50_add() copies the custom data of an FF_PERI | |
| CVE-2026-80576 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: reject oversized IBs with per-ring packet limits On GFX rings, amdgpu_cs_p2_ib() passed user-suppl | |
| CVE-2026-80577 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/panthor: skip zero-sized firmware sections panthor_fw_load_section_entry() skips BO creation when the firm | |
| CVE-2026-80578 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fbdev: core: Fix pointer desynchronization in fb_io_read() In fb_io_read(), if copy_to_user() performs a parti | |
| CVE-2026-80579 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fbdev: clear fb_info->mode before deleting a videomode fb_set_var() can delete a mode from info->modelist when | |
| CVE-2026-80580 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fbdev: bound mode sysfs output to the sysfs buffer mode_string() uses snprintf() which can return a value larg | |
| CVE-2026-80581 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout Ignore IPC errors for pipeline state | |
| CVE-2026-80582 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/shmem_helper: Check VMA boundaries for PMD mappings In the ->huge_fault handler do not install a PMD huge | |
| CVE-2026-80583 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses The "DEC0 MODE" to "DEC7 MODE" controls are enumerate | |
| CVE-2026-80584 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/qeth: validate user buffer length in SNMP and ARP query ioctls qeth_snmp_command() and qeth_l3_arp_query( | |
| CVE-2026-80585 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fastopen: only mark MPTFO subflows with SYN data Passive TCP Fast Open accepts a valid-cookie SYN even | |
| CVE-2026-80586 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mptcp: options: reset DSS fields in case of unexpected size A remote peer could send a malformed DSS with a wr | |
| CVE-2026-80587 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mptcp: avoid combining some incoming suboptions Some MPTCP suboptions are mutually exclusive according to the | |
| CVE-2026-80588 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mptcp: reclaim forward-allocated memory on RX path errors After commit 9db5b3cec4ec ("mptcp: borrow forward me | |
| CVE-2026-80589 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: block: stop the timeout timer when releasing a never added disk disk_release() undoes blk_mq_init_allocated_qu | |
| CVE-2026-80590 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: inet: frags: strip GSO state from fragments before reassembly A virtio_net_hdr (tun/tap, or AF_PACKET with PAC | |
| CVE-2026-80591 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix listxattr handling of corrupted xattr entries Validate the xattr entry before reading its fields in | |
| CVE-2026-80592 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: fail early if address range parameters are invalid The comment on top of `struct damon_re | |
| CVE-2026-80593 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (asus_atk0110) Check package count before accessing element atk_ec_present() walks the management group | |
| CVE-2026-80594 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing The driver parses CDC union descr | |
| CVE-2026-80595 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - add response length checks The driver processes response data from device buffers without ver | |
| CVE-2026-80596 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - only expose sysfs attributes on control interface When the driver was converted to use the dr | |
| CVE-2026-80597 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix NULL pointer dereference in initialization The mtd_info contains a struct device, wh | |
| CVE-2026-80598 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix out-of-bounds read in decompress_lznt decompress_lznt() does not validate array index bounds before | |
| CVE-2026-80599 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: ensure accessible eth_hdr proto field When batadv_get_vid() accesses the proto field of the e | |
| CVE-2026-80600 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: acquire ARP hw source only after skb realloc The pskb_may_pull() called by batadv_get_vid() c | |
| CVE-2026-80601 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: gw: acquire ethernet header only after skb realloc The pskb_may_pull() called by batadv_get_vid() | |
| CVE-2026-80602 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/lbr: Fix kernel address leakage A user-only branch stack can contain branches that originate from | |
| CVE-2026-80603 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read parse_dcc() treats data_end as an inclusive e | |
| CVE-2026-80604 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: core: Fix OOB read in hid_get_report for numbered reports When a caller passes a size of 0 to hid_report_ | |
| CVE-2026-80605 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait() In picolcd_send_and_wait(), an integ | |
| CVE-2026-80606 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/userptr: Hold notifier_lock for write on inject test path When CONFIG_DRM_XE_USERPTR_INVAL_INJECT=y, xe | |
| CVE-2026-80607 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg Sashiko found that user can cause this WARN_ON_ONCE() e | |
| CVE-2026-80608 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix iommu domain lifetime race during device removal When force_iova mode is enabled, amdxdna_r | |
| CVE-2026-80609 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: qede: fix out-of-bounds check for cqe->len_list[] Move index check before element access. | |
| CVE-2026-80610 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: enetc: fix potential divide-by-zero when num_vsi is zero For i.MX94 series, all the standalone ENETCs do | |
| CVE-2026-80611 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ACPI: processor_idle: Mark LPI enter functions as __cpuidle When function tracing or Kprobes is enabled, enter | |
| CVE-2026-80612 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: lwtunnel: Drop skb metadata before LWT encapsulation skb metadata is meant for passing information betwee | |
| CVE-2026-80613 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: veth: fix NAPI leak in XDP enable error path During XDP enablement in veth, if xdp_rxq_info_reg() or xdp_rxq_i | |
| CVE-2026-80614 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: emac: Fix NULL pointer dereference in emac_probe Move devm_request_irq() after devm_platform_ioremap_reso | |
| CVE-2026-80615 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: dst_metadata: fix false-positive memcpy overflow in tun_dst_unclone kmalloc_flex() in metadata_dst_alloc( | |
| CVE-2026-80616 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ieee802154: Avoid calling WARN_ON() on -ENOMEM in cfg802154_switch_netns() It's pointless to call WARN_ON() in | |
| CVE-2026-80617 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: airoha: fix foe_check_time allocation size foe_check_time is declared as u16 pointer but was allocated wi | |
| CVE-2026-80618 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free amdgpu_amdkfd_gpuvm_free_memory_of_gpu() unpinned | |
| CVE-2026-80619 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix potential UAF in aa_replace_profiles The function aa_replace_profiles was accessing udata->size | |
| CVE-2026-80620 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Revert "PCI/MSI: Unmap MSI-X region on error" This reverts commit 1a8d4c6ecb4c81261bcdf13556abd4a958eca202. C | |
| CVE-2026-80621 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: Avoid dwc_pcie_rasdes_debugfs_deinit() NULL dereference when no RAS DES capability dwc_pcie_rasdes_d | |
| CVE-2026-80622 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: char: tlclk: fix use-after-free in tlclk_cleanup() This patch improves the module cleanup process in the tlclk | |
| CVE-2026-80623 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: coresight: ete: Always save state on power down System register ETMs and ETE are unlikely to be preserved on C | |
| CVE-2026-80624 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mfd: cs42l43: Sanity check firmware size Currently the code checks if a firmware was received, however it does | |
| CVE-2026-80625 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix memory leak of bonding resources In a corner case of concurrent driver removal and driver reset, | |
| CVE-2026-80626 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: powerpc/perf: fix preempt count underflow in fsl_emb_pmu_del fsl_emb_pmu_del() unconditionally calls put_cpu_v | |
| CVE-2026-80627 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: MIPS: mm: Fix out-of-bounds write in maar_res_walk() maar_res_walk() uses wi->num_cfg as the index into the fi | |
| CVE-2026-80628 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Serialize readq reset state with q->lock snd_seq_oss_readq_clear() resets qlen, head, and tail | |
| CVE-2026-80629 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: npc: Fix size of entry2cntr_map KASAN prints below splat. This is caused by allocating counter f | |
| CVE-2026-80630 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Whenever fq_c | |
| CVE-2026-80631 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject compressed segment that overflows the compressed input lzo_decompress_bio() validates each | |
| CVE-2026-80632 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix NULL pointer dereference in mt7996_init_tx_queues() When MT76_NPU and CONFIG_NET_MEDIA | |
| CVE-2026-80633 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommufd: Take dma_resv lock before dma_buf_unpin() in release path dma_buf_unpin() requires the caller to hold | |
| CVE-2026-80634 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag The DEV_PATH_BR_VLAN_UNTAG case post-dec | |
| CVE-2026-80635 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix OOB read from short trigger BA firmware response The firmware response length is only check | |
| CVE-2026-80636 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: revert ct extension genid infrastructure This infrastructure is not used anymore after m | |
| CVE-2026-80637 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: fix unaligned memory access in timestamp adjustment Use get_unaligned_be32() and put_unal | |
| CVE-2026-80638 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix out-of-bounds write in ocfs2_remove_refcount_extent [BUG] Unlinking a refcounted file whose refcoun | |
| CVE-2026-80639 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cxl/test: Fix __fortify_panic Fix a runtime assertion in setup_xor_mapping(). Fortify complains that it is pot | |
| CVE-2026-80640 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cxl/fwctl: Fix __fortify_panic Fix a runtime assertion in cxlctl_get_supported_features(). Fortify complains t | |
| CVE-2026-80641 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: enable the right set of ciphers The firmware version number check for IGTK introduced in commit | |
| CVE-2026-80642 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: liveupdate: Reference count incoming FLB data Increment the incoming FLB refcount in liveupdate_flb_get_incomi | |
| CVE-2026-80643 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: EDAC/igen6: Fix call trace due to missing release() When unloading the igen6_edac driver, there is a call trac | |
| CVE-2026-80644 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: don't BUG_ON an invalid journal dinode [BUG] A fuzzed OCFS2 image can corrupt the current slot journal | |
| CVE-2026-80645 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc() With a list_for_each() loop, if we don't find the | |
| CVE-2026-80646 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv6: guard against possible NULL deref in __in6_dev_stats_get() dev_get_by_index_rcu() could return NULL if t | |
| CVE-2026-80647 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix warning in poll cq direct mode CQs allocated by ib_alloc_cq() always have a comp_handler. Though | |
| CVE-2026-80648 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: spacemit: fix NULL check in spacemit_pin_set_config spacemit_pin_set_config() looks up the per-pin de | |
| CVE-2026-80649 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix OOB in scmi_power_name_get() scmi_power_name_get() does not validate the domain number | |
| CVE-2026-80650 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: atomisp: gc2235: fix UAF and memory leak gc2235_probe() handles its error paths incorrectly. If media_ | |
| CVE-2026-80651 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp/sev-dev-tsm - bail out early when pdev->bus is NULL dsm_create() initially checks pdev->bus when c | |
| CVE-2026-80652 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Treat zero-length cert chain as query for blob lengths When handling a PDH export, treat a zero- | |
| CVE-2026-80653 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: hisi_sas: Add slave_destroy interface for v3 hw WARNING is triggered when executing link reset of remote | |
| CVE-2026-80654 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: soc: xilinx: Shutdown and free rx mailbox channel A mbox rx channel is requested using mbox_request_channel_by | |
| CVE-2026-80655 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: soc: xilinx: Fix race condition in event registration The zynqmp_power driver registers handlers for suspend a | |
| CVE-2026-80656 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hfsplus: Add a sanity check for btree node size Syzbot reported an uninit-value bug in [1] with a corrupted HF | |
| CVE-2026-80657 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Guard management mailbox channel cleanup against NULL pointer The management mailbox channel cl | |
| CVE-2026-80658 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: dw_dp: Fix null-ptr-deref in dw_dp_remove() Attempting to access driver data in the platform dri | |
| CVE-2026-80659 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: defer reset until cmd_mutex is unlocked vub300_cmndwork_thread() holds cmd_mutex while it sends a | |
| CVE-2026-80660 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (occ) unregister sysfs devices outside occ lock occ_active(false) and occ_shutdown() unregister sysfs-b | |
| CVE-2026-80661 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ufs: core: tracing: Do not dereference pointers in TP_printk() The trace events in drivers/ufs/core/ufs_trace. | |
| CVE-2026-80662 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cxl: Fix CXL_HEADERLOG_SIZE to match RAS Capability size The CXL r4.0 8.2.4.17.7 RAS Capability Structure has | |
| CVE-2026-80663 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tools/power/x86/intel-speed-select: Harden daemon pidfile open Avoid symlink-based pidfile clobbering by openi | |
| CVE-2026-80664 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_nat: reject unsupported target families xt_nat SNAT and DNAT target handlers assume IP-family co | |
| CVE-2026-80665 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Inject SEA if kvm_translate_vncr() can't resolve PFN kvm_handle_vncr_abort() assumes that s1_w | |
| CVE-2026-80666 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: sco: Fix a race condition in sco_sock_timeout() sco_sock_timeout() runs asynchronously and lock_soc | |
| CVE-2026-80667 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, MPESW, Fix missing complete() on devcom error mlx5_mpesw_work() returned without calling comple | |
| CVE-2026-80668 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_expect: use conntrack GC to reap expectations This patch replaces the timer API by GC | |
| CVE-2026-80669 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Disable xfrm_decode_session hook attachment BPF LSM programs can currently attach to xfrm_decode_session( | |
| CVE-2026-80670 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: perf tools: Use perf_env__get_cpu_topology() in machine__resolve() machine__resolve() accesses env->cpu[al->cp | |
| CVE-2026-80671 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: perf sched: Fix register_pid() overflow, strcpy, and BUG_ON register_pid() has several issues when processing | |
| CVE-2026-80672 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: fix u16 truncation of restart-area length check ntfs_check_restart_area() validates that the $LogFile re | |
| CVE-2026-80673 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the look-ahead attribute-list entry in ntfs_external_attr_find() When resolving an attribute looku | |
| CVE-2026-80674 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: validate resident attribute lists and harden the validator A base inode's $ATTRIBUTE_LIST is sanity-chec | |
| CVE-2026-80675 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: libbpf: Reject non-exclusive metadata maps in the signed loader The loader verifies map->sha against the metad | |
| CVE-2026-80676 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: use generic driver_override infrastructure When a driver is probed through __driver_attach | |
| CVE-2026-80677 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: driver core: use READ_ONCE() for dev->driver in dev_has_sync_state() dev_has_sync_state() reads dev->driver tw | |
| CVE-2026-80678 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: i2c: imx: Fix slave registration race and error handling In i2c_imx_reg_slave(), the slave pointer was assigne | |
| CVE-2026-80679 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix potential NULL pointer dereference dasd_release_space() checks the implementation of the is_ese | |
| CVE-2026-80680 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: i2c: amd-mp2: Unregister callback on adapter add failure amd_mp2_register_cb() stores the platform I2C context | |
| CVE-2026-80681 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vxlan: re-fetch eth header after route_shortcircuit() Before route_shortcircuit(), the eth header pointer is c | |
| CVE-2026-80682 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: riscv/mm: use physical alignment for vmemmap_start_pfn RISC-V computes vmemmap_start_pfn by rounding phys_ram_ | |
| CVE-2026-80683 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: give the socket its own sco_conn reference sco_conn_del() drops a reference it does not own. I | |
| CVE-2026-80684 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure The airq_iv_create() can return NULL on failur | |
| CVE-2026-80685 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/util: don't read __page_2 for order-1 folios in snapshot_page() snapshot_page() currently reads __page_2 af | |
| CVE-2026-80686 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE pte_pfn() and pte_dirty() have undefined b | |
| CVE-2026-80687 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommufd/viommu: Release the igroup lock on the vdevice_size error path iommufd_vdevice_alloc_ioctl() takes ide | |
