NVD公開月 2026-09
15,074 件。全詳細JSONは data/nvd/、個別Markdownは重点対象のみ（全件生成も可能）。
| CVE | 状態 | KEV | CWE | 概要（先頭180文字） |
|---|---|---|---|---|
| CVE-2013-1446 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Was assigned for an old issue in the brltty daemon and never published completely. | |
| CVE-2015-20122 | Deferred | 未確認 | CWE-89 | Seeyon A6 collaborative office automation platform contains an unauthenticated SQL injection vulnerability in the attach_ids parameter of the file attachment download endpoint that |
| CVE-2016-15059 | Deferred | 未確認 | CWE-122 | Net::IDN::Punycode versions before 2.301 for Perl allow a heap buffer overflow via unchecked writes past the output buffer in encode_punycode. The XS backend builds the encoded la |
| CVE-2017-20284 | Awaiting Analysis | 未確認 | CWE-22 | Caucho Resin contains a path traversal vulnerability in the documentation webapp (resin-doc) that allows remote unauthenticated attackers to read arbitrary files by supplying a rel |
| CVE-2019-25776 | Deferred | 未確認 | CWE-89 | Weaver E-cology contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by submitting malicious input through the user |
| CVE-2020-15875 | Awaiting Analysis | 未確認 | CWE-89 | An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the LibreNMS database via a SQL injection in t |
| CVE-2020-37277 | Deferred | 未確認 | CWE-400 | PocketMine-MP versions before 3.15.4 contain a denial of service vulnerability in the InventoryTransaction component's findResultItem() method. Malicious clients can send specially |
| CVE-2021-3030 | Deferred | 未確認 | CWE-79 | Cute Editor for ASP.NET 6.4 is vulnerable to reflected cross-site scripting caused by improper validation of the Theme GET parameter in colorpicker_more.aspx. A remote, unauthentic |
| CVE-2021-38489 | Undergoing Analysis | 未確認 | CWE-256 | HDD password plaintext is stored in a UEFI variable. |
| CVE-2021-43613 | Undergoing Analysis | 未確認 | CWE-732 | An issue was discovered in SysPasswordDxe in Insyde InsydeH2O. User and administrator password hashes are exposed in runtime UEFI variables, leading to escalation of privilege |
| CVE-2021-43614 | Undergoing Analysis | 未確認 | CWE-120 | Error in handling the PlatformLangCodes UEFI variable could cause a buffer overflow, leading to resource exhaustion and failure. |
| CVE-2021-44319 | Deferred | 未確認 | CWE-400 | Parrot AR.Drone 1 and AR.Drone 2 are vulnerable to Denial of Service. The Parrot AR.Drone platform is vulnerable to Wi-Fi deauthentication attack, allowing remote and unauthenticat |
| CVE-2021-44320 | Deferred | 未確認 | CWE-400 | Parrot AR.Drone version 1 and 2 does not employ a suitable mechanism to prevent denial-of-service (DoS) attacks. An attacker can harm the device availability (i.e., video streaming |
| CVE-2021-48006 | Deferred | 未確認 | CWE-178 | PocketMine-MP before 4.0.3 does not perform case-insensitive matching when removing operator entries from ops.txt. The removeOp function lowercases the supplied name but only remov |
| CVE-2021-48007 | Deferred | 未確認 | CWE-20 | PocketMine-MP versions before 3.18.1 fail to validate NaN or INF values in MovePlayerPacket position and rotation fields. Malicious clients can send crafted movement packets with i |
| CVE-2021-48008 | Deferred | 未確認 | CWE-89 | Chanjet CRM contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by manipulating the site_id GET parameter in the w |
| CVE-2022-26961 | Deferred | 未確認 | CWE-79 | Italtel NetMatch-S 5.0.0-20200703 allows Multiple Stored XSS under NP_IBCF-NATUP-01/NMSCI-WebGui/backup_restore.jsp and NP_IBCF-MIBER-03/NMSCI-WebGui/storage.jsp via the name param |
| CVE-2022-26962 | Deferred | 未確認 | CWE-79 | Italtel NFV 11.1.2-20210318 allows Multiple Stored XSS under NP_BCCAS-RMCTRL-01/IMCSCIWebGui/configuration.jsp?opration=list&object=announcementAS via the name, username, or mrfAnn |
| CVE-2022-35497 | Deferred | 未確認 | CWE-79 | In Trimble TM4WEB 21.4.0.4 due to security misconfiguration with session identifiers, it is possible to recover valid session cookies via reflected cross-site scripting affecting t |
| CVE-2022-35499 | Deferred | 未確認 | CWE-79 | In Trimble TM4WEB 21.4.0.4, the external bill viewer endpoint is vulnerable to reflected cross-site scripting via injection in a arbitrary parameter appended to the URL. |
| CVE-2022-42917 | Awaiting Analysis | 未確認 | CWE-367 | In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root by monitoring the configuration directory (/etc/frr) and replacing config files upon |
| CVE-2022-4997 | Deferred | 未確認 | CWE-89 | The jet-form-builder-stripe-gateway WordPress plugin before 1.1.0 does not sanitise and escape a payment token before using it in a SQL statement, allowing unauthenticated users to |
| CVE-2022-51008 | Deferred | 未確認 | CWE-770 | PocketMine-MP before 4.12.3 fails to limit unauthenticated sessions, allowing attackers to exhaust player slots by creating sessions without sending LoginPacket. Attackers can floo |
| CVE-2022-51009 | Deferred | 未確認 | CWE-248 | PocketMine-MP before 4.7.2 fails to properly handle exceptions from the adhocore/json-comment library when parsing skin geometry data. Attackers can send login or skin packets with |
| CVE-2022-51010 | Deferred | 未確認 | CWE-20 | PocketMine-MP versions before 4.4.2 fail to properly validate item IDs received from clients in itemstack NBT data. Attackers can send crafted item IDs outside the valid range to t |
| CVE-2022-51011 | Deferred | 未確認 | CWE-20 | PocketMine-MP before 4.2.10 fails to validate the total length of incoming chat message blobs before splitting them by newline characters, allowing attackers to send large messages |
| CVE-2022-51012 | Deferred | 未確認 | CWE-20 | PocketMine-MP versions before 4.2.9 fail to properly validate NBT data types during deserialization of inventory transaction packets from clients. Attackers can send crafted invent |
| CVE-2022-51013 | Deferred | 未確認 | CWE-20 | PocketMine-MP versions before 4.2.3 fail to validate damage metadata values in tool and armor item NBT data received from clients. Attackers can send negative or out-of-range damag |
| CVE-2022-51014 | Deferred | 未確認 | CWE-248 | PocketMine-MP before 4.0.7 contains an unhandled exception vulnerability in the ModalFormResponsePacket handler when processing malformed JSON from clients. Attackers can send spec |
| CVE-2022-51015 | Deferred | 未確認 | CWE-20 | PocketMine-MP before 4.0.6 does not validate facing values in PlayerActionPacket (for START_BREAK and CRACK_BREAK actions) or in UseItemTransactionData (typically within InventoryT |
| CVE-2022-51016 | Deferred | 未確認 | CWE-294 | PocketMine-MP 3.x (before 3.27.0) does not implement Minecraft Bedrock protocol encryption, so the server cannot verify that a connecting client possesses the private key correspon |
| CVE-2022-51017 | Deferred | 未確認 | CWE-20 | PocketMine-MP versions before 3.26.5 and 4.0.5 fail to validate the length of skin data fields submitted by players, allowing uncapped values to exceed the 32767 byte TAG_String li |
| CVE-2022-51018 | Deferred | 未確認 | CWE-400 | PocketMine-MP before 3.26.5 and 4.0.x before 4.0.5 does not limit book page text length, page count, or author/title length. A player who obtains a writable book can create oversiz |
| CVE-2022-51019 | Deferred | 未確認 | CWE-78 | Akaunting before 2.1.31 contains an OS command injection vulnerability in the module installation and update flow where the alias parameter is passed unvalidated to shell command e |
| CVE-2023-20576 | Awaiting Analysis | 未確認 | CWE-345 | Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially resulting in denial of service or privilege escalation. |
| CVE-2023-20577 | Awaiting Analysis | 未確認 | CWE-121 | A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution. |
| CVE-2023-22631 | Deferred | 未確認 | CWE-88 | PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the HTTP XML/REST Sensor. |
| CVE-2023-22632 | Awaiting Analysis | 未確認 | CWE-88 | PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the FTP Server Count Sensor. |
| CVE-2023-24034 | Awaiting Analysis | 未確認 | CWE-601 | An issue was discovered in twilio_ajax_handler.php in Nagios XI before 5.9.3. An attacker can force a user to visit a malicious site by using a open redirect vulnerability. |
| CVE-2023-24035 | Awaiting Analysis | 未確認 | CWE-208 | An issue was discovered in Nagios XI before 5.9.3. The is_insecure_login_authenticated function uses a insecure timing comparison that leads to an attacker being able to bruteforce |
| CVE-2023-24283 | Deferred | 未確認 | CWE-120 | Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which allows attackers to cause a Denial of Service (DoS) via a crafted save file. |
| CVE-2023-24284 | Deferred | 未確認 | CWE-120 | Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the is_markable() function. |
| CVE-2023-24285 | Deferred | 未確認 | CWE-120 | Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which is triggered when an unusually long move is executed. |
| CVE-2023-24286 | Deferred | 未確認 | CWE-120 | Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the game description parameter. |
| CVE-2023-24287 | Deferred | 未確認 | CWE-120 | Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the "M" command. |
| CVE-2023-24288 | Deferred | 未確認 | CWE-190 | An issue in Portable Puzzle Collection before 20230116.5782e29 allows attackers to cause a Denial of Service (DoS) via creating an excessive amount of save states. |
| CVE-2023-24291 | Deferred | 未確認 | CWE-120 | Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the record length parameter. |
| CVE-2023-28148 | Awaiting Analysis | 未確認 | CWE-79 | A bodyclass XSS issue was discovered in Paessler PRTG before 23.3.86.1520. |
| CVE-2023-29377 | Awaiting Analysis | 未確認 | CWE-23 | An issue was discovered in Softing OPC UA C++ SDK through 6.20 and Softing Secure Integration Server through 1.22. By using FileType renames, it is possible to bypass limitations o |
| CVE-2023-32778 | Deferred | 未確認 | CWE-23 | An issue was discovered in ILIAS 6.23, 7 before 7.22, and 8.1. An attacker can execute arbitrary code via ZIP upload. |
| CVE-2023-32803 | Awaiting Analysis | 未確認 | CWE-669 | The ca-certificates package before ca-certificates-2021.2.50-72 for Amazon Linux 2 (AL2) does not properly remove certain TrustCor root certificates from the root store. NOTE: this |
| CVE-2023-3360 | Deferred | 未確認 | CWE-502 | The Weaver Show Posts WordPress plugin before 1.8.1 unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege user import |
| CVE-2023-34854 | Deferred | 未確認 | CWE-434 | HotelDruid before 3.0.6 has insufficient file upload sanitation in the backup/restore function. |
| CVE-2023-37252 | Awaiting Analysis | 未確認 | CWE-669 | An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. Special:CheckUserLog shows usernames that have been hidden. |
| CVE-2023-37253 | Awaiting Analysis | 未確認 | CWE-669 | An issue was discovered in the ProofreadPage extension for MediaWiki through 1.39.3. It leaks information about a suppressed user via the API and config variables. |
| CVE-2023-37366 | Awaiting Analysis | 未確認 | CWE-835 | An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem Exynos 9810, Exynos 9610, Exynos 9820, Exynos 980, Exynos 850, Exynos 1080, Exynos 2100, |
| CVE-2023-40772 | Deferred | 未確認 | CWE-23 | A directory Traversal vulnerability in DataEase before 1.18.10 allows a remote attacker to obtain sensitive information via a a crafted request to the StaticResourceController.java |
| CVE-2023-45023 | Deferred | 未確認 | CWE-863 | The femanager extension 7 before 7.2.2 for TYPO3 has Incorrect Access Control: it lacks a check for permissions for the invitation component. |
| CVE-2023-45858 | Awaiting Analysis | 未確認 | CWE-23 | A directory traversal was identified in Paessler PRTG before 23.4.88.1429 that made it possible to read local files. |
| CVE-2023-46035 | Deferred | 未確認 | CWE-776 | The svg_optimizer gem before 0.3.0 for Ruby performs entity expansion on untrusted documents. |
| CVE-2023-46273 | Deferred | 未確認 | CWE-121 | Bonjour Gateway in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has an ah_bgd buffer overflow via ah_event_send. |
| CVE-2023-50459 | Deferred | 未確認 | CWE-863 | An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. It fails to check access permissions for the edit user component. An authenticated frontend user can |
| CVE-2023-50460 | Deferred | 未確認 | CWE-863 | An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. The backend module allows an authenticated backend user to perform various actions (userLogout, confi |
| CVE-2023-50461 | Deferred | 未確認 | CWE-863 | An issue was discovered in the direct_mail (aka Direct Mail) extension through 9.5.1 for TYPO3. The Configuration backend module of the extension allows an authenticated user to wr |
| CVE-2023-50462 | Deferred | 未確認 | CWE-863 | An issue was discovered in the content_consent (aka Content Consent) extension through 2.0.1 for TYPO3. It fails to verify whether a specified content element identifier is permitt |
| CVE-2023-51769 | Deferred | 未確認 | CWE-79 | Frappe before 14.49.0 allows an XSS attack that is associated with blog pages and exception pages. |
| CVE-2023-54355 | Deferred | 未確認 | CWE-347 | PocketMine-MP versions before 5.3.1 and 4.23.1 fail to validate that the identityPublicKey in LoginPacket uses the required secp384r1 elliptic curve. Attackers can provide LoginPac |
| CVE-2023-54356 | Awaiting Analysis | 未確認 | CWE-326 | Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites (TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA and TLS_RSA_WITH_3DES_EDE_CBC_SHA) on their TLS endpoints. These 64-bit |
| CVE-2023-54390 | Deferred | 未確認 | CWE-1025 | PocketMine-MP versions before 5.3.1 and 4.23.1 contain a denial of service vulnerability in LoginPacket JSON parsing due to improper null value handling in arrays. Attackers can se |
| CVE-2023-54391 | Deferred | 未確認 | CWE-304 | Proxmox Virtual Environment (VE) 7.0 through 8.0 contains an authentication bypass vulnerability in libpve-access-control before 8.0.4 that allows unauthenticated attackers to auth |
| CVE-2023-54392 | Deferred | 未確認 | CWE-20 | PocketMine-MP versions >= 4.20.0 before 4.22.3 (and before 5.2.1 in the 5.x branch) fail to validate NBT tag types in BlockActorDataPacket. A player can crash the server by sending |
| CVE-2023-54393 | Deferred | 未確認 | CWE-20 | PocketMine-MP versions before 4.20.5 contain a denial of service vulnerability in LoginPacket JSON parsing due to improper validation in the JsonMapper dependency. Attackers can se |
| CVE-2023-54394 | Deferred | 未確認 | CWE-770 | PocketMine-MP before 4.18.0-ALPHA2 fails to rate-limit mismatch type InventoryTransactionPacket requests, allowing attackers to trigger excessive inventory synchronization. Attacke |
| CVE-2023-54395 | Deferred | 未確認 | CWE-407 | PocketMine-MP versions before 4.12.5 contain a denial-of-service vulnerability in ModalFormResponsePacket processing that allows attackers to cause server resource exhaustion by se |
| CVE-2023-54396 | Deferred | 未確認 | CWE-129 | PocketMine-MP versions before 4.8.1 fail to validate dye color IDs in banner NBT data during deserialization. Attackers can provide invalid color values in inventory transactions o |
| CVE-2023-54397 | Deferred | 未確認 | CWE-444 | Tornado before 6.3.3 contains an HTTP request smuggling vulnerability due to improper parsing of Content-Length headers accepting non-standard characters. Attackers can send crafte |
| CVE-2023-54398 | Deferred | 未確認 | CWE-502 | Yonyou U8 Cloud contains an unauthenticated Java deserialization vulnerability in the nc.impl.pub.filesystem.FileManageServlet component that allows remote unauthenticated attacker |
| CVE-2023-54399 | Deferred | 未確認 | CWE-89 | Hongjing e-HR before 8.2 contains a SQL injection vulnerability in the /servlet/codesettree endpoint where the categories query parameter is passed to a database query without sani |
| CVE-2023-54400 | Deferred | 未確認 | CWE-89 | Fumasoft Fumeng Cloud contains a SQL injection vulnerability in the AjaxMethod.ashx endpoint that allows unauthenticated remote attackers to inject arbitrary SQL through the Name p |
| CVE-2023-54402 | Deferred | 未確認 | CWE-918 | iDocView contains a server-side request forgery vulnerability in its /doc/upload endpoint that allows remote unauthenticated attackers to fetch arbitrary URLs by supplying a hardco |
| CVE-2023-54403 | Deferred | 未確認 | CWE-22 | Yonyou U8 CRM before V16.5 and V18 contains an arbitrary file read vulnerability in /ajax/getemaildata.php that allows unauthenticated attackers to bypass authentication using the |
| CVE-2023-5778 | Deferred | 未確認 | CWE-130 | Improper handling of length parameter inconsistency vulnerability in ABB Freelance Controller DCP, ABB Freelance Controller AC700, ABB Freelance Controller AC800, and ABB Freelance |
| CVE-2024-10085 | Awaiting Analysis | 未確認 | CWE-770 | CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause denial of service of the OPC UA communication platform when a large number of OP |
| CVE-2024-11080 | Deferred | 未確認 | CWE-94 | The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to Unauthenticated Hook Injection in versions 2.2.32 to 2.3.1 via several functions in the ~/inc |
| CVE-2024-11222 | Analyzed | 未確認 | CWE-367 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have a |
| CVE-2024-12145 | Deferred | 未確認 | CWE-862 | The BuddyPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 14.3.3 via the bp_notifications_action_bulk_manage due t |
| CVE-2024-14029 | Deferred | 未確認 | CWE-444 | Tornado before 6.4.1 ignores duplicate Transfer-Encoding: chunked headers, treating requests as having no message body and parsing the chunked body as a subsequent request. Attacke |
| CVE-2024-14047 | Analyzed | 未確認 | CWE-59 | A local vulnerability in the Winlogbeat Windows installer caused runtime files to be placed in a directory writable by unprivileged users. A low-privileged attacker with existing a |
| CVE-2024-23176 | Awaiting Analysis | 未確認 | CWE-79 | An issue was discovered in the MassMessage extension in MediaWiki before 1.40.2. For a Special:MassMessage?uselang=x-xss URL, the i18n key massmessage-form-page-help allows XSS. |
| CVE-2024-27123 | Deferred | 未確認 | CWE-79 | A cross-site scripting (XSS) vulnerability has been reported to affect QcalAgent. The local attackers can then exploit the vulnerability to bypass security mechanisms or read appli |
| CVE-2024-31026 | Deferred | 未確認 | CWE-94 | An issue in Greek Universities Network (GUnet) Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the chat input field in the course module. |
| CVE-2024-31027 | Deferred | 未確認 | CWE-79 | Cross Site Scripting vulnerability in Greek Universities Network (GUnet) Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the last name, first nam |
| CVE-2024-35585 | Deferred | 未確認 | CWE-306 | Oxford Nanopore MinKNOW before 24.06 relies on a client's source IP address for authentication. |
| CVE-2024-3773 | Deferred | 未確認 | CWE-79 | The LiveJournal Shortcode WordPress plugin through 1.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcod |
| CVE-2024-38639 | Deferred | 未確認 | CWE-287 | An improper authentication vulnerability has been reported to affect product. The remote attackers can then exploit the vulnerability to compromise the security of the system. QTS |
| CVE-2024-42002 | Awaiting Analysis | 未確認 | CWE-94, CWE-95 | A code injection vulnerability has been discovered in the Robot Operating System 2 (ROS 2) 'ros2topic' command-line tool, affecting all ROS 2 distributions from Crystal Clemmys up |
| CVE-2024-53922 | Awaiting Analysis | 未確認 | CWE-1284 | An issue was discovered in the buffer queue driver in Samsung Automotive Processor Exynos Auto 8890, V7, V9, and V920. Lack of a length check leads to a Denial of Service in the ke |
| CVE-2024-56344 | Awaiting Analysis | 未確認 | CWE-327 | IBM Cognos Analytics 12.0.4 through 12.0.4 FP2, and 12.1.0 through 12.1.3 FP1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enabl |
| CVE-2024-58380 | Deferred | 未確認 | CWE-20 | PocketMine-MP versions before 5.11.2 contain a denial of service vulnerability in BookEditPacket handling that crashes the server when an invalid inventory slot value is provided. |
| CVE-2024-58381 | Deferred | 未確認 | CWE-502 | PocketMine-MP before 5.11.1 contains a denial of service vulnerability in LoginPacket JSON processing that allows remote attackers to crash the server by sending malformed JSON dat |
| CVE-2024-58382 | Deferred | 未確認 | CWE-407 | league/commonmark versions before 2.6.0 contain polynomial time complexity vulnerabilities in Markdown parsing that allow attackers to cause denial of service. Attackers can submit |
| CVE-2024-58383 | Deferred | 未確認 | CWE-732 | Froxlor before 2.2.0 (affected up to and including 2.2.0-rc3) generates /etc/pure-ftpd/db/mysql.conf with mode 0644 via the XML configuration templates in lib/configfiles/, even th |
| CVE-2024-58384 | Deferred | 未確認 | CWE-113 | Tornado before 6.4.1 contains a CRLF injection vulnerability in CurlAsyncHTTPClient that fails to reject carriage return and line feed characters in request headers. Attackers can |
| CVE-2024-58385 | Deferred | 未確認 | CWE-89 | Yonyou U8 CRM contains an unauthenticated SQL injection vulnerability in the fillbacksettingedit.php configuration endpoint where the DontCheckLogin=1 parameter bypasses authentica |
| CVE-2024-58386 | Awaiting Analysis | 未確認 | CWE-22 | ZoneMinder versions 1.37.0 before 1.38.0 contain a path traversal vulnerability in the files view that allows authenticated users to read arbitrary files. The path parameter is not |
| CVE-2024-58387 | Deferred | 未確認 | CWE-22 | Inspur Haiyue HCM Cloud contains an arbitrary file read vulnerability in the /api/model_report/file/download endpoint that allows unauthenticated remote attackers to read arbitrary |
| CVE-2024-7952 | Awaiting Analysis | 未確認 | CWE-798 | A data exposure vulnerability exists in the affected product. There are hardcoded links in the source code that lead to JSON files that can be reached without authentication. If ex |
| CVE-2024-7953 | Awaiting Analysis | 未確認 | CWE-284 | A vulnerability exists in the affected products that allows a threat actor to create a project and become the administrator for it. If exploited, a threat actor could create, modif |
| CVE-2024-7956 | Awaiting Analysis | 未確認 | CWE-287 | A vulnerability exists in the affected products that allows a threat actor to gain access to user’s projects. To exploit this vulnerability the threat actor must have basic user pr |
| CVE-2025-11395 | Awaiting Analysis | 未確認 | CWE-277 | A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman load` command, they can create files on the host machine with the privileges of the user ru |
| CVE-2025-1218 | Analyzed | 未確認 | CWE-122 | The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can s |
| CVE-2025-12737 | Analyzed | 未確認 | CWE-78 | The administrative operations within the Carbon Console do not adequately validate specific user-supplied input. This oversight allows a malicious actor with administrative privile |
| CVE-2025-12767 | Awaiting Analysis | 未確認 | CWE-770 | IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to cause a denial of service using a specially crafted regular expression that would cause excessive resource consumpt |
| CVE-2025-12768 | Awaiting Analysis | 未確認 | CWE-787 | A security issue exists within FactoryTalk® Historian Machine Edition. An attacker with low-level authentication could exploit this vulnerability to achieve remote code execution o |
| CVE-2025-1280 | Deferred | 未確認 | CWE-22 | The BM Content Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up to 3.17.1 (exclusive) via the ux_cb_page_customize_save_layout_ajax() function. |
| CVE-2025-1281 | Deferred | 未確認 | CWE-22 | The BM Content Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ux_cb_remove_layout_ajax() and ux_cb_tools_expo |
| CVE-2025-12999 | Deferred | 未確認 | CWE-345 | UrlUtil.getBaseUrl builds the absolute URLs in a response — download links, icons, asset and API URLs — from the X-Forwarded-Host, X-Forwarded-Proto and X-Forwarded-Prefix request |
| CVE-2025-13166 | Deferred | 未確認 | CWE-203 | The SMS OTP flow fails to adequately handle error messages, allowing an attacker to infer the existence of registered user accounts based on the responses received during the OTP i |
| CVE-2025-13398 | Rejected | 未確認 | Rejected reason: This CVE ID is a duplicate of CVE-2025-13542 and was never published. Both IDs were assigned to the same unauthenticated privilege escalation vulnerability in the | |
| CVE-2025-1350 | Awaiting Analysis | 未確認 | CWE-209 | IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is ret |
| CVE-2025-13533 | Deferred | 未確認 | CWE-79 | The CSS & JavaScript Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 12.0.6 via the Assignment Engine fields. This i |
| CVE-2025-13882 | Awaiting Analysis | 未確認 | CWE-799 | IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 |
| CVE-2025-14181 | Analyzed | 未確認 | CWE-190 | The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to trigger. When the |
| CVE-2025-14484 | Deferred | 未確認 | CWE-862 | The Image Buzz plugin for WordPress is vulnerable to unauthorized API key modification due to missing authorization checks in all versions up to, and including, 1.0.3. This makes i |
| CVE-2025-14486 | Deferred | 未確認 | CWE-862 | The PixelPlay plugin for WordPress is vulnerable to unauthorized API key deletion due to missing authorization checks in all versions up to, and including, 1.0.2. This makes it pos |
| CVE-2025-14487 | Deferred | 未確認 | CWE-862 | The Handily plugin for WordPress is vulnerable to unauthorized payment settings modification due to missing authorization checks in all versions up to, and including, 1.0.3. This m |
| CVE-2025-14564 | Deferred | 未確認 | CWE-79 | The Viable URL Media Uploader plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.0 due to insufficient |
| CVE-2025-14753 | Analyzed | 未確認 | CWE-22 | IBM Cloud Pak for Data 5.1.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequen |
| CVE-2025-14754 | Analyzed | 未確認 | CWE-78 | IBM Cloud Pak for Data 5.1.2 could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied inpu |
| CVE-2025-14814 | Deferred | 未確認 | CWE-79 | The CSS & JavaScript Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's cjtoolbox shortcode in all versions up to, and including, 12.0.6 due |
| CVE-2025-14871 | Analyzed | 未確認 | CWE-770 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have |
| CVE-2025-14945 | Deferred | 未確認 | CWE-79 | The Events Manager - Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Stored Cross-Site Scripting via event attribute values in all versions up to, and |
| CVE-2025-15399 | Awaiting Analysis | 未確認 | CWE-352 | IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site request forgery which could allow an attacker to exe |
| CVE-2025-15481 | Deferred | 未確認 | CWE-306 | The Notification Bar for WordPress plugin through 1.1.8 exposes an unauthenticated CSV export script that discloses all stored subscriber emails. |
| CVE-2025-15485 | Deferred | 未確認 | CWE-862 | The Auto x LINE WordPress plugin through 1.0.0 does not have authorization checks in some of its REST endpoints, allowing unauthenticated users to call them and update the plugin s |
| CVE-2025-15489 | Deferred | 未確認 | CWE-863 | The Passster WordPress plugin before 4.2.24 does not handle input properly in an AJAX action, allowing unauthenticated users to retrieve the value of password protected content |
| CVE-2025-15490 | Deferred | 未確認 | CWE-863 | The Passster WordPress plugin before 4.2.26 has a flaw in its global protection checks, allowing unauthenticated users to bypass the protection offered via crafted URLs |
| CVE-2025-15613 | Awaiting Analysis | 未確認 | CWE-918 | Kyverno before v1.13.4 is vulnerable to server-side request forgery (SSRF) via its Service Call functionality. An attacker with permission to create Kyverno (Cluster)Policies can s |
| CVE-2025-15614 | Deferred | 未確認 | CWE-125 | ugrep before 7.6.0 contains a heap buffer over-read vulnerability in the LZW decompressor when processing crafted .Z archive files. Attackers can supply malformed .Z files that cau |
| CVE-2025-15647 | Deferred | 未確認 | CWE-125 | CDT before 1.4.5 contains an out-of-bounds read vulnerability in the opposedVertexInd() function when constraint edge intersections are computed in floating point and round outside |
| CVE-2025-15663 | Deferred | 未確認 | CWE-79 | The Ultimate Before After Image Slider & Gallery WordPress plugin before 4.7.19 does not properly escape the slider's after-label value before its bundled client-side script re-in |
| CVE-2025-15664 | Deferred | 未確認 | CWE-79 | The Ultimate Before After Image Slider & Gallery WordPress plugin before 4.7.19 does not properly escape the slider's before-label value before its bundled client-side script re-i |
| CVE-2025-15679 | Deferred | 未確認 | CWE-258 | Under certain circumstances such as reset to factory default operation, the BMC root account is made active without a password on BullSequana XH3406 and XH3515. |
| CVE-2025-15690 | Deferred | 未確認 | CWE-79 | The Content Mask WordPress plugin before 1.8.5.6 does not properly sanitise and escape content submitted with a post before outputting it in the pages it generates, allowing users |
| CVE-2025-15691 | Deferred | 未確認 | CWE-863 | The WPFunnels WordPress plugin before 3.13.0 does not check whether user registration is enabled on the site before creating accounts from opt-in form submissions, relying on a va |
| CVE-2025-15692 | Deferred | 未確認 | CWE-79 | The Icegram Express WordPress plugin before 5.8.6 does not properly escape a list description setting before outputting it within an HTML attribute, which could allow users with th |
| CVE-2025-15693 | Deferred | 未確認 | CWE-22 | The JCH Optimize WordPress plugin before 5.0.1 does not properly restrict a directory path provided to one of its administrative image-browsing features to within the site, allowin |
| CVE-2025-15694 | Deferred | 未確認 | CWE-79 | The Joli Table Of Contents WordPress plugin before 2.8.1 does not sanitise and escape some of its settings before outputting them in an admin page, which could allow high-privilege |
| CVE-2025-15695 | Deferred | 未確認 | CWE-79 | The Translate WordPress with GTranslate WordPress plugin before 3.0.10 does not validate one of its settings before the bundled front-end scripts build markup from it, allowing use |
| CVE-2025-15696 | Deferred | 未確認 | CWE-79 | The Real3D Flipbook WordPress plugin before 5.4 does not sanitize or escape several flipbook editor fields before rendering them back in the admin editor, allowing users with the |
| CVE-2025-15697 | Deferred | 未確認 | CWE-79 | The Dictionary WordPress plugin through 1.0 does not escape user input before reflecting it back in the responses of several directly accessible scripts, allowing unauthenticated a |
| CVE-2025-15698 | Deferred | 未確認 | CWE-79 | The Business Name Generator WordPress plugin through 1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored C |
| CVE-2025-24890 | Deferred | 未確認 | CWE-283 | gitoxide is an implementation of git written in Rust. Prior to 0.13.3, the gix-sec crate on Windows incorrectly treats repositories controlled by another user as trusted when an ad |
| CVE-2025-26790 | Deferred | 未確認 | CWE-125 | Withsecure Atlant with Capricorn engine before 2025-01-20_02 allows a Remote Denial of Service via an out-of-bounds memory read during processing of a document file by the antiviru |
| CVE-2025-32000 | Awaiting Analysis | 未確認 | CWE-20 | HCL Sametime is vulnerable to insufficient input sanitization. The application did not appropriately sanitize user input. When user input is implicitly or explicitly trusted withou |
| CVE-2025-3271 | Deferred | 未確認 | CWE-79 | Documentum Webtop versions prior to 16.7.1 software is vulnerable to an XSS |
| CVE-2025-33141 | Awaiting Analysis | 未確認 | CWE-497 | IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 006 could allow an authenticated user to obtain sensitive information from backup files due to incorrect permissions assignment. |
| CVE-2025-33147 | Awaiting Analysis | 未確認 | CWE-327 | IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 could allow an attacker on a shared network to obtain sensitive information caused by insecure network |
| CVE-2025-33207 | Awaiting Analysis | 未確認 | CWE-1262 | NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control for the register interface by sending a |
| CVE-2025-36045 | Awaiting Analysis | 未確認 | CWE-799 | IBM TS4300 1.1.0.1 through 1.7.1.1 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency. |
| CVE-2025-36076 | Awaiting Analysis | 未確認 | CWE-540 | IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 stores sensitive information in source code could be used by an authenticated user in further attacks |
| CVE-2025-36084 | Awaiting Analysis | 未確認 | CWE-327 | IBM Concert 1.0.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. |