| CVE-2026-80688 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: riscv: drop __init from vec_check_unaligned_access_speed_all_cpus This function runs within a kthread and need | |
| CVE-2026-80689 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracing/mmiotrace: Add NULL check for mmio_trace_array in logging functions mmio_trace_rw() and mmio_trace_map | |
| CVE-2026-80690 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Initialize hba->rpmbs list in ufshcd Initialize the hba->rpmbs list in ufshcd_alloc_host() to | |
| CVE-2026-80691 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: iblock: Fix wrong PR ops NULL check for PREEMPT/RELEASE In the iblock_execute_pr_out() function, | |
| CVE-2026-80692 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks There is theoretical UAF if the conn is | |
| CVE-2026-80693 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: idpf: bound interrupt-vector register fill to the allocated array idpf_get_reg_intr_vecs() fills the caller-al | |
| CVE-2026-80694 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller mtk_handle_irq_rx expects a struc | |
| CVE-2026-80695 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (sht3x) Fix unaligned accesses Sashiko reports: In sht3x_update_client(), the 16-bit temperature and h | |
| CVE-2026-80696 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (ltc4282) Fix reading the minimum alarm voltage Coverity reports an out-of-bounds access when reading t | |
| CVE-2026-80697 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: erofs: ensure valid f_path for page cache sharing Previously, backing files for page cache sharing were set up | |
| CVE-2026-80698 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix double free of wq, engine, and group structs The release callbacks for wq, engine, and gr | |
| CVE-2026-80699 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Avoid double-deactivate of IRQs in the nested context In the nested state, the physical inte | |
| CVE-2026-80700 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate external BO copy bounds for both stride paths vmw_external_bo_copy() trusts caller-suppli | |
| CVE-2026-80701 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: enforce cursor size limits for MOB cursors vmw_cursor_plane_atomic_check() bounds cursor width and | |
| CVE-2026-80702 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: fix guest_memory_dirty bitfield clobbered as size Two sites in vmwgfx_resource.c assign boolean li | |
| CVE-2026-80703 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE Prevent unauthorized termination of ac | |
| CVE-2026-80704 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use proper context for logging The same as the rest of the code, get_ss_info_from_atombios() | |
| CVE-2026-80705 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: check if dml21_add_phantom_plane() is successful Verify that the phantom plane was allocated | |
| CVE-2026-80706 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: can: softing: fw_parse(): validate firmware record spans fw_parse() reads a fixed record header, a firmware-pr | |
| CVE-2026-80707 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer Zero the allocated buffer in j1939 | |
| CVE-2026-80708 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey() The helper function _ip_cprb_hel | |
| CVE-2026-80709 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs There is a wrong upper limit check for the do | |
| CVE-2026-80710 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix undersized format-check buffer fmt_buffer_size in dasd_eckd_check_device_format() is declared a | |
| CVE-2026-80711 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: handle missing status supplier MAX17040 does not report charger state itself, so the | |
| CVE-2026-80712 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: write the feature value before executing SET_FEATURE qcom_spi_send_cmdaddr() programs NAN | |
| CVE-2026-80713 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: io_uring: preserve task restrictions across exec Per-task restrictions apply to all rings created by a task. O | |
| CVE-2026-80714 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before their destinat | |
| CVE-2026-80715 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: igc: remove napi_synchronize() in igc_down() When an AF_XDP zero-copy application is killed abruptly, the XSK | |
| CVE-2026-80716 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: wake linked drain waiters on unlink snd_pcm_drain() on a linked stream parks an on-stack wait entry | |
| CVE-2026-80717 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter contains a fix | |
| CVE-2026-80718 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/percpu-km: fix bitmap overflow and accounting in pcpu_create_chunk() In pcpu_create_chunk(), nr_pages is th | |
| CVE-2026-80719 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm: mglru: fix stale batch updates after memcg reparenting The mglru page table walker batches per-generation | |
| CVE-2026-80720 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iomap: add a separate bio_set for iomap_split_ioend iomap_split_ioend can split bios that already come from io | |
| CVE-2026-80721 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: ensure no dangling hcon references in iso_conn After iso_conn_del(), ISO sockets should not de | |
| CVE-2026-80722 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate individual TWT params before driver setup ieee80211_process_rx_twt_action() only part | |
| CVE-2026-80723 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: of: reserved_mem: prevent OOB when too many dynamic regions are defined On boot, fdt_scan_reserved_mem() saves | |
| CVE-2026-80724 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ptp: vmclock: prevent read-only mappings from becoming writable vmclock_miscdev_mmap() rejects writable mappin | |
| CVE-2026-80725 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: gro: properly validate BIG TCP aggregation criteria When GRO attempts to aggregate packets beyond GRO_LEG | |
| CVE-2026-81019 | Analyzed | 未確認 | CWE-323 | wolfProvider before 1.2.2 generates the 8-byte explicit AES-GCM nonce once when the TLS write key is set and never increments it per record. As a result every TLS 1.2 and DTLS 1.2 |
| CVE-2026-81020 | Analyzed | 未確認 | CWE-323 | wolfEngine before 1.4.1 generates the 8-byte explicit AES-GCM nonce once when the TLS write key is set and never increments it per record. As a result every TLS 1.2 and DTLS 1.2 AE |
| CVE-2026-81026 | Deferred | 未確認 | CWE-284 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.40 does not verify the amount, receiver, currency or status of a payment notification before marking the correspon |
| CVE-2026-81027 | Deferred | 未確認 | CWE-862 | one-api gates one of its two channel-pinning paths and not the other. middleware/auth.go permits a request to name a specific channel either through a suffix on the API key or thro |
| CVE-2026-81028 | Deferred | 未確認 | CWE-22 | ZLMediaKit confines the downloadFile API to a configured set of root directories with a prefix comparison that does not account for directory boundaries. The configuration loader i |
| CVE-2026-81029 | Deferred | 未確認 | CWE-601 | OpenMetadata accepts a caller-supplied post-authentication redirect target and appends the issued token to it. SamlLoginServlet reads the callback request parameter and stores it i |
| CVE-2026-81030 | Deferred | 未確認 | CWE-22 | Mage AI does not confine the paths accepted by its browser-items API to the project directory. BrowserItemResource in mage_ai/api/resources/BrowserItemResource.py passes a caller-s |
| CVE-2026-81031 | Deferred | 未確認 | CWE-639 | IDURAR ERP CRM changes the password of whichever account a request names rather than the account making the request. The update handler in backend/src/controllers/middlewaresContro |
| CVE-2026-81032 | Deferred | 未確認 | CWE-306 | NebulaGraph exposes its runtime configuration over an unauthenticated HTTP service. Each daemon starts the web service defined in src/webservice/WebService.cpp, whose bind address |
| CVE-2026-81033 | Deferred | 未確認 | CWE-204 | Automatisch reveals whether an address is registered through the response to its forgot-password request. The controller at packages/backend/src/controllers/internal/api/v1/users/f |
| CVE-2026-81034 | Deferred | 未確認 | CWE-295 | Netmaker disables certificate verification on the connection to the configured mail server. The sender in pro/email/smtp.go assigns a TLS configuration whose skip-verify field is s |
| CVE-2026-81035 | Deferred | 未確認 | CWE-862 | Midday allows any member of a team to delete it. The delete procedure in apps/api/src/trpc/routers/team.ts authorises the caller with the team-access helper, which returns true for |
| CVE-2026-81036 | Deferred | 未確認 | CWE-601 | Stalwart Mail Server does not compare an OAuth redirect target against any registered destination in its default configuration. The validation routine in crates/http/src/auth/oauth |
| CVE-2026-81091 | Deferred | 未確認 | CWE-918 | The proxy middleware in mcp-use's inspector forwards requests to a destination the caller names. mountMcpProxy in libraries/typescript/packages/inspector/src/server/proxy/mcp-proxy |
| CVE-2026-81092 | Deferred | 未確認 | CWE-346 | mcp-go accepted requests on its HTTP transports without checking the Host header. StreamableHTTPServer.ServeHTTP in server/streamable_http.go and SSEServer.ServeHTTP in server/sse. |
| CVE-2026-81093 | Deferred | 未確認 | CWE-918 | The get-html-skeleton tool fetched a URL the caller supplied after checking only its syntax. The handler in src/tools/common/get_html_skeleton.ts validated the url argument with is |
| CVE-2026-81094 | Deferred | 未確認 | CWE-306 | The mcp-router CLI served its MCP aggregator on every interface and enforced authentication only when the operator asked for it. The serve command in apps/cli/src/commands/serve.ts |
| CVE-2026-81095 | Deferred | 未確認 | CWE-346 | pg-aiguide started its MCP HTTP transport without enabling the host allow-list the underlying SDK provides. src/httpServer.ts called the shared httpServerFactory helper and never s |
| CVE-2026-81096 | Deferred | 未確認 | CWE-94 | ToolUniverse ran caller-supplied Python inside a sandbox that could be escaped, on a server that required no authentication. The executor behind the python_code_executor tool, in p |
| CVE-2026-81097 | Deferred | 未確認 | CWE-78 | The execute_ruby tool is documented as a read-only Ruby sandbox and is enforced by a pattern denylist together with replacements for the process-spawning methods on Kernel. The pse |
| CVE-2026-81098 | Deferred | 未確認 | CWE-306 | The Telnyx MCP server exposed its HTTP transport on every interface and did not require a caller credential. packages/mcp-server/src/http.ts served MCP on the root path with a list |
| CVE-2026-81099 | Deferred | 未確認 | CWE-346 | tiger-slack started its MCP HTTP transport without enabling the host allow-list the underlying SDK provides. mcp/src/httpServer.ts called the shared httpServerFactory helper and ne |
| CVE-2026-81100 | Deferred | 未確認 | CWE-346 | tiger-gh-mcp-server started its MCP HTTP transport without enabling the host allow-list the underlying SDK provides. src/httpServer.ts called the shared httpServerFactory helper an |
| CVE-2026-81101 | Deferred | 未確認 | CWE-200 | The configure command accepted any endpoint URL and stored it beside the user's access token. ConfigureCommand.execute in src/cli.ts persisted the value given to its endpoint optio |
| CVE-2026-81102 | Deferred | 未確認 | CWE-346 | The Dash MCP server bound its listener to the loopback address but never checked the host a request named. src/mcp_server_dash.py constructed the server for its network mode with t |
| CVE-2026-81200 | Deferred | 未確認 | CWE-639 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.42 does not correctly restrict access to order information, allowing any user with the instructor role to read oth |
| CVE-2026-81202 | Deferred | 未確認 | CWE-287, CWE-306 | A flaw has been found in itsourcecode Payroll System 1.0. The impacted element is the function create/read/update/delete of the file ajax.php of the component CRUD Operation Handle |
| CVE-2026-81203 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0. This affects an unknown function of the file /admin/ajax.php?action=login2. The manipulatio |
| CVE-2026-81267 | Analyzed | 未確認 | CWE-451 | A malicious webpage could stall a popup's cross-origin navigation after commit, causing the address bar to display the destination origin while continuing to render attacker-contro |
| CVE-2026-81271 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in GeoDirectory <= 2.8.176 versions. |
| CVE-2026-81272 | Deferred | 未確認 | CWE-862 | Editor Broken Access Control in FluentPlayer Pro <= 1.3.2 versions. |
| CVE-2026-81273 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in FluentBooking Pro <= 2.2.4 versions. |
| CVE-2026-81274 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Ditty <= 3.1.67 versions. |
| CVE-2026-81276 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Kali Forms <= 2.4.23 versions. |
| CVE-2026-81277 | Deferred | 未確認 | CWE-89 | Contributor SQL Injection in Suggestion Engine for WooCommerce <= 2.0.11 versions. |
| CVE-2026-81278 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WPExperts Post SMTP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Post SMTP: from 4.0.0 throug |
| CVE-2026-81279 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Push Notification for Post and BuddyPress <= 3.20 versions. |
| CVE-2026-81280 | Deferred | 未確認 | CWE-201 | Subscriber Sensitive Data Exposure in Print Barcode Labels for your WooCommerce products/orders <= 4.0.0 versions. |
| CVE-2026-81284 | Deferred | 未確認 | CWE-862 | Contributor Broken Access Control in ACF Extended <= 0.9.2.6 versions. |
| CVE-2026-81285 | Deferred | 未確認 | CWE-770 | Unauthenticated Denial of Service Attack in Smush Image Compression and Optimization <= 4.2.0 versions. |
| CVE-2026-81287 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in Charitable <= 1.8.12.1 versions. |
| CVE-2026-81290 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Email Subscribers & Newsletters <= 5.9.33 versions. |
| CVE-2026-81291 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Uncode <= 2.12.7 versions. |
| CVE-2026-81293 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in WP Data Access <= 5.5.81 versions. |
| CVE-2026-81296 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Fluent Forms Pro Add On Pack <= 6.2.12 versions. |
| CVE-2026-81297 | Deferred | 未確認 | CWE-266 | Subscriber Privilege Escalation in Fluent Forms Pro Add On Pack <= 6.2.12 versions. |
| CVE-2026-81298 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in LeadConnector <= 4.0.5 versions. |
| CVE-2026-81299 | Deferred | 未確認 | CWE-639 | Subscriber Insecure Direct Object References (IDOR) in WP Job Portal <= 2.5.9 versions. |
| CVE-2026-81315 | Deferred | 未確認 | CWE-346 | Origin Validation Error vulnerability in ash-project ash_ai allows a malicious web page to bypass the MCP server's DNS-rebinding protection and issue cross-site requests to a user' |
| CVE-2026-81316 | Deferred | 未確認 | CWE-863 | Incorrect Authorization vulnerability in ash-project ash_sql allows a caller to receive an aggregate value computed over rows a more restrictive filter should have excluded, disclo |
| CVE-2026-81318 | Deferred | 未確認 | CWE-863 | Incorrect Authorization vulnerability in ash-project ash_sql allows a caller in a schema-based multitenant application to receive aggregate values computed from another tenant's ro |
| CVE-2026-81319 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ash-project ash_cloak allows an attacker who can influence the bytes of an encrypted column to crash the BEAM node, by triggering |
| CVE-2026-81322 | Deferred | 未確認 | CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ash-project ash_cloak allows anyone with access to logs, error trackers, or crash reports, or anyone who |
| CVE-2026-81334 | Deferred | 未確認 | CWE-125, CWE-787 | darknet subscripts its layer array with an index taken from a configuration file without checking it against the array's length. The array is allocated in src-lib/darknet_network.c |
| CVE-2026-81335 | Deferred | 未確認 | CWE-862 | Baserow dispatches an Application Builder data source without acting on the result of its permission check. The dispatch and record-name views in backend/src/baserow/contrib/builde |
| CVE-2026-81341 | Analyzed | 未確認 | CWE-323 | wolfEngine before 1.4.1 sources the explicit AES-CCM nonce for TLS 1.2 and DTLS 1.2 records from the record input buffer instead of the TLS sequence number carried in the additiona |
| CVE-2026-81342 | Deferred | 未確認 | CWE-601 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.43 does not validate a redirect parameter supplied during user registration before using it, allowing unauthentica |
| CVE-2026-81346 | Deferred | 未確認 | CWE-862 | The Frontend Admin by DynamiApps WordPress plugin before 3.29.11 does not perform a capability check on one of its AJAX actions, allowing any authenticated user, such as a subscrib |
| CVE-2026-81421 | Deferred | 未確認 | CWE-918 | A security flaw has been discovered in ddfourtwo sentry-selfhosted-mcp 0.4.0. The affected element is an unknown function of the component raw_sentry_api. The manipulation of the a |
| CVE-2026-81485 | Deferred | 未確認 | CWE-22 | A security vulnerability has been detected in danielpopamd linkedin-ads-mcp 1.0.0. Affected by this vulnerability is the function fs.readFileSync of the file src/tools/campaign-man |
| CVE-2026-81486 | Deferred | 未確認 | CWE-22 | A vulnerability was detected in bsmi021 mcp-file-context-server 1.0.0. Affected by this issue is the function read_context of the file src/index.ts of the component Path Resolution |
| CVE-2026-81490 | Analyzed | 未確認 | CWE-476 | A database user able to create a view in a namespace that MongoDB Connector for BI samples can cause the schema-sampling routine to stop functioning by defining a view whose evalua |
| CVE-2026-81491 | Deferred | 未確認 | CWE-22 | A flaw has been found in boxpositron with-context-mcp up to 3.0.7. This affects the function ingest_notes/teleport_notes/sync_notes/project_folder of the file src/index.ts. Executi |
| CVE-2026-81517 | Analyzed | 未確認 | CWE-248 | An unauthenticated party able to reach the port of a MongoDB Connector for BI (mongosqld) instance may generate enough routine connection log activity to exhaust the storage backin |
| CVE-2026-81518 | Analyzed | 未確認 | CWE-295 | When mongosqld is configured with a client certificate authority file, the listener requests a client certificate during the TLS handshake but does not require one, so a client tha |
| CVE-2026-81520 | Analyzed | 未確認 | CWE-1088 | A network-reachable client that has not yet authenticated can hold a MongoDB Connector for BI authentication session open indefinitely by beginning a SASL-based login exchange and |
| CVE-2026-81521 | Analyzed | 未確認 | CWE-99 | The MongoDB Go Driver's client-level bulk write operation may accept a caller-supplied database name containing a reserved separator character without escaping it before the name i |
| CVE-2026-81522 | Analyzed | 未確認 | CWE-116 | A weakness in the MongoDB C++ Driver's handling of caller-supplied namespace identifiers allows special characters embedded in those identifiers. An application that builds a names |