| CVE-2025-36147 | Awaiting Analysis | 未確認 | CWE-79 | IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4.0 through 3.2.4.16 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated |
| CVE-2025-36178 | Awaiting Analysis | 未確認 | CWE-1284 | IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 could allow an authenticated user to bypass input validation due to improper validation of client-side input |
| CVE-2025-36421 | Awaiting Analysis | 未確認 | CWE-319 | IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the m |
| CVE-2025-36591 | Awaiting Analysis | 未確認 | CWE-327 | Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Use of a Broken or Risky Cryptographic Algorithm vulnerability. A high privil |
| CVE-2025-43936 | Analyzed | 未確認 | CWE-287 | Dell ObjectScale, versions prior to ObjectScale 4.4.0.0, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit |
| CVE-2025-45480 | Deferred | 未確認 | CWE-669 | Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is misclassified as a non-boundary. |
| CVE-2025-46418 | Deferred | 未確認 | CWE-78 | Westermo WeOS 5.x starting from 5.24 allows OS command injection via a media definition. |
| CVE-2025-46808 | Awaiting Analysis | 未確認 | CWE-532 | An Insertion of Sensitive Information into Log File vulnerability in SUSE neuvector manager exposes sensitive information into the manager container’s log This issue affects |
| CVE-2025-51457 | Awaiting Analysis | 未確認 | CWE-77 | D-Link DAP-2610 up to 2.06B08r099 contains an authenticated command injection vulnerability within the web interface at the /index.xgi endpoint. An attacker with authenticated acce |
| CVE-2025-51619 | Deferred | 未確認 | CWE-20 | A vulnerability in the Thesycon DPC Latency Checker driver (dpc.sys) thru 1.4.0 allows local unprivileged users to cause a denial-of-service (BSOD) condition on Windows systems. Th |
| CVE-2025-52651 | Undergoing Analysis | 未確認 | CWE-20 | HCL MyXalytics was affected by Improper Input validation Vulnerability. It allow malicious or unexpected data to cause unintended system behaviour or security issues. |
| CVE-2025-52652 | Undergoing Analysis | 未確認 | CWE-451 | HCL MyXalytics was affected by Content Spoofing Vulnerability. It may allow an attacker to manipulate displayed content, making it appear as though it originates from a trusted sou |
| CVE-2025-52657 | Undergoing Analysis | 未確認 | CWE-770 | HCL MyXalytics was affected by Potential DOS Vulnerability. It allows users to input data without any restriction on the number of characters which can impact system performance or |
| CVE-2025-53837 | Deferred | 未確認 | CWE-95 | XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc). Prior to versions 14.10.2 and |
| CVE-2025-55787 | Deferred | 未確認 | CWE-89 | In MailData Email Archiving System v4.2 and earlier, a SQL injection vulnerability exists. |
| CVE-2025-56563 | Deferred | 未確認 | CWE-918 | A Server-Side Request Forgery vulnerability exists in sat_proxy.php in Zenith Satellite Tracker 1.0. The script accepts an attacker-controlled address URL parameter and passes it t |
| CVE-2025-56565 | Awaiting Analysis | 未確認 | CWE-312, CWE-316 | DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within non-volatile memory. The exposed material |
| CVE-2025-56566 | Awaiting Analysis | 未確認 | CWE-312 | MikroTik firmware 7.19.4 stores sensitive authentication credentials and network state in cleartext within non-volatile storage. An attacker with physical access to the device can |
| CVE-2025-57231 | Deferred | 未確認 | CWE-22 | Path Traversal in avatar attachments in Docmost v0.21.0 allows an unauthenticated malicious actor to disclose local files via a POST Request in a public url. |
| CVE-2025-5802 | Deferred | 未確認 | CWE-203 | The self-registration flow accepts user-supplied input for usernames without adequately preventing the disclosure of username existence. When a user attempts to register with an ex |
| CVE-2025-59607 | Analyzed | 未確認 | CWE-822 | Memory Corruption when copying large input data exceeds normal allocation limits. |
| CVE-2025-59953 | Deferred | 未確認 | CWE-502 | LMDeploy is a toolkit for compressing, deploying, and serving large language models. Starting in version 0.9.1 and prior to version 0.10.2, the LMdeploy implements an rpc server (A |
| CVE-2025-61682 | Awaiting Analysis | 未確認 | CWE-79 | Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Versions starting in 3.1.0 and prior to 7.0.0 insert |
| CVE-2025-62167 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-33626. Reason: This candidate is a duplicate of CVE-2026-33626. Notes: All CVE users should ref | |
| CVE-2025-63564 | Deferred | 未確認 | CWE-89 | SQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to execute arbitrary code via crafted HTTP requests |
| CVE-2025-63842 | Deferred | 未確認 | CWE-79 | A Cross-Site Scripting (XSS) vulnerability in the web backend for the Repetico app 1.9.7.31 for Android allows a remote authenticated user to execute arbitrary JavaScript code in t |
| CVE-2025-64031 | Awaiting Analysis | 未確認 | CWE-122 | libarchive 3.8.x before 3.8.2 has a strcpy heap-based buffer overflow in the gzip writer via the original-filename field to archive_compressor_gzip_open in archive_write_add_filter |
| CVE-2025-64059 | Deferred | 未確認 | CWE-79 | Grav 1.7.50.2 allows admins to enter JavaScript via the Home Page editor. NOTE: the relevance of this for stored XSS is disputed because admins are allowed to modify templates, ins |
| CVE-2025-64542 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2025-64584 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2025-64588 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2025-64589 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2025-64610 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2025-64618 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2025-64830 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2025-64838 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2025-64854 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2025-64866 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2025-64868 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2025-66455 | Awaiting Analysis | 未確認 | CWE-502 | LMDeploy is a toolkit for compressing, deploying, and serving large language models. Starting in version 0.9.2 and prior to version 0.16.0, LMDeploy's PyTorch DistServe/PD-disaggre |
| CVE-2025-66974 | Deferred | 未確認 | CWE-20 | An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Version mEzee 2.6.7 allows attackers to cause a Denial of Service (DoS) or connection to an at |
| CVE-2025-67066 | Deferred | 未確認 | CWE-89 | SQL Injection vulnerability in oasys sysoa version 1.0 allows a remote attacker to execute arbitrary code via the outtype parameter in the /outaddresspaging path |
| CVE-2025-68624 | Deferred | 未確認 | CWE-290 | N-able Mail Assure through April 2026 contains a design-level authorization flaw that allows an authenticated SMTP user to send outbound email using MAIL FROM addresses belonging t |
| CVE-2025-69904 | Deferred | 未確認 | CWE-22 | Linkstack v4.8.4 and earlier is vulnerable to Path Traversal, which allows an administrator to read arbitrary files on the server by manipulating file path input. Successful exploi |
| CVE-2025-7062 | Deferred | 未確認 | CWE-20, CWE-79 | A stored cross-site scripting (XSS) vulnerability has been identified in the H5P module `h5p-nodejs-library` by Lumi Education UG in versions up to and including 10.0.4. The librar |
| CVE-2025-70819 | Deferred | 未確認 | CWE-24 | Zettlab D6 Ultra before 1.7.0 allows mounting /etc/passwd and /etc/shadow in a container via ".." manipulations such as volumes: - ../../../../../../../etc:/h_etc:rw in a compose f |
| CVE-2025-70820 | Deferred | 未確認 | CWE-36 | Zettlab D6 Ultra before 1.7.0 allows absolute path traversal to reach folders other than the personal folder. |
| CVE-2025-71417 | Deferred | 未確認 | CWE-20 | PocketMine-MP before 5.32.1 fails to validate uniqueness of pack UUIDs in ResourcePackClientResponsePacket STATUS_SEND_PACKS handling, allowing authenticated clients to trigger dup |
| CVE-2025-71418 | Deferred | 未確認 | CWE-400 | PocketMine-MP versions before 5.25.2 fail to limit the explode() function in packet parsing, allowing malicious clients to waste server resources. Attackers can send crafted packet |
| CVE-2025-71419 | Deferred | 未確認 | CWE-79 | UVdesk core-framework before 1.1.7 contains a stored cross-site scripting vulnerability in the SwiftMailer configuration identifier parameter of the createMailerConfiguration actio |
| CVE-2025-71420 | Deferred | 未確認 | CWE-639 | UVdesk core-framework before 1.1.7 contains an authorization bypass vulnerability in the saved reply endpoint that allows authenticated agents to access replies restricted to other |
| CVE-2025-71421 | Deferred | 未確認 | CWE-269 | UVdesk core-framework before 1.1.7 contains an improper privilege management vulnerability in the editAgent endpoint that allows agents with agent-management privilege to escalate |
| CVE-2025-71422 | Deferred | 未確認 | CWE-347 | Contrast is a Kubernetes runtime for confidential containers. In versions before 1.12.1, the secure persistent volume feature is vulnerable to a malicious host supplying a crafted |
| CVE-2025-71423 | Deferred | 未確認 | CWE-532 | Edgelesssys Contrast is a confidential-computing runtime for Kubernetes. In versions 1.9.0 before 1.12.2, the initializer logs the full NewMeshCert response — which contains the wo |
| CVE-2025-71424 | Deferred | 未確認 | CWE-693 | Contrast, Edgeless Systems' runtime for confidential containers on Kubernetes, is affected in versions up to and including 1.9.0. The VOLUME directive in a Dockerfile (config.volum |
| CVE-2025-71425 | Deferred | 未確認 | CWE-532 | Contrast (Edgeless Systems) before 1.8.1 logs the workload secret to stderr, and thus to Kubernetes logs, when the Contrast initializer is configured with CONTRAST_LOG_LEVEL set to |
| CVE-2025-71426 | Deferred | 未確認 | CWE-285 | Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.4.1, a recovering Coordinator does not verify the seed supplied by the recovering party. An attack |
| CVE-2025-7963 | Deferred | 未確認 | CWE-79 | The Easy Waveform Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the shortcode_easywaveformplayer() function in all versions up to, and including, 1.2 |
| CVE-2025-8945 | Deferred | 未確認 | CWE-863 | The Wp Edit Password Protected WordPress plugin before 1.3.5 allows protecting page content, but this protection can be bypassed by using the REST API. |
| CVE-2025-9049 | Deferred | 未確認 | CWE-862 | The Nokri – Job Board WordPress Theme theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'nokri_account_member_permissi |
| CVE-2025-9314 | Deferred | 未確認 | CWE-434 | The Developer Tools WordPress plugin through 1.1.3 contains an unauthenticated arbitrary file upload vulnerability in the bundled SWFUpload component |
| CVE-2026-0001 | Awaiting Analysis | 未確認 | CWE-416 | Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileg |
| CVE-2026-0054 | Analyzed | 未確認 | CWE-862 | In isCallerAllowed of WalletContextualLocationsService.kt, there is a possible way to get wallet information due to a missing permission check. This could lead to local information |
| CVE-2026-0065 | Analyzed | 未確認 | CWE-693 | In areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java, there is a possible unintended way to launch activities in the background due to a logic error in t |
| CVE-2026-0084 | Analyzed | 未確認 | CWE-693 | In multiple functions of HostEmulationManager.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privileg |
| CVE-2026-0159 | Analyzed | 未確認 | CWE-787 | In Cellular Modem, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. U |
| CVE-2026-0170 | Analyzed | 未確認 | CWE-787 | In Vp9DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no addition |
| CVE-2026-0171 | Analyzed | 未確認 | CWE-787 | In multiple locations, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges ne |
| CVE-2026-0177 | Analyzed | 未確認 | CWE-120, CWE-125 | In do_sss_aes_gcm_256_op of crypto-aes.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with System executio |
| CVE-2026-0179 | Analyzed | 未確認 | CWE-269 | In Bootloader, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. Us |
| CVE-2026-0183 | Analyzed | 未確認 | CWE-441 | In CPM, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with System execution privileges needed. User interacti |
| CVE-2026-0186 | Analyzed | 未確認 | CWE-693 | In ac_init_one_sswrp of init.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution |
| CVE-2026-0187 | Analyzed | 未確認 | CWE-693 | In gsa_sw_pk_hash_compare of image-auth-srv.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with S |
| CVE-2026-0189 | Analyzed | 未確認 | CWE-693 | In ac_init_policy of init.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution p |
| CVE-2026-0192 | Analyzed | 未確認 | CWE-862 | In Bootloader, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System execution privileges need |
| CVE-2026-0194 | Analyzed | 未確認 | CWE-190 | In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges ne |
| CVE-2026-0197 | Analyzed | 未確認 | CWE-200 | In VPU, there is a possible information dislclosure due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User |
| CVE-2026-0199 | Analyzed | 未確認 | CWE-20, CWE-787 | In gf_ta_test_set_config of gf_ta_test.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with no additio |
| CVE-2026-0200 | Analyzed | 未確認 | CWE-122, CWE-787 | In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileges |
| CVE-2026-0302 | Awaiting Analysis | 未確認 | CWE-78 | An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov. |
| CVE-2026-0303 | Awaiting Analysis | 未確認 | CWE-829 | A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled |
| CVE-2026-0304 | Awaiting Analysis | 未確認 | CWE-88 | A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low privileged user with man-in-the-middle (MitM) access to execute code wi |
| CVE-2026-0305 | Awaiting Analysis | 未確認 | CWE-200 | An information disclosure vulnerability in the Palo Alto Networks Prisma® Access Agent on Linux enables a local user to access sensitive configuration data and credentials. The |
| CVE-2026-0306 | Awaiting Analysis | 未確認 | CWE-693 | A vulnerability in the EndPoint Data Loss Prevention (DLP) enforcement of Palo Alto Networks Prisma® Access Agent enables a local user to bypass configured DLP policy enforcement c |
| CVE-2026-0307 | Awaiting Analysis | 未確認 | CWE-426 | Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allows a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows |
| CVE-2026-0308 | Awaiting Analysis | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript payload us |
| CVE-2026-0309 | Awaiting Analysis | 未確認 | CWE-78 | A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root u |
| CVE-2026-0310 | Awaiting Analysis | 未確認 | CWE-787 | A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management |
| CVE-2026-0799 | Awaiting Analysis | 未確認 | CWE-125, CWE-129, CWE-787 | In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter d |
| CVE-2026-0860 | Awaiting Analysis | 未確認 | CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non |
| CVE-2026-100070 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet sashiko says: If map_addr() changes the pack | |
| CVE-2026-100071 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: hsr: free learned nodes on device setup failure hsr_dev_finalize() can fail after a lower-device RX handl | |
| CVE-2026-100072 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: ACPI: platform: Use acpi_bus_get_primary_device() The acpi_get_first_physical_node() usage in acpi_platform_fi |
| CVE-2026-100073 | Analyzed | 未確認 | CWE-617 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix transaction overflow during writeback Commit 95ad8ee45cdb ("ext4: correct the reserved credits for e |
| CVE-2026-100074 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Mark bpf_refcount field as unique BPF_REFCOUNT is not marked as a unique field, while it should be. Fix t | |
| CVE-2026-100075 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters When srpt_alloc_rw_ctxs() fails partway through a multi-bu | |
| CVE-2026-100076 | Undergoing Analysis | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix xmit_frame/xmit_buf leaks on mgnt-frame error paths issue_beacon(), issue_probersp() a |
| CVE-2026-100077 | Undergoing Analysis | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: Recover HW before retire hung submit During recovery, it is not safe to retire the hung submit before |
| CVE-2026-100078 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mei: pass correct argument to function The first argument to iwl_mei_write_cyclic_buf() should | |
| CVE-2026-100079 | Analyzed | 未確認 | CWE-772 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: unregister debugfs entries on teardown ucsi_register() creates per-instance debugfs entries, |
| CVE-2026-100143 | Deferred | 未確認 | CWE-287 | The FluentCart A New Era of eCommerce WordPress plugin before 1.6.5 does not verify that the person placing a guest checkout controls the email address supplied, allowing unauthen |
| CVE-2026-100172 | Deferred | 未確認 | CWE-79 | The AIL Framework (ail-project/ail-framework) contains a stored cross-site scripting (XSS) vulnerability in two Jinja2 templates that render popovers for matched, tracked, or tagge |
| CVE-2026-100174 | Deferred | 未確認 | CWE-79, CWE-94 | The AIL Framework tag selector component (var/www/static/js/tags.js) is vulnerable to stored cross-site scripting (XSS). A user with the ability to create a custom tag could embed |
| CVE-2026-100176 | Deferred | 未確認 | CWE-79 | The AIL Framework's username timeline feature is vulnerable to stored cross-site scripting (XSS). Usernames imported from chats and crawled forums are stored without character rest |
| CVE-2026-100177 | Deferred | 未確認 | CWE-20, CWE-639 | The AIL Framework crawler task creation API (api_add_crawler_task) contained an insufficient authorization check when a user supplied a cookiejar UUID to attach to a one-shot or sc |
| CVE-2026-100187 | Deferred | 未確認 | CWE-20 | The Onion module in AIL Framework contained a performance shortcut in its URL extraction logic that accepted URLs as valid .onion targets based solely on a length check (exactly 69 |
| CVE-2026-100190 | Deferred | 未確認 | CWE-79 | The AIL Framework crawler splash domain page (showDomain.html) is vulnerable to stored cross-site script injection (XSS). User-supplied data originating from imported crawler captu |
| CVE-2026-100192 | Awaiting Analysis | 未確認 | CWE-306 | X-SpringBoot through 6.0 exposes appKey and appSecret credentials in the GET /application/manager/select endpoint without authentication or field filtering. Unauthenticated attacke |
| CVE-2026-100208 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
| CVE-2026-100230 | Deferred | 未確認 | CWE-180 | Input Leap (aka input-leap) through 3.0.3, when the non-default --enable-drag-drop option is used on Windows or macOS, mishandles the / versus \ distinction and allows directory tr |
| CVE-2026-100237 | Awaiting Analysis | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Thanks Extension allows Stored XSS. This |
| CVE-2026-100238 | Awaiting Analysis | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - Flow Extension allows Stored XSS. Thi |
| CVE-2026-100240 | Awaiting Analysis | 未確認 | CWE-862 | Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - TemplateSandbox Extension allows Accessing Functionality Not Properly Constrained by ACLs. This issue affec |
| CVE-2026-100241 | Awaiting Analysis | 未確認 | CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - EventBus Extension allows Excavation. This issue affects Mediawiki - E |
| CVE-2026-100242 | Awaiting Analysis | 未確認 | CWE-400 | Dependency on Vulnerable Third-Party Component and Uncontrolled Resource Consumption vulnerability in Wikimedia Foundation Mediawiki - DataTransfer Extension allows Excessive Alloc |
| CVE-2026-100243 | Awaiting Analysis | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - WikiSEO Extension allows Stored XSS. |
| CVE-2026-100244 | Awaiting Analysis | 未確認 | CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - CentralAuth Extension allows Excavation. This issue affects Mediawiki |
| CVE-2026-100245 | Awaiting Analysis | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - Wikibase Extension allows Stored XSS. |
| CVE-2026-100248 | Deferred | 未確認 | CWE-1025 | The Rattadan Cosmowarp smart contract before 56c6147 can have a comparison to an unintended value of current_admin. |
| CVE-2026-100253 | Analyzed | 未確認 | CWE-184 | In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the versioned settings Kotlin DSL |
| CVE-2026-100254 | Analyzed | 未確認 | CWE-78 | In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 authenticated users could execute commands on Windows servers via CRLF injection in Pipeline Git connection settings |
| CVE-2026-100255 | Analyzed | 未確認 | CWE-1289 | In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 administrator account takeover was possible via password reset |
| CVE-2026-100256 | Analyzed | 未確認 | CWE-829 | In JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural Search script constraints was possible in untrusted projects |
| CVE-2026-100257 | Analyzed | 未確認 | CWE-918 | In JetBrains YouTrack before 2026.2.18991 sSRF via stored XHTML injection was possible during PDF export |
| CVE-2026-100258 | Analyzed | 未確認 | CWE-201 | In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed read-only users to read project settings |
| CVE-2026-100259 | Analyzed | 未確認 | CWE-863 | In JetBrains YouTrack before 2026.2.18991 improper access control on Gantt chart allowed edits by users with view-only access |
| CVE-2026-100260 | Analyzed | 未確認 | CWE-1188 | In JetBrains YouTrack before 2026.2.18991 mailbox integration allowed authentication after a password reset |
| CVE-2026-100261 | Analyzed | 未確認 | CWE-288 | In JetBrains YouTrack before 2026.2.18991 changing article visibility settings was possible without update permission |
| CVE-2026-100262 | Analyzed | 未確認 | CWE-863 | In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed users with read-only project access to overwrite project notification templates |
| CVE-2026-100263 | Analyzed | 未確認 | CWE-79 | In JetBrains YouTrack before 2026.2.18991 stored HTML injection via the User-Agent header was possible |
| CVE-2026-100264 | Analyzed | 未確認 | CWE-522 | In JetBrains YouTrack before 2026.2.18991 stored SMTP server credentials could be disclosed by changing the server host |
| CVE-2026-100265 | Analyzed | 未確認 | CWE-494 | In JetBrains Rider before 2026.2.1 aI Assistant could auto-update third-party skills without user confirmation |
| CVE-2026-100266 | Analyzed | 未確認 | CWE-862 | In JetBrains Hub before 2026.2.52366 missing authorisation allowed authenticated users to send arbitrary emails from the server's trusted address |
| CVE-2026-100267 | Analyzed | 未確認 | CWE-1333 | In JetBrains YouTrack before 2026.2.19197 reDoS attack was possible via mailbox regex mail-rule filters |
| CVE-2026-100268 | Analyzed | 未確認 | CWE-639 | In JetBrains YouTrack before 2026.2.19197 project administrators could read comments from other projects via notification templates |
| CVE-2026-100269 | Analyzed | 未確認 | CWE-862 | In JetBrains YouTrack before 2026.2.19197 helpdesk project's Authorized Reporters list could be bypassed |
| CVE-2026-10027 | Analyzed | 未確認 | CWE-787 | IBM MQ could allow a remote attacker to cause a denial of service or execute arbitrary code due to a buffer overflow when processing malformed compressed data on channels configure |
| CVE-2026-100270 | Analyzed | 未確認 | CWE-863 | In JetBrains YouTrack before 2026.2.19197 low-level Admin Read permission users could disclose integration credentials via import configurations |
| CVE-2026-100271 | Analyzed | 未確認 | CWE-862 | In JetBrains YouTrack before 2026.2.19197 missing authorisation on several endpoints allowed authenticated users to access information from other projects |
| CVE-2026-100272 | Analyzed | 未確認 | CWE-639 | In JetBrains YouTrack before 2026.2.19197 missing authorisation in the notification template preview allowed Project Administrators to read restricted issues |
| CVE-2026-100273 | Analyzed | 未確認 | CWE-863 | In JetBrains YouTrack before 2026.2.19197 authorisation bypass in the scripts debugger allowed arbitrary code execution |
| CVE-2026-100274 | Analyzed | 未確認 | CWE-770 | In JetBrains YouTrack before 2026.2.19197 project Admin could trigger DoS via a notification template |
| CVE-2026-100275 | Analyzed | 未確認 | CWE-79 | In JetBrains YouTrack before 2026.2.19197 stored XSS in the workflow error notification toast was possible |
| CVE-2026-100276 | Analyzed | 未確認 | CWE-863 | In JetBrains YouTrack before 2026.2.19197 guest users could remove a workflow action's visibility restriction and run the action |
| CVE-2026-100277 | Analyzed | 未確認 | CWE-863 | In JetBrains YouTrack before 2026.2.19197 account takeover was possible by replaying a notification signature |
| CVE-2026-100278 | Analyzed | 未確認 | CWE-863 | In JetBrains YouTrack before 2026.2.19197 users with restricted permission could edit and hide other users' comments |
| CVE-2026-100279 | Analyzed | 未確認 | CWE-918 | In JetBrains YouTrack before 2026.2.19197 changing an integration URL exposed its stored credentials |
| CVE-2026-100280 | Analyzed | 未確認 | CWE-862 | In JetBrains YouTrack before 2026.2.19197 creating a project from an unreadable custom template was possible |
| CVE-2026-100286 | Awaiting Analysis | 未確認 | CWE-200 | Missing authorization in the data source settings API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated non-administrative user to disclose integration secrets v |
| CVE-2026-100287 | Awaiting Analysis | 未確認 | CWE-862 | Missing authorization in the attachment history API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileged user to permanently delete or restore vault |
| CVE-2026-100288 | Awaiting Analysis | 未確認 | CWE-312 | Cleartext storage of sensitive information in the database in Devolutions Server 2026.3.5.0 and earlier allows an attacker with read access to the database to obtain external ident |
| CVE-2026-100289 | Awaiting Analysis | 未確認 | CWE-862 | Missing authorization in the gateway network scan token API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileged user to generate a network scan toke |
| CVE-2026-100291 | Deferred | 未確認 | CWE-1188 | In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, several ONVIF service endpoints process management requests without enforcing required authentication. This could allow an unaut |
| CVE-2026-100292 | Deferred | 未確認 | CWE-78 | In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, a hidden debug interface can be enabled through an authenticated request, allowing additional commands to be sent to a backend s |
| CVE-2026-100293 | Deferred | 未確認 | CWE-347 | In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, both the local and cloud update mechanisms apply new firmware without any cryptographic verification, relying only on basic hash |
| CVE-2026-100294 | Deferred | 未確認 | CWE-798 | In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the firmware embeds hardcoded cloud‑API credentials that are shared across deployed devices. Anyone obtaining the public firmwar |
| CVE-2026-100295 | Deferred | 未確認 | CWE-489 | In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an internal debug interface can be enabled through an undocumented pathway, exposing functions not intended for normal operation |
| CVE-2026-100296 | Deferred | 未確認 | CWE-754 | In Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4, an empty-body POST to /setUserConfig, dispatched through the web server's SOAP-RPC handler, silently downgrades the administrato |
| CVE-2026-100297 | Deferred | 未確認 | CWE-918 | In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an unauthenticated network check function can be triggered to probe arbitrary hosts from the device’s internal network. This may |
| CVE-2026-100298 | Deferred | 未確認 | CWE-522 | In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, two user‑information endpoints can reveal sensitive device and account details under conditions that are not intended for normal |
| CVE-2026-100299 | Deferred | 未確認 | CWE-1391 | In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the device includes a legacy password hash on the serial console that relies on a weak DES‑based encryption. |
| CVE-2026-10030 | Awaiting Analysis | 未確認 | CWE-285 | IBM MQ Console allows authenticated non-administrative users to create and start queue managers due to improper authorization checks. |
| CVE-2026-100303 | Deferred | 未確認 | CWE-862 | TDuck survey form through 6.0 lacks authorization checks on FormThemeController write endpoints for global form themes and categories. Authenticated non-admin users can add, modify |
| CVE-2026-100304 | Deferred | 未確認 | CWE-636 | TDuck survey form 6.0 contains an information disclosure vulnerability in FormAuthUtils.hasPermission that fails open when a form does not exist, allowing authenticated users to ac |
| CVE-2026-100305 | Deferred | 未確認 | CWE-862 | TDuck survey form through 6.0 fails to enforce form fill-in restrictions on the authenticated submission endpoint POST /user/form/data/create. Authenticated attackers who know a fo |
| CVE-2026-100306 | Deferred | 未確認 | CWE-602 | TDuck survey form through 6.0 fails to validate write passwords on submission endpoints, enforcing the check only on the front end. Remote unauthenticated attackers can submit form |
| CVE-2026-100308 | Awaiting Analysis | 未確認 | CWE-470, CWE-502 | Deserialization of untrusted data in the model loading component in Amazon GluonTS before 0.17.0 might allow context-dependent attackers to execute arbitrary operating system comma |
| CVE-2026-100310 | Awaiting Analysis | 未確認 | CWE-426 | GNU libextractor before 1.16 loads plugins from an untrusted search path specified by the LIBEXTRACTOR_PREFIX environment variable without proper privilege checks. A local attacker |
| CVE-2026-100311 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. The affected element is an unknown function of the file ma |
| CVE-2026-100312 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. The impacted element is an unknown function of the fi |
| CVE-2026-100313 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This affects an unknown function of the file updatequery.p |
| CVE-2026-100314 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file u |
| CVE-2026-100315 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected is an unknown function of the file mydetailsfaculty |
| CVE-2026-100368 | Deferred | 未確認 | CWE-78 | CliInvoke is a .NET library for invoking command-line programs, and its `CliInvoke.Specializations` packages provide specialized wrappers for shells such as PowerShell and Windows |
| CVE-2026-100369 | Deferred | 未確認 | CWE-88 | CliInvoke and its formerly named `AlastairLundy.CliInvoke` package are .NET libraries for invoking command-line programs and wrapping executable processes. `CliInvoke` versions 2.0 |
| CVE-2026-100370 | Deferred | 未確認 | CWE-20 | DOMSanitizer is a DOM/SVG/MathML Sanitizer for PHP 7.3+. Prior to version 1.0.15, the isDangerousUrl() method is responsible for rejecting dangerous URL values in the href and xlin |
| CVE-2026-100371 | Deferred | 未確認 | CWE-863 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. In version 1.7.2, an authorization guard to Users::change_password(), was added |
| CVE-2026-100372 | Deferred | 未確認 | CWE-22 | ClipBucket v5 before 5.5.3-#197 contains a path traversal vulnerability in the admin template editor that allows authenticated administrators to overwrite PHP files by supplying di |
| CVE-2026-100373 | Deferred | 未確認 | CWE-918 | OpenMetadata through 2.0.2 contains a server-side request forgery vulnerability in the URLValidator.validateURL function that fails to properly resolve DNS hostnames and validate i |
| CVE-2026-100376 | Awaiting Analysis | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - TemplateSandbox Extension allows Cross |
| CVE-2026-100377 | Awaiting Analysis | 未確認 | CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - WikiLambda Extension allows Excavation. This issue affects Mediawiki - |
| CVE-2026-100378 | Awaiting Analysis | 未確認 | CWE-862 | Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - Translate Extension allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Med |
| CVE-2026-100379 | Awaiting Analysis | 未確認 | CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Wikipedia Android App allows Accessing/Intercepting/Modifying HTTP Cookies. This i |
| CVE-2026-100380 | Awaiting Analysis | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - Wikibase Extension allows Cross-Site S |
| CVE-2026-100381 | Awaiting Analysis | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - UploadWizard Extension allows Cross-Si |
| CVE-2026-100382 | Awaiting Analysis | 未確認 | CWE-78 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Wikimedia Foundation Mediawiki - ExternalData Extension allows OS Comman |
| CVE-2026-100383 | Awaiting Analysis | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - WikiLambda Extension allows Cross-Site |
| CVE-2026-100387 | Deferred | 未確認 | CWE-125 | pgPointcloud through 1.2.5 contains a heap out-of-bounds read vulnerability in dimensional patch WKB deserialization that allows authenticated database users to read adjacent heap |
| CVE-2026-100388 | Deferred | 未確認 | CWE-862 | RustDesk versions before 1.5.0 fail to properly validate file transfer permissions on incoming file clipboard messages in the Cliprdr message handler on Linux and macOS. Authentica |
| CVE-2026-100389 | Deferred | 未確認 | CWE-434 | GestSup versions before 3.2.62 contain a remote code execution vulnerability in the basic IMAP connector's attachment handling that fails to skip blocked file extensions. Unauthent |
| CVE-2026-100390 | Deferred | 未確認 | CWE-290 | Zoraxy versions 3.2.3 through 3.3.4 fail to properly parse IPv6 addresses in the RemoteAddr field when setting forwarded headers. Unauthenticated attackers connecting over IPv6 can |
| CVE-2026-100391 | Deferred | 未確認 | CWE-918 | MediaFlow Proxy through 2.4.9 contains a server-side request forgery vulnerability in the /proxy routes due to missing and incomplete destination validation in the d query paramete |
| CVE-2026-100392 | Deferred | 未確認 | CWE-863 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. In version 1.7.2, Users::form() performs no object-level authorization check on |
| CVE-2026-100417 | Deferred | 未確認 | CWE-862 | RustDesk before 1.5.0 on Windows fails to enforce the one-way file transfer option against peer clipboard file requests, allowing authenticated peers to read files from the host cl |
| CVE-2026-100418 | Deferred | 未確認 | CWE-200 | Flame through 2.4.0 contains an information exposure vulnerability in the unauthenticated GET /api/config endpoint that returns the entire configuration object without field redact |
| CVE-2026-100419 | Deferred | 未確認 | CWE-59 | gitoxide gix-fs before 0.23.0 contains a path validation bypass vulnerability in the worktree checkout mechanism that allows attackers to escape the worktree directory via symlink |
| CVE-2026-100501 | Deferred | 未確認 | CWE-307 | Flame through 2.4.0 contains an improper restriction of excessive authentication attempts vulnerability in the POST /api/auth login endpoint that allows unauthenticated attackers t |
| CVE-2026-100502 | Deferred | 未確認 | CWE-613 | Flame through 2.4.0 contains an insufficient session expiration vulnerability in the login endpoint that allows attackers with former admin access to obtain tokens with arbitrary l |
| CVE-2026-100503 | Analyzed | 未確認 | CWE-416 | Ghidra versions through 12.1.4 contain a heap use-after-free vulnerability in the decompiler's Funcdata::opInsertAfter function caused by stale INDIRECT effect-op references. Attac |
| CVE-2026-100504 | Analyzed | 未確認 | CWE-787 | Ghidra versions through 12.1.4 contain a stack-based out-of-bounds write vulnerability in the decompiler's leftshift128 function when processing negative shift amounts from p-code. |
| CVE-2026-100505 | Analyzed | 未確認 | CWE-125 | Ghidra versions 9.2 through 12.1.4 contain a heap out-of-bounds read vulnerability in StringManager::getCodepoint when decoding multi-byte UTF-8, UTF-16, or UTF-32 characters witho |
| CVE-2026-100507 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in If-So Dynamic Content If-So Dynamic Content Personalization if-so allows Refle |
| CVE-2026-100508 | Deferred | 未確認 | CWE-770 | Unauthenticated Denial of Service Attack in Two Factor <= 0.16.0 versions. |
| CVE-2026-100510 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Post and Page Builder by BoldGrid <= 1.27.14 versions. |
| CVE-2026-100512 | Deferred | 未確認 | CWE-502 | Contributor PHP Object Injection in Nested Pages <= 3.3.2 versions. |
| CVE-2026-100513 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in CF7 Views – Complete Entry Management for Contact Form 7 <= 3.2.5 versions. |
| CVE-2026-100520 | Deferred | 未確認 | CWE-22 | Laranode versions before 1.2.1 contain a path traversal vulnerability in the POST /filemanager/upload-file endpoint that allows authenticated users to write arbitrary files outside |
| CVE-2026-100521 | Deferred | 未確認 | CWE-79 | Cotonti through 1.0.0 contains a reflected cross-site scripting vulnerability in the search plugin highlight parameter that performs no HTML or JavaScript escaping. Attackers can c |
| CVE-2026-100522 | Deferred | 未確認 | CWE-79 | Cotonti through 1.0.0 contains a reflected cross-site scripting vulnerability in message.php where the lng parameter is not properly escaped before output in the confirmation dialo |
| CVE-2026-100523 | Deferred | 未確認 | CWE-601 | Cotonti through 1.0.0 contains an open redirect vulnerability in message.php that base64-decodes the redirect parameter without domain validation. Unauthenticated attackers can cra |
| CVE-2026-100524 | Deferred | 未確認 | CWE-352 | Cotonti through 1.0.0 contains a cross-site request forgery vulnerability in the extensions manager that allows attackers to perform state-changing actions without anti-CSRF token |
| CVE-2026-100525 | Deferred | 未確認 | CWE-862 | The OpenClaw Prometheus diagnostics plugin (@openclaw/diagnostics-prometheus) before version 2026.9.3 does not enforce the operator.read scope on its authenticated metrics endpoint |
| CVE-2026-100526 | Deferred | 未確認 | CWE-862 | OpenClaw's Discord integration (npm package @openclaw/discord) before version 2026.9.3 could lose the sender-scoped media policy in the emoji and sticker upload actions before load |
| CVE-2026-100527 | Deferred | 未確認 | CWE-400 | OpenClaw before 2026.8.2 contains a denial of service vulnerability in the Browser extension relay that allows unauthenticated network sources to exhaust pending-authentication cap |
| CVE-2026-100528 | Deferred | 未確認 | CWE-200 | OpenClaw (npm package 'openclaw') before 2026.8.1 could send third-party provider credentials to the wrong endpoint. In affected versions, when a third-party provider uses an OpenA |
| CVE-2026-100529 | Deferred | 未確認 | CWE-863 | OpenClaw versions before 2026.8.1 contain an authorization scope widening vulnerability in file-transfer allow-always approvals that allows attackers to reuse standing grants for u |
| CVE-2026-100530 | Deferred | 未確認 | CWE-863 | OpenClaw versions before 2026.8.1 fail to bind working directory context to reusable exec approvals, allowing approved commands to execute in different directories. Attackers with |
| CVE-2026-100531 | Deferred | 未確認 | CWE-639 | The @openclaw/slack npm package before 2026.8.1 contains an authorization flaw in its Slack download-file handler: when a file lacks the share metadata used to prove it belongs to |
| CVE-2026-100532 | Deferred | 未確認 | CWE-862 | @openclaw/whatsapp (npm) before 2026.8.1 exposes the WhatsApp login tool through the generic channel-tool path without preserving the originating sender's owner status, so the owne |
| CVE-2026-100533 | Deferred | 未確認 | CWE-22 | OpenClaw versions before 2026.8.1 contain a path traversal vulnerability in the tools.fs.workspaceOnly feature where Unicode filename fallback can normalize validated parent direct |
| CVE-2026-100534 | Deferred | 未確認 | CWE-639 | OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in webhook TaskFlow cancellation that allows attackers to cancel unrelated sessions. An attacker wit |
| CVE-2026-100535 | Deferred | 未確認 | CWE-863 | OpenClaw (npm package 'openclaw') versions >= 2026.4.5 and < 2026.8.1 can lose the originating requester's restrictions and untrusted provenance when session-derived text is persis |
| CVE-2026-100536 | Deferred | 未確認 | CWE-22 | OpenClaw versions before 2026.8.1 fail to validate all source fields in structured message attachments, allowing attackers to hide unvalidated host paths behind allowed attachment |
| CVE-2026-100537 | Deferred | 未確認 | CWE-862 | OpenClaw (npm package 'openclaw') before 2026.8.1 fails to apply the originating requester's effective tool policy during Active Memory automatic recall. In deployments that use Ac |
| CVE-2026-100538 | Deferred | 未確認 | CWE-863 | OpenClaw (npm package 'openclaw') before 2026.8.1 does not apply the originating sender's global or per-agent toolsBySender policy when handling outbound attachments. A sender that |
| CVE-2026-100539 | Deferred | 未確認 | CWE-863 | OpenClaw (npm package 'openclaw') before 2026.8.1 fails to revoke memory tool access when an operator hot-disables memory configuration. Existing memory_search and memory_get tool |
| CVE-2026-100540 | Deferred | 未確認 | CWE-863 | OpenClaw Feishu before 2026.8.1 fails to validate whether a configured default account is disabled before selecting it for model tool operations. Attackers can exploit multi-accoun |
| CVE-2026-100541 | Deferred | 未確認 | CWE-178 | OpenClaw's Matrix integration (npm package @openclaw/matrix) versions >= 2026.2.2 and < 2026.8.1 lowercase complete Matrix user IDs — including historical localparts and the case-s |
| CVE-2026-100542 | Deferred | 未確認 | CWE-400 | OpenClaw (npm package 'openclaw') versions >= 2026.5.28 and < 2026.8.1 mishandle archive listings in the tar.bz2 skill installer: bounded command-output suffixes were treated as co |
| CVE-2026-100543 | Deferred | 未確認 | CWE-200 | OpenClaw (npm package openclaw) before 2026.8.1 could include deterministic hashes computed over the original, unredacted configuration in redacted configuration responses. When th |
| CVE-2026-100544 | Deferred | 未確認 | CWE-862 | openclaw's @openclaw/voice-call package before 2026.8.1 launches the configured agent for classic inbound voice calls without propagating the caller's identity or non-owner status. |
| CVE-2026-100545 | Deferred | 未確認 | CWE-863 | OpenClaw (npm package `openclaw`) before 2026.8.1 incorrectly enforces sender tool policies during session-memory filename generation. In affected versions, filename generation cre |
| CVE-2026-100546 | Deferred | 未確認 | CWE-362 | OpenClaw (npm package `openclaw`) versions >= 2026.7.2 and < 2026.9.2 contain a race condition in the Discord realtime voice transcript path. Concurrent control-classified voice tr |
| CVE-2026-100547 | Deferred | 未確認 | CWE-180 | OpenClaw is a coding agent distributed as the npm package `openclaw`. In affected versions (2026.7.1 through 2026.7.2), alternate but valid `file:` URL spellings supplied over the |
| CVE-2026-100548 | Deferred | 未確認 | CWE-200 | OpenClaw (npm package 'openclaw') versions >= 2026.3.28 and < 2026.8.1 contain a credential exposure issue in memory embedding failover. When remote embedding fallback is configure |
| CVE-2026-100549 | Deferred | 未確認 | CWE-22 | OpenClaw versions before 2026.8.1 contain a path traversal vulnerability in QQBot voice attachment handling where filenames are decoded twice, allowing encoded traversal segments t |
| CVE-2026-100550 | Deferred | 未確認 | CWE-863 | OpenClaw (npm package 'openclaw') before 2026.8.1 contains an access-control bypass in the Microsoft Teams integration. When groupPolicy is set to allowlist, a missing or unsupport |
| CVE-2026-100551 | Deferred | 未確認 | CWE-295 | OpenClaw for iOS versions >= 2026.7.1 and < 2026.8.11 do not enforce saved Gateway TLS pins in the Control UI. While native connections enforced the saved Gateway fingerprint, the |
| CVE-2026-100552 | Deferred | 未確認 | CWE-863 | OpenClaw (npm package 'openclaw') before 2026.8.1 does not correctly enforce per-chat tool policies for Codex app-server runtime tools. A conversation-level tools.allow rule filter |
| CVE-2026-100553 | Deferred | 未確認 | CWE-863 | OpenClaw versions >= 2026.6.9 and < 2026.8.1 do not declare the native chatId parameter as a delivery target in the Feishu unpin feature, so unpin requests can bypass the shared sa |
| CVE-2026-100554 | Deferred | 未確認 | CWE-613 | OpenClaw (npm package 'openclaw') versions >= 2026.5.12 and < 2026.8.1 do not immediately invalidate Canvas HTTP authorization when a paired node is revoked. Node revocation invali |
| CVE-2026-100555 | Deferred | 未確認 | CWE-918 | OpenClaw is an npm-distributed gateway application. In versions >= 2026.7.1 and < 2026.8.1, Synology Chat attachment delivery could lose DNS pinning: the Gateway validated a single |
| CVE-2026-100556 | Deferred | 未確認 | CWE-863 | OpenClaw (npm package openclaw) versions >= 2026.5.2 and < 2026.8.1 contain an incorrect authorization vulnerability in WhatsApp group handling. A group sender who is admitted for |
| CVE-2026-100557 | Deferred | 未確認 | CWE-863 | OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in skill tool dispatch that fails to carry the sender's owner status. Non-owner senders authorized t |
| CVE-2026-100558 | Deferred | 未確認 | CWE-400 | OpenClaw versions before 2026.8.1 contain a resource exhaustion vulnerability in the Gateway listener that allows unauthenticated clients to retain response sockets by sending WebS |
| CVE-2026-100559 | Deferred | 未確認 | CWE-78 | OpenClaw versions before 2026.8.1 contain a command parser vulnerability where escaped newlines confuse exec allowlist parsing, allowing hidden commands to execute. Attackers can c |
| CVE-2026-100560 | Deferred | 未確認 | CWE-863 | OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability where Allow Always approvals for exact commands persist as path-only grants on macOS and Linux. Atta |
| CVE-2026-100561 | Deferred | 未確認 | CWE-88 | OpenClaw (npm package 'openclaw') versions >= 2026.3.22 and < 2026.8.1 contain an approval-bypass flaw in the exec approval policy: the policy could trust a command-running wrapper |
| CVE-2026-100562 | Deferred | 未確認 | CWE-863 | OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in the sessions.create endpoint that allows operator.write callers to modify session configurations |
| CVE-2026-100563 | Deferred | 未確認 | CWE-1236 | OpenClaw (npm package `openclaw`) before 2026.8.1 does not neutralize leading characters that spreadsheet applications interpret as formulas when the Control UI exports session dat |
| CVE-2026-100564 | Deferred | 未確認 | CWE-1236 | OpenClaw versions before 2026.8.1 fail to neutralize spreadsheet formula characters in participant display names within attendance CSV exports. Attackers can inject formula-like ce |
| CVE-2026-100566 | Deferred | 未確認 | CWE-863 | OpenClaw LINE versions before 2026.8.1 contain an access control vulnerability where group allowlist mode silently inherits DM allowFrom values when groupAllowFrom is not explicitl |
| CVE-2026-100567 | Deferred | 未確認 | CWE-918 | OpenClaw is an agent gateway distributed as the npm package 'openclaw'. In versions >= 2026.4.5 and < 2026.8.1, the Gateway validated a single DNS resolution result for a configure |
| CVE-2026-100568 | Deferred | 未確認 | CWE-200 | OpenClaw versions before 2026.8.1 fail to properly restrict access to operator command cron jobs, allowing model-visible agent callers to read and execute ownerless command jobs. A |
| CVE-2026-100569 | Deferred | 未確認 | CWE-522 | OpenClaw is an npm-distributed application. In versions >= 2026.4.25 and < 2026.8.1, the workspace environment-variable filter did not block variables ending in `_ENDPOINT`, so an |
| CVE-2026-100570 | Deferred | 未確認 | CWE-88 | OpenClaw (npm package 'openclaw') versions >= 2026.3.28 and < 2026.8.1 allow an untrusted workspace .env file to set the CLOUDSDK_PYTHON_ARGS environment variable. When an operator |
| CVE-2026-100571 | Deferred | 未確認 | CWE-400 | OpenClaw (npm package 'openclaw') versions >= 2026.6.6 and < 2026.8.1 apply the SMS webhook invalid-request rate limit before Twilio signature verification and identify clients onl |
| CVE-2026-100572 | Deferred | 未確認 | CWE-400 | OpenClaw versions >= 2026.3.25 and < 2026.8.1 apply invalid-token rate limiting for Synology Chat webhooks before authentication and key the limit on the raw proxy socket address. |
| CVE-2026-100573 | Deferred | 未確認 | CWE-862 | OpenClaw versions before 2026.8.1 contain a sandbox policy bypass vulnerability in the MCP loopback component that allows sandboxed coding-agent sessions to invoke tools explicitly |
| CVE-2026-100574 | Deferred | 未確認 | CWE-918 | OpenClaw (npm package 'openclaw') before 2026.8.1 contains a server-side request forgery vulnerability in its trusted-host DNS checks. For fetches that use the trusted-host DNS rec |
| CVE-2026-100575 | Deferred | 未確認 | CWE-862 | OpenClaw Slack versions before 2026.8.1 fail to properly enforce sender allowlists in multi-person direct messages. Disallowed participants can trigger Slack agents and access tool |
| CVE-2026-100576 | Deferred | 未確認 | CWE-918 | OpenClaw versions before 2026.8.1 contain a server-side request forgery vulnerability in browser wait predicates that allows attackers to bypass SSRF protections by reaching blocke |
| CVE-2026-100577 | Deferred | 未確認 | CWE-918 | OpenClaw versions before 2026.8.1 fail to validate video asset URLs returned by providers, allowing server-side requests to private destinations. A malicious or compromised provide |
| CVE-2026-100578 | Deferred | 未確認 | CWE-269 | OpenClaw (npm package `openclaw`) before 2026.7.1 fails to restrict owner-only infrastructure tools exposed through the chat.send endpoint. In Gateway deployments using authenticat |
| CVE-2026-100579 | Deferred | 未確認 | CWE-639 | OpenClaw (npm package 'openclaw') before 2026.7.1 incorrectly trusts requester provenance in message.action. In identity-bearing Gateway deployments (authentication modes that hono |
| CVE-2026-100580 | Deferred | 未確認 | CWE-178 | OpenClaw (npm package 'openclaw') before 2026.7.1 improperly handles case sensitivity in the model-facing cron tool: a mixed-case payload kind can pass the agent-facing shell-execu |
| CVE-2026-100581 | Deferred | 未確認 | CWE-312 | OpenClaw for iOS before 2026.8.11 stores Gateway credentials as cleartext JSON in App Group UserDefaults instead of the device Keychain. Attackers with access to unencrypted device |
| CVE-2026-100582 | Deferred | 未確認 | CWE-862 | OpenClaw channel plugins (@openclaw/msteams, @openclaw/feishu, @openclaw/matrix, and @openclaw/googlechat) before 2026.8.1 do not enforce the configured channel read allowlist for |
| CVE-2026-100583 | Deferred | 未確認 | CWE-862 | OpenClaw Discord versions before 2026.7.1 contain an authorization bypass vulnerability in guild metadata read actions that allows lower-trust senders to retrieve information exclu |
| CVE-2026-100584 | Deferred | 未確認 | CWE-426 | OpenClaw is an npm-distributed agent runtime. In versions >= 2026.2.26 and < 2026.7.1, PowerShell command analysis on Windows hosts running in exec allowlist mode could approve an |
| CVE-2026-100585 | Deferred | 未確認 | CWE-862 | OpenClaw (npm package `openclaw`) before 2026.7.1 fails to enforce the owner-only authorization requirement for Claude Code permission prompts delivered through the MCP channel bri |
| CVE-2026-100586 | Deferred | 未確認 | CWE-269 | OpenClaw Codex before 2026.7.1 fails to properly enforce owner authorization when creating native conversation bindings. Non-owner channel senders with command access can create bi |
| CVE-2026-100587 | Deferred | 未確認 | CWE-862 | OpenClaw versions before 2026.7.1 fail to properly validate owner authorization in the Codex computer-use installation command. Non-owner channel senders can install arbitrary plug |
| CVE-2026-100588 | Deferred | 未確認 | CWE-863 | OpenClaw (npm package 'openclaw') before 2026.7.1 does not enforce the administrator scope requirement on browser control when it is reached through the node.invoke method, althoug |
| CVE-2026-100589 | Deferred | 未確認 | CWE-863 | OpenClaw versions before 2026.7.1 contain a sandbox bypass vulnerability in the browser tool that allows sandboxed sessions to access paired node browser actions despite allowHostC |
| CVE-2026-100590 | Deferred | 未確認 | CWE-863 | OpenClaw before 2026.7.1 contains an authorization bypass vulnerability in the /voice set command that allows non-owner external-channel senders to persist Gateway voice configurat |
| CVE-2026-100591 | Deferred | 未確認 | CWE-862 | OpenClaw is an npm-distributed agent gateway. In versions before 2026.7.1, the global Active Memory toggle mutations could omit owner checks. An authorized non-owner external-chann |
| CVE-2026-100592 | Deferred | 未確認 | CWE-862 | OpenClaw is an agent gateway distributed via npm. In versions >= 2026.4.10 and < 2026.7.1, persistent memory dreaming mutations omit owner permission checks. An authorized but non- |
| CVE-2026-100593 | Deferred | 未確認 | CWE-862 | OpenClaw (npm package `openclaw`) before 2026.7.1 does not enforce the documented owner-only requirement for persistent `/activation` policy changes in group channels. An authorize |
| CVE-2026-100594 | Deferred | 未確認 | CWE-200 | OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the /export-trajectory endpoint that allows non-owner senders to request and receive owner-only t |
| CVE-2026-100595 | Deferred | 未確認 | CWE-200 | OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the diagnostics export command that allows non-owner channel senders to access owner-only host di |
| CVE-2026-100596 | Deferred | 未確認 | CWE-862 | OpenClaw versions before 2026.7.1 fail to properly authorize non-owner users executing MCP configuration changes through /mcp set and /mcp unset commands. Attackers can persist arb |
| CVE-2026-100597 | Deferred | 未確認 | CWE-367 | OpenClaw (npm package 'openclaw') before 2026.7.1 is vulnerable to a time-of-check time-of-use race condition in OpenShell local mirror filesystem mutation operations. The remove, |
| CVE-2026-100598 | Deferred | 未確認 | CWE-346 | OpenClaw (npm package openclaw) before 2026.7.1 incorrectly binds Signal approval reactions. In affected versions, a reaction intended to resolve a structured approval request coul |
| CVE-2026-100599 | Deferred | 未確認 | CWE-78 | OpenClaw versions 2026.5.1 through 2026.7.0 fail to apply the configured exec approval path to Google Meet node commands. The googlemeet.chrome command accepts caller-supplied audi |
| CVE-2026-100600 | Awaiting Analysis | 未確認 | CWE-770 | ClawHub (the openclaw/clawhub application/backend) does not bind anonymous HTTP API requests to a trusted caller identity, so all direct anonymous API requests share a single defau |
| CVE-2026-100601 | Awaiting Analysis | 未確認 | CWE-918 | ClawHub (openclaw/clawhub) application/backend contains a server-side request forgery vulnerability in the public profile preview's image fetching. The preview accepts a user-suppl |
| CVE-2026-100602 | Deferred | 未確認 | CWE-862 | ClawHub (openclaw/clawhub application/backend) contains a missing authorization check in the changelog preview feature. A signed-in caller can invoke the public skills:generateChan |
| CVE-2026-100603 | Deferred | 未確認 | CWE-799 | ClawHub (openclaw/clawhub) application/backend contains a flaw in the skill report moderation flow: four distinct ordinary authenticated accounts can report a visible skill and tri |
| CVE-2026-100604 | Awaiting Analysis | 未確認 | CWE-863 | ClawHub (openclaw/clawhub) contains an incorrect authorization vulnerability in the ClawHub application/backend: an organization-owned skill retains the ownerUserId of its original |
| CVE-2026-100605 | Deferred | 未確認 | CWE-862 | Flowise through 3.1.4 contains missing route-level RBAC checks on chat message endpoints that allow low-privileged API keys to read and delete chat history. Attackers with valid bu |
| CVE-2026-100606 | Deferred | 未確認 | CWE-287 | Flowise through 3.1.4 (Enterprise/platform mode with SSO enabled) contains an authentication bypass in the SSO login path. When an SSO callback arrives with an email matching a use |
| CVE-2026-100607 | Deferred | 未確認 | CWE-287 | Flowise through 3.1.4 resolves SSO and local-password users solely by email without storing provider or subject identifier bindings, allowing attackers to authenticate as any exist |
| CVE-2026-100608 | Deferred | 未確認 | CWE-862 | Flowise through 3.1.4 does not enforce authorization on the BullMQ admin dashboard. When the server runs in queue mode with the dashboard enabled and not in cloud mode (MODE=queue, |
| CVE-2026-100609 | Deferred | 未確認 | CWE-639 | Flowise (npm packages `flowise` and `flowise-components`) through 3.1.4 looks up credentials by ID without filtering on the requesting user's workspace (findOneBy({ id: credentialI |
| CVE-2026-100610 | Deferred | 未確認 | CWE-639 | Flowise through 3.1.4 exposes GET /api/v1/upsert-history/:id and PATCH /api/v1/upsert-history without route-level permission checks, and the backing service performs no workspace o |
| CVE-2026-100611 | Deferred | 未確認 | CWE-269 | Capgo (capgo.app backend, versions ≤ 12.261.0) improperly restricts which roles the apikey_manager organization role may bind to newly created API keys. When an authenticated user |
| CVE-2026-100612 | Deferred | 未確認 | CWE-639 | Capgo (capgo.app) through version 12.261.0 contains an incomplete access-control fix for the public.sso_providers table. Migration 20260826100000_sso_providers_block_direct_active_ |
| CVE-2026-100613 | Deferred | 未確認 | CWE-863 | capgo.app is an over-the-air (OTA) update platform for Capacitor apps. In all versions up to and including the current release (no patch available at time of publication), the `tra |
| CVE-2026-100614 | Deferred | 未確認 | CWE-639 | Capgo before 12.244.1 contains a cross-tenant integrity vulnerability in the metadata-cleaning worker that trusts image object keys from mutable database rows without validating ow |
| CVE-2026-100615 | Deferred | 未確認 | CWE-269 | Cap-go capgo.app before 12.267.1 fails to validate target API key privilege during rotation, allowing an apikey_manager to rotate a higher-privileged org_super_admin sibling key an |
| CVE-2026-100616 | Deferred | 未確認 | CWE-863 | capgo.app is an over-the-air update platform for Capacitor apps. In all versions prior to a fix, the row-level security UPDATE policy on the public.orgs table permits an organizati |
| CVE-2026-100617 | Deferred | 未確認 | CWE-862 | Cap-go capgo.app fails to validate that principals in channel_permission_overrides belong to the organization, allowing authenticated app/org admins to grant channel permissions to |
| CVE-2026-100618 | Deferred | 未確認 | CWE-639 | Capgo (capgo.app) is affected by an authorization flaw in the app icon update path. The PUT /app/:id endpoint accepts a user-controlled `icon` value, normalizes it, and stores it i |
| CVE-2026-100619 | Deferred | 未確認 | CWE-266 | Capgo (capgo.app) blocks direct user inserts into the public.manifest table with a RESTRICTIVE row-level security policy, but that restriction can be bypassed indirectly. A princip |
| CVE-2026-100620 | Deferred | 未確認 | CWE-269 | Capgo CLI (npm package @capgo/cli) through 7.98.2 is affected by an over-permissioned service account in its Android onboarding flow. When onboarding via Google OAuth, the CLI invi |
| CVE-2026-100621 | Deferred | 未確認 | CWE-284 | Capgo (capgo.app) contains an incomplete access-control/content-lock enforcement issue affecting all versions; no patch is available at the time of publication. The `enforce_encryp |
| CVE-2026-100622 | Deferred | 未確認 | CWE-200 | capgo.app through 12.129.0 fails to verify deletion status when serving cached bundle artifacts from the public file read endpoint. Unauthenticated attackers can download deleted b |
| CVE-2026-100623 | Deferred | 未確認 | CWE-863 | Capgo (capgo.app) exposes the legacy membership table public.org_users directly through Supabase PostgREST. The table's row-level security policies "Allow org admin to insert" and |
| CVE-2026-100624 | Deferred | 未確認 | CWE-613 | Capgo.app before 12.264.5 does not enforce upload expiry or build lifecycle state in the /build/upload/:jobId TUS proxy endpoint. When a native build request is created, an upload_ |
| CVE-2026-100625 | Deferred | 未確認 | CWE-441 | Capgo (capgo.app) exposes a native build TUS upload proxy (supabase/functions/_backend/public/build/upload.ts) that authorizes a caller against a single build job identified by the |
| CVE-2026-100626 | Deferred | 未確認 | CWE-639 | capgo through 12.128.2 contains an insecure direct object reference vulnerability in the PUT /app/:appId endpoint that accepts attacker-controlled icon storage paths. Authenticated |
| CVE-2026-100627 | Deferred | 未確認 | CWE-639 | Capgo (Cap-go/capgo.app) server backend Supabase functions contain an incorrect authorization flaw in the API-key bundle promotion path. The PUT /bundle endpoint, available to "all |
| CVE-2026-100628 | Deferred | 未確認 | CWE-863 | capgo.app before 12.128.12 fails to enforce an organization's API key expiration policy when creating app-scoped API keys. In the POST /apikey endpoint, requests that supply app_id |
| CVE-2026-100629 | Deferred | 未確認 | CWE-863 | Capgo (capgo.app backend) before 12.127.5 contains an authorization flaw in the PATCH /private/role_bindings/:binding_id endpoint. The handler verifies that the newly assigned role |
| CVE-2026-100630 | Awaiting Analysis | 未確認 | CWE-79 | AVideo before 29.1.0 contains a stored cross-site scripting vulnerability in the video trailer1 field rendered unsanitized within an inline onclick JavaScript string. Attackers wit |
| CVE-2026-100631 | Awaiting Analysis | 未確認 | CWE-943 | Parse Server is an open source backend server. In versions prior to 8.6.90 and in versions from 9.0.0 prior to 9.10.1-alpha.9, the device token deduplication logic for installation |
| CVE-2026-100632 | Awaiting Analysis | 未確認 | CWE-200 | Parse Server is an open-source backend server. In versions >= 9.0.0 and < 9.10.1-alpha.8, and in versions < 8.6.89, LiveQuery evaluates the protectedFields class-level permission a |
| CVE-2026-100633 | Deferred | 未確認 | CWE-863 | SiYuan is a self-hosted personal knowledge management system. In versions 3.8.0 through 3.8.3, the MCP file tool's sensitive-path guard (util.IsForbiddenAbsPath(), invoked from res |
| CVE-2026-100634 | Deferred | 未確認 | CWE-862 | SiYuan before v3.8.4 does not validate the sender or restrict recipients in the 'siyuan-send-windows' IPC handler of the Electron main process (app/electron/main.js). The handler i |
| CVE-2026-100635 | Deferred | 未確認 | CWE-319 | SiYuan before v3.8.4 contains an authentication bypass vulnerability in the publish service where session cookies are issued without Secure or SameSite attributes over plaintext HT |
| CVE-2026-100636 | Deferred | 未確認 | CWE-22 | SiYuan versions before v3.8.4 contain a path traversal vulnerability in the exportBrowserHTML endpoint that allows authenticated administrators to write arbitrary HTML content to i |
| CVE-2026-100637 | Deferred | 未確認 | CWE-73 | SiYuan versions before v3.8.4 contain a path traversal vulnerability in the checkoutRepo endpoint that allows authenticated administrators to write JSON files outside the workspace |
| CVE-2026-100638 | Deferred | 未確認 | CWE-73 | SiYuan versions before v3.8.4 contain a path traversal vulnerability in the setNotebookIcon endpoint that allows authenticated administrators to create arbitrary directory trees an |
| CVE-2026-100639 | Deferred | 未確認 | CWE-79 | SiYuan v3.8.3 fails to HTML-escape the data-subtype attribute when generating gutter-button markup (app/src/protyle/gutter/button.ts, assigned via innerHTML in app/src/protyle/gutt |
| CVE-2026-100640 | Deferred | 未確認 | CWE-200 | SiYuan before v3.8.4 contains an authorization omission in the siyuan-get IPC handler that allows remote-kernel renderers to access native clipboard formats by invoking clipboardRe |
| CVE-2026-100641 | Deferred | 未確認 | CWE-79 | SiYuan before v3.8.4 does not HTML-escape stored flashcard block content before interpolating it into the card-manager list markup. Block content returned by /api/riff/getRiffCards |
| CVE-2026-100642 | Deferred | 未確認 | CWE-346 | SiYuan versions from v2.1.0 before v3.8.4 contain a cross-site request forgery vulnerability in the CheckAuth lock-screen pass-through branch that grants administrator access to lo |
| CVE-2026-100643 | Deferred | 未確認 | CWE-79 | SiYuan versions before v3.8.4 fail to properly escape four stored Attribute View values in textarea elements, allowing authenticated attackers to inject JavaScript by modifying fie |
| CVE-2026-100644 | Deferred | 未確認 | CWE-89 | SiYuan before v3.8.4 contains a SQL injection vulnerability in the graph query endpoint where the dailyNoteSavePath parameter is concatenated into SQL without escaping. Unauthentic |
| CVE-2026-100645 | Deferred | 未確認 | CWE-79 | SiYuan versions 3.7.0 before 3.8.4 contain a stored cross-site scripting vulnerability in gallery and kanban database renderers where field descriptions are not escaped in aria-lab |
| CVE-2026-100646 | Deferred | 未確認 | CWE-346 | SiYuan is a self-hosted personal knowledge management system. In versions up to and including 3.8.3, the kernel's authentication guards (CheckAuth in kernel/model/session.go and Is |