| CVE-2026-81523 | Analyzed | 未確認 | CWE-74 | A missing input-validation issue in MongoDB libmongocrypt's automatic-encryption context setup allows a caller-supplied database identifier to be accepted without sanitization. The |
| CVE-2026-81524 | Analyzed | 未確認 | CWE-99 | A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to pass without sanitization when the driver composes the targ |
| CVE-2026-81525 | Analyzed | 未確認 | CWE-943 | The MongoDB client library for PHP does not sufficiently sanitize special elements in application-supplied namespace identifiers before using them to construct the target namespace |
| CVE-2026-81526 | Analyzed | 未確認 | CWE-74 | The MongoDB Rust Driver does not neutralize special characters in a caller-supplied target identifier before embedding it in the request it sends to the server. An actor able to in |
| CVE-2026-81527 | Analyzed | 未確認 | CWE-943 | A NoSQL/expression injection weakness exists in the LINQ-to-aggregation query translation layer of the MongoDB C# Driver, in both aggregation expression and query filter translatio |
| CVE-2026-81528 | Analyzed | 未確認 | CWE-943 | A MongoDB C# driver document-replacement code path omits the element-name/shape validation that the equivalent write paths apply, so a value supplied as a replacement is forwarded |
| CVE-2026-81529 | Analyzed | 未確認 | CWE-88 | Improper neutralization of delimiters in connection-URL construction allows connection-option injection in the MongoDB C# Driver. When an application passes untrusted text into the |
| CVE-2026-81530 | Analyzed | 未確認 | CWE-532 | A weakness in the client-side encryption configuration surface of the MongoDB C# Driver causes sensitive key-management credential material supplied by the application to be reprod |
| CVE-2026-81532 | Analyzed | 未確認 | CWE-121 | A user able to submit SQL through an application using the MongoDB Connector for BI ODBC driver can supply a positioned-cursor statement whose cursor name exceeds the size of an in |
| CVE-2026-81533 | Analyzed | 未確認 | CWE-121 | An application using the MongoDB BI Connector ODBC Driver may encounter a memory-safety issue when a submitted SQL statement contains an unusually long run of digits following a LI |
| CVE-2026-81560 | Deferred | 未確認 | CWE-22 | A vulnerability was identified in blackms aistack up to 1.6.1. Affected by this issue is some unknown functionality of the file src/web/server.ts of the component Static File Handl |
| CVE-2026-81562 | Deferred | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in AlexGladkov claude-in-mobile 3.10.2. This affects the function execSync of the file src/adb/client.ts. Performing a manipulation results in o |
| CVE-2026-81572 | Awaiting Analysis | 未確認 | CWE-59 | In CodeMeter Runtime from version 8.40 to (excluding) 8.41a and 9.00 to (excluding) 9.10, cmu.exe --create-io --file C: creates a predictable temporary file under C:\CM-Stick. The |
| CVE-2026-81573 | Awaiting Analysis | 未確認 | CWE-284 | If CodeMeter Runtime before 8.41a or 9.10 is configured as a server, the configuration command handler does not enforce network- origin restrictions. Commands intended only for loc |
| CVE-2026-81574 | Awaiting Analysis | 未確認 | CWE-134 | In CodeMeter Runtime before versions 8.41a and 9.10, the logger does not sanitize input strings in certain cases, allowing an attacker to inject printf-style format specifiers. Thi |
| CVE-2026-81575 | Awaiting Analysis | 未確認 | CWE-130 | If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 accepts requests with opcode 0x5e, which contain the data length and the data itself. Missing bounds che |
| CVE-2026-81576 | Awaiting Analysis | 未確認 | CWE-639 | If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per connection and relies on a cryptographically weak SID as sole authenticator. An attac |
| CVE-2026-81578 | Analyzed | 掲載 | CWE-305 | An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions, unauthenticated remote requests targeting |
| CVE-2026-81579 | Deferred | 未確認 | CWE-123 | In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey2_64.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-wher |
| CVE-2026-8158 | Awaiting Analysis | 未確認 | The Signed Video Framework contained a buffer overflow issue which could lead the application using this framework to crash. The issue exclusively affects the tools used for the | |
| CVE-2026-81581 | Deferred | 未確認 | CWE-119 | Improper validation of memory boundaries in WibuKey64.sys of WibuKey up to 6.70 for Windows can be exploited by an attacker by setting the pointers outside the scope of the program |
| CVE-2026-81624 | Awaiting Analysis | 未確認 | CWE-770 | Undertow is a flexible performant web server used in JBoss EAP and WildFly. A flaw was found in how Undertow handles WebSocket connections. Specifically, certain configuration limi |
| CVE-2026-81625 | Deferred | 未確認 | CWE-787 | A remote attacker with user privileges may use a malicious or compromised NASL vulnerability test (VT) on the affected products to trigger a stack buffer overflow and gain full acc |
| CVE-2026-81633 | Deferred | 未確認 | CWE-20 | Improper Input Validation vulnerability in ash-project ash_graphql allows an unauthenticated client to crash a relay node(id: ...) query with an unhandled KeyError. AshGraphql.Gra |
| CVE-2026-81636 | Deferred | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_graphql allows an unauthenticated client to bypass the configured GraphQL query-complexity lim |
| CVE-2026-81643 | Deferred | 未確認 | CWE-863 | Incorrect Authorization vulnerability in ash-project ash_graphql delivers GraphQL subscription payloads for records a subscriber is not authorized to see. In AshGraphql.Subscripti |
| CVE-2026-81658 | Analyzed | 未確認 | CWE-639 | A flaw was found in Foreman. The template revision endpoint does not enforce object-level authorization when retrieving an audited template revision. An authenticated, low privileg |
| CVE-2026-81659 | Deferred | 未確認 | CWE-22 | Affected versions of Flowintel allow attacker-controlled note content to be processed by Pandoc and XeLaTeX during PDF export in a way that can cause local files on the Flowintel s |
| CVE-2026-8166 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Logo Software Industry and Trade Inc. E-Logo Purchasing Portal allows Stored X |
| CVE-2026-81660 | Deferred | 未確認 | CWE-79 | The Groundhogg — CRM, Newsletters, and Marketing Automation WordPress plugin before 4.5.13 does not validate or escape values submitted to some optional web form fields before stor |
| CVE-2026-81662 | Deferred | 未確認 | CWE-20, CWE-94 | Affected versions of Flowintel improperly trust configuration keys supplied to the alerts settings update endpoint. While configuration values were normalized to Python literals, t |
| CVE-2026-81664 | Deferred | 未確認 | CWE-306 | The OpenFaaS gateway registers GET /system/telemetry in gateway/main.go and, when basic_auth is enabled, wraps each administrative /system/* handler in auth.DecorateWithBasicAuth. |
| CVE-2026-81668 | Awaiting Analysis | 未確認 | CWE-639 | A flaw was found in Katello where the Content View Filter Rules API does not properly enforce authorization on the parent Content View Filter. An authenticated, low-privileged user |
| CVE-2026-81672 | Deferred | 未確認 | CWE-89 | SQL injection vulnerability in the ‘/ws/apiprensa/getVideoSubcanal’ endpoint due to improper handling of the id_video parameter. The application does not sanitize input before cons |
| CVE-2026-81673 | Deferred | 未確認 | CWE-89 | The ‘/ws/apitribuna/setVisita’ endpoint is vulnerable to SQL injection through the id_video and id_ambito parameters. The application does not validate or sanitize these inputs bef |
| CVE-2026-81674 | Deferred | 未確認 | CWE-89 | The endpoint ‘/ws/apiprensa/getVideoNextPrev’ is vulnerable to SQL injection via the id_ambito parameter. Unsanitized input is directly incorporated into a MariaDB query, allowing |
| CVE-2026-81675 | Deferred | 未確認 | CWE-89 | The endpoint ‘/ws/apiprensa/getVideoUltimasSeccion’ contains an SQL injection vulnerability in the id_seccion parameter. The parameter is directly embedded in a complex SQL query t |
| CVE-2026-81676 | Deferred | 未確認 | CWE-89 | A vulnerability in the endpoint ‘/ws/apitribuna/ultimosVideos’ where the `limit_videos` parameter is directly concatenated into a MariaDB SQL query without proper sanitization or p |
| CVE-2026-81677 | Deferred | 未確認 | CWE-89 | The ‘/ws/apiprensa/getVideo’ endpoint is vulnerable to SQL injection due to improper validation of the GET parameter `id_ambito`. An attacker can inject SQL syntax that breaks the |
| CVE-2026-81678 | Deferred | 未確認 | CWE-918 | AVideo before 24.0 contains a server-side request forgery vulnerability in the isSSRFSafeURL function that fails to extract embedded IPv4 addresses from NAT64, 6to4, and Teredo IPv |
| CVE-2026-81679 | Deferred | 未確認 | CWE-200 | OpenRemote versions before 1.28.0 contain a cross-realm information disclosure vulnerability in the Notification REST API that allows per-realm tenant administrators to read all te |
| CVE-2026-81680 | Analyzed | 未確認 | CWE-347 | openssl_encrypt versions before 1.4.9 fail to authenticate recovery-slot presence in envelope-format encrypted files, allowing attackers to remove recovery slots without re-encrypt |
| CVE-2026-81681 | Analyzed | 未確認 | CWE-311 | openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8 advertise a portable USB workspace as an 'Encrypted USB Workspace' with AES-256-GCM encryption and write a marker de |
| CVE-2026-81682 | Deferred | 未確認 | CWE-276 | openssl_encrypt versions before 1.4.9 contain an insecure file permissions vulnerability in the desktop GUI that writes decrypted plaintext with world-readable default permissions. |
| CVE-2026-81683 | Analyzed | 未確認 | CWE-312 | openssl_encrypt (pip package openssl-encrypt) versions 1.4.8 and earlier store an mTLS client private key in cleartext within a world-readable (0644) SharedPreferences file via the |
| CVE-2026-81684 | Analyzed | 未確認 | CWE-214 | In openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8, the desktop GUI passes the steganography password to the CLI child process on the command line via the --stego-p |
| CVE-2026-81685 | Analyzed | 未確認 | CWE-116 | openssl_encrypt versions before 1.4.9 fail to sanitize recovery-slot metadata in the desktop GUI, allowing attackers to inject control characters and line separators into the irrev |
| CVE-2026-81686 | Analyzed | 未確認 | CWE-20 | openssl_encrypt 1.4.x before 1.4.9 contains an optional D-Bus crypto service whose org.freedesktop.DBus.Properties.Set method performs neither a polkit authorization check nor valu |
| CVE-2026-81687 | Deferred | 未確認 | CWE-400 | openssl_encrypt versions before 1.4.9 fail to enforce a time ceiling on key derivation function iteration counts specified in file metadata. Attackers can craft files with extremel |
| CVE-2026-81688 | Analyzed | 未確認 | CWE-311 | openssl_encrypt versions before 1.4.9 store an unkeyed SHA-256 hash of the plaintext in the cleartext file header metadata. Attackers can read this hash without the password to con |
| CVE-2026-81689 | Analyzed | 未確認 | CWE-916 | openssl_encrypt versions before 1.4.9 derive the remote-pepper wrap key using unsalted HKDF-SHA256 or bare SHA-256 of the password, allowing identical keys across all users and fil |
| CVE-2026-81690 | Analyzed | 未確認 | CWE-59 | openssl-encrypt (pip package) before 1.4.9 contains a symlink-following flaw in its verify-usb v2 added-file allowlist scan. The scan enumerated the drive with rglob(), which in CP |
| CVE-2026-81691 | Analyzed | 未確認 | CWE-319 | openssl_encrypt versions before 1.4.9 fail to validate server URLs in login and register_with_email functions, accepting unencrypted http:// URLs and unconfigured hosts. Attackers |
| CVE-2026-81692 | Deferred | 未確認 | CWE-789 | openssl_encrypt (pip: openssl-encrypt) versions 1.4.8 and earlier fail to validate the 36-bit STREAMINFO total_samples field of FLAC files before using it to size an allocation (np |
| CVE-2026-81693 | Analyzed | 未確認 | CWE-789 | openssl_encrypt before 1.4.9 fails to validate the total field from QR JSON payloads before materializing ranges. Attackers can supply crafted QR images with extremely large total |
| CVE-2026-81694 | Analyzed | 未確認 | CWE-117 | openssl-encrypt (pip package, versions <= 1.4.8) fails to sanitize filenames read from untrusted drive data (outside the AES-GCM authenticated manifest) before printing them in the |
| CVE-2026-81695 | Analyzed | 未確認 | CWE-117 | openssl_encrypt versions before 1.4.9 fail to escape attacker-controlled key_id values printed to stderr during decrypt auto-detection. Attackers can craft encrypted files with mal |
| CVE-2026-81696 | Analyzed | 未確認 | CWE-117 | openssl_encrypt versions before 1.4.9 fail to sanitize terminal control characters in file metadata printed by the info command. Attackers can craft malicious files containing esca |
| CVE-2026-81697 | Deferred | 未確認 | CWE-426 | openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8 contain a CWD-relative configuration file resolution flaw in crypt_settings.py, where CONFIG_FILE (originally the ab |
| CVE-2026-81698 | Analyzed | 未確認 | CWE-78 | openssl_encrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI block that interpolates untrusted metadata fields without quot |
| CVE-2026-81699 | Analyzed | 未確認 | CWE-770 | openssl_encrypt versions before 1.4.9 fail to properly validate key derivation function costs in crafted files, allowing attackers to trigger unbounded memory and CPU exhaustion du |
| CVE-2026-81700 | Analyzed | 未確認 | CWE-347 | openssl_encrypt versions before 1.4.9 contain a signature verification vulnerability in gpg_runner.verify_detached that accepts revoked and expired keys by only checking VALIDSIG s |
| CVE-2026-81701 | Analyzed | 未確認 | CWE-347 | openssl_encrypt versions before 1.4.9 use a denylist to identify trusted built-in plugins, allowing unsigned plugins in top-level plugins/ directories and unknown subdirectories to |
| CVE-2026-81702 | Analyzed | 未確認 | CWE-345 | openssl_encrypt before 1.4.9 fails to re-derive and validate fingerprints when loading identities from identity.json, allowing attackers to substitute public keys in identity store |
| CVE-2026-81703 | Analyzed | 未確認 | CWE-287 | openssl_encrypt versions before 1.4.9 fail to validate encryption status of embedded post-quantum private keys in file metadata. Attackers can craft files with unencrypted embedded |
| CVE-2026-81704 | Analyzed | 未確認 | CWE-916 | openssl_encrypt versions before 1.4.9 contain a weak key derivation vulnerability in the D-Bus CryptoService.EncryptFile handler that uses unstretched SHA-256 instead of Argon2id. |
| CVE-2026-81705 | Analyzed | 未確認 | CWE-532 | openssl-encrypt before 1.4.9 fails to redact the file password in its --debug argv dump when the password is supplied via bundled short-option spellings (e.g. -apHunter2) or abbrev |
| CVE-2026-81706 | Analyzed | 未確認 | CWE-345 | openssl_encrypt before 1.4.9 fails to prevent namespace collisions between own identities and contacts in IdentityStore, allowing attackers to create shadowed contact entries invis |
| CVE-2026-81707 | Deferred | 未確認 | CWE-20 | openssl_encrypt before 1.4.9 fails to sanitize the email field of imported identity documents, allowing attackers to inject ANSI escape sequences that forge the fingerprint verific |
| CVE-2026-81714 | Analyzed | 未確認 | CWE-347 | openssl_encrypt (pip: openssl-encrypt) versions <= 1.4.8 use suffix-tolerant fingerprint matching in enroll_trust_key when binding a plugin-signing trust anchor. An operator who co |
| CVE-2026-81715 | Analyzed | 未確認 | CWE-532 | openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8 do not redact the keyserver bearer token passed as the positional argument to 'keyserver set-token' in the --debug a |
| CVE-2026-81716 | Analyzed | 未確認 | CWE-22 | openssl_encrypt (pip: openssl-encrypt) versions before 1.4.9 contain a path traversal flaw in PluginSandbox._is_safe_path, which authorized file access using a bare string-prefix m |
| CVE-2026-81717 | Analyzed | 未確認 | CWE-347 | openssl_encrypt (pip package openssl-encrypt) before 1.4.9 contains two weaknesses in the portable USB drive feature, whose threat model treats the removable drive as untrusted (at |
| CVE-2026-81718 | Deferred | 未確認 | CWE-326 | openssl_encrypt versions before 1.4.9 use under-parameterized PBKDF2-HMAC-SHA256 with only 100,000 iterations to protect PQC keyfile private keys and 10,000 iterations for dual-enc |
| CVE-2026-81719 | Analyzed | 未確認 | CWE-94 | openssl_encrypt before 1.4.9 executes untrusted third-party plugins with insufficient controls: the plugin signature policy defaulted to WARN, so an unsigned/unverifiable non-built |
| CVE-2026-81720 | Analyzed | 未確認 | CWE-400 | openssl_encrypt before 1.4.9 fails to validate the memory_cost parameter from identity file protection blocks, allowing attackers to trigger out-of-memory conditions during key der |
| CVE-2026-81721 | Analyzed | 未確認 | CWE-400 | openssl_encrypt before 1.4.9 fails to validate KDF cost parameters in encrypted file metadata and keystore headers, allowing attackers to trigger unbounded memory allocation. Attac |
| CVE-2026-81722 | Analyzed | 未確認 | CWE-407 | nltk PorterStemmer in versions <= 3.10.2 (fixed in 3.10.3) contains an inefficient-algorithmic-complexity denial of service in PorterStemmer.stem(). The _is_consonant() helper walk |
| CVE-2026-81723 | Awaiting Analysis | 未確認 | CWE-400 | NLTK versions before 3.10.3 contain a quadratic CPU exhaustion vulnerability in XMLCorpusView._read_xml_fragment() that rescans accumulated XML fragments on every 1 KiB block read. |
| CVE-2026-81724 | Analyzed | 未確認 | CWE-674 | NLTK before 3.10.3 contains an uncontrolled recursion vulnerability in nltk.featstruct.FeatStructReader that allows unauthenticated attackers to cause a denial of service by supply |
| CVE-2026-81725 | Analyzed | 未確認 | CWE-400 | NLTK before 3.10.3 contains a regular expression denial of service vulnerability in Pl196xCorpusReader that allows attackers to cause quadratic CPU consumption by supplying malform |
| CVE-2026-81726 | Analyzed | 未確認 | CWE-73 | NLTK through 3.10.3 contains a path traversal vulnerability in model-artifact APIs that bypass pathsec enforcement by using raw file operations on caller-controlled paths. Attacker |
| CVE-2026-81727 | Analyzed | 未確認 | CWE-59 | NLTK versions before 3.10.3 contain a filesystem containment bypass vulnerability in the Downloader.download and Downloader.incr_download methods that allows attackers to overwrite |
| CVE-2026-81728 | Analyzed | 未確認 | CWE-89 | Dolibarr before 24.0.0 contains a SQL injection in its CSV and XLSX import wizard. The wizard reads its update keys with GETPOST('updatekeys', 'array') in htdocs/imports/import.php |
| CVE-2026-81729 | Analyzed | 未確認 | CWE-863 | Dolibarr before 23.0.4 authorizes REST API document deletion against the wrong permission. Documents::delete() in htdocs/api/class/api_documents.class.php calls dol_check_secure_ac |
| CVE-2026-8173 | Deferred | 未確認 | CWE-209 | The web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an authenticated administrator uses the 'Copy learned MAC Addresse |
| CVE-2026-81730 | Analyzed | 未確認 | CWE-22 | Dolibarr 9.0.0 through 23.0.4 saves inbound email attachments under the name supplied in the message's MIME headers without reducing it to a safe basename. The global saveAttachmen |