| CVE-2026-100647 | Analyzed | 未確認 | CWE-20 | vLLM versions before 0.29.0 contain a denial-of-service vulnerability in the cache_salt parameter accepted on OpenAI-compatible and Anthropic API endpoints, which lacks maximum len |
| CVE-2026-100648 | Analyzed | 未確認 | CWE-400 | vllm before 0.29.0 fails to enforce VLLM_MAX_AUDIO_CLIP_FILESIZE_MB limit in multimodal chat audio decoding, allowing unauthenticated clients to bypass file size restrictions. Atta |
| CVE-2026-100649 | Analyzed | 未確認 | CWE-770 | vLLM before 0.29.0 contains a resource-limit bypass vulnerability in PyNvVideoCodec decoder allocation where sampler subclass shadowing allows independent counter increments. Unaut |
| CVE-2026-100650 | Analyzed | 未確認 | CWE-400 | vLLM through 0.29.0 fetches and fully materializes remote or inline media before enforcing its documented media controls (the VLLM_MAX_AUDIO_CLIP_FILESIZE_MB compressed-audio size |
| CVE-2026-100651 | Analyzed | 未確認 | CWE-400 | vLLM before 0.29.0 fails to enforce decoder prompt-length validation on the disaggregated serving endpoint /inference/v1/generate. When the request contains a 'features' (multimoda |
| CVE-2026-100652 | Analyzed | 未確認 | CWE-20 | vLLM versions 0.22.0 through 0.23.0 fail to validate stop_token_ids against vocabulary bounds in Rust HTTP and gRPC frontends, allowing out-of-vocabulary token IDs to reach MinToke |
| CVE-2026-100653 | Analyzed | 未確認 | CWE-348 | vLLM is an inference and serving engine for large language models. In versions from 0.22.1 through 0.28.0, the operator-supplied model revision pin (--revision / --code-revision) i |
| CVE-2026-100654 | Analyzed | 未確認 | CWE-129 | vLLM before 0.29.0 accepts user-controlled stop_token_ids on the OpenAI-compatible POST /v1/completions and POST /v1/chat/completions endpoints but validates only that the values a |
| CVE-2026-100655 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected as a duplicate. | |
| CVE-2026-100656 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected as a duplicate. | |
| CVE-2026-100657 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected as a duplicate. | |
| CVE-2026-100658 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected as a duplicate. | |
| CVE-2026-100659 | Deferred | 未確認 | CWE-444 | Netty's HTTP/3 codec (io.netty:netty-codec-http3) in versions 4.2.0.Final through 4.2.17.Final does not enforce the RFC 9114 requirement that the :authority pseudo-header field and |
| CVE-2026-100660 | Deferred | 未確認 | CWE-770 | Netty's HTTP/3 codec (io.netty:netty-codec-http3) from 4.2.0.Final through 4.2.17.Final retains unbounded per-stream QPACK encoder state. QpackEncoder stores a queue and a dynamic- |
| CVE-2026-100661 | Deferred | 未確認 | CWE-400 | Netty's HTTP/3 codec (io.netty:netty-codec-http3) versions 4.2.0.Final through 4.2.17.Final contain a denial-of-service vulnerability in the QPACK prefixed-integer decoder (QpackUt |
| CVE-2026-100662 | Deferred | 未確認 | CWE-400 | Netty's HTTP/3 codec (io.netty:netty-codec-http3) versions 4.2.0.Final through 4.2.17.Final contain an uncontrolled resource consumption vulnerability in the QPACK encoder-stream i |
| CVE-2026-100663 | Deferred | 未確認 | CWE-20 | Netty's HTTP/3 codec (io.netty:netty-codec-http3) from 4.2.2.Final through 4.2.17.Final does not special-case HTTP/1 CONNECT authority-form request-targets when converting HTTP/1 m |
| CVE-2026-100664 | Deferred | 未確認 | CWE-20 | Netty's HTTP/3 codec (io.netty:netty-codec-http3) versions 4.2.2.Final through 4.2.17.Final builds the HTTP/3 :authority pseudo-header from the HTTP/1 Host header before considerin |
| CVE-2026-100665 | Deferred | 未確認 | CWE-295 | Netty versions from 4.2.11.Final before 4.2.18.Final contain an incomplete hostname verification fix in the QUIC certificate verification path when using a plain X509TrustManager. |
| CVE-2026-100666 | Deferred | 未確認 | CWE-444 | Netty's HttpServerCodec (io.netty:netty-codec-http) in versions 4.2.0.Final through 4.2.16.Final and in versions up to and including 4.1.136.Final pairs each outbound response with |
| CVE-2026-100667 | Deferred | 未確認 | CWE-304 | grav-plugin-login (the Grav CMS Login plugin) versions >= 3.8.7 and < 3.9.7 allow the two-factor authentication challenge to be bypassed for content gated by the authenticated() Tw |
| CVE-2026-100668 | Deferred | 未確認 | CWE-200 | Grav 2.0.0 through 2.0.24 contain a Twig content sandbox escape. The `array` filter (and its identical function form) is on the sandbox allowlist but is registered without the need |
| CVE-2026-100669 | Deferred | 未確認 | CWE-178 | Grav before 2.0.25 ships web server configuration samples whose access-control deny rules are matched case-sensitively. In webserver-configs/web.config (IIS), every deny rule (user |
| CVE-2026-100670 | Deferred | 未確認 | CWE-639 | Grav CMS 2.0.14 through 2.0.24 contains a privilege escalation vulnerability in the group and account blueprints. The access map is gated by a `security@: admin.super` guard that i |
| CVE-2026-100671 | Deferred | 未確認 | CWE-200 | Grav is a flat-file CMS. In versions 2.0.19 through 2.0.24 — and in 2.0.0 through 2.0.18 and 1.7.x only where content Twig has been explicitly enabled — page content authored by a |
| CVE-2026-100672 | Deferred | 未確認 | CWE-306 | The Comments plugin (getgrav/grav-plugin-comments) for Grav CMS through version 1.2.10 registers an admin handler that returns comment data as JSON without any authentication check |
| CVE-2026-100673 | Deferred | 未確認 | CWE-79 | The Grav Data Manager plugin (getgrav/grav-plugin-datamanager) versions 1.0.1 through 1.4.4 render stored data entries in the item-detail view (admin/templates/partials/item.html.t |
| CVE-2026-100674 | Deferred | 未確認 | CWE-180 | stoatchat before 0.15.5 fails to revalidate usernames after Unicode sanitization, allowing attackers to create usernames with forbidden characters by submitting Unicode letters tha |
| CVE-2026-100675 | Deferred | 未確認 | CWE-248 | stoatchat versions before 0.15.5 contain a denial of service vulnerability in the acknowledgement worker that processes mass mention messages. Authenticated users can send five cra |
| CVE-2026-100676 | Deferred | 未確認 | CWE-693 | January, the media proxy/embed service of stoatchat (stoatchat/stoatchat), before version 0.15.5 improperly resolves SVG <image href> values as local filesystem paths when a fetche |
| CVE-2026-100677 | Deferred | 未確認 | CWE-209 | stoatchat before 0.15.5 contains an account enumeration vulnerability in the login endpoint that exposes source file locations in error responses. Unauthenticated attackers can dis |
| CVE-2026-100678 | Deferred | 未確認 | CWE-307 | stoatchat before 0.15.5 fails to enforce account-level attempt limits on MFA login challenges, allowing attackers who know a password to guess TOTP codes with only IP-based rate li |
| CVE-2026-100679 | Deferred | 未確認 | CWE-639 | stoatchat before 0.15.5 fails to validate that MFA tickets belong to the authenticated user, allowing attackers to bypass MFA by using their own valid ticket with another user's se |
| CVE-2026-100680 | Deferred | 未確認 | CWE-200 | Budibase versions before 3.45.0 fail to disable external JSON reference resolution in the OpenAPI/Swagger import validator, allowing authenticated builders to read arbitrary local |
| CVE-2026-100681 | Deferred | 未確認 | CWE-918 | Budibase before 3.45.0 contains an unauthenticated server-side request forgery and credential exfiltration vulnerability in the Microsoft Teams webhook endpoint that accepts forged |
| CVE-2026-100682 | Deferred | 未確認 | CWE-22 | Budibase Server before 3.45.0 contains an arbitrary file write vulnerability in the PWA icon upload endpoint that extracts user-supplied ZIP archives without proper symlink validat |
| CVE-2026-100683 | Deferred | 未確認 | CWE-89 | Budibase (@budibase/server) before 3.45.0 builds MySQL and MSSQL column-rename DDL in packages/backend-core/src/sql/sqlTable.ts by interpolating identifiers directly into a raw que |
| CVE-2026-100684 | Deferred | 未確認 | CWE-287 | Budibase versions 3.41.0 before 3.45.0 contain an authentication bypass in the OIDC/SSO login path of @budibase/server. In sso.authenticate, when no existing user matches the incom |
| CVE-2026-100685 | Deferred | 未確認 | CWE-863 | Budibase before 3.45.0 fails to properly scope the GET /api/chat-links endpoint by workspace, allowing builders to enumerate chat identity link records across all workspaces in a t |
| CVE-2026-100686 | Deferred | 未確認 | CWE-269 | Budibase versions before 3.45.0 fail to validate per-app authorization in the POST /api/global/groups/:groupId/apps endpoint, allowing builders to assign application roles across w |
| CVE-2026-100687 | Deferred | 未確認 | CWE-200 | Budibase Server before 3.45.0 fails to redact plaintext datasource credentials before broadcasting external table updates to the Builder collaboration websocket room. Attackers wit |
| CVE-2026-100688 | Deferred | 未確認 | CWE-639 | Budibase server before 3.45.0 contains a cross-tenant information disclosure vulnerability in the GET /api/applications/:appId/appPackage endpoint that allows authenticated users t |
| CVE-2026-100689 | Awaiting Analysis | 未確認 | CWE-22 | GitPython before 3.1.62 does not validate the `path` field read from an untrusted .gitmodules file when updating submodules. While a prior fix (GHSA-hmq2-w58f-27jc) added Submodule |
| CVE-2026-100690 | Analyzed | 未確認 | CWE-59 | Hugo versions from v0.161.0 through v0.165.0 run Node.js tools (css.PostCSS, css.TailwindCSS, js.Babel) under the Node.js permission model to restrict file system reads to the proj |
| CVE-2026-100691 | Analyzed | 未確認 | CWE-79 | Hugo versions 0.75.0 through 0.165.x contain a stored cross-site scripting vulnerability: the syntax highlighter does not escape the `lineAnchors` option before passing it to Chrom |
| CVE-2026-100692 | Analyzed | 未確認 | CWE-59 | Hugo is a static site generator. In versions after v0.123.0 and before v0.166.0, Hugo's symlink confinement checks stopped at the mount root itself, so a theme or module checked in |
| CVE-2026-100693 | Analyzed | 未確認 | CWE-178 | Hugo versions from v0.162.0 before v0.166.0 contain a case-sensitive validation flaw in the security.http.urls IP-literal deny rule that allows attackers to bypass restrictions. At |
| CVE-2026-100694 | Analyzed | 未確認 | CWE-79 | Hugo is a static site generator. In versions from v0.56.0 through v0.165.x, content files mapped to the text/org media type are rendered without escaping raw HTML: Org export block |
| CVE-2026-100695 | Awaiting Analysis | 未確認 | CWE-79 | Adminer before 6.0.2 contains a cross-site scripting vulnerability where the CONNECTION_ID() database result is interpolated into JavaScript without proper escaping, allowing a mal |
| CVE-2026-100696 | Awaiting Analysis | 未確認 | CWE-918 | Adminer 4.16.0 through 6.0.1 contain a pre-authentication Server-Side Request Forgery (SSRF) vulnerability in the optional Elasticsearch driver (plugins/drivers/elastic.php), fixed |
| CVE-2026-100697 | Awaiting Analysis | 未確認 | CWE-918 | Adminer 6.0.0 through 6.0.1, when the official ClickHouse driver plugin (plugins/drivers/clickhouse.php, rewritten in 6.0.0) is loaded, is vulnerable to pre-authentication server-s |
| CVE-2026-100698 | Awaiting Analysis | 未確認 | CWE-918 | Adminer 5.5.1 through 6.0.1 improperly parses the login 'server' string in the host_port() function in adminer/include/functions.inc.php. The port capture group requires pure digit |
| CVE-2026-100699 | Awaiting Analysis | 未確認 | CWE-20 | Nodemailer is a Node.js email-sending library. In versions >= 9.1.0 and < 10.0.9, the address parser (src/addressparser) mishandles addresses whose local-part is a quoted string an |
| CVE-2026-100700 | Awaiting Analysis | 未確認 | CWE-407 | nodemailer before 10.0.6 contains a denial of service vulnerability in the addressparser free-text fallback regex pattern that exhibits quadratic backtracking behavior. Attackers c |
| CVE-2026-100701 | Awaiting Analysis | 未確認 | CWE-295 | Nodemailer versions 5.0.0 through 10.0.1 use a process-global DNS cache that is keyed only by the DNS host, while each cache entry also stores the caller-specific TLS servername. W |
| CVE-2026-100702 | Awaiting Analysis | 未確認 | CWE-674 | Nodemailer before 10.0.2 fails to properly flatten deeply nested arrays in recipient fields such as to, cc, and bcc, allowing attackers to cause stack exhaustion. Attackers can sup |
| CVE-2026-100703 | Awaiting Analysis | 未確認 | CWE-200 | Kyverno 1.16.0 through 1.19.0 registers the globalcontext.Lib CEL library in its policy environment without confining it to the policy's namespace, unlike the sibling libraries (re |
| CVE-2026-100704 | Awaiting Analysis | 未確認 | CWE-863 | Kyverno is a policy engine for Kubernetes. In versions 1.14.0 through 1.19.0, the ImageValidatingPolicy (policies.kyverno.io/v1beta1) evaluator never reads the spec.images and spec |
| CVE-2026-100705 | Awaiting Analysis | 未確認 | CWE-918 | Kyverno before 1.19.1 is vulnerable to server-side request forgery. The default egress blocklist (169.254.169.254, 169.254.169.253, metadata.google.internal, 127.0.0.0/8, ::1/128) |
| CVE-2026-100706 | Awaiting Analysis | 未確認 | CWE-441 | kyverno before 1.19.1 fails to properly validate URL-encoded path segments in Policy apiCall urlPath, allowing namespace tenants to bypass the per-namespace clamp and create object |
| CVE-2026-100707 | Awaiting Analysis | 未確認 | CWE-22 | Kyverno before 1.19.1 contains a namespace isolation bypass in the apiCall context entry of namespaced Policy resources due to inconsistent path interpretation between validation a |
| CVE-2026-100708 | Deferred | 未確認 | CWE-200 | Froxlor before 2.3.13 returns the ssl_key_file column — which stores the raw PEM TLS private-key content — verbatim in the JSON responses of the Certificates.get and Certificates.l |
| CVE-2026-100709 | Deferred | 未確認 | CWE-287 | Froxlor through 2.3.10 stores only a numeric user ID in remembered-2FA tokens (panel_2fa_tokens) without recording the account namespace, and the remembered-token lookup during log |
| CVE-2026-100710 | Deferred | 未確認 | CWE-200 | Froxlor through 2.3.10 does not filter sensitive columns from API responses: Domains::get(), Domains::listing(), SubDomains::get(), and the admin branch of SubDomains::listing() pe |
| CVE-2026-100711 | Deferred | 未確認 | CWE-613 | froxlor versions before 2.3.12 fail to invalidate existing panel sessions, API keys, and 2FA trust cookies when a user password is changed. Attackers holding hijacked sessions, val |
| CVE-2026-100712 | Deferred | 未確認 | CWE-352 | froxlor through 2.3.10 disables a user's two-factor authentication immediately upon an unauthenticated-triggerable GET request to the 2FA management page (e.g. /customer_index.php? |
| CVE-2026-100713 | Deferred | 未確認 | CWE-367 | Froxlor 2.3.10 and earlier contain a time-of-check time-of-use (TOCTOU) race condition in the SSH key synchronization cron (lib/Froxlor/Cron/System/SshKeys.php, SshKeys::generateFi |
| CVE-2026-100714 | Deferred | 未確認 | CWE-88 | Froxlor before 2.3.12 does not restrict or escape the system.letsencryptchallengepath setting: unlike sibling settings hardened in GHSA-33mp, the field has no string_regexp or requ |
| CVE-2026-100715 | Deferred | 未確認 | CWE-59 | Froxlor through 2.3.10 is vulnerable to arbitrary file deletion via symlink following in the FTP data deletion cron task. Cron task 8 (deleteFtpData), queued when an FTP account is |
| CVE-2026-100716 | Deferred | 未確認 | CWE-59 | Froxlor is a server administration panel. In versions 2.3.10 and earlier, the customer data-export (DataDump) cron fails to validate intermediate path components of the export dest |
| CVE-2026-100717 | Deferred | 未確認 | CWE-93 | froxlor is a server administration panel. In versions 2.3.10 and earlier, Validate::validateUrl rejects carriage return and line feed characters only in the path, query and fragmen |
| CVE-2026-100718 | Deferred | 未確認 | CWE-276 | Froxlor through 2.3.10 does not enforce the mail.allow_external_domains policy in the EmailSender.add API command. When an administrator has enabled the allowed-sender feature but |
| CVE-2026-100719 | Deferred | 未確認 | CWE-200 | Froxlor versions before 2.3.12 contain a credential disclosure vulnerability in the DirProtections.listing API command that returns htpasswd password hashes. Authenticated API user |
| CVE-2026-100720 | Deferred | 未確認 | CWE-79 | Froxlor 2.0.0 through 2.3.10 is vulnerable to stored cross-site scripting. When a customer (the lowest-privileged authenticated role) uploads an SSL certificate for one of their ow |
| CVE-2026-100721 | Deferred | 未確認 | CWE-863 | vm2 before 3.12.2 contains an authorization bypass in the NodeVM external-module resolver. When an embedder configures `require.external` with a custom resolver (and `context: 'hos |
| CVE-2026-100722 | Deferred | 未確認 | CWE-248 | vm2 before 3.12.2 does not apply host-side Promise rejection handling in the sandbox-to-host construct trap. In BaseHandler, the apply trap calls markHostPromiseHandled() on the re |
| CVE-2026-100723 | Deferred | 未確認 | CWE-200 | vm2 before 3.12.2 does not apply its Buffer backing-store ownership invariant (byteOffset === 0 and buffer.byteLength === length) to Buffers returned from host builtin modules. Whe |
| CVE-2026-100724 | Deferred | 未確認 | CWE-444 | http4k (Maven package org.http4k:http4k-core) before 6.49.0.0, 5.42.0.0 and 4.51.0.0 uses substring (Contains) matching on the Host header by default in reverseProxy() and reverseP |
| CVE-2026-100725 | Deferred | 未確認 | CWE-200 | http4k (Maven artifact org.http4k:http4k-core) before 6.48.0.0, 5.42.0.0, and 4.51.0.0 ships a BasicCookieStorage (client-side cookie store used by ClientFilters.Cookies) that does |
| CVE-2026-100739 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file viewresult.php. |
| CVE-2026-100740 | Deferred | 未確認 | CWE-119, CWE-787 | A vulnerability was detected in D-Link DIR-895L A1_102b07. Impacted is the function tunnel_set_params of the file tunnel.c of the component L2TP Control Channel Parser. Performing |
| CVE-2026-100741 | Awaiting Analysis | 未確認 | CWE-95 | Eval injection in the JScript event-script dispatcher in Progressive Robot Ltd's hMailServer, versions 6.0.0 through 6.3.3 on Windows, allows a remote, unauthenticated attacker to |
| CVE-2026-100744 | Deferred | 未確認 | CWE-862, CWE-863 | A flaw has been found in coollabsio Coolify up to 4.1.2. The affected element is an unknown function of the file app/Http/Middleware/CanUpdateResource.php of the component Route-Le |
| CVE-2026-100745 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability has been found in Edimax BR-6428nC 1.16. The impacted element is an unknown function of the file /goform/formWizSurvey of the component Wireless Wizard Handler. The |
| CVE-2026-100746 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was found in coollabsio Coolify up to 4.1.0. This affects the function Github::redirect of the file /webhooks/source/github/redirect of the component GitHub App Set |
| CVE-2026-100747 | Analyzed | 未確認 | CWE-352 | Joomla Extension - svenbluege.de - CSRF in image upload in Event Gallery extension < 6.5.0 - Due to lack of an CSRF token check, a third-party site can upload files to an event and |
| CVE-2026-100748 | Analyzed | 未確認 | CWE-352 | Joomla Extension - svenbluege.de - CSRF in various cart actions in Event Gallery extension < 6.5.0 |
| CVE-2026-100749 | Undergoing Analysis | 未確認 | CWE-352 | Joomla Extension - svenbluege.de - CSRF in backend cleanup actions in Event Gallery extension < 6.5.0 - Only orphaned file entries and shopping carts that are older than 30 days wi |
| CVE-2026-100750 | Undergoing Analysis | 未確認 | CWE-918 | Joomla Extension - regularlabs.com - LFI / SSRF in Modules Anywhere 1.5.0 - 9.0.5 for Joomla - Modules Anywhere Pro lets additional attributes on a module tag replace arbitrary par |
| CVE-2026-100751 | Undergoing Analysis | 未確認 | CWE-79 | Joomla Extension - regularlabs.com - Privileged stored XSS via data-rlta-url attributes in Tabs & Accordions (Pro) 2.3.0 - 3.1.0 - Tabs & Accordions Pro accepts a url option for an |
| CVE-2026-100752 | Undergoing Analysis | 未確認 | CWE-89 | Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Real Estate Manager (Free) < 6.7.9 - site/realestatemanager.php builds the ORDER BY clause of three separate fron |
| CVE-2026-100753 | Undergoing Analysis | 未確認 | CWE-79 | Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Real Estate Manager (Free) < 6.7.9 - The public property-detail page’s “leave a review” form repopulates its ti |
| CVE-2026-100756 | Analyzed | 未確認 | CWE-119 | Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Fir |
| CVE-2026-100757 | Analyzed | 未確認 | CWE-416 | Use-after-free in the Widget component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, |
| CVE-2026-100758 | Analyzed | 未確認 | CWE-284 | Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR |
| CVE-2026-100759 | Analyzed | 未確認 | CWE-457 | Uninitialized memory in the Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157 |
| CVE-2026-100760 | Analyzed | 未確認 | CWE-693 | Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. |
| CVE-2026-100761 | Analyzed | 未確認 | CWE-416 | Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. |
| CVE-2026-100762 | Analyzed | 未確認 | CWE-416 | Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 15 |
| CVE-2026-100763 | Analyzed | 未確認 | CWE-119 | Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. |
| CVE-2026-100764 | Analyzed | 未確認 | CWE-119 | Privilege escalation due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. |
| CVE-2026-100765 | Analyzed | 未確認 | CWE-416 | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. |
| CVE-2026-100766 | Analyzed | 未確認 | CWE-200 | Information disclosure in the Networking: JAR component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Fir |
| CVE-2026-100767 | Analyzed | 未確認 | CWE-416 | Use-after-free in the Networking: Cache component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox E |
| CVE-2026-100768 | Analyzed | 未確認 | CWE-416 | Use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. |
| CVE-2026-100769 | Analyzed | 未確認 | CWE-416 | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and |
| CVE-2026-100770 | Analyzed | 未確認 | CWE-416 | Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 15 |
| CVE-2026-100771 | Analyzed | 未確認 | CWE-758 | Undefined behavior in the DOM: Streams component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ES |
| CVE-2026-100772 | Analyzed | 未確認 | CWE-416 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefo |
| CVE-2026-100773 | Analyzed | 未確認 | CWE-416 | Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox |
| CVE-2026-100774 | Analyzed | 未確認 | CWE-416 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ES |
| CVE-2026-100775 | Analyzed | 未確認 | CWE-693 | Sandbox escape in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42 |
| CVE-2026-100776 | Analyzed | 未確認 | CWE-416 | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and |
| CVE-2026-100777 | Analyzed | 未確認 | CWE-416 | Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox |
| CVE-2026-100778 | Analyzed | 未確認 | CWE-416 | Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, F |
| CVE-2026-100779 | Analyzed | 未確認 | CWE-416 | Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, an |
| CVE-2026-100780 | Analyzed | 未確認 | CWE-416 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ES |
| CVE-2026-100781 | Analyzed | 未確認 | CWE-119 | Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Th |
| CVE-2026-100782 | Analyzed | 未確認 | CWE-119 | Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunder |
| CVE-2026-100783 | Analyzed | 未確認 | CWE-457 | Uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox E |
| CVE-2026-100784 | Analyzed | 未確認 | CWE-416 | Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Fire |
| CVE-2026-100785 | Analyzed | 未確認 | CWE-416 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ES |
| CVE-2026-100786 | Analyzed | 未確認 | CWE-416 | Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 1 |
| CVE-2026-100787 | Analyzed | 未確認 | CWE-20 | Sandbox escape in the XUL component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. |
| CVE-2026-100788 | Analyzed | 未確認 | CWE-824 | Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, an |
| CVE-2026-100789 | Analyzed | 未確認 | CWE-416 | Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox |
| CVE-2026-100790 | Analyzed | 未確認 | CWE-416 | Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, an |
| CVE-2026-100791 | Analyzed | 未確認 | CWE-416 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ES |
| CVE-2026-100792 | Analyzed | 未確認 | CWE-843 | JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, |
| CVE-2026-100793 | Analyzed | 未確認 | CWE-843 | JIT miscompilation in the JavaScript Engine component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. |
| CVE-2026-100794 | Analyzed | 未確認 | CWE-119 | Sandbox escape due to incorrect boundary conditions in the Internationalization component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, T |
| CVE-2026-100795 | Analyzed | 未確認 | CWE-770 | Denial-of-service in the Networking component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. |
| CVE-2026-100796 | Analyzed | 未確認 | CWE-416 | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. |
| CVE-2026-100797 | Analyzed | 未確認 | CWE-416 | Privilege escalation due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird |
| CVE-2026-100798 | Analyzed | 未確認 | CWE-325 | Cryptography misuse in Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. |
| CVE-2026-100799 | Analyzed | 未確認 | CWE-457 | Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. |
| CVE-2026-100800 | Analyzed | 未確認 | CWE-416 | Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157 |
| CVE-2026-100801 | Analyzed | 未確認 | CWE-269 | Privilege escalation in the DLL Services component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Fire |
| CVE-2026-100802 | Analyzed | 未確認 | CWE-457 | Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. |
| CVE-2026-100803 | Analyzed | 未確認 | CWE-346 | Same-origin policy bypass in the WebExtensions component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Fi |
| CVE-2026-100804 | Analyzed | 未確認 | CWE-416 | Sandbox escape due to use-after-free in the Preferences: Backend component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. |
| CVE-2026-100805 | Analyzed | 未確認 | CWE-362, CWE-416 | Race condition, use-after-free in the Audio/Video component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. |
| CVE-2026-100806 | Analyzed | 未確認 | CWE-457 | Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. |
| CVE-2026-100807 | Analyzed | 未確認 | CWE-269 | Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, |
| CVE-2026-100808 | Analyzed | 未確認 | CWE-693 | Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. |
| CVE-2026-100809 | Analyzed | 未確認 | CWE-346 | Same-origin policy bypass in the DevTools component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. |
| CVE-2026-100810 | Analyzed | 未確認 | CWE-200 | Other issue in the DevTools component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. |
| CVE-2026-100811 | Analyzed | 未確認 | CWE-416 | Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, F |
| CVE-2026-100812 | Analyzed | 未確認 | CWE-770 | Denial-of-service in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. |
| CVE-2026-100813 | Analyzed | 未確認 | CWE-763 | Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. |
| CVE-2026-100814 | Analyzed | 未確認 | CWE-119 | Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. |
| CVE-2026-100815 | Analyzed | 未確認 | CWE-416 | Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. |
| CVE-2026-100816 | Analyzed | 未確認 | CWE-346 | Site isolation issue in the DOM: Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. |
| CVE-2026-100817 | Analyzed | 未確認 | Other issue in the JavaScript: WebAssembly component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. | |
| CVE-2026-100818 | Analyzed | 未確認 | CWE-416 | Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefo |
| CVE-2026-100819 | Analyzed | 未確認 | CWE-119 | Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153. |
| CVE-2026-100820 | Analyzed | 未確認 | CWE-269 | Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firef |
| CVE-2026-100821 | Analyzed | 未確認 | CWE-346 | Site isolation issue in the Panning and Zooming component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, F |
| CVE-2026-100822 | Analyzed | 未確認 | CWE-451 | Spoofing issue in the Networking: HTTP component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. |
| CVE-2026-100823 | Analyzed | 未確認 | CWE-451 | Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 157. |
| CVE-2026-100824 | Analyzed | 未確認 | CWE-269 | Privilege escalation in the Places component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. |
| CVE-2026-100825 | Analyzed | 未確認 | CWE-416 | Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. |
| CVE-2026-100826 | Analyzed | 未確認 | CWE-770 | Denial-of-service in the Storage: StorageManager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. |
| CVE-2026-100828 | Analyzed | 未確認 | CWE-693 | Mitigation bypass in the Bookmarks & History component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. |
| CVE-2026-100829 | Analyzed | 未確認 | CWE-693 | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. |
| CVE-2026-100830 | Analyzed | 未確認 | CWE-346 | Mitigation bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. |
| CVE-2026-100831 | Analyzed | 未確認 | CWE-416 | Use-after-free in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. |
| CVE-2026-100832 | Analyzed | 未確認 | CWE-416 | Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 140.17, Thunderbird 153.4, Firefox ESR 115.42, and Firefox ESR 14 |
| CVE-2026-100833 | Deferred | 未確認 | CWE-20 | Contrast (edgelesssys/contrast) versions 1.14.0 before 1.23.1 generate runtime policies that fail to detect all container image substitutions. A bad rebase during a Kata Containers |
| CVE-2026-100834 | Deferred | 未確認 | CWE-294 | http4k's Digest authentication module (org.http4k:http4k-security-digest) before versions 6.48.0.0, 5.42.0.0 and 4.51.0.0 defaults the nonceVerifier parameter of ServerFilters.Dige |
| CVE-2026-100835 | Deferred | 未確認 | CWE-295 | Contrast before 1.16.0 is susceptible to remote attestation relay attacks. Contrast accepted any TEE attestation report that verified correctly and contained the expected firmware |
| CVE-2026-100836 | Deferred | 未確認 | CWE-129 | Contrast through 1.20.0 contains a panic vulnerability in the transit-engine endpoint's ciphertextContainer.UnmarshalJSON function that fails to validate decoded ciphertext length |
| CVE-2026-100837 | Deferred | 未確認 | CWE-1289 | Contrast (Edgeless Systems) through 1.20.0 performs unanchored suffix matching when selecting per-registry configuration in the imagepuller. Config.registryFor strips a single trai |
| CVE-2026-100838 | Deferred | 未確認 | CWE-59 | Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.19.1, the Kata agent policies generated by the Contrast CLI contained a flaw in the CopyFile verif |
| CVE-2026-100839 | Deferred | 未確認 | CWE-94 | Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.18.0, the guest kernel's ACPI/AML handling is vulnerable to an AML injection attack ("BadAML"). AC |
| CVE-2026-100840 | Analyzed | 未確認 | CWE-95 | MONAI through 1.6.0 contains a remote code execution vulnerability in the bundle configuration engine that resolves _target_ values to arbitrary importable callables without an all |
| CVE-2026-100841 | Analyzed | 未確認 | CWE-502 | In MONAI 1.6.0, PersistentDataset (monai/data/dataset.py) explicitly rejects the combination track_meta=True with weights_only=True, forcing users who cache MetaTensors (the defaul |
| CVE-2026-100842 | Analyzed | 未確認 | CWE-95 | MONAI through 1.6.0 contains an eval injection vulnerability in _get_fake_spatial_shape() in monai/bundle/scripts.py. The function validates shape expressions with a helper that wa |
| CVE-2026-100843 | Modified | 未確認 | CWE-502 | MONAI versions before 1.6.0 contain a remote code execution vulnerability in the algo_from_pickle() function due to unsafe pickle.loads() deserialization in monai/auto3dseg/utils.p |
| CVE-2026-100844 | Analyzed | 未確認 | CWE-78 | MONAI before 1.6.0 is vulnerable to OS command injection in the nnUNetV2Runner component (monai.apps.nnunet.nnunetv2_runner). User-controlled values taken from the YAML configurati |
| CVE-2026-100845 | Analyzed | 未確認 | CWE-502 | MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that unconditionally uses numpy.load with allow_pickle=True when loading .npy and .npz |
| CVE-2026-100846 | Analyzed | 未確認 | CWE-502 | MONAI before 1.5.2 contains a deserialization of untrusted data vulnerability in the algo_from_pickle function in monai/auto3dseg/utils.py. The function reads a .pkl file and passe |