| CVE-2026-81731 | Analyzed | 未確認 | CWE-79 | Frappe 15.11.0 through 16.32.0 stores and renders the workspace card description without XSS filtering. The description field of the Workspace Link doctype is declared with "ignore |
| CVE-2026-81732 | Deferred | 未確認 | CWE-200 | WWBN AVideo through version 30.0 fails to enforce authentication on the report4.json.php and report4.1.json.php endpoints, allowing unauthenticated access to user registration stat |
| CVE-2026-81733 | Deferred | 未確認 | CWE-352 | WWBN AVideo through 30.0 (and master up to commit 4cb576e) contains a cross-site request forgery vulnerability in plugin/Live/myLiveControls.save.json.php. The endpoint only checks |
| CVE-2026-81735 | Deferred | 未確認 | CWE-306 | startServer.ts in the mcp-http-server package of UI-TARS-desktop defaulted its listen address to '::' when no host was given, so startSseAndStreamableHttpMcpServer bound the Stream |
| CVE-2026-81743 | Deferred | 未確認 | CWE-22, CWE-94 | Affected versions of Flowintel allow the LOG_FILE configuration value to be modified through system settings without restricting it to a filename inside the intended log directory. |
| CVE-2026-81753 | Deferred | 未確認 | CWE-79 | Affected versions of Flowintel render Mermaid blocks contained in stored case notes without sufficiently neutralizing attacker-controlled markup. Because Mermaid note content is pe |
| CVE-2026-81756 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Smart Marketing SMS and Newsletters Forms <= 5.1.24 versions. |
| CVE-2026-81757 | Deferred | 未確認 | CWE-502 | Author Remote Code Execution (RCE) in Rank Math SEO <= 1.0.276 versions. |
| CVE-2026-81758 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in OwnerRez API <= 1.2.6 versions. |
| CVE-2026-81759 | Deferred | 未確認 | CWE-862 | Contributor Broken Access Control in WpEvently <= 5.5.0 versions. |
| CVE-2026-81760 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine allows Reflected XSS. This issue affects JetEngine: from |
| CVE-2026-81761 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in WpEvently <= 5.5.0 versions. |
| CVE-2026-81762 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Booking and Rental Manager <= 2.7.6 versions. |
| CVE-2026-81763 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Throws SPAM Away <= 3.8.2 versions. |
| CVE-2026-81764 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Email Essentials <= 6.0.6 versions. |
| CVE-2026-81765 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Tailored Tools <= 3.0.2 versions. |
| CVE-2026-81766 | Deferred | 未確認 | CWE-269 | The Really Simple Security WordPress plugin before 9.8.0 does not check that the user is allowed to install Really Simple Security WordPress plugin before 9.8.0 before installing |
| CVE-2026-81767 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Simple Payment <= 2.5.2 versions. |
| CVE-2026-81768 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Super Store Finder <= 7.10 versions. |
| CVE-2026-81777 | Deferred | 未確認 | CWE-290 | Authentication Bypass by Spoofing vulnerability in WPDeveloper Essential Addons for Elementor allows Identity Spoofing. This issue affects Essential Addons for Elementor: from n/a |
| CVE-2026-81778 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in Kalles Addons <= 1.0.6 versions. |
| CVE-2026-81779 | Deferred | 未確認 | CWE-1284 | Improper Validation of Specified Quantity in Input vulnerability in Silk Themes Newspapers X allows Malicious Software Implanted. This issue affects Newspapers X: from 1.0.46 thro |
| CVE-2026-81780 | Deferred | 未確認 | CWE-434 | Unauthenticated Arbitrary File Upload in Hash Form <= 1.4.2 versions. |
| CVE-2026-81814 | Deferred | 未確認 | CWE-79 | Affected versions of Flowintel render calendar event titles using innerHTML. Because those titles are derived from case titles, a user able to create or modify a case title could s |
| CVE-2026-81817 | Deferred | 未確認 | CWE-639 | Affected versions of Flowintel contain an insecure direct object reference / broken object-level authorization issue across numerous task endpoints. The routes generally received |
| CVE-2026-81818 | Deferred | 未確認 | CWE-269 | Affected versions of Flowintel contain an authorization flaw in the administrative user-edit API. The existing authorization check correctly prevented an organization administrat |
| CVE-2026-81819 | Deferred | 未確認 | CWE-862 | Affected versions of Flowintel expose the /my_assignment/user API endpoint to any authenticated API user. The endpoint accepts a user_id parameter identifying the user whose assign |
| CVE-2026-8182 | Analyzed | 未確認 | CWE-94 | IBM Langflow OSS 1.0.0 through 1.10.3 installations allow anyone on the internet to execute arbitrary code on the server without any credentials via 2 HTTP requests. |
| CVE-2026-81820 | Deferred | 未確認 | CWE-79 | Affected versions of Flowintel construct timeline HTML using attacker-controllable MISP object fields such as: * object UUID; * object name; * attribute value; |
| CVE-2026-81826 | Deferred | 未確認 | CWE-384, CWE-613 | Affected versions of Flowintel do not revoke existing authenticated sessions when a user’s password is changed. This means that if an attacker already possesses a valid session—f |
| CVE-2026-81827 | Deferred | 未確認 | CWE-20 | Affected versions of Flowintel incorrectly attempted to validate login email addresses by calling Email(email). That does not perform WTForms field validation; it merely constructs |
| CVE-2026-8183 | Analyzed | 未確認 | CWE-22 | IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote attacke |
| CVE-2026-81833 | Deferred | 未確認 | CWE-74, CWE-94 | A security flaw has been discovered in RooCodeInc Roo-Code up to 3.51.1. Affected by this vulnerability is the function optimizeQuery of the file src/utils/helpers.ts of the compon |
| CVE-2026-81834 | Deferred | 未確認 | CWE-74, CWE-94 | A weakness has been identified in RooCodeInc Roo-Code up to 3.51.1. Affected by this issue is the function ExecaTerminalProcess of the component README File Handler. Executing a ma |
| CVE-2026-81835 | Deferred | 未確認 | CWE-74, CWE-94 | A security vulnerability has been detected in RooCodeInc Roo-Code up to 3.51.1. This affects the function fetch_instructions of the file malicious_mcp_server.py of the component MC |
| CVE-2026-81836 | Deferred | 未確認 | CWE-310, CWE-319 | A vulnerability was detected in RooCodeInc Roo-Code up to 3.51.1. This vulnerability affects unknown code of the file src/integrations/claude-code/oauth.ts of the component OAuth C |
| CVE-2026-81837 | Deferred | 未確認 | CWE-22 | A flaw has been found in RooCodeInc Roo-Code up to 3.51.1. This issue affects the function path.resolve of the file src/core/tools/ApplyPatchTool.ts of the component ApplyPatchTool |
| CVE-2026-81838 | Analyzed | 未確認 | CWE-23 | A relative path traversal issue in the zip extraction functionality in AWS diagram-as-code (awsdac) in versions 0.10 through 0.23 can allow a third party to write arbitrary files t |
| CVE-2026-81845 | Deferred | 未確認 | CWE-22 | A vulnerability has been found in arben-adm mcp-sequential-thinking up to 0.5.0. Impacted is the function import_session/export_session of the file mcp_sequential_thinking/server.p |
| CVE-2026-81847 | Deferred | 未確認 | CWE-22 | A vulnerability was found in MAA-AI MaaMCP up to 1.1.1.dev6+g2e4a41287. The affected element is the function save_pipeline/load_pipeline of the file pipeline_tools.py. Performing a |
| CVE-2026-81848 | Deferred | 未確認 | CWE-918 | A vulnerability was determined in cyberchitta scrapling-fetch-mcp up to 0.2.2. The impacted element is the function s_fetch_page/s_fetch_pattern of the file src/scrapling_fetch_mcp |
| CVE-2026-81849 | Awaiting Analysis | 未確認 | CWE-23 | Improper limitation of a pathname to a restricted directory in the aws:downloadContent plugin in amazon-ssm-agent before 3.3.4515.0 might allow an authenticated remote user whose s |
| CVE-2026-81851 | Deferred | 未確認 | CWE-122, CWE-1284 | A heap-based buffer overflow vulnerability in Fireware OS's iked process allows an authenticated administrator to crash the IKE daemon (iked), resulting in a denial of service, by |
| CVE-2026-81852 | Deferred | 未確認 | CWE-330 | Use of Insufficiently Random Values vulnerability in ash-project ash_admin ships a hardcoded, publicly known CSP nonce, defeating nonce-based Content-Security-Policy protection. W |
| CVE-2026-81853 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash_admin turns a record-lookup URL into an equality oracle over sensitive attributes. AshAdmin.Helpe |
| CVE-2026-81887 | Deferred | 未確認 | CWE-1321, CWE-79 | Livewire is a full-stack framework for Laravel. From 3.0.0-beta.1 until 3.8.3 and 4.3.4, the dot-notated query-string parser in js/plugins/history/index.js, including fromQueryStri |
| CVE-2026-81888 | Deferred | 未確認 | CWE-1275, CWE-352 | @hono/oauth-providers is Authentication middleware for Hono. Prior to version 0.8.6, the built-in social login providers accept an OAuth callback even when the `state` value is abs |
| CVE-2026-81889 | Deferred | 未確認 | CWE-918 | elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.70, elFinder URL uploads in php/elFinder.class.php can bypass server-side reque |
| CVE-2026-81890 | Deferred | 未確認 | CWE-352 | elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.70, the netmount command is omitted from elFinderConnector::$csrfProtectedCmds |
| CVE-2026-81891 | Deferred | 未確認 | CWE-434 | elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.70, checkExtractItems() in php/elFinderVolumeDriver.class.php calls mimetypeInt |
| CVE-2026-81892 | Deferred | 未確認 | CWE-639, CWE-862, CWE-863 | EasyAdmin is a fast and modern admin generator for Symfony applications. From 4.0.0 until 4.29.16 and 5.5.1, EasyAdmin serves all backend requests through a single dashboard route |
| CVE-2026-81893 | Awaiting Analysis | 未確認 | CWE-787 | A flaw was found in gdk-pixbuf. When loading a specially crafted JPEG image containing chunked ICC profile markers, an error during ICC profile parsing can leave stale size metadat |
| CVE-2026-81931 | Deferred | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type in the product photo upload in Roskus Prospero Flow CRM before 5.16.0 allows an authenticated user holding the create product permis |
| CVE-2026-81934 | Awaiting Analysis | 未確認 | CWE-416 | Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, |
| CVE-2026-82017 | Awaiting Analysis | 未確認 | CWE-345 | IGEL OS 12 before 12.7.6 and IGEL OS 11 before 11.11.150 contain a boot registry parameter injection vulnerability that allows attackers with physical access to execute arbitrary L |
| CVE-2026-82018 | Awaiting Analysis | 未確認 | CWE-636 | IGEL OS 12 before 12.9.0, 12.8.3 LTS and IGEL OS 11 before 11.11.150 contain a secure boot bypass vulnerability in the GRUB boot stage that allows physically present attackers to g |
| CVE-2026-82020 | Deferred | 未確認 | CWE-552 | Hermes Agent 0.16.0 prior to 0.17.0 contains an improper path restriction vulnerability that allows attackers who can influence ingested message content to overwrite the credential |
| CVE-2026-82021 | Deferred | 未確認 | CWE-494 | Hermes Agent 0.18.2 prior to 0.19.0 contains a supply chain vulnerability in its bundled MCP catalog that allows a remote attacker to execute arbitrary code by compromising a third |
| CVE-2026-82072 | Analyzed | 未確認 | CWE-125 | Out of bounds read in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-82078 | Analyzed | 掲載 | CWE-470 | An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based |
| CVE-2026-82081 | Deferred | 未確認 | CWE-918 | wallabag 2 through 2.6.14 allows SSRF because a crafted title or content field is mishandled during PDF export. |
| CVE-2026-82082 | Deferred | 未確認 | CWE-78 | NUMail developed by Green-Computing has an OS Command Injection vulnerability. Unauthenticated remote attackers can inject arbitrary OS commands and execute them on the server. |
| CVE-2026-82089 | Deferred | 未確認 | CWE-79 | The wallabag (aka fr.gaulupeau.apps.InThePoche) application through 2.6.0 for Android allows XSS because /api/entries data is loaded into a WebView. |
| CVE-2026-82090 | Deferred | 未確認 | CWE-79 | Pocket through 8.33.0.0 allows XSS because "Save to Pocket" injects external HTML into the DOM. JavaScript code can alter the application state via native bridge methods. |
| CVE-2026-82111 | Deferred | 未確認 | CWE-22 | A vulnerability was detected in iswalle getnote-mcp up to 1.5.0. The affected element is the function fs.readFileSync of the file src/index.ts of the component upload_image. Perfor |
| CVE-2026-82112 | Deferred | 未確認 | CWE-22 | A flaw has been found in houtini-ai houtini-lm up to 2.13.2. The impacted element is an unknown function of the file src/index.ts of the component code_task_files. Executing a mani |
| CVE-2026-82123 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Tangible Loops & Logic. |
| CVE-2026-82181 | Deferred | 未確認 | CWE-598 | Medical Practice Management System developed by Le-yan has a Sensitive Data in URL vulnerability. Unauthenticated remote attackers can obtain sensitive information via victim's bro |
| CVE-2026-82217 | Deferred | 未確認 | CWE-22 | In Eclipse Theia versions 1.73.0 up to but not including 1.75.0, the AI "Agent Mode" file-change tools (writeFileContent, suggestFileContent, and the replacement and state helpers) |
| CVE-2026-82220 | Deferred | 未確認 | CWE-294 | Unauthenticated Other Vulnerability Type in Forminator <= 1.57.1 versions. |
| CVE-2026-82221 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in RegistrationMagic <= 6.0.9.8 versions. |
| CVE-2026-82222 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP GiveWP allows Object Injection. This issue affects GiveWP: from n/a through 4.16.7.1. |
| CVE-2026-82224 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in SliceWP <= 1.2.10 versions. |
| CVE-2026-82225 | Deferred | 未確認 | CWE-288 | Unauthenticated Broken Authentication in RegistrationMagic <= 6.0.9.8 versions. |
| CVE-2026-82226 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Tickera <= 3.6.0.2 versions. |
| CVE-2026-82227 | Deferred | 未確認 | CWE-89 | Contributor SQL Injection in WPBulky <= 1.2.2 versions. |
| CVE-2026-82228 | Deferred | 未確認 | CWE-290 | Unauthenticated Bypass Vulnerability in SiteGround Security <= 1.6.6 versions. |
| CVE-2026-82229 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.2 versions. |
| CVE-2026-82233 | Deferred | 未確認 | CWE-22 | SiYuan before v3.8.1 contains a path traversal vulnerability in the asset.upload MCP tool that accepts arbitrary absolute file paths without workspace boundary validation. Attacker |
| CVE-2026-82234 | Deferred | 未確認 | CWE-918 | SiYuan versions before v3.8.1 contain a server-side request forgery vulnerability in the http_request and web_fetch agent tools that perform DNS resolution only at guard time witho |
| CVE-2026-82235 | Awaiting Analysis | 未確認 | CWE-400 | filebrowser through 2.63.23 fails to validate named pipes in directory archive and public download handlers, allowing attackers to trigger blocking open syscalls. Authenticated use |
| CVE-2026-82236 | Awaiting Analysis | 未確認 | CWE-459 | File Browser versions from 2.63.6 through 2.63.23 fail to clean up public share links when a privileged user deletes another user's shared file. Attackers can access the surviving |
| CVE-2026-82237 | Awaiting Analysis | 未確認 | CWE-459 | filebrowser through 2.63.23 does not remove share records when a shared file is renamed (only deletion triggers share cleanup). The share record is keyed by path, so it survives th |
| CVE-2026-82238 | Awaiting Analysis | 未確認 | CWE-367 | filebrowser from version 2.24.0 contains a race condition in the TUS upload handler that allows authenticated users to write past the declared Upload-Length by sending concurrent P |
| CVE-2026-82239 | Deferred | 未確認 | CWE-862 | Budibase before 3.41.3 fails to enforce per-table role restrictions on the POST /api/datasources/query endpoint, allowing low-privilege BASIC users to read, create, update, or dele |
| CVE-2026-82240 | Deferred | 未確認 | CWE-862 | Budibase before 3.41.3 fails to validate app-scoped builder role assignments in the public user create and update endpoints, allowing an authenticated app-scoped builder to grant b |
| CVE-2026-82241 | Deferred | 未確認 | CWE-918 | Budibase backend-core (@budibase/backend-core, as used by @budibase/server) omits the shared address space range 100.64.0.0/10 from its default SSRF blacklist (DEFAULT_BLACKLIST) u |
| CVE-2026-82242 | Deferred | 未確認 | CWE-862 | Budibase versions before 3.41.3 contain a missing authorization vulnerability in the POST /api/resources/duplicate endpoint that allows authenticated builders to inject tables, aut |
| CVE-2026-82243 | Deferred | 未確認 | CWE-918 | Budibase Server before 3.41.3 contains a server-side request forgery vulnerability in the datasource verify endpoint that allows builder-level users to supply arbitrary URLs withou |
| CVE-2026-82244 | Deferred | 未確認 | CWE-94 | Budibase versions before 3.41.3 contain a remote code execution vulnerability in plugin handling that allows authenticated admin users to execute arbitrary code by uploading a mali |
| CVE-2026-82245 | Deferred | 未確認 | CWE-862 | Budibase before 3.41.3 fails to enforce role-based authorization on license management endpoints, allowing any authenticated user to delete license keys or manipulate offline token |
| CVE-2026-82246 | Deferred | 未確認 | CWE-918 | Budibase Server before 3.41.3 contains a server-side request forgery vulnerability in the query import endpoint that fails to validate user-supplied URLs before fetching content. A |
| CVE-2026-82247 | Deferred | 未確認 | CWE-522 | gitoxide's gix-url crate (<= 0.32.0, fixed in 0.37.1) uses a hand-rolled URL parser that does not treat '?' or '#' as terminating the authority component, contrary to RFC 3986. As |
| CVE-2026-82248 | Deferred | 未確認 | CWE-59 | gix-worktree-state before 0.33.0 (part of gitoxide) allows writing files outside the worktree on Windows. gix_worktree_state::checkout() follows an existing terminal symlink during |
| CVE-2026-82249 | Deferred | 未確認 | CWE-116 | gitoxide before 0.38.2 fails to validate carriage return characters in URL values passed to credential helpers. Attackers can supply URLs containing bare carriage returns to inject |
| CVE-2026-82250 | Deferred | 未確認 | CWE-191 | gitoxide gix-packetline versions before 0.21.5 contain a panic vulnerability in the TextRef implementation that occurs when processing side-band packet lines with empty payloads. A |
| CVE-2026-82251 | Deferred | 未確認 | CWE-22 | gitoxide before 0.52.1 fails to validate submodule names from .gitmodules configuration, allowing path traversal when deriving submodule git directories. Attackers can craft malici |
| CVE-2026-82252 | Deferred | 未確認 | CWE-59 | gitoxide before 0.52.1 follows symlinks when reading the worktree .gitmodules file, allowing attackers to inject out-of-repository bytes into submodule metadata. Attackers can crea |
| CVE-2026-82253 | Deferred | 未確認 | CWE-22 | gitoxide (Rust crates gix <= 0.72.0 and gix-validate <= 0.10.0) contains a path traversal vulnerability. The submodule name validation function in gix-validate only checks the firs |
| CVE-2026-82254 | Deferred | 未確認 | CWE-248 | gitoxide before 0.69.0 contains unchecked array indexing in delta application and uncapped allocation from attacker-controlled size headers in gix-pack. Attackers can send crafted |