| CVE-2026-100847 | Deferred | 未確認 | CWE-89 | AzuraCast before 0.23.8 contains a DQL injection vulnerability in the sortOrder API parameter of AbstractSearchableListAction.php. Attackers can inject arbitrary DQL expressions th |
| CVE-2026-100848 | Deferred | 未確認 | CWE-918 | AzuraCast (Composer package azuracast/azuracast) before 0.23.8 validates a station's "Remote Relay" URL only for URL syntax and an http/https scheme (Utilities\Urls::parseUserUrl, |
| CVE-2026-100849 | Deferred | 未確認 | CWE-918 | AzuraCast is a self-hosted web radio management suite. In AzuraCast before 0.23.8, the station webhook URL validation in AbstractConnector::getValidUrl() (backend/src/Webhook/Conne |
| CVE-2026-100850 | Deferred | 未確認 | CWE-918 | AzuraCast before 0.23.8 contains a server-side request forgery and local file read vulnerability in the AutoDJ remote playlist fetch (backend/src/Radio/AutoDJ/QueueBuilder.php, get |
| CVE-2026-100851 | Deferred | 未確認 | CWE-200 | AzuraCast before 0.23.8 contains a broken access control vulnerability in the GET /api/station/{id}/vue/profile endpoint that allows authenticated users with only View Station Page |
| CVE-2026-100852 | Deferred | 未確認 | CWE-78 | AzuraCast before 0.23.8 contains a command injection vulnerability in the Liquidsoap config generation for live recording that fails to quote the streamer username in process.run c |
| CVE-2026-100853 | Deferred | 未確認 | CWE-862 | In AzuraCast before 0.23.8, the public On-Demand download endpoint fails to verify playlist-level access controls, allowing unauthenticated users to download media files excluded f |
| CVE-2026-100854 | Deferred | 未確認 | CWE-862 | AzuraCast before 0.23.6 lacks RequireInternalConnection middleware on the Liquidsoap API endpoint and incorrectly derives the AutoDJ flag from header presence rather than validated |
| CVE-2026-100855 | Deferred | 未確認 | CWE-862 | AzuraCast before 0.23.6 contains a missing permission check vulnerability in the GET /api/station/{station_id}/file/{id}/play endpoint that allows authenticated users to download m |
| CVE-2026-100856 | Deferred | 未確認 | CWE-94 | AzuraCast before 0.23.6 contains a code injection vulnerability in the remote relay password field due to incomplete migration from the vulnerable cleanUpString method to toRawStri |
| CVE-2026-100857 | Deferred | 未確認 | CWE-94 | AzuraCast before 0.23.4 contains a code injection vulnerability in the ConfigWriter::cleanUpString() method that fails to sanitize Liquidsoap string interpolation sequences, allowi |
| CVE-2026-100858 | Deferred | 未確認 | CWE-918 | heym before 0.0.109 contains a server-side request forgery vulnerability in the Slack, Discord, and Crawler workflow nodes. These nodes issue HTTP requests to URLs taken from user- |
| CVE-2026-100859 | Deferred | 未確認 | CWE-918 | Heym before 0.0.106 contains a credential exfiltration vulnerability in the POST /api/credentials/test endpoint that allows collaborators with shared credential access to exfiltrat |
| CVE-2026-100860 | Deferred | 未確認 | CWE-636 | heym before 0.0.105 does not act on the result of the credential authorization lookup in the Redis workflow node (backend/app/services/node_execution/nodes/redis_node.py). When _ge |
| CVE-2026-100861 | Deferred | 未確認 | CWE-918 | heym before 0.0.105 fails to apply egress guards to integration services that use credential-supplied base URLs, allowing authenticated users to bypass SSRF protections. Attackers |
| CVE-2026-100862 | Deferred | 未確認 | CWE-312 | heym, a workflow automation platform, stores and returns multiple capability secrets in plaintext in versions prior to 0.0.91. Affected secrets include webhook header-auth values ( |
| CVE-2026-100863 | Deferred | 未確認 | CWE-918 | Heym versions 0.0.90 and earlier contain two server-side request forgery (SSRF) egress gaps, both remediated in app/services/ssrf_guard.py in 0.0.91. First, the LLM image-edit inpu |
| CVE-2026-100864 | Deferred | 未確認 | CWE-94 | heym before 0.0.91 contains a sandbox escape vulnerability in the expression engine's DotList map/filter and fallback resolver that allows authenticated users to execute arbitrary |
| CVE-2026-100865 | Deferred | 未確認 | CWE-94 | Heym before 0.0.53 evaluates workflow condition expressions using Python's eval() with insufficient sandboxing in the workflow executor service. Authenticated users can edit workfl |
| CVE-2026-100866 | Deferred | 未確認 | CWE-150 | onefetch through 2.28.1 writes repository information field values to the terminal without removing control characters, allowing terminal escape sequence injection. Attackers can e |
| CVE-2026-100867 | Deferred | 未確認 | CWE-150 | spaceship-prompt through 4.22.5 fails to sanitize control characters from project manifest version fields before rendering them in the zsh prompt. Attackers can embed ANSI/OSC esca |
| CVE-2026-100868 | Deferred | 未確認 | CWE-1327 | Penpot before 2.18.0 binds the MCP server plugin WebSocket bridge to all network interfaces without authentication in single-user mode. Unauthenticated attackers on adjacent networ |
| CVE-2026-100869 | Deferred | 未確認 | CWE-863 | Sylius versions before 2.1.16 and 2.2.9 fail to restrict payment request actions in the Shop API endpoint, allowing customers to trigger refunds on completed orders. Attackers with |
| CVE-2026-100870 | Deferred | 未確認 | CWE-640 | Sylius versions before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 build administrator password-reset links using the request Host header without validation, allowing unauthentica |
| CVE-2026-100871 | Deferred | 未確認 | CWE-287 | Sylius versions before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 fail to include firewall identification in JWT tokens issued by separate Admin and Shop API endpoints. Attackers |
| CVE-2026-100872 | Deferred | 未確認 | CWE-345 | Sylius versions before 2.1.16 and 2.2.9 fail to validate payment amounts during cart recalculation, allowing unauthenticated attackers to modify order totals after gateway transact |
| CVE-2026-100873 | Deferred | 未確認 | CWE-352, CWE-862 | A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. The impacted element is an unknown function. The manipulatio |
| CVE-2026-100874 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This affects an unknown function of the file addnewstudent.php. Thi |
| CVE-2026-100875 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file updatedetails |
| CVE-2026-100876 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected is an unknown function of the file loginlinkstudent.ph |
| CVE-2026-100877 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected by this vulnerability is an unknown functionality |
| CVE-2026-100878 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was identified in zhistaredu StarTraining up to 3.8.1. Affected by this issue is the function SysUser.isAdmin of the file edu-common/src/main/java/com/edu/common/co |
| CVE-2026-100879 | Deferred | 未確認 | CWE-862, CWE-863 | A security flaw has been discovered in zhistaredu StarTraining up to 3.8.1. This affects the function checkRoleAllowed of the file SysRoleServiceImpl.java of the component dataScop |
| CVE-2026-100880 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in zhistaredu StarTraining up to 3.8.1. This vulnerability affects unknown code of the file du-common/src/main/java/com/edu/common/utils/file/MimeTyp |
| CVE-2026-100881 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in zhistaredu StarTraining up to 3.8.1. This issue affects some unknown processing of the file application.yml. Such manipulation of the |
| CVE-2026-100882 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in Krayin laravel-crm up to 2.2.5. Impacted is an unknown function of the file packages/Webkul/Admin/src/Resources/views/components/layouts/index.blade |
| CVE-2026-100883 | Deferred | 未確認 | CWE-266, CWE-284 | A flaw has been found in Krayin laravel-crm up to 2.2.5. The affected element is an unknown function of the file packages/Webkul/Admin/src/Config/acl.php. Executing a manipulation |
| CVE-2026-100884 | Deferred | 未確認 | CWE-99 | A vulnerability has been found in Krayin laravel-crm up to 2.2.5. The impacted element is the function Storage::download of the file packages/Webkul/Admin/src/Config/acl.php of the |
| CVE-2026-100885 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was found in Krayin laravel-crm up to 2.2.4. This affects an unknown function of the file packages/Webkul/Installer/src/Http/Middleware/CanInstall.php of the compon |
| CVE-2026-100886 | Deferred | 未確認 | CWE-287 | A vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4-build202604241011. The affected element is an unknown function of the component Debug Service. Such |
| CVE-2026-100887 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in amirsanni Mini-Inventory-and-Sales-Management-System up to 81bf0b55f5933f3b0dbb1583204a612e06605b95. The impacted element is the function ord |
| CVE-2026-100888 | Deferred | 未確認 | CWE-119, CWE-787 | A weakness has been identified in Trusted Domain Project OpenDKIM up to 2.11.0. This affects the function dkim_canon_selecthdrs of the file libopendkim/dkim-canon.c of the componen |
| CVE-2026-100889 | Deferred | 未確認 | CWE-189, CWE-193 | A vulnerability was detected in Trusted Domain Project OpenDKIM up to 2.11.0. Affected is the function dkim_qp_decode of the file util.c of the component Decoder. The manipulation |
| CVE-2026-100890 | Awaiting Analysis | 未確認 | CWE-404, CWE-476 | A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarc_spf_ipv6_explode in the library libopendmarc/opendma |
| CVE-2026-100891 | Awaiting Analysis | 未確認 | CWE-172 | A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarc_policy_query_dmarc in the library libopendmarc/open |
| CVE-2026-100892 | Deferred | 未確認 | CWE-119 | A vulnerability was found in aligungr UERANSIM up to 3.3.0. This affects the function ULInformationTransfer of the file src/gnb/rrc/handler.cpp of the component nr-gnb. Performing |
| CVE-2026-100893 | Deferred | 未確認 | CWE-918 | A vulnerability was determined in Privoce VoceChat Server up to 0.5.36. This vulnerability affects the function open_graph::fetch of the file src/api/resource.rs of the component o |
| CVE-2026-100894 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This issue affects some unknown processing of the file upd |
| CVE-2026-100895 | Deferred | 未確認 | CWE-404, CWE-476 | A security flaw has been discovered in Trusted Domain Project OpenARC up to 1.0.0.Beta1. Impacted is the function arc_parse_canon_t in the library libopenarc/arc-canon.c of the com |
| CVE-2026-100896 | Deferred | 未確認 | CWE-77, CWE-78 | A weakness has been identified in TOTOLINK N150RT 3.4.0-B20201030. The affected element is the function system of the file /boafrm/formWlSiteSurvey of the component Web Management |
| CVE-2026-100897 | Deferred | 未確認 | CWE-285, CWE-639 | A security vulnerability has been detected in fuzui StudentInfo up to fcc42a639ec7cef620651bfd0f07ebb660529e3f. The impacted element is an unknown function of the file /StudentInfo |
| CVE-2026-100898 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/2.0.0-beta1. This affects the function whereRaw of the file app/Filament/Widgets/Timesheet/Ac |
| CVE-2026-100899 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1. This impacts the function whereRaw of the file app/Filament/Widgets/Timesheet/MonthlyR |
| CVE-2026-100900 | Deferred | 未確認 | CWE-918 | A vulnerability has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1. Affected is the function updateJiraProjects of the file /jira-import of the c |
| CVE-2026-100901 | Deferred | 未確認 | CWE-918 | A vulnerability was found in athlon1600 youtube-downloader up to 4.0.1. Affected by this vulnerability is the function stream of the file public/stream.php. The manipulation of the |
| CVE-2026-100902 | Deferred | 未確認 | CWE-1286, CWE-20 | A vulnerability was determined in Barco ClickShare CX-20 Gen2 up to 02.26.00.0007. Affected by this issue is some unknown functionality of the file /wallpaper of the component Wall |
| CVE-2026-100903 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was identified in ООО НПО Ритм GEOritm up to 2.45.1. This affects an unknown part of the file /restapi/objects/obj-groups of the component REST API. Such manipulati |
| CVE-2026-100904 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in amirsanni mini-inventory-and-sales-management-system up to 81bf0b55f5933f3b0dbb1583204a612e06605b95. Impacted is an unknown function o |
| CVE-2026-100906 | Deferred | 未確認 | CWE-200, CWE-284 | A vulnerability was detected in Eyeplus 57.0.0.0308. The affected element is the function GetUsers of the file /onvif/Device of the component ONVIF. The manipulation results in inf |
| CVE-2026-100907 | Deferred | 未確認 | CWE-200, CWE-284 | A flaw has been found in Eyeplus 57.0.0.0308. The impacted element is an unknown function of the file /snapshot of the component p2pcam Service. This manipulation causes informatio |
| CVE-2026-100908 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability has been found in Eyeplus 57.0.0.0308. This affects an unknown function of the component p2pcam HTTP Parser. Such manipulation leads to stack-based buffer overflow. |
| CVE-2026-100909 | Deferred | 未確認 | CWE-918 | A vulnerability was found in OctoberCMS up to 4.1.19/4.2.25/4.3.4. The impacted element is the function getSourcePathForResize of the file modules/system/classes/ResizeImages.php. |
| CVE-2026-101000 | Deferred | 未確認 | CWE-862, CWE-863 | A vulnerability was determined in Netcore NBR100V2 1.3.240614.030928. This affects the function uci.apply of the file /usr/share/rpcd/acl.d/unauthenticated.json of the component AC |
| CVE-2026-101001 | Awaiting Analysis | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function eval of the file /www/cgi-bin/network_tools of the component Web Management Interfac |
| CVE-2026-101002 | Deferred | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. Affected is the function system of the file /usr/bin/network_tools of the component Tools Ping Handler. P |
| CVE-2026-101003 | Deferred | 未確認 | CWE-119, CWE-121 | A weakness has been identified in Cesanta Mongoose up to 7.21. Affected by this vulnerability is the function fn of the file tutorials/mqtt/mqtt-server/main.c of the component MQTT |
| CVE-2026-101004 | Deferred | 未確認 | CWE-287, CWE-306 | A security vulnerability has been detected in notionnext-org NotionNext up to 4.10.10. Affected by this issue is the function cleanCache of the file pages/api/cache.js of the compo |
| CVE-2026-101005 | Deferred | 未確認 | CWE-918 | A vulnerability was detected in October CMS up to 4.3.4. This affects the function validateExternalImageHost of the file System/Classes/ResizeImages.php of the component SSRF Prote |
| CVE-2026-101006 | Deferred | 未確認 | CWE-285, CWE-863 | A flaw has been found in Frappe HR up to 16.15.0. This vulnerability affects the function get_expense_claims/get_shift_requests/get_attendance_requests of the file hrms/api/__init_ |
| CVE-2026-101007 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability has been found in aaPanel BaoTa up to 11.8.0. This issue affects the function InputSql of the file class/database.py of the component Database Backup Handler. Such |
| CVE-2026-101008 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was found in aaPanel BaoTa up to 11.8.0. Impacted is the function merge_split_file of the file /www/server/panel/class/files.py of the component File Merge Handler. |
| CVE-2026-101009 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was determined in aaPanel BaoTa up to 11.8.0. The affected element is the function panelTask.bt_task._unzip of the file /www/server/panel/class/panelTask.py of the |
| CVE-2026-101010 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in aaPanel BaoTa up to 11.8.0. The impacted element is the function getData of the file /www/server/panel/class/data.py. The manipulation of the argu |
| CVE-2026-101011 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in aaPanel BaoTa up to 11.8.0. This affects the function get_domain_status of the file /www/server/panel/mod/project/domain/domainMod.py of the |
| CVE-2026-101012 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file makeresult.ph |
| CVE-2026-101013 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected is an unknown function of the file up |
| CVE-2026-101014 | Awaiting Analysis | 未確認 | CWE-189, CWE-193 | A vulnerability was detected in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarc_util_cleanup in the library libopendmarc/open |
| CVE-2026-101015 | Awaiting Analysis | 未確認 | CWE-1289, CWE-20 | A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is some unknown functionality of the file policy.c of the component Domain Handler. Ex |
| CVE-2026-101016 | Awaiting Analysis | 未確認 | CWE-755 | A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarc_policy_parse_dmarc in the library libopendmarc/opendmarc_policy. |
| CVE-2026-101017 | Awaiting Analysis | 未確認 | CWE-755 | A vulnerability was found in Trusted Domain Project OpenDMARC up to 1.4.2. This vulnerability affects the function strcasecmp in the library libopendmarc/opendmarc_policy.c. The ma |
| CVE-2026-101018 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in dayrui XunruiCMS up to 4.7.2. This issue affects the function group_all_edit of the file dayrui/App/Member/Controllers/Admin/Home.php of the compo |
| CVE-2026-101032 | Deferred | 未確認 | CWE-78 | navi through 2.24.0 fails to properly escape cheatsheet variable values when substituting them into shell commands. Attackers can inject shell metacharacters through crafted file n |
| CVE-2026-101033 | Deferred | 未確認 | CWE-639 | KitchenOwl through 0.7.10 fails to verify that category IDs belong to the caller's household in expense and item operations. Authenticated attackers can enumerate category IDs from |
| CVE-2026-101035 | Deferred | 未確認 | CWE-248 | A flaw has been found in aligungr UERANSIM up to 3.3.0. This affects the function DecodePlainMmMessage in the library src/lib/nas/encode.cpp of the component nr-gnb. Executing a ma |
| CVE-2026-101036 | Deferred | 未確認 | CWE-22 | A vulnerability has been found in FLB-Music FLB-Music-Player 1.1.8/1.1.9/1.2.0/1.2.1. This impacts the function path.join of the file /src/main/core/createParsedTrack.ts. The manip |
| CVE-2026-101037 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was found in FAST FAC1200R 5.0_20201119_1.0.2. Affected is the function parse_advertisement_frame of the component devdiscover Service. The manipulation results in |
| CVE-2026-101038 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was determined in FAST FAC1200R 5.0_20201119_1.0.2. Affected by this vulnerability is the function MmtAtePrase of the component MmtAtePrase Parser. This manipulatio |
| CVE-2026-101039 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was identified in FAST FAC1900R 20190827_2.0.2. Affected by this issue is the function copy_msg_element of the component devdiscover Service. Such manipulation lead |
| CVE-2026-101040 | Deferred | 未確認 | CWE-404 | A security flaw has been discovered in Ricoh SP 330DN, SP 221, SP C252SF and Aficio SP 3500SF up to 20260813. This affects an unknown part of the component HTTP Multipart Form-Data |
| CVE-2026-101041 | Deferred | 未確認 | CWE-20, CWE-362 | The account recovery (password reset) functionality in the vulnerability-lookup web application contains a time-of-check-to-time-of-use (TOCTOU) race condition in the consumption o |
| CVE-2026-101042 | Awaiting Analysis | 未確認 | CWE-287 | Parse Server is an open-source backend server. In versions >= 9.0.0 < 9.10.1-alpha.10 and >= 8.0.2 < 8.6.91, the code-based authentication adapters (GitHub, Google Play Games, Inst |
| CVE-2026-101043 | Awaiting Analysis | 未確認 | CWE-201 | pnpm versions 11.0.0 before 11.11.0 and 10.7.0 before 10.34.5 expand ${VAR} environment-variable placeholders in the httpProxy, httpsProxy, and noProxy settings read from a project |
| CVE-2026-101044 | Awaiting Analysis | 未確認 | CWE-22 | pacquet, the Rust package-manager component shipped in the pnpm npm package versions >=12.0.0-alpha.0 and <12.0.0-alpha.5, does not validate dependency alias/name paths taken from |
| CVE-2026-101045 | Awaiting Analysis | 未確認 | CWE-78 | Fleet-maintained app install and uninstall scripts for macOS are generated from Homebrew cask metadata. In manifests generated before 2026-08-19, the script generator escaped this |
| CVE-2026-101046 | Analyzed | 未確認 | CWE-89 | Fleet before 4.89.0 contains an SQL injection vulnerability in the activity list endpoints (GET /api/v1/fleet/activities and GET /api/v1/fleet/hosts/{id}/activities). The deprecate |
| CVE-2026-101047 | Analyzed | 未確認 | CWE-862 | Fleet before 4.87.0 does not protect the two endpoints that serve in-house iOS application packages and manifests (enterprise tier only) with the intended random, time-limited URL |
| CVE-2026-101048 | Deferred | 未確認 | CWE-863 | Cloudreve before 4.17.0 registers the administrative node test endpoints (POST /api/v4/admin/node/test and POST /api/v4/admin/node/test/downloader) without requiring the Admin.Writ |
| CVE-2026-101049 | Deferred | 未確認 | CWE-287 | Heym before 0.0.53 fails to verify Slack request signatures when trigger nodes lack credential IDs or have empty signing secrets. Remote unauthenticated attackers can send forged S |
| CVE-2026-101050 | Deferred | 未確認 | CWE-287 | Heym before 0.0.53 fails to verify the X-Telegram-Bot-Api-Secret-Token header on Telegram webhook endpoints when credential_id is absent or secret_token is empty. Remote unauthenti |
| CVE-2026-101051 | Deferred | 未確認 | CWE-22 | Cloudreve before 4.16.1 fails to properly sanitize file paths returned by remote downloaders, allowing authenticated users to create files outside the selected destination director |
| CVE-2026-101052 | Deferred | 未確認 | CWE-259, CWE-798 | A security vulnerability has been detected in refly-ai refly up to 1.1.0. This issue affects some unknown processing of the file apps/api/src/modules/config/app.config.ts of the co |
| CVE-2026-101053 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability was determined in Thinkware U3000 up to 1.02.04. This impacts the function PUT_FILE of the file /tmp/wpa_supplicant.conf of the component TCP Service. Executing a m |
| CVE-2026-101054 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability was identified in Thinkware U3000 up to 1.02.04. Affected is the function get_file of the file /tmp/wpa_supplicant.conf of the component TCP Service. The manipulati |
| CVE-2026-101055 | Deferred | 未確認 | CWE-200, CWE-284 | A security flaw has been discovered in Thinkware U3000 up to 1.02.04. Affected by this vulnerability is the function GET_STATUS of the component TCP Service. The manipulation of th |
| CVE-2026-101056 | Deferred | 未確認 | CWE-863 | Cloudreve before 4.16.1 fails to revalidate share access when restoring cached navigator state from a context_hint UUID. Attackers who previously had valid share access can replay |
| CVE-2026-101057 | Deferred | 未確認 | CWE-319 | utcp-mcp (the MCP plugin of python-utcp) through 1.1.2 connects to the HTTP and WebSocket MCP server URLs given in a call template's mcpServers configuration without the ensure_sec |
| CVE-2026-101058 | Deferred | 未確認 | CWE-918 | python-utcp (pip package utcp-http) before 1.1.12 does not verify whether tool URLs declared in a hand-written UTCP manual point at the agent's own loopback interface when that man |
| CVE-2026-101059 | Deferred | 未確認 | CWE-918 | utcp-http before 1.1.4 fails to validate the OAuth2 tokenUrl field from remote OpenAPI specifications, allowing attackers to redirect credential submission to arbitrary endpoints. |
| CVE-2026-101060 | Deferred | 未確認 | CWE-918 | python-utcp versions before 1.1.4 contain a server-side request forgery vulnerability in HttpCommunicationProtocol.call_tool that validates the initial tool URL but follows HTTP re |
| CVE-2026-101061 | Deferred | 未確認 | CWE-918 | utcp-gql before 1.1.1 and utcp-websocket before 1.1.1 contain server-side request forgery vulnerabilities due to incomplete application of CVE-2026-44661 fixes. The GraphQL plugin |
| CVE-2026-101062 | Deferred | 未確認 | CWE-863 | Obot before v0.23.0 (affected versions <= v0.22.1) running with OBOT_SERVER_ENABLE_AUTHENTICATION=true exposes OAuth dynamic client registration without authentication and without |
| CVE-2026-101063 | Deferred | 未確認 | CWE-862 | Obot versions before v0.23.0 fail to enforce authentication on MCP Registry endpoints under /v0.1/* when registry authentication is enabled. Unauthenticated attackers can read regi |
| CVE-2026-101064 | Deferred | 未確認 | CWE-918 | Obot before v0.23.0 contains a server-side request forgery vulnerability in remote MCP server registration that allows privileged users to specify arbitrary URLs without destinatio |
| CVE-2026-101065 | Deferred | 未確認 | CWE-306 | Obot is an open-source AI agent/MCP platform. In all versions up to and including commit d7e6970, the Docker quickstart command documented in the README starts the container listen |
| CVE-2026-101066 | Deferred | 未確認 | CWE-22 | A vulnerability was determined in dbgate up to 7.3.1. The impacted element is the function createLink of the file packages/api/src/controllers/archive.js of the component Archive L |
| CVE-2026-101067 | Deferred | 未確認 | CWE-22 | A vulnerability was identified in dbgate up to 6.8.1/7.0.2/7.1.8/7.2.5/7.3.1. This affects the function saveUploadedFile of the file files.js of the component save-uploaded-file En |
| CVE-2026-101068 | Deferred | 未確認 | CWE-22 | A security flaw has been discovered in dbgate up to 7.3.1. This impacts the function zipJsonLinesData of the file packages/api/src/utility/zipJsonLinesData.js of the component Crea |
| CVE-2026-101069 | Deferred | 未確認 | CWE-22 | A weakness has been identified in dbgate up to 7.3.1. Affected is the function exportModelSql of the file packages/api/src/controllers/databaseConnections.js of the component Expor |
| CVE-2026-101070 | Deferred | 未確認 | CWE-22 | A security vulnerability has been detected in dbgate up to 7.3.1. Affected by this vulnerability is the function files of the file packages/api/src/controllers/runners.js of the co |
| CVE-2026-101071 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was determined in Acrel Electric Unet Web Service up to 20260814. This vulnerability affects unknown code of the file /exchange/attachment/upload of the component U |
| CVE-2026-101072 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in Netcore NR289-GE 1.4.5102. This issue affects the function system of the file /ap_ip.cgi of the component CGI Handler. Such manipulation of the ar |
| CVE-2026-101073 | Deferred | 未確認 | CWE-287 | A security flaw has been discovered in Netcore NR289-GE 1.4.5102. Impacted is an unknown function of the file /bin/boa of the component CGI Dispatcher. Performing a manipulation re |
| CVE-2026-101074 | Deferred | 未確認 | CWE-119, CWE-121 | A weakness has been identified in Netcore NR289-GE 1.4.5102. The affected element is the function password-check of the file /bin/boa of the component Authentication. Executing a m |
| CVE-2026-101075 | Deferred | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in Netcore NR289-GE 1.4.5102. The impacted element is the function system of the file /location_time.cgi of the component Location Time H |
| CVE-2026-101076 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was detected in Netcore NR289-GE 1.4.5102. This affects the function system of the file /set_ntp_server_ip.cgi of the component CGI Handler. The manipulation of the |
| CVE-2026-101077 | Deferred | 未確認 | CWE-287, CWE-306 | A flaw has been found in Netcore NR289-GE 1.4.5102. This impacts the function process_request of the component boa_temp Handler. This manipulation causes missing authentication. Th |
| CVE-2026-101078 | Deferred | 未確認 | CWE-653 | A vulnerability has been found in deepseek-ai deepseek-harness up to 0.1.7-rc.2. Affected is an unknown function of the file packages/sandbox/sandbox-local/src/profiles.ts of the c |
| CVE-2026-101079 | Deferred | 未確認 | CWE-20, CWE-807 | A vulnerability was found in agentverus agentverus-scanner up to 0.8.1. Affected by this vulnerability is the function isSecurityDefenseSkill of the file dist/scanner/analyzers/con |
| CVE-2026-101080 | Deferred | 未確認 | CWE-22 | A vulnerability was identified in Tencent AI-Infra-Guard up to 4.5.2/4.6.2. This affects the function startsWith of the file skill_scan/tools/dir/dir_actions.py of the component Fi |
| CVE-2026-101081 | Deferred | 未確認 | CWE-119, CWE-121 | A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects the function menu_nat_more_asp of the file menu_nat_more.asp of the component Web Administra |
| CVE-2026-101082 | Deferred | 未確認 | CWE-22 | A weakness has been identified in PMWeb 7.x/8.x/2025.x. This issue affects some unknown processing of the file downloader.aspx. This manipulation of the argument FullFileName/FileN |
| CVE-2026-101083 | Deferred | 未確認 | CWE-200, CWE-284 | A security vulnerability has been detected in PMWeb v7.x/v8.x/v2025.x. Impacted is an unknown function in the library encryptionhelper.dll. Such manipulation leads to information d |
| CVE-2026-101084 | Deferred | 未確認 | CWE-639 | obot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint, allowing any authenticated user to connect to restricted MCP servers if they possess |
| CVE-2026-101085 | Deferred | 未確認 | CWE-197 | Nezha before 2.3.8 fails to validate alert rule type and duration bounds, allowing authenticated non-administrator users to create malformed rules that trigger unrecovered panics i |
| CVE-2026-101086 | Deferred | 未確認 | CWE-269 | Nezha Dashboard versions before 2.3.5 fail to restrict service monitor task types to supported probe types, allowing authenticated users with nezha:service:write scope to submit pr |
| CVE-2026-101087 | Deferred | 未確認 | CWE-918 | Nezha versions 2.0.10 through 2.3.2 use a restricted HTTP client to validate user-configurable notification and DDNS webhook URLs, but the denylist did not cover IPv6 transition ra |
| CVE-2026-101088 | Deferred | 未確認 | CWE-367 | Nezha is a server and website monitoring tool. In versions >= 2.2.11 and < 2.3.1, the service sentinel worker (service/singleton/servicesentinel.go) contains an incomplete fix for |
| CVE-2026-101089 | Deferred | 未確認 | CWE-522 | Nezha before 2.2.7 contains an information disclosure vulnerability in the GET /api/v1/profile endpoint that returns the bcrypt-hashed password field of authenticated users. Attack |
| CVE-2026-101090 | Deferred | 未確認 | CWE-601 | Nezha 2.2.3 contains a Host header injection regression in the OAuth2 redirect endpoint. When the new optional dashboard_host setting is empty, /api/v1/oauth2/{provider} (cmd/dashb |
| CVE-2026-101091 | Deferred | 未確認 | CWE-89 | SiYuan versions before v3.8.4 fail to properly validate SQL statements in block query embed blocks executed against siyuan.db. Attackers can craft malicious .sy documents with non- |
| CVE-2026-101092 | Deferred | 未確認 | CWE-200 | SiYuan before v3.8.4 fails to enforce publish-access checks in the getCurrentAttrViewImages endpoint, allowing publish readers to retrieve image asset paths from unauthorized datab |
| CVE-2026-101093 | Deferred | 未確認 | CWE-352 | Cotonti through 1.0.0 contains a cross-site request forgery vulnerability in admin.users.php that allows attackers to delete user groups without token verification. Attackers can c |
| CVE-2026-101098 | Deferred | 未確認 | CWE-400, CWE-404 | A security vulnerability has been detected in ag-ui-protocol ag-ui up to 2026-09-23. Affected by this issue is the function readAllBytes of the file JdkAgentHttpHandler.java of the |
| CVE-2026-101099 | Deferred | 未確認 | CWE-755 | A vulnerability was detected in ag-ui-protocol ag-ui up to 2026-09-23. This affects an unknown part of the file SseParser.kt of the component Kotlin Community SDK. Performing a man |
| CVE-2026-101100 | Deferred | 未確認 | CWE-459 | A flaw has been found in ag-ui-protocol ag-ui up to 2026-09-07. This vulnerability affects the function FilterToolCallsMiddleware of the file sdks/typescript/packages/client/src/mi |
| CVE-2026-101101 | Deferred | 未確認 | CWE-248 | A vulnerability has been found in ag-ui-protocol ag-ui up to 2026-09-07. This issue affects the function JSON.parse of the file legacy/convert.ts of the component Middleware. The m |
| CVE-2026-101102 | Deferred | 未確認 | CWE-264, CWE-265 | A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7. Impacted is the function run_code of the component Code Mode Sandbox. The manipulation results in sandbo |
| CVE-2026-101105 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in code-projects Matrimonial System 1.0. The affected element is the function processprofile_form of the file /create_profile of the component Profil |