| CVE-2026-82255 | Deferred | 未確認 | CWE-522 | gitoxide versions from 0.25.4 contain an HTTP credential leak vulnerability in the curl-based transport backend where credentials are sent to attacker-controlled servers after HTTP |
| CVE-2026-82256 | Analyzed | 未確認 | CWE-400 | SvelteKit before 2.69.1 fails to properly validate remote form function payload sizes, allowing attackers to crash the Node process by sending large payloads. Repeated exploitation |
| CVE-2026-82257 | Analyzed | 未確認 | CWE-1321 | SvelteKit versions before 2.69.1 contain a prototype pollution vulnerability in remote form functions with file input fields that accept arbitrary user-controlled path names. Attac |
| CVE-2026-82258 | Analyzed | 未確認 | CWE-362 | SvelteKit versions from 2.38.0 before 2.60.1 contain a race condition in query.batch that allows concurrent requests from different users to merge under a single request context. A |
| CVE-2026-82259 | Analyzed | 未確認 | CWE-502 | SvelteKit versions from 2.49.0 through 2.53.2 (fixed in 2.53.3) contain a deserialization expansion issue in the experimental form remote function. When an application enables expe |
| CVE-2026-82260 | Analyzed | 未確認 | CWE-400 | SvelteKit (@sveltejs/kit) versions >=2.49.0 and <=2.52.1 with experimental remote functions (experimental.remoteFunctions) and form enabled contain a memory exhaustion vulnerabilit |
| CVE-2026-82261 | Analyzed | 未確認 | CWE-400 | SvelteKit (@sveltejs/kit) versions >=2.49.0 and <=2.52.1 with experimental remote functions and form enabled contain a CPU exhaustion vulnerability in form deserialization. An atta |
| CVE-2026-82262 | Deferred | 未確認 | CWE-918 | Logto through 1.42.0 contains a server-side request forgery vulnerability in the POST /api/hooks/:id/test endpoint that accepts arbitrary URLs without host validation. Tenant admin |
| CVE-2026-82263 | Deferred | 未確認 | CWE-918 | Logto through 1.42.0 contains a server-side request forgery vulnerability in the OIDC SSO connector creation endpoint that fails to validate the issuer URL parameter. Tenant admini |
| CVE-2026-82264 | Deferred | 未確認 | CWE-22 | Duplicacy through 3.2.5 contains a path traversal vulnerability in the restore function that fails to validate entry paths deserialized from snapshot files. Attackers can craft mal |
| CVE-2026-82265 | Awaiting Analysis | 未確認 | CWE-306 | Zipkin through 3.6.1 exposes Spring Boot Actuator endpoints on the tracing API port without authentication, allowing unauthenticated attackers to access sensitive information. Atta |
| CVE-2026-82266 | Deferred | 未確認 | CWE-306 | Redpanda through 26.2.2 binds the Admin API to 0.0.0.0:9644 with admin_api_require_auth defaulting to false, treating unauthenticated requests as superusers. Attackers can reach po |
| CVE-2026-82267 | Deferred | 未確認 | CWE-862 | Komodo through 2.3.2 discloses internal resource identifiers and writes audit entries before performing permission checks in the /execute and /execute/{variant} handlers. Authentic |
| CVE-2026-82268 | Deferred | 未確認 | CWE-918 | Qwen-Agent through 0.0.34 contains a server-side request forgery vulnerability in the document parsing path that treats caller-supplied paths as URLs without scheme restriction or |
| CVE-2026-82269 | Deferred | 未確認 | CWE-288 | Gophish through 0.12.1 fails to enforce account lockout and password change requirements in the API authentication middleware. Attackers with valid API keys can bypass these securi |
| CVE-2026-82270 | Deferred | 未確認 | CWE-918 | Portkey AI Gateway through 1.15.2 contains a server-side request forgery vulnerability in the /v1/proxy/* route that lacks requestValidator middleware. Attackers can set the x-port |
| CVE-2026-82271 | Deferred | 未確認 | CWE-639 | R2R through 3.6.5 fails to properly validate user ownership in conversation update and message handlers, allowing authenticated users to modify other users' conversations. Attacker |
| CVE-2026-82272 | Deferred | 未確認 | CWE-863 | Immich through 3.1.0 fails to properly enforce locked asset visibility when assets are locked through the single-asset endpoint, allowing them to remain accessible through shared a |
| CVE-2026-82273 | Deferred | 未確認 | CWE-862 | Mastra through 1.63.0 contains an authentication bypass vulnerability in the memory API thread ownership validation when mapUserToResourceId callback is omitted from configuration. |
| CVE-2026-82274 | Deferred | 未確認 | CWE-601 | Twenty through 2.35.0 contains an open redirect vulnerability in the OAuthPropagatorController.propagateOAuthCallback endpoint that treats the state query parameter as a redirect U |
| CVE-2026-82275 | Deferred | 未確認 | CWE-22 | Qwen-Agent through 0.0.34 contains a path traversal vulnerability in the document parser that fails to restrict file access to intended directories. Attackers can supply absolute f |
| CVE-2026-82276 | Deferred | 未確認 | CWE-306 | StarRocks through 4.0.13 contains an authentication bypass vulnerability in five REST handler classes that override execute() directly instead of implementing executeWithoutPasswor |
| CVE-2026-82277 | Deferred | 未確認 | CWE-306 | Argo Rollouts dashboard through 1.10.0 binds to all interfaces and exposes mutating Rollout operations without authentication, authorization, or CSRF protection. Attackers on the s |
| CVE-2026-82278 | Deferred | 未確認 | CWE-94 | BISHENG before 2.6.0 contains a remote code execution vulnerability in the workflow run_once endpoint that allows authenticated users to execute arbitrary Python code. Attackers ca |
| CVE-2026-82279 | Deferred | 未確認 | CWE-862 | HyperDX through 1.10.1 fails to enforce role-based access controls in team management endpoints, allowing any team member to perform administrative actions. Attackers can delete te |
| CVE-2026-82280 | Deferred | 未確認 | CWE-639 | Quivr through 0.0.322 fails to validate ownership in prompt endpoints, allowing authenticated users to modify any prompt by identifier. Attackers with read-only access to shared br |
| CVE-2026-82281 | Deferred | 未確認 | CWE-639 | Kotaemon through 0.12.0 fails to properly validate conversation ownership in select_conv, delete_conv, rename_conv, and on_set_public_conversation functions in control.py. Attacker |
| CVE-2026-82282 | Deferred | 未確認 | CWE-306 | Atlantis through 0.47.1 fails to authenticate the /github-app/setup endpoint, allowing unauthenticated attackers to access GitHub App credentials. Attackers can observe or intercep |
| CVE-2026-82283 | Deferred | 未確認 | CWE-639 | VoltAgent through 2.1.20 fails to validate conversation ownership in memory API handlers, allowing authenticated users to access other users' conversations. Attackers can read, mod |
| CVE-2026-82284 | Deferred | 未確認 | CWE-639 | Quivr versions through 0.0.322 fail to validate chat ownership in the GET /chat/{chat_id}/history, DELETE /chat/{chat_id}, and POST /chat/{chat_id}/question/answer endpoints. Authe |
| CVE-2026-82285 | Deferred | 未確認 | CWE-918 | bisheng through 2.6.0-fix2 contains a server-side request forgery vulnerability in the POST /api/v1/workflow/report/callback endpoint that lacks authentication and applies no URL s |
| CVE-2026-82286 | Deferred | 未確認 | CWE-22 | gpt-crawler through 1.5.1 fails to validate the outputFileName parameter in the POST /crawl endpoint, allowing unauthenticated attackers to write arbitrary files to any filesystem |
| CVE-2026-82287 | Deferred | 未確認 | CWE-942 | Rybbit before 2.7.0 contains a CORS misconfiguration vulnerability that allows attackers to bypass origin restrictions by reflecting any request origin in Access-Control-Allow-Orig |
| CVE-2026-82288 | Awaiting Analysis | 未確認 | CWE-522 | Stable Diffusion WebUI through 1.10.1 contains a credential disclosure vulnerability in the /sdapi/v1/cmd-flags endpoint that returns parsed command-line arguments including gradio |
| CVE-2026-82289 | Deferred | 未確認 | CWE-918 | Gitingest through 0.3.1 fails to properly validate hostnames in _validate_host, accepting any host with a git., gitlab., or github. prefix regardless of known-hosts list membership |
| CVE-2026-82290 | Deferred | 未確認 | CWE-639 | Chainlit through 2.12.0 fails to validate ownership of feedback records in PUT and DELETE endpoints. Authenticated attackers can delete or modify other users' feedback by supplying |
| CVE-2026-82291 | Deferred | 未確認 | CWE-942 | HeyForm before 3.0.0-rc.8 reflects the request Origin header in CORS responses while allowing credentials, enabling cross-origin requests with authentication. Attackers can execute |
| CVE-2026-82306 | Deferred | 未確認 | CWE-200 | StarRocks through 4.0.13 contains an information disclosure vulnerability in the query_detail endpoint that returns unfiltered query history for all users. Authenticated attackers |
| CVE-2026-82324 | Analyzed | 未確認 | CWE-125 | A flaw was found in the file-iff (IFF/ILBM) plugin in GIMP. When processing a specially crafted IFF/ILBM image file, the plugin does not properly validate the HAM row size and impr |
| CVE-2026-82327 | Awaiting Analysis | 未確認 | CWE-129 | A flaw was found in libsolv, a dependency-resolution library used by RPM-based package managers such as dnf and zypper to work with .solv repository cache files. When libsolv rewri |
| CVE-2026-82328 | Analyzed | 未確認 | CWE-125 | A flaw was found in the file-ico plugin in GIMP. When processing a specially crafted ICO image file, the plugin does not properly validate the used_clrs (palette count) parameter. |
| CVE-2026-82329 | Analyzed | 掲載 | CWE-287 | JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileg |
| CVE-2026-82330 | Analyzed | 未確認 | CWE-125 | A flaw was found in the file-pvr plugin in GIMP. When processing a specially crafted PVR image file, the VQ (compressed) decoder does not properly perform memory bounds checking. T |
| CVE-2026-82333 | Analyzed | 未確認 | CWE-400 | multer is a middleware for handling multipart/form-data in Node.js. A small multipart request with two specially crafted text field names can make multer's field parser synchronous |
| CVE-2026-82343 | Analyzed | 未確認 | CWE-120 | A flaw was found in the file-psd plugin in GIMP. When processing a specially crafted PSD image file, the plugin does not properly validate the channel-count parameter. This incorre |
| CVE-2026-82346 | Awaiting Analysis | 未確認 | CWE-379 | A potential security vulnerability has been identified in the HP ImageDiags for versions prior to 5.0.0.36. The vulnerability could potentially allow a local attacker to escalate p |
| CVE-2026-82364 | Deferred | 未確認 | CWE-362 | A security vulnerability has been detected in macrozheng mall up to 1.0.3. This impacts an unknown function of the file /order/submit of the component Order Submission. The manipul |
| CVE-2026-82367 | Deferred | 未確認 | CWE-488 | Exposure of Data Element to Wrong Session vulnerability in ash-project ash_graphql can deliver one subscription's resolved records to a different subscriber's topic. AshGraphql.Su |
| CVE-2026-82392 | Deferred | 未確認 | CWE-22 | pnpm is a package manager. Prior to 10.34.5 and from 11.0.0 until 11.11.0, pnpm parses the package name from attacker-controlled pnpm-lock.yaml packages keys with dp.parse(depPath) |
| CVE-2026-82393 | Deferred | 未確認 | CWE-22, CWE-73, CWE-94 | pnpm is a package manager. Prior to 10.34.5 and 11.11.0, pnpm accepts a scoped path traversal in a tarball dependency's package.json manifest name because pnpm11/resolving/npm-reso |
| CVE-2026-82394 | Deferred | 未確認 | CWE-862, CWE-863 | Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.25 and 3.0.8, the preview-link endpoint and src/Sulu/Bundle/PreviewBundle |
| CVE-2026-82395 | Deferred | 未確認 | CWE-639, CWE-863 | Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.25 and 3.0.8, the media move endpoint derives its permission check from t |
| CVE-2026-82396 | Deferred | 未確認 | CWE-79 | Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.25 and 3.0.8, src/Sulu/Bundle/MediaBundle/Controller/MediaStreamControlle |
| CVE-2026-82397 | Deferred | 未確認 | CWE-1284, CWE-400 | Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.8, Tornado parses application/x-www-form-urlencoded request bodies with urllib.parse.parse_qs in |
| CVE-2026-82398 | Analyzed | 未確認 | CWE-407 | pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, an attacker can craft a PDF that causes long runtimes when the pypdf/_utils.py function read_until_whitesp |
| CVE-2026-82417 | Awaiting Analysis | 未確認 | CWE-248, CWE-703 | ### Summary `qs.stringify` throws a `TypeError` when it serializes an object whose own `constructor` property has a truthy, non-callable `isBuffer` member. `utils.isBuffer` duck |
| CVE-2026-82421 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/emp_edit.php. The manipulation of the a |
| CVE-2026-82422 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/emp_del.php. The manipulation of the argument |
| CVE-2026-82423 | Deferred | 未確認 | CWE-840, CWE-841 | A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. T |
| CVE-2026-82424 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in PHPGurukul Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /student_edit1.php. Executing a |
| CVE-2026-82447 | Deferred | 未確認 | CWE-1336 | Skyvern before 1.0.45 contains a sandbox escape vulnerability in TextPromptBlock that renders prompts twice, first through a sandboxed Jinja environment and then through an unsandb |
| CVE-2026-82448 | Deferred | 未確認 | CWE-798 | Shinobi before commit 5a76c74f contains a hardcoded connection key in the child node service that allows unauthenticated attackers to execute arbitrary database queries. Attackers |
| CVE-2026-82449 | Deferred | 未確認 | CWE-208 | Cockpit CMS before 2.14.1 contains an account enumeration vulnerability in the auth check endpoint due to timing discrepancies in password verification. Attackers can measure respo |
| CVE-2026-82450 | Deferred | 未確認 | CWE-434 | BookStack before 26.05.4 contains a remote code execution vulnerability in the portable ZIP import functionality that allows users with Import Content and Create Books permissions |
| CVE-2026-82451 | Deferred | 未確認 | CWE-79 | Formwork before 2.3.11 contains a stored cross-site scripting vulnerability in visit tracking that records the Referer header host unescaped. Unauthenticated attackers can craft ma |
| CVE-2026-82452 | Deferred | 未確認 | CWE-306 | rust-iot-platform through commit 5df942ab contains an authentication bypass vulnerability where most REST API routes lack authentication guards in their handler signatures. Unauthe |
| CVE-2026-82453 | Deferred | 未確認 | CWE-256 | rust-iot-platform through commit 5df942ab stores user passwords in cleartext without hashing in the user model. Attackers can read API responses from user retrieval and listing rou |
| CVE-2026-82454 | Deferred | 未確認 | CWE-347 | The Omnivore API (packages/api) before the fix in commit abf53d6 contains an authentication bypass in Apple sign-in token verification. The decodeAppleToken function extracted the |
| CVE-2026-82455 | Rejected | 未確認 | Rejected reason: The RubyGems maintainers determined that the reported symlink-following behavior during gem extraction is not a security vulnerability, so no vulnerability exists | |
| CVE-2026-82456 | Deferred | 未確認 | CWE-1327 | argocd-mcp 0.8.0 binds its HTTP transport to every network interface and accepts MCP sessions without requiring caller credentials when ARGOCD_API_TOKEN is configured. Attackers wh |
| CVE-2026-82457 | Deferred | 未確認 | CWE-681 | su-exec through 0.3 fails to validate numeric user and group identifiers parsed with strtol before assigning to uid_t and gid_t, allowing truncation of out-of-range values to zero. |
| CVE-2026-82460 | Deferred | 未確認 | CWE-22 | Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoints that fails to properly validate path normalization. Attack |
| CVE-2026-82461 | Awaiting Analysis | 未確認 | CWE-347 | pac4j-oidc before 6.5.6 fails to verify access token signatures, issuers, audiences, or expiry when extracting Keycloak realm and client roles. Attackers can forge access tokens wi |
| CVE-2026-82462 | Awaiting Analysis | 未確認 | CWE-345 | pac4j-oidc before 6.5.6 accepts OIDC callbacks carrying only an access token without authorization code or ID token validation. Attackers can substitute access tokens minted for ot |
| CVE-2026-82463 | Deferred | 未確認 | CWE-863 | pac4j-core before 6.5.6 contains an authentication bypass vulnerability in CheckProfileTypeAuthorizer that reverses the profile type validation logic. Attackers can authenticate th |
| CVE-2026-82464 | Awaiting Analysis | 未確認 | CWE-601 | pac4j-core before 6.5.6 contains an open redirect vulnerability in DefaultLogoutLogic.perform() that accepts backslash-prefixed logout redirect targets matching logoutUrlPattern. A |
| CVE-2026-82465 | Awaiting Analysis | 未確認 | CWE-345 | pac4j-saml before 6.5.6 does not require signature validation of SAML LogoutRequest messages in SAML2LogoutValidator.validateLogoutRequest(). When an IdP sends no SessionIndex, a s |
| CVE-2026-82466 | Deferred | 未確認 | CWE-287 | Rodauth before 2.46.0 contains an authentication bypass vulnerability in the webauthn_login route that allows logged-in users to authenticate as any other account. Attackers can ex |
| CVE-2026-82467 | Deferred | 未確認 | CWE-601 | Rodauth before 2.47.0 fails to validate protocol-relative return-to paths in confirm_password, login_return_to_requested_location, and two_factor_auth_return_to_requested_location |
| CVE-2026-82468 | Deferred | 未確認 | CWE-352 | Rodauth before 2.47.0 contains a cross-site request forgery protection bypass vulnerability in the JSON request content type validation. Attackers can craft cross-origin form posts |
| CVE-2026-82469 | Deferred | 未確認 | CWE-613 | Rodauth before 2.47.0 contains an authentication bypass vulnerability in the jwt_refresh route that issues new JWT access tokens without requiring a refresh token. Attackers can pr |
| CVE-2026-82470 | Deferred | 未確認 | CWE-294 | Rodauth before 2.47.0 contains a time-based one-time password reuse vulnerability in the otp feature that fails to track the last accepted code timestamp. Attackers who observe a v |
| CVE-2026-82472 | Deferred | 未確認 | CWE-306 | Documenso before 2.13.0 accepts PDF file uploads on the /api/files/upload-pdf endpoint without requiring authentication, session tokens, or API credentials. Unauthenticated attacke |
| CVE-2026-82473 | Deferred | 未確認 | CWE-306 | KubeEdge CloudCore through 1.23.1 accepts node task status reports on its HTTPS server without authentication verification. Attackers can reach CloudCore on port 10002 to mark upgr |
| CVE-2026-82474 | Awaiting Analysis | 未確認 | CWE-693 | Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied |
| CVE-2026-82475 | Deferred | 未確認 | CWE-862 | iFlytek astron-agent through 1.1.1 contains an authorization bypass vulnerability in the copyFlow endpoint that fails to validate workflow ownership. Authenticated attackers can en |
| CVE-2026-82476 | Deferred | 未確認 | CWE-918 | Memos through 0.30.0 omits the 100.64.0.0/10 carrier-grade NAT address range from SSRF protection in its link-metadata fetcher, allowing unauthenticated attackers to bypass IP vali |
| CVE-2026-82477 | Deferred | 未確認 | CWE-918 | In MITRE SAF Heimdall 2.11.6 through 2.13.x before 2.14.0, an SSRF issue allows remote attackers to access internal network resources via the Tenable proxy endpoint. This occurs in |
| CVE-2026-82478 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was determined in NASA Trick 19.6.0. This issue affects the function JSONVariableServerThread::parse_request of the file trick_source/sim_services/JSONVariableServe |
| CVE-2026-82479 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was identified in NASA cFS up to 7.0.1. Impacted is the function OS_read of the file modules/protocol/tcp/fsw/src/sbn_tcp_if.c of the component SBN TCP Module. Such |
| CVE-2026-82480 | Deferred | 未確認 | CWE-189, CWE-191 | A security flaw has been discovered in NASA cFS up to 7.0.1. The affected element is the function CFE_SB_GetUserDataLength of the file src/cFS/cfe/modules/sb/fsw/src/cfe_sb_util.c |
| CVE-2026-82481 | Deferred | 未確認 | CWE-180 | The cohttp package before 6.3.0 for OCaml allows directory traversal. |
| CVE-2026-82482 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This affects an unknown function of the file profile.php of the component ed |
| CVE-2026-82483 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This impacts an unknown function of the file db_input.php of the component Hidden Album Up |
| CVE-2026-82484 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/emp_searchfrm.php. This manipulation of the argument ID cau |
| CVE-2026-82485 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/pro_edit.php. Such mani |
| CVE-2026-82486 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability was found in SiteServer SSCMS 7.4.0. Affected by this issue is some unknown functionality of the component Agent Installation Workflow. Performing a manipulation of |
| CVE-2026-82487 | Deferred | 未確認 | CWE-640 | A vulnerability was determined in Beetel 450TC3 01.00.00_01. This affects an unknown part. Executing a manipulation can lead to weak password recovery. The attack can be executed r |
| CVE-2026-82488 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in Beetel 450TC3 01.00.00_01. This vulnerability affects unknown code of the component User Management. The manipulation of the argument Username lea |
| CVE-2026-82539 | Deferred | 未確認 | CWE-119 | A vulnerability was determined in TOTOLINK A720R 4.1.5cu.630_B20250509. This impacts the function setMacFilterRules of the file cstecgi.cgi of the component MAC Filtering. Executin |
| CVE-2026-82540 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/cust_searchfrm.php. The manipulation of the argume |
| CVE-2026-82541 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/sup_edit.php. The |
| CVE-2026-82542 | Deferred | 未確認 | CWE-119, CWE-120 | A weakness has been identified in Tenda HG10 300001138. Affected by this issue is the function formIPv6Routing of the file /boaform/admin/formIPv6Routing of the component Boa Web S |
| CVE-2026-82543 | Deferred | 未確認 | CWE-362 | A vulnerability was detected in vastsa FileCodeBox up to 2.3. This vulnerability affects the function update_file_usage of the file apps/base/views.py of the component Pickup Limit |
| CVE-2026-82544 | Deferred | 未確認 | CWE-352, CWE-862 | A flaw has been found in wger-project wger up to 2.6.0-alpha2. This issue affects the function reset_user_password of the file wger/gym/views/gym.py of the component Password Reset |
| CVE-2026-82545 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/sup_searchfrm.php. The manipulation of the argumen |
| CVE-2026-82547 | Deferred | 未確認 | CWE-287 | A vulnerability was found in Linux Foundation Magma 1.9.0. The affected element is an unknown function of the file tasks/amf/amf_fsm.cpp of the component Registration Complete Mess |
| CVE-2026-82548 | Deferred | 未確認 | CWE-200, CWE-284 | A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an unknown function of the component InitialUEMessage Handler. This manipulation causes info |
| CVE-2026-82549 | Deferred | 未確認 | CWE-345, CWE-354 | A vulnerability was identified in Linux Foundation Magma 1.9.0. This affects an unknown function of the component SecurityModeComplete Handler. Such manipulation leads to improper |
| CVE-2026-82550 | Deferred | 未確認 | CWE-20 | A security flaw has been discovered in Linux Foundation Magma 1.9.0. This impacts an unknown function of the component NGSetupRequest Handler. Performing a manipulation of the argu |
| CVE-2026-82551 | Deferred | 未確認 | CWE-371 | A weakness has been identified in Linux Foundation Magma 1.9.0. Affected is an unknown function of the file ngap_amf_handlers.c of the component NGSetup Handler. Executing a manipu |
| CVE-2026-82552 | Deferred | 未確認 | CWE-404 | A security vulnerability has been detected in Linux Foundation Magma 1.9.0. Affected by this vulnerability is an unknown functionality of the file tasks/ngap/ngap_amf.c of the comp |
| CVE-2026-82553 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was detected in sambitraj Student Management System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. Affected by this issue is the function mysqli_query of the file |
| CVE-2026-82554 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in SourceCodester Queue Management System 1.0. This affects an unknown part of the file /api/add_customer.php. This manipulation of the argument Name causes c |
| CVE-2026-82555 | Deferred | 未確認 | CWE-310, CWE-330 | A vulnerability has been found in TOTOLINK N600R 4.3.0cu.7866_B20220506. This vulnerability affects the function loginAuth of the file /web_cste/cgi-bin/cstecgi.cgi of the componen |
| CVE-2026-82556 | Deferred | 未確認 | CWE-918 | A vulnerability was found in Forgejo up to 15.0.4. This issue affects the function net.LookupIP of the file services/migrations/allowlist/is_migrate_allowed.go of the component Rep |
| CVE-2026-82562 | Awaiting Analysis | 未確認 | CWE-770 | ### Summary When `qs.parse` is called with `comma: true` and `throwOnLimitExceeded: true`, a comma-separated value under a bracket-push key (`a[]=1,2,3,4`) is split into an arra |
| CVE-2026-82564 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash_ai allows a caller of an identity-configured tool to update or destroy records it never identified |
| CVE-2026-82579 | Deferred | 未確認 | CWE-835 | Loop with Unreachable Exit Condition (Infinite Loop) vulnerability in ash-project ash_ai allows an attacker who can influence a model's output to hang the tool loop and drive unbou |
| CVE-2026-82580 | Deferred | 未確認 | CWE-209 | Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_ai discloses internal error text to chat users. In AshAi.ToolLoop and AshAi.Tools, an |
| CVE-2026-82587 | Deferred | 未確認 | CWE-119 | A vulnerability was determined in Open5GS up to 2.7.7. This vulnerability affects the function amf_namf_comm_decode_ue_mm_context_list of the file src/amf/namf-handler.c of the com |
| CVE-2026-82588 | Deferred | 未確認 | CWE-404, CWE-476 | A vulnerability was identified in Open5GS up to 2.7.7. This issue affects some unknown processing of the file src/amf/namf-handler.c of the component Transfer Endpoint. Such manipu |
| CVE-2026-82589 | Deferred | 未確認 | CWE-404 | A security flaw has been discovered in Open5GS up to 2.7.7. Impacted is the function amf_namf_comm_handle_n1_n2_message_transfer of the file src/amf/namf-handler.c of the component |
| CVE-2026-82590 | Deferred | 未確認 | CWE-617 | A weakness has been identified in Open5GS up to 2.7.7. The affected element is the function smf_nudm_sdm_handle_get of the file src/smf/nudm-handler.c of the component SMF. Executi |
| CVE-2026-82591 | Deferred | 未確認 | CWE-119, CWE-122 | A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. The impacted element is the function MD5Importer::MakeDataUnique of the file code/AssetL |
| CVE-2026-82592 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub_46725C of the file /boafrm/formDiskFormat of the component Disk Formatting Handler Endpoint. Th |
| CVE-2026-82593 | Deferred | 未確認 | CWE-119, CWE-121 | A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41802C of the file /boafrm/formLtefotaUpgradeFibocom of the component LTE Module Firmware Upgrade. Thi |
| CVE-2026-82594 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability has been found in LogNet grpc-spring-boot-starter up to 5.2.0. Affected is an unknown function of the component Annotation Processing. Such manipulation leads to im |
| CVE-2026-82595 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was found in D-Link DIR-825M 1.1.8. Affected by this vulnerability is the function sub_456CF4 of the file /boafrm/formSysCmd of the component System Command Executi |
| CVE-2026-82596 | Deferred | 未確認 | CWE-119 | A vulnerability was determined in LatencyUtils up to 2.0.3. Affected by this issue is the function LatencyStats.recordDetectedPause of the file src/main/java/org/LatencyUtils/Laten |
| CVE-2026-82597 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was identified in TOTOLINK NR1800X 9.1.0u.6681_B20230703. This affects the function setUssd of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ussd |
| CVE-2026-82598 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability was determined in SeaCMS up to 13.6. Affected is the function parseIf of the file search.php of the component Template Engine. This manipulation of the argument sea |
| CVE-2026-82599 | Deferred | 未確認 | CWE-22 | A vulnerability was identified in SeaCMS up to 13.6. Affected by this vulnerability is the function unlink of the file /member.php?action=chgpwdsubmit of the component Avatar Uploa |
| CVE-2026-82600 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in SeaCMS up to 13.6. Affected by this issue is some unknown functionality of the file /zyapi.php?ac=videolist. Performing a manipulation of the |
| CVE-2026-82601 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in SeaCMS up to 13.6. This affects an unknown part of the file /err.php. Executing a manipulation of the argument errtxt can lead to cross site scrip |
| CVE-2026-82602 | Deferred | 未確認 | CWE-285, CWE-639 | A security vulnerability has been detected in SeaCMS up to 13.6. This vulnerability affects unknown code of the file /ass.php. The manipulation leads to authorization bypass. The a |
| CVE-2026-82603 | Deferred | 未確認 | CWE-22 | A vulnerability was detected in SeaCMS up to 13.6. This issue affects some unknown processing of the file /member.php?action=del_pl of the component Comment Cache. The manipulation |
| CVE-2026-82604 | Deferred | 未確認 | CWE-404, CWE-674 | A flaw has been found in BareBones BBEdit up to 15.5.5. Impacted is an unknown function of the component Java Language Module. This manipulation causes uncontrolled recursion. Remo |
| CVE-2026-82605 | Deferred | 未確認 | CWE-404, CWE-835 | A vulnerability has been found in BareBones BBEdit up to 15.5.5. The affected element is an unknown function of the component Lasso Language Tokenizer. Such manipulation leads to i |
| CVE-2026-82607 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was found in Cozmoslabs Profile Builder Plugin up to 3.16.1 on WordPress. The impacted element is the function wppb_ajax_simple_avatar of the file /wp-admin/admin-a |
| CVE-2026-82608 | Deferred | 未確認 | CWE-119, CWE-125 | A vulnerability was determined in Kamailio up to 5.5.0/6.0.7. This affects the function get_4bytes of the file src/modules/ims_registrar_scscf/cxdx_avp.c of the component AVP Handl |
| CVE-2026-82609 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/inv_edit.php. The manipulation of the argument ID |
| CVE-2026-82610 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in itsourcecode Online Medicine Delivery System 1.0. Affected is the function Employee::employeeAuthentication of the file /rider/login.php of t |
| CVE-2026-82611 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in itsourcecode Online Medicine Delivery System 1.0. Affected by this vulnerability is the function Customer::cusAuthentication of the file /login.ph |
| CVE-2026-82612 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue is the function loadResultList of the file /index.php?q=singl |
| CVE-2026-82613 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in itsourcecode Online Medicine Delivery System 1.0. This affects the function loadResultList of the file /index.php?q=product of the component Product |
| CVE-2026-82614 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in itsourcecode Online Medicine Delivery System 1.0. This vulnerability affects the function loadResultList of the file /index.php?q=product of the component |
| CVE-2026-82615 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in itsourcecode Online Medicine Delivery System 1.0. This issue affects the function Customer::find_phone of the file /passwordrecover.php of the com |
| CVE-2026-82616 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was found in TOTOLINK NR1800X 9.1.0u.6681_B20230703. Impacted is the function setUploadSetting of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument Fi |
| CVE-2026-82618 | Deferred | 未確認 | CWE-119, CWE-125 | A vulnerability was determined in Systerel S2OPC up to 1.7.3. The affected element is the function set_range_matrix_on_string_array of the file src/Common/opcua_types/sopc_builtint |
| CVE-2026-82619 | Deferred | 未確認 | CWE-119, CWE-416 | A vulnerability was identified in Systerel S2OPC up to 1.7.3. The impacted element is the function monitored_item_event_filter_treatment_bs__init_event_filter_ctx_and_result of the |
| CVE-2026-82620 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in Soarkey StudentManagement and 学生信息管理系统 up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. This affects the function CourseDao.course_ranking of |
| CVE-2026-82621 | Deferred | 未確認 | CWE-285, CWE-639 | A weakness has been identified in Soarkey StudentManagement and 学生信息管理系统 up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. This impacts the function AdminDao.doGet of the file code/s |
| CVE-2026-82622 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in code-projects Employee Leave Managing System 1.0. Affected is an unknown function of the file /EmpManageSys/editaction.php of the comp |
| CVE-2026-82623 | Deferred | 未確認 | CWE-119, CWE-416 | A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the function UA_DataValue_backend_copyRange of the file plugins/historydata/ua_history_data |
| CVE-2026-82624 | Deferred | 未確認 | CWE-200, CWE-284 | A flaw has been found in code-projects Simple Inventory System 1.0. Affected by this issue is some unknown functionality of the file inventorymanagement.sql of the component Databa |
| CVE-2026-82625 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in code-projects Simple Inventory System 1.0. This affects an unknown part of the file /register.php of the component User Registration. Such manipul |
| CVE-2026-82628 | Deferred | 未確認 | CWE-266, CWE-269 | A vulnerability was found in Colorful iGameCenter 2.0.0.81. This vulnerability affects the function sub_11504 in the library WinRing0x64.sys of the component IOCTL Dispatch. Perfor |
| CVE-2026-82629 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was determined in jeecgboot jeewx-boot up to 641ab52c3e1845fec39996d7794c33fb40dad1dd. This issue affects the function MyJwWebJwid3Controller.doUpload of the file j |
| CVE-2026-82630 | Deferred | 未確認 | CWE-918 | A vulnerability was identified in PowerJob up to 5.1.2. Impacted is the function MuConnectionManager.getOrCreateConnection of the file powerjob-server/powerjob-server-starter/src/m |
| CVE-2026-82631 | Deferred | 未確認 | CWE-119, CWE-416 | A security flaw has been discovered in valkey-io valkey 9.1.0. The affected element is the function handleClientsBlockedOnKey of the file src/blocked.c of the component Blocked-on- |
| CVE-2026-82633 | Deferred | 未確認 | CWE-862 | Dolibarr versions 10.0.0 before 24.0.0 fail to perform per-object authorization checks in the Users::getGroups REST API endpoint, allowing authenticated users to retrieve group mem |
| CVE-2026-82634 | Deferred | 未確認 | CWE-863 | Frappe Framework development builds contain an authorization flaw in the render_jinja_template endpoint that allows low-privileged users to render arbitrary Jinja templates by supp |
| CVE-2026-82635 | Analyzed | 未確認 | CWE-22 | Pake before 3.13.1 joins the JavaScript-supplied filename for the download_file Tauri command onto the user's Downloads directory with no sanitization. A filename containing path t |
| CVE-2026-82636 | Deferred | 未確認 | CWE-78 | Qubes OS before qubes-core-dom0-linux 4.3.22 allows OS command injection during a qvm-copy-to-vm call from dom0 to an attacker-controlled qube, because the "system" library functio |
| CVE-2026-82637 | Deferred | 未確認 | CWE-73 | browser-use web-ui versions 2.0.0 through 3.0.0 fail to validate browser settings paths in run_agent_task, allowing attackers to create directories at arbitrary locations by supply |
| CVE-2026-82638 | Deferred | 未確認 | CWE-918 | jina-ai reader disables its private-address guard outside Google Cloud deployments, allowing unauthenticated attackers to perform server-side request forgery. Attackers can supply |
| CVE-2026-82639 | Deferred | 未確認 | CWE-20 | NextChat versions from 2.15.8 through 2.16.1 contain an improper URL validation vulnerability in the proxy endpoint that allows attackers to obtain the server's OpenAI API key. The |
| CVE-2026-82640 | Deferred | 未確認 | CWE-312 | browser-use web-ui versions 2.0.0 through 3.0.0 write configured LLM API keys to disk in cleartext without encryption or access restrictions. Attackers with read access to the temp |
| CVE-2026-82641 | Deferred | 未確認 | CWE-306 | Keploy versions 3.1.0 through 3.6.25, fixed in 3.6.26, bind the agent control-plane HTTP server to all interfaces without authentication, exposing endpoints that stream TLS session |
| CVE-2026-82642 | Awaiting Analysis | 未確認 | CWE-79 | Readest is an open-source e-book reader built on Tauri. In versions prior to 0.11.16, EPUB chapter HTML is sanitized with DOMPurify using a configuration that forbade only the <scr |
| CVE-2026-82643 | Deferred | 未確認 | CWE-307 | WWBN AVideo contains an unauthenticated credential submission vulnerability in plugin/Live/api/preauthorize.json.php that accepts credentials over GET without rate limiting. Attack |
| CVE-2026-82644 | Deferred | 未確認 | CWE-307 | WWBN AVideo (current e01e41ecc and earlier) contains a brute-force rate limiting bypass in enforceRateLimit(), which protects login.json.php and 13 other endpoints. The function st |
| CVE-2026-82645 | Deferred | 未確認 | CWE-347 | AVideo (current commit e01e41ecc and earlier) exposes stream credentials through the plugin/Live/view/Live_restreams/getLiveKey.json.php endpoint. Supplying a 'token' request param |
| CVE-2026-82646 | Deferred | 未確認 | CWE-79 | WWBN AVideo contains an unauthenticated reflected cross-site scripting vulnerability in the url2Embed.json.php endpoint that allows attackers to inject malicious scripts by supplyi |
| CVE-2026-82647 | Deferred | 未確認 | CWE-352 | WWBN AVideo contains a cross-site request forgery vulnerability in sendEmail.json.php that allows authenticated administrators to send mail from the site's contact address by bypas |
| CVE-2026-82648 | Deferred | 未確認 | CWE-20 | WWBN AVideo contains a server-side request forgery filter bypass vulnerability in the isSSRFSafeURL function that fails to normalize NAT64 addresses written in hexadecimal form. At |
| CVE-2026-82649 | Deferred | 未確認 | CWE-427 | SiYuan Windows installer before version 3.8.1 (affected versions >= 2.0.14) contains an uncontrolled search path element vulnerability in its NSIS installer, which invokes system e |