| CVE-2026-101108 | Undergoing Analysis | 未確認 | CWE-89 | Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager (Free) < 6.5.8 - site/vehiclemanager.php reads the order_field and order_direction sort parameter |
| CVE-2026-101109 | Undergoing Analysis | 未確認 | CWE-79 | Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Vehicle Manager (Free) < 6.5.8 - The public vehicle-detail page (task=view) echoes the title request parameter d |
| CVE-2026-101110 | Analyzed | 未確認 | CWE-89 | Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library (Free) < 6.4.6 - site/booklibrary.php’s books() function reads the field and direction request param |
| CVE-2026-101111 | Analyzed | 未確認 | CWE-79 | Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Book Library (Free) < 6.4.6 - The public book-detail page template, site/views/view_book/tmpl/default.php, echoe |
| CVE-2026-101112 | Analyzed | 未確認 | CWE-639 | Joomla Extension - balbooa.com - Unauthorized Deletion of Attachments in Balbooa Forms < 2.4.3.4 - The public removeTmpAttachment action accepts an integer attachment ID and delete |
| CVE-2026-101126 | Analyzed | 未確認 | CWE-22, CWE-73 | Joomla Extension - balbooa.com - File meta data tampering in Balbooa Forms < 2.4.3.4 - The final form submission processes JSON arrays per upload field, checking only that IDs are |
| CVE-2026-101127 | Analyzed | 未確認 | CWE-79 | Joomla Extension - balbooa.com - Unauthenticated upload filename stored XSS in Balbooa Forms < 2.4.3.4 - The public form upload endpoint validates the uploaded file's extension and |
| CVE-2026-101131 | Deferred | 未確認 | CWE-20, CWE-807 | A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.5-rc.3. Impacted is an unknown function of the file packages/e2b/e2b/src/index.ts of the component dsh. The |
| CVE-2026-101132 | Deferred | 未確認 | CWE-22 | A security flaw has been discovered in DeepSeek deepseek-harness up to 0.1.7-rc.2. The affected element is the function loadProfile of the file packages/boot/app-boot/src/profile.t |
| CVE-2026-101139 | Deferred | 未確認 | CWE-862, CWE-863 | A vulnerability was detected in Webkul Bagisto up to 2.4.6/2.5.0-beta4. This impacts an unknown function of the file /admin/sales/invoices/mass-update/state of the component Invoic |
| CVE-2026-101141 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in Eleveo Call Recording Software 9.7.0. Affected is an unknown function of the file /callrec/audio.jsp of the component Play Audio Page. Executing a manipula |
| CVE-2026-101142 | Deferred | 未確認 | CWE-22 | A vulnerability has been found in Eleveo Quality Management 9.7.0. Affected by this vulnerability is an unknown functionality of the file Scorecard.jsp of the component Questionnai |
| CVE-2026-101143 | Deferred | 未確認 | CWE-200, CWE-284 | A vulnerability was found in Eleveo Quality Management 9.7.0. Affected by this issue is some unknown functionality of the file /qm/cz.zoom.scorecard.webui.Scorecard/cz.zoom.scoreca |
| CVE-2026-101144 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability was determined in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/searchAction.do of the component Query Builder. This manip |
| CVE-2026-101145 | Deferred | 未確認 | CWE-74, CWE-90 | A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This vulnerability affects unknown code of the file /callrec/userAddAction.do of the component User Manageme |
| CVE-2026-101146 | Deferred | 未確認 | CWE-200, CWE-284 | A security flaw has been discovered in Eleveo Quality Management 9.7.0. This issue affects the function UtilsService.createAndSaveAudit of the file /qm/cz.zoom.scorecard.webui.Scor |
| CVE-2026-101169 | Awaiting Analysis | 未確認 | CWE-502 | In affected versions of Octopus Server, an authenticated user with permissions to edit an Environment or Project can set specifically crafted JSON content for the object. Insecure |
| CVE-2026-101187 | Deferred | 未確認 | CWE-74, CWE-77 | A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function pop_usb_device of the file usr/lib/lua/luci/controller/api/zrUsb.lua of the co |
| CVE-2026-101188 | Deferred | 未確認 | CWE-640 | A security vulnerability has been detected in Netcore POWER13 2.0.240730.162638. This issue affects the function routerd.passwd_set of the file /ubus. Such manipulation leads to we |
| CVE-2026-101202 | Deferred | 未確認 | CWE-119, CWE-787 | A flaw has been found in FastStone Image Viewer up to 8.3. The affected element is an unknown function of the component TGA Image Handler. Executing a manipulation can lead to out- |
| CVE-2026-101203 | Deferred | 未確認 | CWE-119, CWE-787 | A vulnerability has been found in FastStone Image Viewer up to 8.3. The impacted element is an unknown function of the component 1bpp RLE Decoder. The manipulation leads to out-of- |
| CVE-2026-101204 | Deferred | 未確認 | CWE-119, CWE-125 | A vulnerability was found in FastStone Image Viewer up to 8.3. This affects an unknown function of the file FSViewer.exe of the component TGA Image Handler. The manipulation result |
| CVE-2026-101205 | Deferred | 未確認 | CWE-119, CWE-125 | A vulnerability was determined in FastStone Image Viewer up to 8.3. This impacts an unknown function of the component PCX Decoder. This manipulation causes out-of-bounds read. The |
| CVE-2026-101260 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was detected in Ziroom ZHOME A0101 1.0.1.0. Affected by this issue is some unknown functionality of the file /api/ZRnetwork/firstLogin. Performing a manipulation of |
| CVE-2026-101261 | Deferred | 未確認 | CWE-74, CWE-77 | A flaw has been found in Ziroom ZHOME A0101 1.0.1.0. This affects an unknown part of the file /api/ZRnetwork/firstSetup_wifi. Executing a manipulation of the argument login_pwd can |
| CVE-2026-101262 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects unknown code of the file /api/ZRQos/set_online_client. The manipulation of the argument ip |
| CVE-2026-101263 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was found in Ziroom ZHOME A0101 1.0.1.0. This issue affects some unknown processing of the file /api/ZRQos/set_online_client. The manipulation of the argument mac r |
| CVE-2026-101264 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was determined in Ziroom ZHOME A0101 1.0.1.0. Impacted is an unknown function of the file /api/ZRnetwork/set_passwd. This manipulation of the argument password1 cau |
| CVE-2026-101265 | Deferred | 未確認 | CWE-200, CWE-540 | A vulnerability was identified in Intelbras TIP 125i 4.3.35/4.3.41. The affected element is an unknown function of the component Básico Page. Such manipulation leads to inclusion o |
| CVE-2026-101266 | Deferred | 未確認 | CWE-20 | A logic flaw in the checkout flow allows users to bypass validations performed during the check-in by skipping entire check-in steps. |
| CVE-2026-101267 | Deferred | 未確認 | CWE-862 | A missing permission check allowed low-privileged users with access to an event but without access to the event's orders to extract some specific information. This information incl |
| CVE-2026-101268 | Deferred | 未確認 | CWE-384 | If an attacker is able to convince a victim on a specially crafted link, the victim is logged in to the attacker's customer account. If the victim does not notice this, this might |
| CVE-2026-101269 | Deferred | 未確認 | CWE-287 | The mechanism binding API-uploaded files to the uploader's authentication method is not working correctly and the same session token is used for all token-based API users. Since AP |
| CVE-2026-101270 | Deferred | 未確認 | CWE-79 | Malicious HTML content could be injected into the help texts of various fields with organizer permissions. |
| CVE-2026-101271 | Deferred | 未確認 | CWE-613 | OAuth credentials (access tokens) are valid for the entirety of their lifetime, even if the application (OAuth client) they are bound to is manually disabled. |
| CVE-2026-101276 | Awaiting Analysis | 未確認 | CWE-416 | iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per-test watchdog server_timer_proc() frees streams without cancelling/joining their |
| CVE-2026-101277 | Deferred | 未確認 | CWE-348 | A security flaw has been discovered in Trusted Domain Project OpenDKIM up to 2.11.0. The impacted element is the function dkim_process_set of the file dkim.c of the component Tag T |
| CVE-2026-101278 | Deferred | 未確認 | CWE-345, CWE-346 | A weakness has been identified in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarc_get_tld of the file libopendmarc/opendmarc_tld.c : of the compon |
| CVE-2026-101279 | Deferred | 未確認 | CWE-189, CWE-190 | A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarc_policy.c of the comp |
| CVE-2026-101280 | Deferred | 未確認 | CWE-287, CWE-290 | A vulnerability was detected in Trusted Domain Project OpenDMARC up to 1.4.2. Affected is the function opendmarc_policy_query_dmarc of the component Multi-Record Set Handler. The m |
| CVE-2026-101281 | Deferred | 未確認 | CWE-287 | A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarc_sp2_find_mailfrom_domain of the file libopendmarc/op |
| CVE-2026-101283 | Awaiting Analysis | 未確認 | CWE-122 | iperf3 3.20–3.21 (esnet/iperf) has a pre-auth heap buffer overflow in decrypt_rsa_message(): a 256-byte RSA buffer is BIO_read with the attacker-controlled ciphertext length (guard |
| CVE-2026-101292 | Awaiting Analysis | 未確認 | CWE-470 | Apache ActiveMQ Artemis before 2.34.0 contains an unsafe reflection vulnerability in FederationStreamConnectMessage.getFederationPolicy(). The method calls Class.forName(clazz).get |
| CVE-2026-101295 | Awaiting Analysis | 未確認 | CWE-22 | Path traversal / arbitrary file write in oc-mirror's operator catalog image extraction. When mirroring operator catalogs using either the legacy v1 path (--v1) or the OCI feature p |
| CVE-2026-101333 | Awaiting Analysis | 未確認 | CWE-770 | A flaw was found in the Micrometer user-event metrics listener of Keycloak, a solution for integrated identity and access management. The issue occurs when the listener is configur |
| CVE-2026-101354 | Deferred | 未確認 | CWE-119, CWE-121 | A security flaw has been discovered in FAST FAC1203R 20200116_2.0.4. The affected element is the function _tWlanTask of the component MmtAtePrase Parser. Performing a manipulation |
| CVE-2026-10144 | Deferred | 未確認 | CWE-78 | Rsbuild before 2.0.9 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands by supplying a crafted URL containing shell metacharacters to |
| CVE-2026-10145 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-10148 | Deferred | 未確認 | CWE-79 | The Booking for Appointments and Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple Elementor widgets in versions up to and including 2. |
| CVE-2026-10149 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-10150 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-101858 | Deferred | 未確認 | CWE-77, CWE-78 | A flaw has been found in RaspAP raspap-webgui up to 3.5.5. Affected is the function WiFiManager::writeWpaSupplicant of the file src/RaspAP/Networking/Hotspot/WiFiManager.php of the |
| CVE-2026-101859 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability has been found in RaspAP raspap-webgui up to 3.5.5. Affected by this vulnerability is the function escapeshellcmd of the file ajax/openvpn/del_ovpncfg.php of the co |
| CVE-2026-101860 | Deferred | 未確認 | CWE-266, CWE-269 | A vulnerability was found in RaspAP raspap-webgui up to 3.5.5. Affected by this issue is the function PluginInstaller::addSudoers of the file src/RaspAP/Plugins/PluginInstaller.php |
| CVE-2026-101861 | Awaiting Analysis | 未確認 | CWE-94, CWE-95 | Langflow 1.0.16 before 1.12.0 and 0.0.94 before 1.12.0 contain an unsafe eval() vulnerability in schema.py that allows authenticated attackers to achieve code execution by placing |
| CVE-2026-101878 | Awaiting Analysis | 未確認 | CWE-303 | Bitwarden Server 2025.6.0 before 2026.5.0 declares the @ExternalId parameter of the User_ReadBySsoUserOrganizationIdExternalId stored procedure as NVARCHAR(50) while the column it |
| CVE-2026-101879 | Deferred | 未確認 | CWE-862 | OpenClaw Windows Node before 2026.7.1-3 contains a missing authorization vulnerability in NodeService capture handlers that allows connected gateways or agents to perform screen sn |
| CVE-2026-101880 | Deferred | 未確認 | CWE-863 | OpenClaw Windows Node before 2026.7.1 contains an incorrect authorization vulnerability in the system.run exec-approval policy where ExecShellWrapperParser fails to split commands |
| CVE-2026-101881 | Deferred | 未確認 | CWE-770 | OpenClaw Windows Node before 2026.7.1 contains an allocation of resources without limits vulnerability in the gateway WebSocket transport that allows connected gateways to exhaust |
| CVE-2026-101882 | Deferred | 未確認 | CWE-184 | OpenClaw Windows Node before 2026.7.1 contains an incomplete validation vulnerability in system.execApprovals.set that accepts wildcard-executable rules and abusable system binarie |
| CVE-2026-101883 | Deferred | 未確認 | CWE-918 | OpenClaw Windows Node through 2026.9.4 contains a server-side request forgery vulnerability in the canvas.present capability that bypasses URL risk evaluation enforced by canvas.na |
| CVE-2026-101884 | Deferred | 未確認 | CWE-184 | OpenClaw Windows Node before 2026.7.1 contains an incomplete environment-variable sanitizer in system.run that fails to block GIT_CONFIG_*, DOTNET_STARTUP_HOOKS, and JAVA_TOOL_OPTI |
| CVE-2026-101885 | Deferred | 未確認 | CWE-22 | ZeroClaw versions before 0.8.5 built with plugins-wasm feature contain a path traversal vulnerability in plugin installation that fails to validate the wasm_path manifest field. At |
| CVE-2026-101891 | Deferred | 未確認 | CWE-284, CWE-923 | An improper access control vulnerability in an internal API service on WatchGuard Access Points allows an unauthenticated attacker with network access to the AP to obtain a valid A |
| CVE-2026-101894 | Awaiting Analysis | 未確認 | CWE-22, CWE-59 | The decompress package for Node.js extracts archives. Prior to 10.2.2 and 11.1.4, the default decompress(input, output) API relies on lexical containment checks that do not account |
| CVE-2026-101898 | Undergoing Analysis | 未確認 | CWE-918 | Axios is a promise-based HTTP client for the browser and Node.js. From 1.13.0 until 1.20.0, Axios HTTP/2 request setup does not consistently apply proxy settings and caller-supplie |
| CVE-2026-101900 | Undergoing Analysis | 未確認 | CWE-1321, CWE-693, CWE-74 | Axios is a promise-based HTTP client for the browser and Node.js. From 1.12.0 until 1.20.0, ResolveConfig reads inherited Symbol.toStringTag, append, and getHeaders properties whil |
| CVE-2026-101901 | Undergoing Analysis | 未確認 | CWE-400 | Axios is a promise-based HTTP client for the browser and Node.js. From 1.13.0 until 1.20.0, Http2Sessions does not install adequate error handling for a ClientHttp2Session during A |
| CVE-2026-101902 | Undergoing Analysis | 未確認 | CWE-1321 | Axios is a promise-based HTTP client for the browser and Node.js. From 0.27.2 until 0.34.0 and 1.20.0, Axios default-instance requests that omit an explicit method can read an inhe |
| CVE-2026-101903 | Undergoing Analysis | 未確認 | CWE-1333 | Axios is a promise-based HTTP client for the browser and Node.js. From 1.16.1 until 1.20.0, the RFC 2397 regular expression allows slash characters on both sides of the media-type |
| CVE-2026-101904 | Undergoing Analysis | 未確認 | CWE-1321, CWE-74 | Axios is a promise-based HTTP client for the browser and Node.js. From 1.0.0 until 1.20.0, the dispatchRequest function normalizes inherited Object.prototype.headers from a replace |
| CVE-2026-101905 | Undergoing Analysis | 未確認 | CWE-1321, CWE-441 | Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.2 until 1.20.0, the Node HTTP adapter in lib/adapters/http.js supplies request options without an own cr |
| CVE-2026-101906 | Undergoing Analysis | 未確認 | CWE-1333, CWE-400 | Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.0 until 1.20.0, Axios shouldBypassProxy applies a quadratic trailing-dot regular expression to redirect |
| CVE-2026-101907 | Undergoing Analysis | 未確認 | CWE-441, CWE-601 | Axios is a promise-based HTTP client for the browser and Node.js. From 1.17.0 until 1.20.0, the fetch adapter bypasses the maxRedirects: 0 redirect policy. An Axios request uses th |
| CVE-2026-101908 | Undergoing Analysis | 未確認 | CWE-1321 | Axios is a promise-based HTTP client for the browser and Node.js. From 1.7.0 until 1.20.0, the fetch adapter constructs a Request with sanitized resolvedOptions but then calls fetc |
| CVE-2026-101909 | Undergoing Analysis | 未確認 | CWE-1321 | Axios is a promise-based HTTP client for the browser and Node.js. From 0.28.0 until 0.34.0 and 1.15.1 until 1.20.0, ToFormData processes inherited serialization options and visitor |
| CVE-2026-101910 | Deferred | 未確認 | CWE-918 | ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. From 10.2.0 until 10.5.1, the Address6 isPrivate classifier in src/ipv6.ts does not reco |
| CVE-2026-101911 | Deferred | 未確認 | CWE-400, CWE-770 | ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the Address6 constructor, Address6.isValid, and parse code in src/ipv6. |
| CVE-2026-101912 | Deferred | 未確認 | CWE-697, CWE-843 | ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the isInSubnet and isHostInSubnet methods in src/common.ts compare mask |
| CVE-2026-101913 | Deferred | 未確認 | CWE-697, CWE-918 | ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.5.1, the Address6 isLinkLocal method in src/ipv6.ts recognizes only fe80::/6 |
| CVE-2026-101914 | Deferred | 未確認 | CWE-187, CWE-863 | @grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.1 and 1.14.1, the exact path (method name) matcher used by RBAC per |
| CVE-2026-101915 | Deferred | 未確認 | CWE-550 | @grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.6 and 1.14.5, when an application method handler throws an uncaught |
| CVE-2026-101916 | Deferred | 未確認 | CWE-295 | @grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.6 and 1.14.5, getAuthContext does not distinguish authorized from u |
| CVE-2026-101917 | Analyzed | 未確認 | CWE-770 | PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT get_signing_key_from_jwt is affected because unknown kid misses force refreshes without a negat |
| CVE-2026-101918 | Analyzed | 未確認 | CWE-248 | PyJWT is a Python implementation of JSON Web Token standards. From 2.0.0a1 until 2.15.0, PyJWT PyJWKClient.get_signing_key_from_jwt is affected because payload parser catches Value |
| CVE-2026-10195 | Deferred | 未確認 | CWE-77 | The FS-Poster plugin for WordPress is vulnerable to Remote Code Execution in versions up to and including 8.0.1. This is due to insufficient input sanitization of the FFmpeg path p |
| CVE-2026-10196 | Deferred | 未確認 | CWE-502 | The Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, |
| CVE-2026-102004 | Awaiting Analysis | 未確認 | CWE-787 | Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory management subsystem. Fixed in Version 26.09 |
| CVE-2026-102005 | Awaiting Analysis | 未確認 | CWE-401 | Wind River VxWorks 7 24.03 through 26.03, a memory leak occurs under specific, non-default configuration states when processing specific service routines, causing the system to ter |
| CVE-2026-102006 | Awaiting Analysis | 未確認 | CWE-401 | In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem failing to properly release allocated kernel memory before ter |
| CVE-2026-102010 | Awaiting Analysis | 未確認 | CWE-825 | A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its inter |
| CVE-2026-102089 | Analyzed | 未確認 | CWE-22 | Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to a path traversal weakness in an administrative import function allowed an authenticated administrator to wr |
| CVE-2026-102090 | Analyzed | 未確認 | CWE-601 | Kiteworks Core before version 9.5.1 is vulnerable to Content Injection. A URL parameter in the PDF viewer was insufficiently validated, allowing an attacker-controlled document to |
| CVE-2026-102091 | Analyzed | 未確認 | CWE-918 | Kiteworks Secure Data Forms before version 9.5.0 is vulnerable to Server-Side Request Forgery that could allow an unauthenticated, remote attacker to make the server issue arbitrar |
| CVE-2026-102092 | Analyzed | 未確認 | CWE-79 | Kiteworks Core before version 9.5.0 is vulnerable to Stored Cross-site Scripting (XSS) that could allow an authenticated user to store crafted content that executes arbitrary JavaS |
| CVE-2026-102093 | Analyzed | 未確認 | CWE-269 | Kiteworks Core before version 9.5.0 is vulnerable to Improper Privilege Management and does not correctly enforce restrictions on role assignment, which could allow an authenticate |
| CVE-2026-102094 | Analyzed | 未確認 | CWE-470 | Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Unsafe Reflection and does not sufficiently restrict the code that the mail-processing pipeline could load |
| CVE-2026-102095 | Analyzed | 未確認 | CWE-918 | Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery. Kiteworks Email Protection Gateway performed server-side fetches of URLs conta |
| CVE-2026-102096 | Analyzed | 未確認 | CWE-78 | Kiteworks Core before version 9.5.0 is vulnerable to OS Command Injection that allows an authenticated administrator to upload a configuration package whose contents were not suffi |
| CVE-2026-102097 | Analyzed | 未確認 | CWE-22, CWE-94 | Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Remote Code Execution. Kiteworks Email Protection Gateway allowed an authenticated administrator to import |
| CVE-2026-102098 | Analyzed | 未確認 | CWE-89 | Kiteworks Core before version 9.5.0 is vulnerable to SQL Injection. A stored SQL injection vulnerability in a Kiteworks administrative reporting feature could allow an authenticate |
| CVE-2026-102099 | Analyzed | 未確認 | CWE-22 | Kiteworks Core before version 9.5.0 is vulnerable to Arbitrary File Write. An improper restriction of a user-supplied file path in a Kiteworks administrative export feature could a |
| CVE-2026-102100 | Analyzed | 未確認 | CWE-79 | Kiteworks Core before version 9.5.0 is vulnerable to Stored Cross-Site Scripting. A stored cross-site scripting (XSS) weakness in Kiteworks Core could allow an authenticated user t |
| CVE-2026-102101 | Analyzed | 未確認 | CWE-502 | Kiteworks Core before version 9.5.0 is vulnerable to Deserialization of Untrusted Data. A deserialization weakness in Kiteworks Core could, under certain conditions, allow crafted |
| CVE-2026-102102 | Analyzed | 未確認 | CWE-918 | Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-side request forgery (SSRF) weakness in Kiteworks Email Protec |
| CVE-2026-102103 | Analyzed | 未確認 | CWE-918 | Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-side request forgery (SSRF) weakness in Kiteworks Email Protec |
| CVE-2026-102104 | Analyzed | 未確認 | CWE-918 | Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-side request forgery (SSRF) weakness in Kiteworks Email Protec |
| CVE-2026-102105 | Analyzed | 未確認 | CWE-918 | Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-side request forgery (SSRF) weakness in Kiteworks Email Protec |
| CVE-2026-102106 | Analyzed | 未確認 | CWE-287 | Improper authentication in a Kiteworks Email Protection Gateway administrative service. An administrative service in Kiteworks Email Protection Gateway did not consistently enforce |
| CVE-2026-102107 | Analyzed | 未確認 | CWE-639 | Kiteworks Core contains a business logic flaw in a Kiteworks file-request feature allowed an authenticated user to send a request that appeared to originate from another user, beca |
| CVE-2026-102108 | Analyzed | 未確認 | CWE-502 | An authenticated administrator of Kiteworks Email Protection Gateway could submit a crafted serialized object to a cluster management interface that was deserialized without suffic |
| CVE-2026-102109 | Analyzed | 未確認 | CWE-89 | A SQL injection vulnerability existed in Kiteworks Secure Data Forms, where a value derived from the authenticated user's stored account data was incorporated into a database query |
| CVE-2026-102110 | Analyzed | 未確認 | CWE-306, CWE-670 | An endpoint used during initial appliance setup did not require authentication and did not correctly enforce its intended state precondition, so during the initial activation windo |
| CVE-2026-102111 | Analyzed | 未確認 | CWE-1284 | Kiteworks did not enforce the maximum permitted value for a configurable security-policy setting. An authenticated administrator could set this value outside its intended range so |
| CVE-2026-102112 | Analyzed | 未確認 | CWE-269, CWE-78 | A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an unprivileged backend service account on the appliance to esc |
| CVE-2026-102113 | Analyzed | 未確認 | CWE-269, CWE-59 | A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an unprivileged backend service account on the appliance to esc |
| CVE-2026-102114 | Analyzed | 未確認 | CWE-78 | A command injection vulnerability in Kiteworks could allow a high-privileged authenticated administrator to execute arbitrary operating-system commands as root on the affected appl |
| CVE-2026-102115 | Analyzed | 未確認 | CWE-640 | Kiteworks Core did not correctly validate a parameter submitted to the password reset workflow. An unauthenticated attacker who knew the email address of a user with a locally stor |
| CVE-2026-102116 | Analyzed | 未確認 | CWE-22, CWE-91 | -A weakness could have allowed an authenticated Kiteworks Email Protection Gateway administrator to write a file outside its intended location and cause the application to execute |
| CVE-2026-102117 | Analyzed | 未確認 | CWE-807, CWE-940 | On deployments where the remote-support capability is licensed and enabled, an authenticated System Administrator who also possessed the key protecting the submitted data could red |
| CVE-2026-102118 | Analyzed | 未確認 | CWE-250, CWE-59 | A local privilege escalation vulnerability in Kiteworks could have allowed an attacker with an existing shell under a low-privileged service account to escalate to root privileges |
| CVE-2026-102119 | Analyzed | 未確認 | CWE-22 | A path traversal weakness in an optional, non-default administrative feature allowed an authenticated administrator to move files to unintended locations outside the feature's desi |
| CVE-2026-102120 | Analyzed | 未確認 | CWE-269, CWE-78 | A privilege escalation vulnerability in Kiteworks could have allowed an attacker who had already obtained code execution on one node of a clustered Kiteworks deployment to run oper |
| CVE-2026-102121 | Analyzed | 未確認 | CWE-200, CWE-306 | A form-rendering interface in the Advanced Forms component is reachable without authentication so that published forms can be displayed to anonymous visitors, but it returned more |
| CVE-2026-102122 | Analyzed | 未確認 | CWE-863 | Kiteworks did not correctly enforce which roles a shared folder's manager was permitted to assign. In a default configuration, an authenticated user holding the Manager role on a f |
| CVE-2026-102123 | Analyzed | 未確認 | CWE-22 | A Kiteworks appliance setup interface did not confine a user-supplied file path to its intended directory, which could allow an unauthenticated attacker to write a file to any loca |
| CVE-2026-102124 | Analyzed | 未確認 | CWE-306, CWE-670 | A Kiteworks appliance setup interface did not enforce authentication once the appliance had completed initial configuration. An unauthenticated attacker with network access to the |
| CVE-2026-102125 | Analyzed | 未確認 | CWE-653, CWE-668 | The sandbox that isolates document conversion on a Kiteworks appliance did not fully confine the code running inside it. Code already executing within that sandbox could potentiall |
| CVE-2026-102126 | Analyzed | 未確認 | CWE-79 | A stored cross-site scripting (XSS) weakness in Kiteworks Core could allow an administrator holding only a single, narrowly scoped delegated permission to store crafted content tha |
| CVE-2026-102127 | Analyzed | 未確認 | CWE-611 | An XML parser used by Kiteworks Email Protection Gateway did not restrict external entity references. Where an optional, non-default message-processing feature is enabled, a remote |
| CVE-2026-102128 | Analyzed | 未確認 | CWE-287 | An identity-verification weakness in Kiteworks Email Protection Gateway allowed the gateway to act on the Kiteworks platform on behalf of a user it had not authenticated, and to pr |
| CVE-2026-102129 | Analyzed | 未確認 | CWE-266 | A user-provisioning interface in Kiteworks Core did not verify that the requesting administrator was entitled to grant the role being assigned. An administrator whose delegated per |
| CVE-2026-102130 | Analyzed | 未確認 | CWE-434, CWE-94 | Kiteworks Email Protection Gateway did not sufficiently validate the content of an uploaded backup, and allowed an administrator to influence how the application loaded it. An auth |
| CVE-2026-102131 | Analyzed | 未確認 | CWE-178, CWE-94 | Kiteworks Email Protection Gateway rejected certain configuration settings, but its validation did not recognize every form in which they could be supplied. An authenticated admini |
| CVE-2026-102132 | Analyzed | 未確認 | CWE-284 | An administrative import function in Kiteworks Core did not verify that the requesting administrator was entitled to create the privileged integration credential being imported. A |
| CVE-2026-102133 | Analyzed | 未確認 | CWE-77 | An optional, separately licensed repository-connector feature in Kiteworks Core did not neutralize special characters in a user-supplied path before passing it to an external comma |
| CVE-2026-102134 | Analyzed | 未確認 | CWE-420 | Kiteworks Core did not apply its gateway-level API security controls to every request authenticated through the platform's central authentication service. An authenticated user cou |
| CVE-2026-102135 | Analyzed | 未確認 | CWE-502 | On a Kiteworks Email Protection Gateway cluster with database replication enabled, a party trusted by the cluster could submit a crafted serialized object that was deserialized wit |
| CVE-2026-102136 | Analyzed | 未確認 | CWE-93 | In multi-node deployments, an attacker who had already obtained code execution on one appliance node could submit a value through an internal cluster interface that was written int |
| CVE-2026-102137 | Analyzed | 未確認 | CWE-434 | An authenticated administrator could bypass the content validation applied to an administrative file upload and store a file containing dangerous content on the appliance. This did |
| CVE-2026-102138 | Analyzed | 未確認 | CWE-918 | An authenticated administrator on a node with an optional, separately licensed gateway role enabled could supply a connector URL that the server retrieved without sufficient valida |
| CVE-2026-102139 | Analyzed | 未確認 | CWE-639, CWE-863 | An authorization check in the large file exchange feature of Kiteworks Email Protection Gateway did not correctly establish that the requesting user was a party to the package bein |
| CVE-2026-102140 | Analyzed | 未確認 | CWE-345 | An authenticated administrator could initiate an administrative import using a file whose contents were not fully verified, because the import validated only the file's header rath |
| CVE-2026-102141 | Analyzed | 未確認 | CWE-269, CWE-73 | Two Kiteworks Core cluster-management operations did not validate file paths supplied to them, so an attacker holding root on one node of a cluster could write files as root onto a |
| CVE-2026-102142 | Analyzed | 未確認 | CWE-1336 | A system notification template on the Kiteworks appliance was rendered by a template engine that evaluated expressions contained in the stored template body. An authenticated Syste |
| CVE-2026-102143 | Analyzed | 未確認 | CWE-306, CWE-434 | An unauthenticated attacker could cause a file with attacker-controlled content to be written to the appliance filesystem through an administrative upload handler that did not prop |
| CVE-2026-102144 | Analyzed | 未確認 | CWE-306, CWE-400 | A resource exhaustion vulnerability in Kiteworks Email Protection Gateway allowed an unauthenticated remote attacker to repeatedly trigger a comparatively expensive server-side ope |
| CVE-2026-102145 | Analyzed | 未確認 | CWE-93 | An authenticated administrator could cause the server to issue requests to, and interact with, internal network services that are not meant to be reachable through this interface. |
| CVE-2026-102146 | Analyzed | 未確認 | CWE-73 | An authenticated Email Protection Gateway administrator holding only limited, delegated permissions could write files with attacker-controlled content to arbitrary locations access |
| CVE-2026-102147 | Analyzed | 未確認 | CWE-79 | A stored cross-site scripting (XSS) weakness in Kiteworks Core could allow an unauthenticated attacker to store crafted content that later executes arbitrary JavaScript in the auth |
| CVE-2026-102149 | Analyzed | 未確認 | CWE-306 | Kiteworks Email Protection Gateway did not sufficiently restrict which account a certificate could be assigned to. This could allow an attacker to associate a certificate with anot |
| CVE-2026-102150 | Analyzed | 未確認 | CWE-306 | A function in the Kiteworks Advanced Forms component was reachable without authentication. An unauthenticated attacker could potentially use it to carry out a limited set of intern |
| CVE-2026-102240 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was found in Netcore NAP930 0.1.241010.141410. This affects the function eval of the file /www/cgi-bin/network_tools of the component Network Tools CGI. The manipul |
| CVE-2026-102241 | Deferred | 未確認 | CWE-320, CWE-321 | A vulnerability was determined in Netcore NAP930 0.1.241010.141410. This vulnerability affects unknown code of the file /lib/functions/backup_common.sh of the component Backup/Rest |
| CVE-2026-102242 | Awaiting Analysis | 未確認 | CWE-22, CWE-59 | Improper link resolution (CWE-59 / CWE-22) in the allowedLocalRoots path validation in Google MCP Toolbox for Databases versions 1.2.0 through 1.9.0 allows a remote authenticated a |
| CVE-2026-102243 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was identified in MODSetter SurfSense up to 2.0.3. This issue affects some unknown processing of the file /api/search-source/connectors/mcp/test of the component MC |
| CVE-2026-102244 | Deferred | 未確認 | CWE-918 | A security flaw has been discovered in MODSetter SurfSense up to 0.0.36. Impacted is an unknown function of the file surfsense_backend/app/routes/editor_routes.py of the component |
| CVE-2026-102245 | Deferred | 未確認 | CWE-287, CWE-306 | A weakness has been identified in MODSetter SurfSense up to 2.0.3. The affected element is an unknown function of the file surfsense_backend/app/routes/circleback_webhook_route.py |
| CVE-2026-102247 | Deferred | 未確認 | CWE-250 | A vulnerability was detected in FastAdmin 1.6.1.20250430/1.6.5.20260602. This affects an unknown function of the file application/database.php of the component Database Management. |
| CVE-2026-102248 | Deferred | 未確認 | CWE-287 | A vulnerability was identified in Rebuild up to 4.4.7/4.5.0-beta5. This affects an unknown part of the file /user/login of the component Login Endpoint. The manipulation leads to i |
| CVE-2026-102249 | Deferred | 未確認 | CWE-862, CWE-863 | A security flaw has been discovered in REBUILD up to 4.4.11. This vulnerability affects unknown code of the file /commons/file-editor-save. The manipulation of the argument url/fil |
| CVE-2026-102252 | Awaiting Analysis | 未確認 | CWE-22, CWE-23 | A path traversal vulnerability (CWE-22) in the embedded VMDK filesystem extractor in Google OSV-SCALIBR versions 0.3.6 through 0.5.0 allows an attacker who controls the scan target |
| CVE-2026-102253 | Awaiting Analysis | 未確認 | CWE-835 | iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecove |
| CVE-2026-102261 | Deferred | 未確認 | CWE-285, CWE-639 | A flaw has been found in owen2345 Camaleon CMS up to 2.9.2. Impacted is the function crop of the file app/controllers/camaleon_cms/admin/media_controller.rb of the component Media |
| CVE-2026-102263 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability has been found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The affected element is an unknown function of the file manage-food.php. Suc |
| CVE-2026-102264 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The impacted element is an unknown function of the file frontend/update-account.p |
| CVE-2026-102265 | Analyzed | 未確認 | CWE-674 | PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, PyJWS._load in jwt/api_jws.py is affected because parser catches ValueError but not Recursio |
| CVE-2026-102266 | Analyzed | 未確認 | CWE-347 | PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, HMACAlgorithm.from_jwk is affected because PyJWK verification path used the decoded key with |
| CVE-2026-102267 | Analyzed | 未確認 | CWE-200, CWE-345, CWE-918 | PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT PyJWKClient is affected because redirect destinations are not revalidated against the JWKS trus |
| CVE-2026-102268 | Analyzed | 未確認 | CWE-347 | PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, is_pem_format in jwt/utils.py is affected because is_pem_format does not recognize every PEM represen |
| CVE-2026-102269 | Analyzed | 未確認 | CWE-180 | PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT signature segment is affected because signature segment decoding accepts characters outside the |
| CVE-2026-102270 | Analyzed | 未確認 | CWE-1333 | PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT is_pem_format is affected because lazy PEM regular expression backtracks extensively. This occu |
| CVE-2026-102271 | Analyzed | 未確認 | CWE-347 | PyJWT is a Python implementation of JSON Web Token standards. From 2.4.0 until 2.14.0, PyJWT HMACAlgorithm.prepare_key is affected because asymmetric-key guard relies on textual ma |
| CVE-2026-102272 | Analyzed | 未確認 | CWE-347 | PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, HMACAlgorithm.prepare_key in jwt/algorithms.py is affected because raw-JWK detector does not |
| CVE-2026-102273 | Analyzed | 未確認 | CWE-347 | PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, PyJWT HMACAlgorithm.prepare_key is affected because HMAC key guard only recognizes top-level |
| CVE-2026-102274 | Analyzed | 未確認 | CWE-755 | PyJWT is a Python implementation of JSON Web Token standards. From 2.9.0 until 2.14.0, PyJWKSet does not catch the plain ValueError raised for malformed RSA JWK components by RSAAl |
| CVE-2026-102275 | Analyzed | 未確認 | CWE-345, CWE-348 | PyJWT is a Python implementation of JSON Web Token standards. From 2.1.0 until 2.15.0, PyJWT OKPAlgorithm.from_jwk in jwt/algorithms.py is affected because private-JWK import path |
| CVE-2026-102276 | Deferred | 未確認 | CWE-400, CWE-674 | The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.19, 2.1.5, 3.0.7, and 5.0.10, crafted brace patterns can exhaust the nat |
| CVE-2026-102277 | Deferred | 未確認 | CWE-400, CWE-407 | The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.21, 2.1.7, 3.0.9, and 5.0.12, the expand function handles untrusted {a}, |
| CVE-2026-102278 | Deferred | 未確認 | CWE-400, CWE-674 | The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3.0.8, and 5.0.11, deeply nested brace groups cause expand_() |
| CVE-2026-102279 | Awaiting Analysis | 未確認 | CWE-80 | Laravel is a web application framework. Prior to 12.69.0 and 13.30.0, Laravel exception debug pages with APP_DEBUG=true pass attacker-controlled input to a Tippy.js tooltip configu |
| CVE-2026-102281 | Awaiting Analysis | 未確認 | CWE-248, CWE-674 | Nest is a framework for building scalable Node.js server-side applications. Prior to 11.2.4 and 12.0.2, a single message with a deeply nested object in its pattern can terminate a |
| CVE-2026-102290 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in CodeCanyon Rocket LMS up to 2.2. This affects an unknown function of the component Student Profile Image Upload. Executing a manipulation can lead |
| CVE-2026-102292 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in coolbeans1212 MateisHomePage-Website up to ea2a4226deeca27ab1fb9df0552ec76444547811. Affected by this issue is some unknown functionality of the file users |
| CVE-2026-102293 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was identified in realjerrytang tacomall 1.0.0. Impacted is the function OrgStaffServiceImpl.add of the file ApiMaApplication.java of the component api-admin Backen |
| CVE-2026-102296 | Awaiting Analysis | 未確認 | CWE-120 | ZoneMinder before 1.38.4 contains static buffer overflow vulnerabilities in RemoteCameraHttp::GetResponse() that allow malicious HTTP cameras or intercepting attackers to overflow |
| CVE-2026-102297 | Awaiting Analysis | 未確認 | CWE-863 | ZoneMinder before 1.38.4 fails to apply per-monitor access restrictions in the FramesController index endpoint. Authenticated users with Events view permission can call the frames |
| CVE-2026-102299 | Analyzed | 未確認 | CWE-843 | Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-102300 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in WebGPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: |
| CVE-2026-102301 | Analyzed | 未確認 | CWE-787 | Out of bounds write in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside |
| CVE-2026-102302 | Analyzed | 未確認 | CWE-121 | Buffer overflow in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-102303 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium securit |
| CVE-2026-102304 | Analyzed | 未確認 | CWE-416 | Use after free in Passwords in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium secur |
| CVE-2026-102305 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in SignIn in Google Chrome on on iOS prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity |
| CVE-2026-102306 | Analyzed | 未確認 | CWE-416 | Use after free in Bluetooth in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Ch |
| CVE-2026-102307 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in Dawn in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium |
| CVE-2026-102308 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted |
| CVE-2026-102309 | Analyzed | 未確認 | CWE-416 | Use after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium secu |
| CVE-2026-102310 | Analyzed | 未確認 | CWE-862 | Missing authorization in Payments in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a craft |
| CVE-2026-102311 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sa |
| CVE-2026-102312 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security sev |
| CVE-2026-102313 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromiu |
| CVE-2026-102314 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in TabStrip in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low) |
| CVE-2026-102315 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in Media in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the |
| CVE-2026-102316 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted |
| CVE-2026-102317 | Analyzed | 未確認 | CWE-269 | Improper privilege management in Mojo in Google Chrome on on Windows prior to 154.0.8037.92 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a |
| CVE-2026-102318 | Analyzed | 未確認 | CWE-125 | Out of bounds read in WebGL in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severit |
| CVE-2026-102319 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a cr |
| CVE-2026-102320 | Analyzed | 未確認 | CWE-862 | Missing authorization in CORS in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted H |
| CVE-2026-102321 | Analyzed | 未確認 | CWE-843 | Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-102323 | Analyzed | 未確認 | CWE-843 | Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-102324 | Analyzed | 未確認 | CWE-416 | Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code |
| CVE-2026-102325 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in Skia in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: H |
| CVE-2026-102326 | Analyzed | 未確認 | CWE-843 | Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-102327 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute a |
| CVE-2026-102328 | Analyzed | 未確認 | CWE-843 | Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-102329 | Analyzed | 未確認 | CWE-79 | Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. (Chromiu |
| CVE-2026-102330 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in SiteIsolation in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via |
| CVE-2026-102331 | Analyzed | 未確認 | CWE-122 | Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTM |
| CVE-2026-102332 | Deferred | 未確認 | CWE-22 | Dozzle versions before 11.1.2 fail to sanitize container display names when building ZIP archive entry names in the log download endpoint. Attackers who can label containers can us |
| CVE-2026-102333 | Deferred | 未確認 | CWE-79 | httpdbg before 2.2.1 fails to validate URL schemes in recorded HTTP request URLs rendered as clickable links in the web interface. Attackers controlling traffic recorded by httpdbg |
| CVE-2026-102334 | Awaiting Analysis | 未確認 | CWE-307 | Nginx Proxy Manager through 2.16.0 lacks rate-limiting on authentication endpoints, allowing unauthenticated attackers to make unlimited password guesses against any account. Attac |
| CVE-2026-102335 | Awaiting Analysis | 未確認 | CWE-863 | Nginx Proxy Manager through 2.16.0 fails to restrict the advanced_config field to administrators, allowing non-admin users with manage permissions to inject arbitrary nginx directi |
| CVE-2026-102360 | Awaiting Analysis | 未確認 | CWE-125 | A missing bounds check in the binary decoder in lib0, versions 0.2.1-0.2.117 and earlier and 1.0.0-rc.32 and earlier, lets any unauthenticated remote peer read adjacent process mem |
| CVE-2026-102361 | Deferred | 未確認 | CWE-306 | mall4j through 4.0 contains a missing authentication vulnerability in the PUT /user/updatePwd endpoint that allows unauthenticated attackers to reset any storefront account passwor |
| CVE-2026-102362 | Deferred | 未確認 | CWE-306 | mall4j through 4.0 fails to implement authentication controls on the DELETE /prodComm endpoint in ProdCommController. Unauthenticated attackers can delete arbitrary product reviews |
| CVE-2026-102363 | Deferred | 未確認 | CWE-306 | mall4j through 4.0 contains a missing authentication vulnerability in the DeliveryController checkDelivery endpoint that allows unauthenticated attackers to read shipment tracking |
| CVE-2026-102364 | Deferred | 未確認 | CWE-287 | mall4j through 4.0 fails to validate the sysType field in sa-token sessions, allowing storefront customers to authenticate as back-office users by reusing their session tokens. Att |
| CVE-2026-102365 | Deferred | 未確認 | CWE-862 | mall4j through 4.0 fails to enforce authorization checks on GET endpoints in UserAddrController that retrieve customer address data. Authenticated attackers can call /user/addr/pag |
| CVE-2026-102366 | Deferred | 未確認 | CWE-434 | mall4j through 4.0 contains an unrestricted file upload vulnerability in FileController endpoints that lack authorization checks and accept arbitrary file types without validation. |
| CVE-2026-102367 | Deferred | 未確認 | CWE-613 | mall4j through 4.0 contains an insufficient session expiration vulnerability in the token refresh endpoint that fails to validate the enabled flag when issuing new sessions. Disabl |
| CVE-2026-102371 | Awaiting Analysis | 未確認 | CWE-214 | In wsl-pro-service before 0.1.19ubuntu3, the service component which runs as root inside each WSL instance attaches the instance to Ubuntu Pro by executing the pro client with the |
| CVE-2026-102372 | Deferred | 未確認 | CWE-79 | GestSup versions before 3.2.61 fail to properly sanitize HTML email bodies in the IMAP LOGIN connector, allowing unauthenticated attackers to store arbitrary JavaScript in ticket d |
| CVE-2026-102373 | Deferred | 未確認 | CWE-639 | GestSup versions before 3.2.62 fail to validate ticket ownership when loading comments via the threadedit parameter in thread.php. Authenticated attackers can enumerate sequential |
| CVE-2026-102374 | Deferred | 未確認 | CWE-79 | GestSup versions before 3.2.62 contain a stored cross-site scripting vulnerability in the IMAP OAuth connector that double-decodes MIME-encoded email subjects after HTML escaping. |
| CVE-2026-102375 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Optimole Optimole optimole-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Optimole: from n/a t |
| CVE-2026-102376 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in Branda <= 3.4.32 versions. |
| CVE-2026-102377 | Deferred | 未確認 | CWE-502 | Contributor PHP Object Injection in Photo Gallery by 10Web <= 1.8.46 versions. |
| CVE-2026-102384 | Deferred | 未確認 | CWE-79 | Author Cross Site Scripting (XSS) in Supreme Modules Lite <= 2.5.63 versions. |
| CVE-2026-102385 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Ninja Forms <= 3.15.3 versions. |
| CVE-2026-102386 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.3.02.003 versions. |
| CVE-2026-102391 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder <= 3.6.5.4 versions. |
| CVE-2026-102392 | Deferred | 未確認 | CWE-502 | Shop manager PHP Object Injection in Extra Product Options For WooCommerce | Custom Product Addons and Fields <= 3.3.8 versions. |
| CVE-2026-102395 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Easy Google Maps <= 1.14.6 versions. |
| CVE-2026-102396 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Ultimate Maps by Supsystic <= 1.5.5 versions. |
| CVE-2026-102397 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Ultimate Maps by Supsystic <= 1.5.5 versions. |
| CVE-2026-102398 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Popup by Supsystic <= 1.13.1 versions. |
| CVE-2026-102399 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in Photo Gallery by Supsystic <= 1.21.0 versions. |
| CVE-2026-102414 | Deferred | 未確認 | CWE-400 | pbkdf2 through 3.1.6 re-hashes passwords longer than the digest's block size on every iteration in its JavaScript fallback (lib/sync.js). A password longer than the block size (64 |
| CVE-2026-102422 | Deferred | 未確認 | CWE-78 | shell-quote's `quote()` function emits a `{ comment }` token as `#` followed by its text, which comments out the rest of the shell line, including the opening quote of any later st |
| CVE-2026-102424 | Analyzed | 未確認 | CWE-22 | Joomla Extension - balbooa.com - Unauthenticated path traversal exfiltrates local files through auto-reply attachments in Balbooa Forms < 2.4.3.4 - Balbooa Forms accepts upload-fie |
| CVE-2026-102425 | Analyzed | 未確認 | CWE-94 | Joomla Extension - balbooa.com - Unauthenticated RCE via field shortcode injection in Balbooa Forms < 2.4.3.4 - Balbooa Forms supports administrator-defined PHP code which runs aft |
| CVE-2026-102427 | Analyzed | 未確認 | CWE-434 | Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK < 8.3.16 - site/uploader.php is reached through the component’s normal frontend routi |
| CVE-2026-102437 | Awaiting Analysis | 未確認 | CWE-78 | OS Command Injection in internal/gitcmd (git diff filter.clean/smudge invocation) in esengine DeepSeek-Reasonix (Reasonix Studio) allows a local attacker who controls repository co |
| CVE-2026-102454 | Deferred | 未確認 | CWE-434 | EasyFlow .NET developed by Digiwin has an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary co |
| CVE-2026-102455 | Deferred | 未確認 | CWE-502 | EasyFlow .NET developed by Digiwin has a Insecure Deserialization vulnerability. Unauthenticated remote attackers can execute arbitrary code on the server by sending maliciously cr |
| CVE-2026-102456 | Deferred | 未確認 | CWE-89 | EasyFlow .NET developed by Digiwin has an SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL commands to read database contents. |
| CVE-2026-102457 | Deferred | 未確認 | CWE-22 | EasyFlow .NET developed by Digiwin has an Arbitrary File Read vulnerability. Authenticated remote attackers can exploit this vulnerability to download arbitrary system files. |
| CVE-2026-102458 | Deferred | 未確認 | CWE-306 | EasyFlow .NET developed by Digiwin has a Missing Authentication vulnerability. Unauthenticated remote attackers can obtain other users' plaintext passwords through a specific API. |
| CVE-2026-102459 | Deferred | 未確認 | CWE-79 | EasyFlow .NET developed by Digiwin has a Reflected Cross-site Scripting vulnerability. Unauthenticated remote attackers can execute arbitrary JavaScript codes in user's browser thr |
| CVE-2026-102473 | Awaiting Analysis | 未確認 | CWE-1333 | A flaw was found in dash. When built without libc fnmatch, the internal pmatch() matcher implements * by unbounded recursion over candidate positions. A local user who can plant fi |
| CVE-2026-102474 | Awaiting Analysis | 未確認 | CWE-787 | A flaw was found in dash. The printf builtin reserves four bytes before converting a Unicode \u or \U escape, but the multi-byte token can need five or six bytes. A local user who |
| CVE-2026-102489 | Analyzed | 掲載 | CWE-384 | Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The bug is also present in version 7.0.0 to ver |
| CVE-2026-102490 | Analyzed | 掲載 | CWE-269 | Zammad packages built with packager.io (DEB and RPM) could have allowed a local attacker who already had file system write privileges as the unprivileged zammad service account to |
| CVE-2026-102491 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in mahonelau kykms up to 8f130c2d85842d5b44caae78cc46d65e505949f7. The impacted element is the function QueryGenerator.doMultiFieldsOrder of the file |
| CVE-2026-102495 | Analyzed | 未確認 | CWE-674 | Apache XmlSchema doesn't limit how deeply schema imports and includes can be nested, so a malicious schema can make parsing recurse until the stack overflows. This causes a denial |
| CVE-2026-102496 | Analyzed | 未確認 | CWE-674 | Apache XmlSchema doesn't limit how deeply schema structures can be nested when it builds its schema model, so a malicious schema can make parsing recurse until the stack overflows. |
| CVE-2026-102497 | Analyzed | 未確認 | CWE-674 | The Apache XmlSchema walker (xmlschema-walker) doesn't detect cycles in type derivation, substitution groups, model groups or attribute groups. A malicious schema with such a cycle |
| CVE-2026-1025 | Awaiting Analysis | 未確認 | CWE-79 | IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed |
| CVE-2026-102507 | Deferred | 未確認 | CWE-125 | Sliver C2 framework version 1.7.7 and earlier contains an unhandled panic vulnerability in the operator gRPC handler that allows an attacker controlling a compromised implant to cr |
| CVE-2026-102508 | Awaiting Analysis | 未確認 | CWE-295, CWE-347, CWE-757 | Improper Verification of Cryptographic Signature and Improper Certificate Validation in the OPC UA driver of Apache PLC4X (PLC4J) allows an attacker in a network position between c |
| CVE-2026-102509 | Awaiting Analysis | 未確認 | CWE-674, CWE-770, CWE-789 | Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits, and Uncontrolled Recursion in the Java implementation of Apache PLC4X (PLC4J) allow a malicious |
| CVE-2026-102510 | Awaiting Analysis | 未確認 | CWE-129, CWE-190, CWE-674, CWE-789 | Integer Overflow, Improper Validation of Array Index, Uncontrolled Recursion and Memory Allocation with Excessive Size Value in the Go implementation of Apache PLC4X (PLC4Go) allow |
| CVE-2026-102511 | Awaiting Analysis | 未確認 | CWE-129, CWE-248, CWE-835, CWE-940 | Improper Verification of Source of a Communication Channel in the ADS discovery of the Go implementation of Apache PLC4X (PLC4Go) allows an attacker able to send UDP datagrams to t |
| CVE-2026-102521 | Awaiting Analysis | 未確認 | CWE-125 | The decoder in `readFromDataView` in lib0 before 0.2.119 can be tricked into reading more than it should from a buffer. The vulnerability allows reading past the decoders' view, th |
| CVE-2026-102555 | Modified | 未確認 | CWE-125 | A flaw was found in libsoup. The soup_uri_decode_data_uri() function incorrectly treated base64 data-URI payloads as NUL-terminated strings when calling g_base64_decode_inplace(). |
| CVE-2026-102556 | Modified | 未確認 | CWE-843 | A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong signal with a GByteArray pointer even though the signal is d |
| CVE-2026-102557 | Modified | 未確認 | CWE-125 | A flaw was found in libsoup. When reassembling fragmented WebSocket messages into a GByteArray, libsoup did not adequately cap total message size against the limits of the underlyi |
| CVE-2026-102558 | Modified | 未確認 | CWE-125 | A flaw was found in libsoup. When max-incoming-payload-size is unlimited (0), SoupWebsocketConnection could grow its incoming GByteArray based on an attacker-controlled frame lengt |
| CVE-2026-102559 | Modified | 未確認 | CWE-125 | A flaw was found in libsoup. When constructing a masked WebSocket client frame for a very large outgoing payload, size values passed to GByteArray allocation APIs could be truncate |
| CVE-2026-102560 | Analyzed | 未確認 | CWE-125 | A flaw was found in libsoup. When the permessage-deflate WebSocket extension compresses a very large outgoing message, truncated size calculations used for GByteArray growth could |
| CVE-2026-102566 | Awaiting Analysis | 未確認 | CWE-787 | CTranslate2 before 4.8.1 contains a heap-based buffer overflow in the binary model loader that fails to validate payload length against allocated buffer size. Attackers can craft m |
| CVE-2026-102567 | Awaiting Analysis | 未確認 | CWE-125 | CTranslate2 before 4.8.1 contains an out-of-bounds heap read vulnerability in the binary model loader when deserializing string fields without null terminators. Attackers can craft |
| CVE-2026-102568 | Deferred | 未確認 | CWE-863 | Pardus Parental Control before 0.7.0 contains an incorrect authorization vulnerability in the polkit policy that allows unprivileged local users to disable parental controls as roo |
| CVE-2026-102569 | Deferred | 未確認 | CWE-89 | ClipBucket v5 through 5.5.3-#197 contains a time-based blind SQL injection vulnerability in the admin video edit function where the videoid parameter is concatenated into an UPDATE |
| CVE-2026-102570 | Deferred | 未確認 | CWE-89 | ClipBucket v5 through 5.5.3-#197 contains a time-based blind SQL injection vulnerability in the language update function where the language_id parameter is concatenated unescaped i |
| CVE-2026-102577 | Analyzed | 未確認 | CWE-918 | A flaw was found in Moodle. Incorrect handling of IPv4-mapped IPv6 addresses within the URL downloader's host-blocking logic allows an authenticated remote user to bypass blocked-h |
| CVE-2026-102578 | Analyzed | 未確認 | CWE-89 | A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, resulting in a SQL ( |
| CVE-2026-102579 | Analyzed | 未確認 | CWE-359 | A flaw was found in Moodle. An incorrect capability check in the grade web service allows an authenticated student to access profile information of other students enrolled in the s |
| CVE-2026-102580 | Analyzed | 未確認 | CWE-470 | A flaw was found in Moodle. An authenticated attacker can supply an improperly validated audience class name to the Report Builder component, allowing arbitrary class instantiation |
| CVE-2026-102581 | Analyzed | 未確認 | CWE-79 | A flaw was found in Moodle. Insufficient output escaping in templates used to display forum posts enables a stored cross-site scripting (XSS) vulnerability. An attacker can inject |
| CVE-2026-102582 | Analyzed | 未確認 | CWE-425 | A flaw was found in Moodle. The manual enrolment management page did not properly check whether the manual enrolment plugin was disabled, allowing users with enrolment permissions |
| CVE-2026-102583 | Analyzed | 未確認 | CWE-425 | A flaw was found in Moodle. An incorrect capability check in the artificial intelligence (AI) editor placement's image generation web service allows an authenticated user to invoke |
| CVE-2026-102584 | Analyzed | 未確認 | CWE-425 | A flaw was found in Moodle. Due to a missing capability check, a low-privileged authenticated user can trigger the recalculation of grade penalties without holding the required per |
| CVE-2026-102585 | Analyzed | 未確認 | CWE-842 | A flaw was found in Moodle. When enrolling a user into a course while assigning them to a group, the application does not verify whether the selected group actually belongs to that |
| CVE-2026-102586 | Analyzed | 未確認 | CWE-79 | A flaw was found in Moodle. Insufficient sanitization of username input on the password reset page allows a remote attacker to conduct a cross-site scripting (XSS) attack. By convi |
| CVE-2026-102587 | Analyzed | 未確認 | CWE-204 | A flaw was found in Moodle. User list filters do not properly enforce visibility restrictions on user profile fields. An authorized user with manager privileges can filter user lis |
| CVE-2026-102588 | Analyzed | 未確認 | CWE-346 | A flaw was found in Moodle. The XML grade import feature lacks proper Cross-Site Request Forgery (CSRF) token validation. By tricking an authenticated user with grade management pe |
| CVE-2026-102598 | Awaiting Analysis | 未確認 | CWE-67 | Werkzeug is a comprehensive WSGI web application library. Prior to 3.1.9, the safe_join function used by send_from_directory can allow a NUL: special-device path because safe_join |
| CVE-2026-102600 | Awaiting Analysis | 未確認 | CWE-1321, CWE-20 | Socket.IO enables bidirectional and low-latency communication for every platform. Prior to 0.1.1, @socket.io/cluster-engine uses inherited object properties when looking up attacke |
| CVE-2026-102601 | Awaiting Analysis | 未確認 | CWE-150 | Flysystem is an open source file storage library for PHP. Prior to 3.35.3, the default WhitespacePathNormalizer in src/WhitespacePathNormalizer.php used by Filesystem across adapte |
| CVE-2026-102616 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in risesoft-y9 WorkFlow-Engine up to 9.6.10. Impacted is the function getByIdAndYear of the file CustomHistoricProcessServiceImpl.java of the component |
| CVE-2026-102620 | Deferred | 未確認 | CWE-189, CWE-190 | A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the function FoFiTrueType::cvtSfnts of the file fofi/FoFiTrueType.cc. This manipulation |
| CVE-2026-102621 | Deferred | 未確認 | CWE-189, CWE-190 | A vulnerability was identified in Freedesktop Poppler up to 26.08.0. Affected is the function SplashClip::clipToPath of the file splash/SplashClip.cc. Such manipulation leads to in |
| CVE-2026-102623 | Awaiting Analysis | 未確認 | CWE-476 | A flaw was found in KubeVirt. An authenticated user with permission to create Virtual Machine Instances (VMIs) can cause a Denial of Service (DoS) by submitting a virtual machine d |
| CVE-2026-102630 | Deferred | 未確認 | CWE-348 | UnoPim versions before 2.0.1 and 2.1.1 trust all connecting clients as proxies and honor the X-Forwarded-Host header without validation, allowing unauthenticated attackers to injec |
| CVE-2026-102633 | Awaiting Analysis | 未確認 | CWE-190 | libexpat versions 2.7.2 through 2.8.5 contain an integer overflow vulnerability in expat_realloc() function on 32-bit platforms when computing allocation sizes. Attackers supplying |
| CVE-2026-102634 | Deferred | 未確認 | CWE-694 | SGLang through 0.5.20 in prefill/decode disaggregation mode fails to validate duplicate bootstrap_room fields in /generate requests with Mooncake KV transfer backend. Unauthenticat |
| CVE-2026-102635 | Analyzed | 未確認 | CWE-908 | ImageMagick versions before 7.1.2-32 and 6.9.13-57 contain uninitialized heap memory disclosure in the GIF decoder's application extension handler in coders/gif.c. Attackers can cr |
| CVE-2026-102639 | Deferred | 未確認 | CWE-195 | MobilityDB version 1.3.0 and earlier contains an out-of-bounds read vulnerability in the MEOS binary and library WKB deserialization logic that allows unprivileged database users t |
| CVE-2026-102673 | Analyzed | 未確認 | CWE-346, CWE-693 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.4, 42.5.2, and 43.0.0, popups opened from a sandboxed iframe |
| CVE-2026-102674 | Analyzed | 未確認 | CWE-266, CWE-693 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5, windows opened from a s |
| CVE-2026-102675 | Undergoing Analysis | 未確認 | CWE-346 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5, responses served throug |
| CVE-2026-102676 | Analyzed | 未確認 | CWE-1188, CWE-269 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5, an Electron <webview> g |
| CVE-2026-102677 | Analyzed | 未確認 | CWE-20, CWE-345 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 42.3.3 until 42.10.0, 43.5.0, and 44.0.0-beta.6, Electron's sandboxed p |
| CVE-2026-102697 | Awaiting Analysis | 未確認 | CWE-863 | Ollama versions 0.14.0 before 0.31.2 contain an incorrect authorization vulnerability in the experimental agent mode Bash tool approval mechanism that fails to properly parse shell |
| CVE-2026-102709 | Awaiting Analysis | 未確認 | CWE-200, CWE-501, CWE-822 | Improper validation of non-secure (NS) pointers in multiple TrustZone-M non-secure callable (NSC) entry functions allows an attacker executing in the non-secure world to supply poi |
| CVE-2026-102710 | Awaiting Analysis | 未確認 | CWE-269, CWE-822 | Attacker model / Preconditions: a loaded `TXM_MODULE_USER_MODE | TXM_MODULE_MEMORY_PROTECTION` module issuing kernel dispatch calls, on a build with `TX_ENABLE_EVENT_TRACE`. A u |
| CVE-2026-102711 | Awaiting Analysis | 未確認 | CWE-125, CWE-1284, CWE-345 | Two issues in the ThreadX loadable-module loader, reached when a device loads an attacker-controlled module object via `_txm_module_manager_memory_load` / `_txm_module_manager_in_p |
| CVE-2026-102712 | Awaiting Analysis | 未確認 | CWE-125 | On the first DTLS ClientHello, the parser copies a device-claimed session_id length and validates the ciphersuite-list length against the total record length instead of the rema |
| CVE-2026-102713 | Awaiting Analysis | 未確認 | CWE-125, CWE-770 | The TFTP server accepts a DATA datagram of any size. The dispatcher rejects datagrams shorter than four bytes (nxd_tftp_server.c:1037) and nothing anywhere checks an upper bound |
| CVE-2026-102714 | Awaiting Analysis | 未確認 | CWE-125, CWE-1287, CWE-191, CWE-835 | `_nx_icmpv6_validate_options()` scans the option area with `while (length > 2)` (`common/src/nx_icmpv6_validate_options.c:79`). An area whose size leaves a one- or two-byte residue |