| CVE-2026-82650 | Deferred | 未確認 | CWE-668 | SiYuan 3.8.0 contains a path traversal / sensitive file exposure vulnerability in the RenderTemplate function (kernel/model/template.go), reachable via the POST /api/template/rende |
| CVE-2026-82651 | Deferred | 未確認 | CWE-200 | SiYuan before v3.8.1 does not apply the IsForbiddenAbsPath guard (introduced in GHSA-c8r8-95hg-mp34) to the /history/*path and /repo/diff/*path endpoints in kernel/server/serve.go. |
| CVE-2026-82652 | Deferred | 未確認 | CWE-668 | SiYuan before v3.8.1 fails to filter invisible-tier content from SQL embed blocks, attribute-view keys, and attribute-view backlinks in publish mode. Anonymous readers can enumerat |
| CVE-2026-82653 | Deferred | 未確認 | CWE-79 | SiYuan before v3.8.1 contains a stored cross-site scripting vulnerability in confirmDialog() where unescaped package names and notebook names are interpolated directly into innerHT |
| CVE-2026-82654 | Deferred | 未確認 | CWE-79 | SiYuan before v3.8.1 fails to properly escape block name, alias, and memo fields in hint, backlink, and breadcrumb rendering functions. Attackers can set a block's name to contain |
| CVE-2026-82655 | Deferred | 未確認 | CWE-89 | Admidio before 5.0.12 contains a blind SQL injection vulnerability in the relation_type_list parameter of lists_show.php that allows unauthenticated attackers to execute arbitrary |
| CVE-2026-82656 | Deferred | 未確認 | CWE-22 | Admidio before 5.0.12 fails to sanitize album names in the photo ZIP download functionality, allowing authenticated users with album-creation rights to include path traversal segme |
| CVE-2026-82657 | Deferred | 未確認 | CWE-200 | Admidio before 5.0.12 fails to enforce login-only module restrictions in RSS feed endpoints for forum and announcements modules. Unauthenticated attackers can retrieve forum topics |
| CVE-2026-82658 | Deferred | 未確認 | CWE-285 | Admidio versions before 5.0.12 contain a broken access control vulnerability in profile_function.php that allows authenticated low-privilege users to read another user's future rol |
| CVE-2026-82659 | Awaiting Analysis | 未確認 | CWE-73 | nodemailer before 9.0.1 fails to apply disableFileAccess and disableUrlAccess flags to message-level raw option, allowing authenticated attackers to read arbitrary files or perform |
| CVE-2026-82660 | Awaiting Analysis | 未確認 | CWE-862 | Nodemailer before 8.0.9 fails to enforce disableFileAccess and disableUrlAccess options during message normalization in jsonTransport. Attackers can read local files or fetch URLs |
| CVE-2026-82661 | Awaiting Analysis | 未確認 | CWE-93 | Nodemailer before 8.0.9 fails to sanitize carriage return and line feed characters in list comment fields, allowing attackers to inject arbitrary message headers. An attacker with |
| CVE-2026-82662 | Awaiting Analysis | 未確認 | CWE-295 | Nodemailer before 8.0.8 disables TLS certificate verification in lib/fetch/index.js through rejectUnauthorized: false, allowing attackers to intercept OAuth2 token requests. Attack |
| CVE-2026-82664 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in yaojingang GEOFlow up to 2.1.0. This affects an unknown part of the file app/Http/Controllers/Site/HomeController.php of the component |
| CVE-2026-82665 | Deferred | 未確認 | CWE-22 | A vulnerability was detected in yaojingang GEOFlow up to 2.1.0. This vulnerability affects the function unlink of the file app/Http/Controllers/Admin/ImageLibraryController.php of |
| CVE-2026-82666 | Deferred | 未確認 | CWE-74, CWE-94 | A flaw has been found in yaojingang GEOFlow up to 2.1.0. This issue affects the function preview of the file app/Http/Controllers/Admin/SiteThemeEditorController.php of the compone |
| CVE-2026-82667 | Deferred | 未確認 | CWE-918 | A vulnerability has been found in yaojingang GEOFlow up to 2.1.0. Impacted is the function DistributionController.isValidHttpEndpoint of the file app/Services/GeoFlow/GenericHttpEn |
| CVE-2026-82668 | Deferred | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in klaussilveira GitList 2.0.0. Affected by this vulnerability is the function getDefaultBranch of the file src/SCM/System/Git/CommandLin |
| CVE-2026-82669 | Deferred | 未確認 | CWE-404 | A vulnerability was detected in klaussilveira GitList 2.0.0. Affected by this issue is the function SimpleXMLElement of the file src/SCM/System/Git/CommandLine.php of the component |
| CVE-2026-82670 | Deferred | 未確認 | CWE-266, CWE-269 | A flaw has been found in IObit Uninstaller 15.5.0.11. This affects the function IRP_MJ_DEVICE_CONTROL in the library IUForceDelete.sys of the component IOCTL Handler. Executing a m |
| CVE-2026-82671 | Deferred | 未確認 | CWE-266, CWE-269 | A vulnerability has been found in IObit Unlocker 1.3.0.12. This vulnerability affects the function ZwTerminateProcess in the library IObitUnlocker.sys of the component IRP_MJ_DEVIC |
| CVE-2026-82673 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in ash-project ash_admin allows writing attacker-controlled bytes to arbitrary paths on t |
| CVE-2026-82677 | Deferred | 未確認 | CWE-119, CWE-415 | A vulnerability was determined in valkey-io valkey 9.1.0. Impacted is the function moduleTimerHandler of the file src/module.c of the component Module Timer Subsystem. This manipul |
| CVE-2026-82678 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in diem-project diem up to 5.1.3. The affected element is the function executeCommand of the file dmAdminPlugin/modules/dmConsole/actions/actions.cla |
| CVE-2026-82679 | Deferred | 未確認 | CWE-284, CWE-434 | A security flaw has been discovered in diem-project diem up to 5.1.3. The impacted element is an unknown function of the file dmFrontPlugin/lib/dmWidget/media/dmWidgetContentBaseMe |
| CVE-2026-82680 | Deferred | 未確認 | CWE-119, CWE-787 | A weakness has been identified in D-Link DSM-G600 1.01. This affects an unknown function of the file /load_file.cgi of the component Multipart Handler. Executing a manipulation can |
| CVE-2026-82681 | Deferred | 未確認 | CWE-116 | Improper Encoding or Escaping of Output vulnerability in ash-project ash_admin lets an attacker who controls a record's string primary key rewrite the target of AshAdmin's row-acti |
| CVE-2026-82688 | Deferred | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in D-Link DNS-340L and DNS-345 1.01B04/1.03B06/1.04.B02/1.05b04. This impacts an unknown function of the file /cgi-bin/virtual_vol.cgi of |
| CVE-2026-82689 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was detected in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected is an unknown function of the file /cgi-bin/isomount_mgr.cgi of the compone |
| CVE-2026-82690 | Deferred | 未確認 | CWE-77, CWE-78 | A flaw has been found in D-Link DNS-327L and DNS-340L up to 20260717. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/ve_mgr.cgi. This manipulation |
| CVE-2026-82691 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability has been found in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected by this issue is some unknown functionality of the file /cgi-bin/usb_devi |
| CVE-2026-82692 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was found in D-Link DNS-340L and DNS-345 up to 20260717. This affects an unknown part of the file /cgi-bin/iscsi_mgr.cgi. Performing a manipulation of the argument |
| CVE-2026-82693 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was determined in Tenda AC1206 15.03.06.23. This vulnerability affects the function TendaTelnet of the file /goform/telnet of the component Web UI. Executing a mani |
| CVE-2026-82694 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was identified in Tenda AC1206 15.03.06.23. This issue affects the function R7WebsSecurityHandler of the file /goform/ate of the component Web UI. The manipulation |
| CVE-2026-82695 | Deferred | 未確認 | CWE-287, CWE-306 | A security flaw has been discovered in Tenda AC18 15.03.05.19. Impacted is an unknown function of the file /goform/telnet of the component Telnet Handler. The manipulation results |
| CVE-2026-82696 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/inv_searchfrm.php. This manipulation o |
| CVE-2026-82697 | Deferred | 未確認 | CWE-1004, CWE-732 | A security vulnerability has been detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. The impacted element is the function session_start |
| CVE-2026-82698 | Deferred | 未確認 | CWE-1393 | A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affects an unknown function of the file aca.sql. Performing |
| CVE-2026-82699 | Deferred | 未確認 | CWE-310, CWE-312 | A flaw has been found in sambitraj Student Management System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This impacts an unknown function of the file aca.sql of the component P |
| CVE-2026-82700 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /offersmail.php of the component Newsl |
| CVE-2026-82701 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in code-projects Online Shopping System 1.0. Affected by this issue is some unknown functionality of the file /action.php of the component Search Fun |
| CVE-2026-82702 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in Edimax BR-6214K 1.40. This affects the function system of the file www/wlanMP.asp of the component asp_WlanMP Endpoint. Such manipulation of the a |
| CVE-2026-82703 | Deferred | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in Edimax BR-6214K 1.40. This vulnerability affects the function system of the file www/ping.asp of the component asp_setPing Endpoint. Performi |
| CVE-2026-82722 | Deferred | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_admin lets any client that can reach the admin LiveView exhaust the BEAM atom table and crash |
| CVE-2026-82724 | Deferred | 未確認 | CWE-863 | Incorrect Authorization vulnerability in ash-project ash_phoenix invokes the SubdomainHook authorization callback with a nil tenant, so tenant-scoped access checks never see the te |
| CVE-2026-82725 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash_phoenix lets an attacker who controls filter form parameters filter across relationships the resou |
| CVE-2026-82726 | Deferred | 未確認 | CWE-178, CWE-625 | Permissive Regular Expression vulnerability in ash-project ash_phoenix lets a remote client select the tenant an Ash application uses, or degrade the request, by sending a crafted |
| CVE-2026-82727 | Deferred | 未確認 | CWE-209 | Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_phoenix writes the entire raw submitted param map into an exception message, so secret |
| CVE-2026-82797 | Deferred | 未確認 | CWE-674 | Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Serialized Data with Nested Payloads. This issue affects rlottie: before 8de0d9e6ca80ffef654965505981727 |
| CVE-2026-82801 | Deferred | 未確認 | CWE-918 | A vulnerability was detected in NASA earthdata-search 1.0.0. Affected by this vulnerability is the function scaleImage of the file serverless/src/scaleImage/handler.js of the compo |
| CVE-2026-82802 | Deferred | 未確認 | CWE-918 | A flaw has been found in NASA earthdata-search 1.0.0. Affected by this issue is the function OpenSearchGranuleSearchLambda of the file serverless/src/openSearchGranuleSearch/handle |
| CVE-2026-82803 | Deferred | 未確認 | CWE-404, CWE-476 | A vulnerability has been found in armink struct2json 1.0. This affects the function S2J_STRUCT_GET_string_ELEMENT in the library struct2json/inc/s2jdef.h of the component JSON Dese |
| CVE-2026-82805 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in Typora up to 1.13.8/1.14.6. This vulnerability affects unknown code of the component Mermaid Rendering Engine. The manipulation of the argument classDe |
| CVE-2026-82807 | Deferred | 未確認 | CWE-266, CWE-269 | A vulnerability was determined in ieungSoft Ultra RAMDisk Pro 1.82. This issue affects some unknown processing in the library URDSCSI.sys of the component Kernel Driver. This manip |
| CVE-2026-82808 | Deferred | 未確認 | CWE-259, CWE-798 | A vulnerability was identified in Inbox Foundry ActiveInbox Extension up to 7.10.24 on Chrome. Impacted is an unknown function of the file dist/service-worker.production-esm.js of |
| CVE-2026-82809 | Deferred | 未確認 | CWE-200, CWE-284 | A security flaw has been discovered in vidIQ Vision for YouTube Extension 3.199.0 on Chrome. The affected element is the function window.addEventListener of the component postMessa |
| CVE-2026-82810 | Deferred | 未確認 | CWE-200, CWE-284 | A weakness has been identified in extension.vn 2FA Authenticator Extension 1.0.0.2 on Chrome. The impacted element is the function chrome.runtime.onMessageExternal.addListener of t |
| CVE-2026-82811 | Deferred | 未確認 | CWE-345, CWE-346 | A security vulnerability has been detected in Toggl OÜ Toggl Track Extension 4.11.16. This affects an unknown function of the component postMessage Handler. The manipulation leads |
| CVE-2026-82813 | Deferred | 未確認 | CWE-345 | A vulnerability was detected in BEN Group TubeBuddy for YouTube Extension up to 5.8.4 on Chrome. This impacts the function TBGlobal.GetToken of the file tubebuddymaster1.js. The ma |
| CVE-2026-82815 | Deferred | 未確認 | CWE-266, CWE-284 | A flaw has been found in MegaEase EaseProbe up to 2.3.0. Affected is the function realIP of the file web/server.go of the component Middleware. This manipulation of the argument X- |
| CVE-2026-82816 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability has been found in dibo-software diboot 3.8.0. Affected by this vulnerability is an unknown functionality of the file /api/ai-session/ of the component AI Session En |
| CVE-2026-82817 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability was found in dibo-software diboot 3.8.0. Affected by this issue is some unknown functionality of the file /admin/ of the component Tenant Administrator Management A |
| CVE-2026-82818 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability was determined in dibo-software diboot 3.8.0. This affects an unknown part of the file /api/iam/tenant/resource of the component Tenant Resource Assignment Handler. |
| CVE-2026-82820 | Deferred | 未確認 | CWE-119, CWE-122 | A vulnerability was found in FLVMeta up to 1.2.2. Affected is the function amf_string_new of the file src/amf.c of the component AMF String Processing. The manipulation of the argu |
| CVE-2026-82821 | Deferred | 未確認 | CWE-404, CWE-476 | A vulnerability was determined in FLVMeta up to 1.2.2. Affected by this vulnerability is the function amf_object_get of the file src/amf.c of the component AMF Object Parsing. This |
| CVE-2026-82823 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-82814. Reason: This candidate is a reservation duplicate of CVE-2026-82814. Notes: All CVE user | |
| CVE-2026-82833 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability was identified in Doccano Open Source Annotation Tools for Machine Learning Practitioners and Auto Labeling Pipeline Module to Annotate a Document Automatically up |
| CVE-2026-82834 | Deferred | 未確認 | CWE-266, CWE-284 | A security flaw has been discovered in Doccano Open Source Annotation Tools for Machine Learning Practitioners and Auto Labeling Pipeline Module to Annotate a Document Automaticall |
| CVE-2026-82835 | Deferred | 未確認 | CWE-266, CWE-284 | A weakness has been identified in caoqianming django-vue-admin 1.0. This vulnerability affects unknown code of the file /api/file/. Executing a manipulation of the argument file_id |
| CVE-2026-82838 | Awaiting Analysis | 未確認 | CWE-80 | The default docker image shipped for Venueless did not properly ensure that uploaded SVG files could not be delivered with executable JavaScript content. A valid Content Security P |
| CVE-2026-82852 | Deferred | 未確認 | CWE-918 | Unauthenticated Server Side Request Forgery (SSRF) in MapSVG <= 8.15.0 versions. |
| CVE-2026-82853 | Awaiting Analysis | 未確認 | CWE-93 | Nodemailer versions before 8.0.5 contain an SMTP command injection vulnerability in the transport name option used in EHLO/HELO commands. The name parameter is concatenated directl |
| CVE-2026-82854 | Awaiting Analysis | 未確認 | CWE-93 | Nodemailer before 8.0.4 is vulnerable to SMTP command injection through the unsanitized envelope.size parameter. When an application passes a custom envelope object with a size pro |
| CVE-2026-82855 | Deferred | 未確認 | CWE-693 | @hulumi/policies versions before 1.3.2 contain an evidence validation bypass vulnerability in Cloudflare and deployment-governance validators that allows attackers to suppress viol |
| CVE-2026-82856 | Deferred | 未確認 | CWE-284 | @hulumi/policies versions before 1.3.2 fail to properly validate set-qualified AWS IAM condition operators in GitHub OIDC trust policies. Attackers can use ForAnyValue:StringLike o |
| CVE-2026-82857 | Deferred | 未確認 | CWE-269 | hulumi versions before v1.3.2 contain a privilege escalation vulnerability in the weekly integration IAM policy that allows role lifecycle operations on af-e2e-* roles without suff |
| CVE-2026-82858 | Deferred | 未確認 | CWE-345 | @hulumi/drift versions before 1.3.2 accept externally supplied execute plans without sufficient provenance validation, allowing untrusted reconciliation input to be treated as trus |
| CVE-2026-82859 | Deferred | 未確認 | CWE-284 | hulumi versions before v1.3.2 contain a deployment SCP template that allows tag-on-create bypasses for hulumi:iac-role protections. Attackers can bypass intended IAM boundary restr |
| CVE-2026-82860 | Deferred | 未確認 | CWE-269 | @hulumi/policies versions before 1.3.2 fail to fully inspect inline and attached IAM policy evidence for the administrator-policy guardrail. Attackers can craft admin-equivalent po |
| CVE-2026-82861 | Deferred | 未確認 | CWE-284 | @hulumi/policies versions before 1.3.2 contain a parent spoof bypass vulnerability that allows attackers to submit spoofed SecureBucket parent evidence during policy evaluation. At |
| CVE-2026-82862 | Deferred | 未確認 | CWE-426 | Hulumi versions before v1.3.2 resolve the threat-model helper script from an unsafe root, allowing workspace files to shadow the intended helper script. Attackers can place malicio |
| CVE-2026-82863 | Deferred | 未確認 | CWE-778 | @hulumi/baseline versions before 1.3.2 fail to fully detect CloudTrail selector tampering events, reducing audit logging configuration change coverage. Attackers can modify CloudTr |
| CVE-2026-82864 | Deferred | 未確認 | CWE-409 | pdfme pdf-lib versions before 5.5.10 contain an unbounded buffer growth vulnerability in the DecodeStream.ensureBuffer() method that allows attackers to cause denial of service by |
| CVE-2026-82865 | Deferred | 未確認 | CWE-79 | pdfme schemas before 5.5.10 contains a cross-site scripting vulnerability in the multiVariableText property panel that assigns unsanitized i18n label values to innerHTML. Attackers |
| CVE-2026-82866 | Deferred | 未確認 | CWE-918 | @pdfme/common before 5.5.10 contains a server-side request forgery vulnerability in the getB64BasePdf function that fetches arbitrary URLs without validation when basePdf is attack |
| CVE-2026-82867 | Deferred | 未確認 | CWE-79 | @pdfme/schemas before 5.5.9 contains a cross-site scripting vulnerability in the Select schema plugin that fails to sanitize option values before interpolating them into HTML via i |
| CVE-2026-82868 | Deferred | 未確認 | CWE-79 | @pdfme/schemas before 5.5.9 contains a cross-site scripting vulnerability in the SVG schema plugin that renders user-supplied SVG content directly to innerHTML without sanitization |
| CVE-2026-82869 | Deferred | 未確認 | CWE-639 | ToolJet Database versions before v3.16.44 contain a privilege escalation vulnerability in the join_tables endpoint that grants JOIN_TABLES ability to all authenticated users withou |
| CVE-2026-82870 | Deferred | 未確認 | CWE-639 | ToolJet before v3.16.208 fails to validate organizationId ownership in database write and destroy routes, allowing any builder-role user to create, alter, or drop tables in other o |
| CVE-2026-82871 | Deferred | 未確認 | CWE-862 | ToolJet before v3.16.208 fails to validate organization membership in database read routes, allowing any authenticated user to access other organizations' table schemas and row dat |
| CVE-2026-82872 | Deferred | 未確認 | CWE-639 | ToolJet before v3.16.208 fails to validate that the path organizationId matches the authenticated user's workspace before performing ToolJet DB table operations. A workspace admin |
| CVE-2026-82873 | Deferred | 未確認 | CWE-639 | ToolJet through 3.0.0-ee-beta.2 contains authorization bypass vulnerabilities in the POST /api/v2/resources/export endpoint that allow authenticated users to disclose TooljetDB tab |
| CVE-2026-82874 | Deferred | 未確認 | CWE-639 | ToolJet before v3.16.208 fails to validate that authenticated users belong to the organization specified in the organizationId path parameter of tooljet-db endpoints, allowing any |
| CVE-2026-82875 | Deferred | 未確認 | CWE-863 | ToolJet before v3.16.208 contains an authorization bypass vulnerability in TooljetDB controller endpoints that accept organizationId from URL path without verifying it matches the |
| CVE-2026-82876 | Awaiting Analysis | 未確認 | CWE-347 | Phison PS3111-S11 controller firmware verifies RSA signatures using a public modulus embedded within the firmware image itself rather than anchored in immutable storage. Attackers |
| CVE-2026-82877 | Deferred | 未確認 | CWE-22 | ILIAS before versions 9.22, 10.10, and 11.3 contains an arbitrary file read vulnerability in the SOAP addFile method that allows authenticated users to read server files by supplyi |
| CVE-2026-82878 | Deferred | 未確認 | CWE-862 | DataEase versions before 2.10.26 omit object-level authorization checks on geographic information, dashboard linkage, and chart detail REST endpoints, allowing authenticated users |
| CVE-2026-82879 | Deferred | 未確認 | CWE-863 | DataEase before 2.10.26 contains multiple access control defects in the sharing link module. Tickets are not bound to the target share UUID, so a valid ticket issued for one share |
| CVE-2026-82880 | Deferred | 未確認 | CWE-611 | YaCy Search Server through 1.941 contains an XML external entity injection vulnerability in SVG, FreeMind, and OpenSearch parsers that fail to disable external entity resolution. A |
| CVE-2026-82881 | Deferred | 未確認 | CWE-79 | Aix-DB through 1.2.4 renders markdown with raw HTML enabled into v-html bindings without sanitization, allowing stored cross-site scripting attacks. Attackers can inject malicious |
| CVE-2026-82882 | Deferred | 未確認 | CWE-862 | Devtron through 2.2.0 fails to enforce authorization checks on the GET /orchestrator/api-token/webhook endpoint, allowing authenticated users to retrieve admin API tokens. Attacker |
| CVE-2026-82905 | Deferred | 未確認 | CWE-918 | A vulnerability was detected in sdcb chats up to 1.12.0. This affects the function McpController of the file src/BE/web/Controllers/Users/Mcps/McpController.cs of the component fet |
| CVE-2026-82906 | Deferred | 未確認 | CWE-287, CWE-306 | A flaw has been found in sdcb chats up to 1.12.0. This impacts the function DownloadPublic of the file src/BE/web/Controllers/Chats/Files/FileController.cs of the component Signed |
| CVE-2026-82908 | Deferred | 未確認 | CWE-189, CWE-190 | A vulnerability was found in MSI Dragon Center up to 2.0.155.0. Affected by this vulnerability is the function MmioWritePath in the library NTIOLib_X64.sys of the component MMIO Wr |
| CVE-2026-82909 | Deferred | 未確認 | CWE-613 | A vulnerability was determined in QuantumNous new-api up to 1.0.0-rc.15. Affected by this issue is some unknown functionality of the file /api/usage/token/ of the component Revoked |
| CVE-2026-82914 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in kishan0725 Hospital-Management-System 1.0. This vulnerability affects unknown code of the file /search.php. The manipulation of the argument |
| CVE-2026-82919 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was identified in cu silicon up to 0.1.5. Affected by this vulnerability is the function create_app of the file views.py of the component edit Endpoint. Such manipu |
| CVE-2026-82921 | Deferred | 未確認 | CWE-284, CWE-434 | A weakness has been identified in ShopEx ECShop up to 2.5.1. This affects the function check_img_type of the file admin/pack.php. Executing a manipulation of the argument pack_img |
| CVE-2026-82922 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in ShopEx ECShop up to 2.5.1. This vulnerability affects the function flow_update_cart of the file /flow.php?step=update_cart. The manipu |
| CVE-2026-82954 | Deferred | 未確認 | CWE-22 | A vulnerability was detected in Dokploy up to 0.29.7. This issue affects the function writeTraefikConfigInPath of the file packages/server/src/utils/traefik/application.ts of the c |
| CVE-2026-82957 | Deferred | 未確認 | CWE-918 | A vulnerability was found in hyperledger-firefly firefly up to 1.4.0. The impacted element is the function ValidateOptions of the file internal/events/webhooks/webhooks.go of the c |
| CVE-2026-82970 | Deferred | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent allows Using Malicious Files. This issue affects |
| CVE-2026-82971 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was determined in QVidium Opera11 3.3.2a26-Ax4x-opera11. This affects an unknown part of the file /cgi-bin/net_tr.cgi of the component CGI Script. This manipulation |
| CVE-2026-8325 | Modified | 未確認 | CWE-787 | A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a cra |
| CVE-2026-83492 | Deferred | 未確認 | CWE-20 | Improper input validation vulnerability in Extend Themes Kubio AI Website Builder. This issue affects Kubio AI Website Builder: before 2.9.1. |
| CVE-2026-83497 | Awaiting Analysis | 未確認 | CWE-502 | Unrestricted deserialization of untrusted data in the cursor pagination component in the OpenSearch SQL plugin allows a remote authenticated user with basic read/search permissions |
| CVE-2026-83524 | Deferred | 未確認 | CWE-74, CWE-77 | A security vulnerability has been detected in RedPort Optimizer wXa-203, Optimizer wXa-213 and Optimizer wXa-223 up to 20260704. This impacts the function exec of the file /xgatev1 |
| CVE-2026-83596 | Awaiting Analysis | 未確認 | CWE-120 | A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling. |
| CVE-2026-8400 | Analyzed | 未確認 | CWE-470 | IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous delivery has a flaw in the ORB component in IBM SDK, Java Technology Edition |
| CVE-2026-8445 | Deferred | 未確認 | CWE-79 | justhtml versions <= 1.11.0 (fixed in 1.12.0) do not sufficiently escape HTML-significant characters (angle brackets) in text nodes when converting a parsed document to Markdown vi |
| CVE-2026-8446 | Analyzed | 未確認 | CWE-306 | IBM Langflow OSS 1.0.0 through 1.10.3 contain an authentication bypass vulnerability in the Model Context Protocol (MCP) composer endpoint when mcp_composer_enabled=true (default) |
| CVE-2026-8457 | Deferred | 未確認 | CWE-289 | The WooCommerce - Social Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to and including 2.8.7. This is due to the plugin's Apple login handle |
| CVE-2026-8470 | Analyzed | 未確認 | CWE-327 | IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 use Python's non-cryptographic random module for generating Fernet encry |
| CVE-2026-8478 | Analyzed | 未確認 | CWE-94 | IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to inject arbitrary code on the system, due to the improper control of user input code. |
| CVE-2026-8508 | Awaiting Analysis | 未確認 | CWE-287 | An improper authentication vulnerability in the "social_login.cgi" CGI program in Zyxel WAX650S firmware versions through 7.10(ABRM.4)C0 could allow an attacker on the WLAN to bypa |
| CVE-2026-8619 | Analyzed | 未確認 | CWE-476 | An unauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0 and Archer MR600 v2, due to improper handling of exception |
| CVE-2026-8630 | Deferred | 未確認 | CWE-79 | justhtml before 1.12.0 (versions <= 1.11.0) contains a mutation cross-site scripting (mXSS) vulnerability in the serialization of raw-text elements such as <style> and <script>. Wh |
| CVE-2026-8667 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have |
| CVE-2026-8709 | Analyzed | 未確認 | CWE-269 | An improper privilege management vulnerability in the REST API document patch operation of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with a lo |
| CVE-2026-8715 | Awaiting Analysis | 未確認 | CWE-552 | Vault Secrets Operator 1.3.0 up to 1.4.1 is vulnerable to an arbitrary file read and credential exfiltration issue in the AppRole authentication configuration that may allow a tena |
| CVE-2026-8717 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-8718 | Awaiting Analysis | 未確認 | CWE-787 | tls_opt_dtls_peer_connection_id_value_get() in subsys/net/lib/sockets/sockets_tls.c, which handles getsockopt(SOL_TLS, TLS_DTLS_PEER_CID_VALUE), passed the caller-supplied optval d |
| CVE-2026-8761 | Deferred | 未確認 | CWE-862 | The Dokan plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.0.1. This is due to a missing authorization check in the `CustomersCont |
| CVE-2026-8763 | Analyzed | 未確認 | CWE-295 | In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy |
| CVE-2026-8790 | Deferred | 未確認 | CWE-79 | The Football Pool plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `shouttext` POST parameter of the Shoutbox widget in all versions up to, and includin |
| CVE-2026-8793 | Awaiting Analysis | 未確認 | CWE-307 | PaperCut NG/MF does not properly restrict excessive authentication attempts within its login component. An unauthenticated remote attacker can exploit this vulnerability to perform |
| CVE-2026-8794 | Awaiting Analysis | 未確認 | CWE-208 | PaperCut NG/MF contains an observable timing discrepancy in its authentication component. An unauthenticated remote attacker can exploit this vulnerability to perform username enum |
| CVE-2026-8798 | Awaiting Analysis | 未確認 | CWE-835 | In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.1.3, the native entropy source used on Intel platforms retried the CPU entropy instructions without any bound. RDSEED and R |
| CVE-2026-8810 | Awaiting Analysis | 未確認 | CWE-522 | On ARM platforms, a vulnerability in the architecture design of HDD Password could allow an attacker to retrieve HDD Password from UEFI variables. |
| CVE-2026-8840 | Deferred | 未確認 | CWE-862 | The Booking calendar, Appointment Booking System plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.2.36. This is due to the plugin |
| CVE-2026-8917 | Deferred | 未確認 | CWE-822 | Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a local attacker to write a specific value to an arbitrary mem |
| CVE-2026-9012 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-9030 | Awaiting Analysis | 未確認 | CWE-362 | A denial-of-service vulnerability exists in httpd service on Archer A6 v4 where the asynchronous systool instruction handlng path in httpd does not properly synchronize or safely m |
| CVE-2026-9031 | Awaiting Analysis | 未確認 | CWE-20 | An input validation vulnerability exists in the HTTP-WRITEOEM handler due to insufficient validation of user-supplied data before it is processed by internal flash-write handling l |
| CVE-2026-9033 | Analyzed | 未確認 | CWE-306 | An unauthenticated attacker with network access to the captive portal service of an affected device can terminate active captive portal sessions, including forcing logout of specif |
| CVE-2026-9052 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-9077 | Analyzed | 未確認 | CWE-807 | IBM Langflow OSS 1.0.0 through 1.10.3 Langflow allows remote authenticated attackers to bypass localhost-only restrictions and write arbitrary MCP server configurations to IDE conf |
| CVE-2026-9081 | Analyzed | 未確認 | CWE-918 | IBM Langflow OSS 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 contains a Server-Side Request Forgery (SSRF) vulnerability in the validate_model_provider_key() function for the Ol |
| CVE-2026-9130 | Modified | 未確認 | CWE-639 | IBM Langflow OSS 1.0.0 through 1.10.3 contain an authorization bypass vulnerability in the MemoryComponent that allows authenticated users to access chat history of other users via |
| CVE-2026-9146 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-9169 | Deferred | 未確認 | CWE-427 | DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows allows a local attacker to execute arbitrary code with the privileges of the application by placing a |
| CVE-2026-9190 | Analyzed | 未確認 | CWE-444 | An HTTP request smuggling vulnerability in the HTTP App Server of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker to bypass authentication and authoriza |
| CVE-2026-9192 | Analyzed | 未確認 | CWE-287 | An authentication bypass vulnerability in the ODBC App Server of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an unauthenticated remote attacker to bypass password ver |
| CVE-2026-9193 | Analyzed | 未確認 | CWE-269 | An improper privilege management vulnerability in the Hadoop integration of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with a low-privileged Ha |
| CVE-2026-9195 | Analyzed | 未確認 | CWE-22, CWE-79 | A cross-site scripting vulnerability in the Query Console of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker who lures an authenticated administrator to |
| CVE-2026-9196 | Analyzed | 未確認 | CWE-94 | IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute unintended code during Agentic Assistant validation due to improper handling of LLM‑generated |
| CVE-2026-9201 | Analyzed | 未確認 | CWE-326 | IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute arbitrary code due to a cryptographic weakness in the custom component validation mechanism. |
| CVE-2026-9203 | Analyzed | 未確認 | CWE-918 | A server-side request forgery vulnerability in Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with low-privileged roles to bypass protections for c |
| CVE-2026-9205 | Analyzed | 未確認 | CWE-338 | IBM Langflow OSS contains a weak cryptographic key derivation vulnerability in the ensure_fernet_key() function. |
| CVE-2026-9214 | Analyzed | 未確認 | CWE-20 | Insufficient input validation vulnerability in the NETGEAR R7000 models allows authenticated administrators connected to the local network to make unauthorized modification to ro |
| CVE-2026-9244 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-9250 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-9252 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-9254 | Awaiting Analysis | 未確認 | CWE-78 | An unauthenticated OS command injection vulnerability exists in the parental control functionality of Archer BE800 V1, BE3600 V1, and AX75 V1 due to improper filtering and neutrali |
| CVE-2026-9273 | Deferred | 未確認 | CWE-640 | The Membership Plugin – Kadence Memberships plugin for WordPress (formerly Restrict Content) is vulnerable to password reset link poisoning leading to account takeover in all versi |
| CVE-2026-9318 | Awaiting Analysis | 未確認 | CWE-79 | tablib prior to 3.10.0 contains a stored cross-site scripting vulnerability in the HTML export functionality that allows attackers to execute arbitrary JavaScript by embedding mali |
| CVE-2026-9321 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-9324 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-9335 | Awaiting Analysis | 未確認 | CWE-22 | A vulnerability in keras-team/keras versions <= 3.14.0 allows arbitrary local HDF5 file content disclosure due to improper handling of HDF5 ExternalLinks. The `KerasFileEditor` and |
| CVE-2026-9390 | Analyzed | 未確認 | CWE-1287, CWE-643 | XML::Sig versions before 0.71 for Perl allow XPath injection in ID lookup. verify() and _get_signed_xml() in lib/XML/Sig.pm build XPath expressions by concatenating the SignedInfo |
| CVE-2026-9487 | Analyzed | 未確認 | CWE-347 | XML::Sig versions before 0.71 for Perl allow signature wrapping via duplicate ID. _get_signed_xml() in lib/XML/Sig.pm, called from verify(), resolves the SignedInfo Reference/@URI |
| CVE-2026-9491 | Undergoing Analysis | 未確認 | CWE-918 | A server-ide request forgery (SSRF) vulnerability in webhook in Synology Chat Server before 2.4.5-22148 allows remote authenticated users to obtain non-sensitive information. |
| CVE-2026-9548 | Undergoing Analysis | 未確認 | CWE-79 | An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in extract domain in Synology Chat Server before 2.4.5-22148 allows remote aut |
| CVE-2026-9593 | Deferred | 未確認 | CWE-427 | A vulnerability in the iDTM FDI allows an attacker with elevated privileges and access to the host system to enable the debug interface by placing a crafted file in the application |
| CVE-2026-9668 | Deferred | 未確認 | CWE-89 | With legitimate user credentials in hand, attackers can construct malicious SQL statements to bypass authentication logic and execute arbitrary database queries directly. This will |
| CVE-2026-9693 | Analyzed | 未確認 | CWE-459 | Mattermost versions 10.11.x <= 10.11.20, 11.7.x <= 11.7.5 Mattermost fails to remove thread membership records when a user is removed from or leaves a team, which allows a previous |
| CVE-2026-9728 | Awaiting Analysis | 未確認 | CWE-367 | The userspace syscall verifier z_vrfy_mbox_send() in drivers/mbox/mbox_handlers.c validated the nested msg->data/msg->size fields by reading them directly out of live userspace mem |
| CVE-2026-9767 | Deferred | 未確認 | CWE-89 | The The School Management – Education & Learning ERP plugin for WordPress is vulnerable to generic SQL Injection via 'order[0][dir]' Parameter in all versions up to, and including, |
| CVE-2026-9769 | Deferred | 未確認 | CWE-674 | justhtml through 1.9.1 (fixed in 1.10.0) is vulnerable to uncontrolled recursion leading to denial of service. During JustHTML() construction, TreeBuilder.finish() unconditionally |
| CVE-2026-9771 | Awaiting Analysis | 未確認 | CWE-822, CWE-862 | The flash_copy() system call is verified by z_vrfy_flash_copy() in drivers/flash/flash_util.c. On builds with CONFIG_USERSPACE enabled, this handler is the kernel-side trust bounda |
| CVE-2026-9805 | Awaiting Analysis | 未確認 | CWE-787 | SMM IHISI command handler, FMTSWriteUseIntelLib, for FMTS command 0x32, read and write data without checking buffer size and could cause buffer overflow. |
| CVE-2026-9816 | Analyzed | 未確認 | CWE-863 | Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fail to validate BoardMember.Scheme* fields server-side on insert and archive-import paths which allows |
| CVE-2026-9856 | Awaiting Analysis | 未確認 | CWE-22 | A vulnerability in huggingface/transformers versions <=5.8.0.dev0 allows an attacker to perform arbitrary file writes via path traversal. The issue resides in the `save_pretrained( |
| CVE-2026-9859 | Analyzed | 未確認 | CWE-863 | Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fail to enforce PermissionManageBoardRoles on the channelId field of the batch endpoint, which allows an |