| CVE-2026-102715 | Awaiting Analysis | 未確認 | CWE-787 | Any host on the LAN can send two mDNS records and make the responder write past the end of its transmit packet. The string table stores each name in a slot rounded up to a mu |
| CVE-2026-102716 | Awaiting Analysis | 未確認 | CWE-401 | An unauthenticated client can drain the RTSP server's packet pool with a couple of dozen requests that carry a Session header the parser cannot convert. The Session branch re |
| CVE-2026-102717 | Deferred | 未確認 | CWE-125, CWE-457 | MQTT WebSocket setter ABI mismatch may disclose memory or cause a crash |
| CVE-2026-102718 | Awaiting Analysis | 未確認 | CWE-125 | hey, `_nx_snmp_utility_object_id_get` in the NetX Duo SNMP addon does not validate the claimed OID data length against the actual buffer size when the OID uses BER multibyte len |
| CVE-2026-102719 | Awaiting Analysis | 未確認 | CWE-330 | Predictable DTLS HelloVerifyRequest Cookie in NetX Secure |
| CVE-2026-102720 | Awaiting Analysis | 未確認 | CWE-125 | A DHCP server, or anyone on the LAN who answers a DISCOVER first, can make the client read about a kilobyte past the end of the received message. The option walk keeps a poin |
| CVE-2026-102721 | Awaiting Analysis | 未確認 | CWE-125 | A TFTP server that answers with a short ERROR packet makes the client read up to 64 bytes past the received datagram. Each receive path checks only that the datagram is at le |
| CVE-2026-102722 | Awaiting Analysis | 未確認 | CWE-918 | In the IPv4 PASV path, the FTP Client accepts whatever address was sent in the server's `227` reply. Validation only covers the parse and the non-zero values, thus a malicious serv |
| CVE-2026-102723 | Awaiting Analysis | 未確認 | CWE-476 | NULL Pointer Dereference on MSRP Attribute Table Exhaustion |
| CVE-2026-102724 | Awaiting Analysis | 未確認 | CWE-476 | NULL Pointer Dereference When Evicting the Sole MSRP Attribute |
| CVE-2026-102725 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds Read from Unvalidated MSRP Attribute List Length |
| CVE-2026-102726 | Awaiting Analysis | 未確認 | CWE-125, CWE-835 | Unbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bounds Read |
| CVE-2026-102727 | Awaiting Analysis | 未確認 | CWE-923 | FTP Passive Data Connection Not Bound to the Authenticated Control Peer |
| CVE-2026-102728 | Awaiting Analysis | 未確認 | CWE-126 | Two client-side TLS/DTLS handshake parsers in NetX Secure read fields from a server-supplied message before validating that the message is long enough to contain them. Both are bou |
| CVE-2026-102729 | Awaiting Analysis | 未確認 | CWE-131, CWE-787 | `gx_binres_theme_load()` sizes its theme buffer for the theme it was asked for, and allocates it even when the resource holds no theme with that id. A theme id at or past the theme |
| CVE-2026-102730 | Awaiting Analysis | 未確認 | CWE-1284, CWE-787 | Mounting an attacker-controlled NAND flash image (`lx_nand_flash_open()`) triggers an unbounded out-of-bounds heap **write** in LevelX's NAND flash-translation-layer metadata parse |
| CVE-2026-102757 | Awaiting Analysis | 未確認 | CWE-125, CWE-787, CWE-822, CWE-823, CWE-843 | An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing, in privileged mode, and can use that to clear the MPU enabl |
| CVE-2026-102758 | Awaiting Analysis | 未確認 | CWE-126 | The `_nx_secure_x509_asn1_tlv_block_parse()` function parses ASN.1 TLV (tag-length-value) blocks out of DER-encoded data. It is the primitive underneath all X.509 certificate parsi |
| CVE-2026-102759 | Awaiting Analysis | 未確認 | CWE-354 | NetX Secure TLS accepts an empty application-data record without verifying its message authentication code. In `_nx_secure_verify_mac`, a decrypted application record whose length |
| CVE-2026-102760 | Awaiting Analysis | 未確認 | CWE-416 | When NetX Secure is built with `NX_SECURE_KEY_CLEAR`, every TLS record sent on an active session is wiped after it has been handed to TCP. By then the TCP layer owns the packet cha |
| CVE-2026-102761 | Awaiting Analysis | 未確認 | CWE-787 | NetX Duo's WebSocket client resets the unmasking cursor to the first `NX_PACKET` each time it advances through a chained packet, while the loop's upper bound belongs to the current |
| CVE-2026-102762 | Awaiting Analysis | 未確認 | CWE-401 | The NetX Duo MQTT client leaks the packet carrying a malformed PUBLISH message. Each malformed PUBLISH costs one packet, or one chain of packets, from the network driver's receive |
| CVE-2026-102771 | Deferred | 未確認 | CWE-1336, CWE-791 | A security vulnerability has been detected in Naichen ThinkCMF up to 8.0.7. Affected by this issue is the function MailController::templatePut of the file cmf-api/src/admin/control |
| CVE-2026-102792 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was detected in Ziroom ZHOME A0101 1.0.1.0. This affects the function set_syslog of the file /api/ZRnetwork/set_syslog. The manipulation of the argument conloglevel |
| CVE-2026-102793 | Deferred | 未確認 | CWE-74, CWE-77 | A flaw has been found in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function set_time_zone of the file /api/ZRFirmware/set_time_zone. This manipulation of the argum |
| CVE-2026-102794 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0. This issue affects some unknown processing of the file /api/ZRnetwork/ping. Such manipulation of the argument url lead |
| CVE-2026-102796 | Awaiting Analysis | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wikimedia Foundation Mediawiki - UserPageViewTracker Extension allows SQL Inje |
| CVE-2026-102804 | Deferred | 未確認 | CWE-189, CWE-190 | A vulnerability was detected in Nothings stb up to 2c980bb59875b0d32144a71867fbdebb2f77cd20. The impacted element is the function hexwave_init in the library stb_hexwave.h. Perform |
| CVE-2026-102805 | Deferred | 未確認 | CWE-189, CWE-190 | A flaw has been found in Nothings stb up to 1.16. This affects the function stbi_write_png_to_mem/stbi_write_jpg_core/stbi_write_tga_core in the library stb_image_write.h of the co |
| CVE-2026-102806 | Deferred | 未確認 | CWE-863 | OpenClaw before 2026.9.5 contains an incorrect authorization vulnerability in the Gateway's local media root allowlist that breaks filesystem isolation between sandboxed sessions. |
| CVE-2026-102807 | Deferred | 未確認 | CWE-863 | OpenClaw before 2026.9.4 contains an incorrect authorization vulnerability in the mcp.app.view method that allows read-scoped operators to execute MCP App tools requiring operator. |
| CVE-2026-102808 | Awaiting Analysis | 未確認 | CWE-476 | PX4 Autopilot through 1.17.0 contains a NULL pointer dereference vulnerability in the sd_stress command where the -b byte count parameter is parsed without validation before being |
| CVE-2026-102809 | Awaiting Analysis | 未確認 | CWE-789 | PX4 Autopilot through 1.17.0 contains an uncontrolled stack allocation vulnerability in the file2 test command that fails to validate the write chunk size parameter. Attackers with |
| CVE-2026-102810 | Deferred | 未確認 | CWE-22 | Marmite through 0.4.2 contains a path traversal vulnerability in the development server started by --serve that allows unauthenticated attackers to read arbitrary files. The handle |
| CVE-2026-102811 | Deferred | 未確認 | CWE-306 | Marmite through 0.4.2 contains missing authentication in the development server endpoints /__marmite__/content, /__marmite__/config, and /__marmite__/file/, allowing unauthenticate |
| CVE-2026-102820 | Deferred | 未確認 | CWE-125, CWE-789 | pageant provides a [PageantStream] type that implements [AsyncRead] and [AsyncWrite] traits and can be used to talk to a running Pageant instance. Prior to pageant 0.2.3, the Windo |
| CVE-2026-102821 | Deferred | 未確認 | CWE-400, CWE-770 | Russh is a Rust SSH client and server library. Prior to 0.63.2, an authenticated remote peer can send SSH_MSG_KEXINIT without the required SSH_MSG_KEX_ECDH_INIT and then flood SSH_ |
| CVE-2026-102822 | Deferred | 未確認 | CWE-129 | Russh is a Rust SSH client and server library. Prior to 0.63.1, a connection configured to permit mac=none can negotiate it with a MAC-requiring CTR or CBC block cipher because the |
| CVE-2026-102823 | Deferred | 未確認 | CWE-20 | Russh is a Rust SSH client and server library. Prior to 0.63.1, client_read_authenticated in russh/src/client/encrypted.rs forwards CHANNEL_DATA, CHANNEL_EXTENDED_DATA, CHANNEL_EOF |
| CVE-2026-102824 | Deferred | 未確認 | CWE-327 | Russh is a Rust SSH client and server library. Prior to 0.63.0, the hybrid ML-KEM 768 and X25519 implementation in russh/src/kex/hybrid_mlkem.rs accepts an all-zero 32-byte peer X2 |
| CVE-2026-102825 | Deferred | 未確認 | CWE-307 | Russh is a Rust SSH client and server library. Prior to 0.62.6, the USERAUTH_REQUEST path reached from server::run_stream in russh/src/server/encrypted.rs increments self.common.au |
| CVE-2026-102826 | Analyzed | 未確認 | CWE-77, CWE-78 | simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. Prior to 4.0.0, the default blockUnsaf |
| CVE-2026-102827 | Analyzed | 未確認 | CWE-77, CWE-88 | simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. Prior to 4.0.0, the default blockUnsaf |
| CVE-2026-102828 | Analyzed | 未確認 | CWE-184, CWE-78 | simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. From 3.15.0 until 4.0.1, the default b |
| CVE-2026-102829 | Awaiting Analysis | 未確認 | CWE-184, CWE-78 | simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. Prior to 2.0.1 of the argv-parser pack |
| CVE-2026-102830 | Awaiting Analysis | 未確認 | CWE-79, CWE-94 | JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 3.0.0 until 4.5.11 and 4.6.4, and in |
| CVE-2026-102831 | Awaiting Analysis | 未確認 | CWE-345, CWE-79 | JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.5.0 until 4.5.11 and 4.6.4, from N |
| CVE-2026-102842 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Affected by this issue is the function app_user_login_model.php::ce |
| CVE-2026-102843 | Deferred | 未確認 | CWE-22 | A security flaw has been discovered in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This affects the function hapus of the file application/module |
| CVE-2026-102844 | Deferred | 未確認 | CWE-285, CWE-639 | A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This vulnerability affects the function detail of the file applicat |
| CVE-2026-102845 | Deferred | 未確認 | CWE-200, CWE-284 | A security vulnerability has been detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This issue affects the function error_reporting of the |
| CVE-2026-102846 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Impacted is the function sistem.php::simpan of the file application/m |
| CVE-2026-102847 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The affected element is the function kirim of the file application/modules/w |
| CVE-2026-102874 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in HKUDS AnyTool 0.1.0. Affected is the function subprocess.run of the file anytool/local_server/main.py of the component Execute Endpoint. The manip |
| CVE-2026-102875 | Awaiting Analysis | 未確認 | CWE-22 | VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives. Attackers can craft mali |
| CVE-2026-102876 | Deferred | 未確認 | CWE-639 | SurrealDB before 3.3.0 contains an authorization bypass in HTTP session construction where check_auth() verifies credentials against Surreal-Auth-NS and Surreal-Auth-DB headers but |
| CVE-2026-102877 | Deferred | 未確認 | CWE-918 | Fider before 0.38.0 contains a server-side request forgery vulnerability due to a time-of-check time-of-use gap in URL validation for webhooks and custom OAuth provider endpoints. |
| CVE-2026-102878 | Deferred | 未確認 | CWE-346 | mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers can craft malicious |
| CVE-2026-102879 | Deferred | 未確認 | CWE-918 | ClaraVerse through 0.3.1 contains server-side request forgery protection bypasses in the download_file and scrape_web agent tools. Authenticated users can bypass hostname validatio |
| CVE-2026-1029 | Awaiting Analysis | 未確認 | CWE-79 | IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed |
| CVE-2026-102904 | Awaiting Analysis | 未確認 | CWE-209, CWE-88, CWE-918 | JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.0.0 until 4.5.11 and 4.6.4, the Py |
| CVE-2026-102906 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in 0xshariq github-mcp-server up to 52e764a7d66eac1726fce02ca7bb5a638571801a. This issue affects the function child_process.exec of the file src/gith |
| CVE-2026-102908 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown processing of the file /reviewer_0/admins/assessments/exampr |
| CVE-2026-102909 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer_0/admins/assessments/examproper/btn_fu |
| CVE-2026-102910 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer_0/admins/assessments/ |
| CVE-2026-102911 | Deferred | 未確認 | CWE-77, CWE-78 | A flaw has been found in zosmaai pi-llm-wiki up to 0.11.7. Affected is an unknown function of the file mcp/index.ts of the component wiki_capture_source MCP tool. Executing a manip |
| CVE-2026-102912 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in SourceCodester Online Leave Management System 1.0. This issue affects some unknown processing of the file /admin/?page=reports. The manipulation o |
| CVE-2026-102913 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in SourceCodester Car Driving School Management System 1.0. Impacted is an unknown function of the file /classes/Master.php?f=save_enrollment. T |
| CVE-2026-102925 | Awaiting Analysis | 未確認 | CWE-78 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.13, the generated activate (bash and zsh) and activate.fish scripts place values already escap |
| CVE-2026-102930 | Awaiting Analysis | 未確認 | CWE-494 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.12, download_wheel() accepts pip and setuptools seed wheels fetched for periodic updates or th |
| CVE-2026-102937 | Awaiting Analysis | 未確認 | CWE-78 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.12, BatchActivator.quote() returns prompt text unchanged before activate.bat inserts it into a |
| CVE-2026-102938 | Awaiting Analysis | 未確認 | CWE-93 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.11, PyEnvCfg.write() writes prompt values verbatim to the line-oriented pyvenv.cfg format whil |
| CVE-2026-102983 | Awaiting Analysis | 未確認 | CWE-625, CWE-918 | Astro is a web framework for content-driven websites. From 5.2.0 until 8.2.4, the @astrojs/netlify adapter generates regular expressions for Netlify Image CDN remote-image allowlis |
| CVE-2026-102984 | Awaiting Analysis | 未確認 | CWE-248 | Astro is a web framework for content-driven websites. Prior to 11.1.3, the @astrojs/node adapter builds a request URL from the Host header, and a malformed port can make that URL i |
| CVE-2026-102990 | Deferred | 未確認 | CWE-1333 | basic-ftp is an FTP client for Node.js. Prior to 6.2.1, Client.list() can be forced by a malicious or compromised FTP server to spend quadratic CPU time parsing a directory listing |
| CVE-2026-102991 | Deferred | 未確認 | CWE-22 | Mako is a template library written in Python. Prior to 1.4.2, on Windows, TemplateLookup.get_template() in mako/lookup.py resolves template URIs with posixpath, while Template.__in |
| CVE-2026-102992 | Deferred | 未確認 | CWE-1321 | piscina is a node.js worker pool implementation. Prior to 4.9.4, 5.3.2, and 6.0.0-rc.5, Piscina stores ThreadPool.options in src/index.ts as a plain object that inherits from Objec |
| CVE-2026-102993 | Analyzed | 未確認 | CWE-400, CWE-770 | pypdf is a free and open-source pure-python PDF library. Prior to 6.17.0, a crafted PDF can provide unusually large Roman page-label values that cause pypdf/_page_labels.py to gene |
| CVE-2026-102994 | Analyzed | 未確認 | CWE-400, CWE-407 | pypdf is a free and open-source pure-python PDF library. Prior to 6.18.0, a crafted PDF containing indirect-object identifiers or generation-number tokens that continue for a long |
| CVE-2026-102995 | Analyzed | 未確認 | CWE-400 | pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF can place unusually large source-code or destination-string tokens in a font /ToUnicode mapp |
| CVE-2026-102996 | Analyzed | 未確認 | CWE-400 | pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF can provide a TrueType or Type1 simple font with an unusually large /Widths array, causing p |
| CVE-2026-102997 | Analyzed | 未確認 | CWE-400, CWE-407 | pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF containing a partially malformed /FlateDecode stream with padded data can force pypdf/filter |
| CVE-2026-102998 | Analyzed | 未確認 | CWE-400 | pypdf is a free and open-source pure-python PDF library. Prior to 6.19.0, a crafted PDF with form field values can cause pypdf/generic/_appearance_stream.py appearance-stream gener |
| CVE-2026-102999 | Analyzed | 未確認 | CWE-400, CWE-407 | pypdf is a free and open-source pure-python PDF library. Prior to 6.19.0, a crafted PDF containing many embedded files can cause the dictionary-based attachments API in pypdf/_doc_ |
| CVE-2026-1030 | Awaiting Analysis | 未確認 | CWE-209 | IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 generates an error message that includes sensitive information about its environ |
| CVE-2026-103000 | Analyzed | 未確認 | CWE-400 | pypdf is a free and open-source pure-python PDF library. Prior to 6.19.0, a crafted PDF can provide unusually large alphabetical page-label values that cause pypdf/_page_labels.py |
| CVE-2026-103001 | Analyzed | 未確認 | CWE-471 | PyJWT is a Python implementation of JSON Web Token standards. From 2.11.0 through 2.13.0, PyJWT's PyJWT._merge_options() method can modify a caller-supplied mutable options mapping |
| CVE-2026-103012 | Awaiting Analysis | 未確認 | CWE-696 | Claude Code selected an API key stored by Claude Code, for example from an earlier `/login` or written directly to its configuration, ahead of the user's valid Claude Enterprise or |
| CVE-2026-103040 | Deferred | 未確認 | CWE-502 | LightLLM through 1.2.0 contains a remote code execution vulnerability in the router profiler service when started with --enable_profiling flag. The service exposes an unauthenticat |
| CVE-2026-103041 | Deferred | 未確認 | CWE-502 | LightLLM through 1.2.0 multimodal deployments expose an unauthenticated RPyC cache service with pickle deserialization enabled on all interfaces. Attackers can send crafted seriali |
| CVE-2026-103042 | Deferred | 未確認 | CWE-770 | LightLLM through 1.2.0 contains a memory exhaustion vulnerability in the NCCL control channel when started with --pd_trans_mode nccl, allowing unauthenticated attackers to exhaust |
| CVE-2026-103043 | Deferred | 未確認 | CWE-1333 | anchorme through 3.0.8 contains a regular expression denial of service vulnerability in the IPv6 host extraction regex due to catastrophic backtracking. Attackers can supply specia |
| CVE-2026-103044 | Awaiting Analysis | 未確認 | CWE-22, CWE-91 | XML injection (aka blind XPath injection) vulnerability in The Wikimedia Foundation Mediawiki - EasyTimeline extension allows XML Injection. This issue affects Mediawiki - EasyTim |
| CVE-2026-103045 | Awaiting Analysis | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Refreshed skin allows Stored XSS. This i |
| CVE-2026-103046 | Awaiting Analysis | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Wikimedia Foundation MediaWiki - WikiLambda extension allows Stored XSS. This |
| CVE-2026-103047 | Awaiting Analysis | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - CentralAuth extension allows Stored XSS. |
| CVE-2026-103048 | Awaiting Analysis | 未確認 | CWE-601 | URL redirection to untrusted site ('open redirect') vulnerability in The Wikimedia Foundation Mediawiki - Collection extension allows Fake the Source of Data. This issue affects M |
| CVE-2026-103049 | Awaiting Analysis | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Cargo extension allows Reflected XSS. Th |
| CVE-2026-103050 | Awaiting Analysis | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - MassMessage extension allows Stored XSS. |
| CVE-2026-103051 | Awaiting Analysis | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - CentralNotice extension allows Stored XSS |
| CVE-2026-103053 | Deferred | 未確認 | CWE-306 | AiSOC versions 9.0.0 before 12.0.0 fail to enforce authentication on the response-action API endpoints when AISOC_DEV_MODE is enabled and AISOC_ACTIONS_SERVICE_TOKEN is empty in th |
| CVE-2026-103054 | Deferred | 未確認 | CWE-639 | AiSOC versions before 12.0.0 contain an authorization bypass vulnerability in the MSSP module that allows authenticated users to add arbitrary tenants to portfolios they own. Attac |
| CVE-2026-103055 | Deferred | 未確認 | CWE-321 | AiSOC versions 7.5.0 before 12.0.0 use a hard-coded constant for JWT verification in the realtime WebSocket and SSE service when the AISOC_REALTIME_JWT_SECRET environment variable |
| CVE-2026-103056 | Deferred | 未確認 | CWE-78 | AiSOC versions 7.2.0 before 12.0.0 contain a command injection vulnerability in the actions service that builds CrowdStrike Real Time Response command strings by interpolating unes |
| CVE-2026-103057 | Deferred | 未確認 | CWE-306 | AiSOC versions 5.1.0 before 12.0.0 contain an authentication bypass vulnerability in the realtime service internal endpoints POST /internal/agent-event and POST /internal/push. Att |
| CVE-2026-103087 | Deferred | 未確認 | CWE-674 | Uncontrolled recursion in the Gosub browser engine (gosub-engine) through 0.1.0 and main before commit 46868b3 allows a remote attacker to cause a Denial of Service (stack exhausti |
| CVE-2026-103088 | Deferred | 未確認 | CWE-24 | Handlebars.java before 4.5.5 allows directory traversal. In handlebars-springmvc 4.5.3 and 4.5.4, the path-containment fix for CVE-2026-63490 validates template locations as raw pe |
| CVE-2026-103099 | Analyzed | 未確認 | CWE-617 | Pexip Infinity before 41.1 is affected by improper input validation in the media implementation that allows a remote attacker to trigger a software abort resulting in a denial of s |
| CVE-2026-1031 | Awaiting Analysis | 未確認 | CWE-79 | IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows an unauthentica |
| CVE-2026-103100 | Analyzed | 未確認 | CWE-617 | Pexip Infinity before 40.1 is affected by improper input validation in the signaling implementation that allows a malicious attacker to trigger a software abort resulting in a deni |
| CVE-2026-103101 | Analyzed | 未確認 | CWE-770 | Pexip Infinity 30.0 through 40.x before 41.0 is affected by improper input validation in the web server that allows a malicious attacker to render a Pexip Infinity node inaccessibl |
| CVE-2026-103102 | Analyzed | 未確認 | CWE-770 | Pexip Infinity before 41.0 is affected by improper input validation in the signaling implementation which allows a remote attacker to trigger a software abort resulting in a denial |
| CVE-2026-103104 | Analyzed | 未確認 | CWE-617 | Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation which allows a remote attacker to trigger a software abor |
| CVE-2026-103105 | Analyzed | 未確認 | CWE-863 | Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper access control on a product-internal API which allows an attacker with local access to a node within a |
| CVE-2026-103106 | Analyzed | 未確認 | CWE-669 | Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation within an internal Pexip Infinity service that allows an attacker with local access |
| CVE-2026-103108 | Analyzed | 未確認 | CWE-617 | Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation in the media implementation that allows a remote attacker to trigger a software abor |
| CVE-2026-103109 | Analyzed | 未確認 | CWE-787 | Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation that allows a remote attacker to trigger memory corruptio |
| CVE-2026-103110 | Analyzed | 未確認 | CWE-787 | Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation that allows a remote attacker to execute code remotely as an unprivileged user on a P |
| CVE-2026-103111 | Awaiting Analysis | 未確認 | CWE-787 | PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data. |
| CVE-2026-103113 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in OS4ED openSIS-Classic up to 9.3. The affected element is the function save action of the file modules/students/Student.php of the component Genera |
| CVE-2026-103114 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in OS4ED openSIS-Classic up to 9.3. The impacted element is the function DBQuery_assignment of the file modules/grades/Assignments.php of the compone |
| CVE-2026-103115 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in OS4ED openSIS-Classic up to 9.3. This affects an unknown function of the file functions/CustomFieldsFnc.php of the component Student Search. |
| CVE-2026-103116 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in OS4ED openSIS-Classic up to 9.3. This impacts the function DBQuery of the file functions/GetStuListFnc.php of the component Student List Search En |
| CVE-2026-103117 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in OS4ED openSIS-Classic up to 9.3. Affected is the function db_properties of the file functions/DatabaseInc.php of the component Save Da |
| CVE-2026-103118 | Awaiting Analysis | 未確認 | CWE-404, CWE-674 | A vulnerability was detected in GraphicsMagick up to 1.3.47. Affected by this vulnerability is the function ExtractPostscript of the file coders/wpg.c of the component WPG File Han |
| CVE-2026-103222 | Deferred | 未確認 | CWE-189, CWE-190 | A vulnerability was determined in Blosc C-Blosc2 up to 3.3.2. This impacts the function blosclz_decompress of the file blosc/blosclz.c of the component blosclz Decompression. Execu |
| CVE-2026-103226 | Awaiting Analysis | 未確認 | CWE-119, CWE-121 | A vulnerability was identified in Artifex Ghostscript up to 10.07.0. Affected is the function type1_callsubr of the file devices/vector/gdevpsfx.c of the component Pdfwrite. The ma |
| CVE-2026-103227 | Deferred | 未確認 | CWE-119, CWE-120 | A weakness has been identified in GPAC up to 26.07.0. Affected by this issue is the function gf_dash_resolve_url of the file src/media_tools/dash_client.c of the component DASH Cli |
| CVE-2026-103229 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This issue affects the function mysqli_query of the file ad |
| CVE-2026-103230 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Impacted is the function mysqli_query of the file User |
| CVE-2026-103231 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. The affected element is the function mysqli_query of t |
| CVE-2026-103232 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This affects the function mysqli_query of the file adm |
| CVE-2026-103233 | Deferred | 未確認 | CWE-285, CWE-639 | A security vulnerability has been detected in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This impacts an unknown function of the fi |
| CVE-2026-103235 | Deferred | 未確認 | CWE-639, CWE-915 | MISP contains a mass assignment vulnerability in the event delegation feature. When a user with delegation permission submits a delegation request, the application authorized the u |
| CVE-2026-103237 | Deferred | 未確認 | CWE-20, CWE-639 | MISP contains an improper input validation vulnerability in its ORM save path. When a user submits data through various endpoints (attribute add/edit, event edit, free-text import, |
| CVE-2026-103239 | Deferred | 未確認 | CWE-284, CWE-862 | MISP contains a privilege escalation vulnerability in the tag collection creation and editing functionality. The affected actions accepted the full HTTP request payload and passed |
| CVE-2026-103241 | Analyzed | 未確認 | CWE-404 | A flaw has been found in vllm-project vLLM up to 0.26.0. This vulnerability affects unknown code of the file rust/src/parser/src/unified/gemma4.rs of the component Gemma4UnifiedPar |
| CVE-2026-103242 | Awaiting Analysis | 未確認 | CWE-122 | A heap-based buffer overflow flaw was found in rpm. RPMTAG_FILESIGNATURES in a crafted, unsigned RPM package's main header is declared with the wrong header type, causing hex2binv( |
| CVE-2026-103243 | Deferred | 未確認 | CWE-918 | LightLLM through 1.2.0 fails to validate image_url and audio_url parameters in multimodal endpoints, allowing unauthenticated attackers to perform server-side request forgery. Atta |
| CVE-2026-103270 | Deferred | 未確認 | CWE-306 | LightLLM through 1.2.0 mounts reinforcement learning control routes on the public HTTP API without authentication checks. Unauthenticated attackers can call endpoints like /pause_g |
| CVE-2026-103321 | Deferred | 未確認 | CWE-20, CWE-79 | MISP contains a stored cross-site script (XSS) vulnerability in the event graph preview feature. The event graph preview image field was accepted and stored without server-side va |
| CVE-2026-103387 | Deferred | 未確認 | CWE-248 | A weakness has been identified in garycourt uri-js up to 4.4.1. This affects the function URI.parse of the file src/schemes/mailto.ts of the component Mailto Header Handler. This m |
| CVE-2026-103388 | Deferred | 未確認 | CWE-79 | MISP renders the source field of a Galaxy Cluster as a clickable hyperlink whenever the stored value passes PHP's FILTER_VALIDATE_URL validation. Because FILTER_VALIDATE_URL accept |
| CVE-2026-103389 | Deferred | 未確認 | CWE-20, CWE-79 | MISP contains a stored cross-site scripting (XSS) vulnerability in the galaxy icon handling path. The icon field of a galaxy object was persisted without any server-side validation |
| CVE-2026-103395 | Deferred | 未確認 | CWE-502 | LightLLM through 1.2.0 visual_only deployments expose an unauthenticated RPyC service with allow_pickle enabled that deserializes attacker-supplied arguments in the remote_infer_im |
| CVE-2026-103396 | Deferred | 未確認 | CWE-863 | bbs-go through 4.4.6 contains a permission bypass vulnerability in the AdminMiddleware authorization logic where the read-only dashboard.user.view permission rule matches the /api/ |
| CVE-2026-103397 | Deferred | 未確認 | CWE-290 | OpenSave before 2.4.0-beta.1 fails to validate sender identity in WAN relay requests, allowing unpaired room members to impersonate paired devices by spoofing the RelayMessage From |
| CVE-2026-103398 | Deferred | 未確認 | CWE-73 | OpenSave through 2.4.0 fails to properly validate save paths supplied by paired peers in the manifest request handler. Attackers can specify arbitrary directories outside configure |
| CVE-2026-103399 | Awaiting Analysis | 未確認 | CWE-444 | A flaw was found in SoupServer (libsoup). When an HTTP/1.x client sends a request with Expect: 100-continue and a request body, and SoupServer returns an early final (non-1xx) resp |
| CVE-2026-103432 | Deferred | 未確認 | CWE-121 | apcupsd through 3.14.14 has an sscanf stack-based buffer overflow in getupsvar() in src/cgi/upsfetch.c (used by upsstats.cgi, multimon.cgi, and upsfstats.cgi), a related issue to C |
| CVE-2026-103436 | Deferred | 未確認 | CWE-457 | apcupsd through 3.14.14 discloses uninitialized stack memory in getupsvar() in src/cgi/upsfetch.c (used by upsstats.cgi, multimon.cgi, and upsfstats.cgi. On the single-field path, |
| CVE-2026-103437 | Awaiting Analysis | 未確認 | CWE-80 | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki ReadingLists extension allows Reflected XSS. This |
| CVE-2026-103438 | Awaiting Analysis | 未確認 | CWE-80 | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki Wikistories extension allows Cross-Site Scripting |
| CVE-2026-103439 | Awaiting Analysis | 未確認 | CWE-80 | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki Wikbase extension allows Cross-Site Scripting (XSS |
| CVE-2026-103440 | Awaiting Analysis | 未確認 | CWE-202 | Exposure of sensitive information through data queries vulnerability in The Wikimedia Foundation MediaWiki PageTriage extension allows Information Elicitation. This issue affects |
| CVE-2026-103441 | Awaiting Analysis | 未確認 | CWE-502 | Deserialization of untrusted data vulnerability in The Wikimedia Foundation MediaWiki Wikibase extension allows Leverage Executable Code in Non-Executable Files. This issue affect |
| CVE-2026-103442 | Awaiting Analysis | 未確認 | CWE-15 | External control of system or configuration setting vulnerability in The Wikimedia Foundation MediaWiki CentralAuth extension allows Code Injection. This issue affects MediaWiki C |
| CVE-2026-103443 | Awaiting Analysis | 未確認 | CWE-80 | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki Collection (Book) extension allows XSS Targeting N |
| CVE-2026-103444 | Awaiting Analysis | 未確認 | CWE-80 | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki WikiForum extension allows Stored XSS. This issue |
| CVE-2026-103445 | Awaiting Analysis | 未確認 | CWE-80 | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki Page_Forms extension allows Stored XSS. This issu |
| CVE-2026-103446 | Awaiting Analysis | 未確認 | CWE-639 | Authorization bypass through User-Controlled key vulnerability in The Wikimedia Foundation MediaWiki WikiLambda extension allows Authentication Bypass. This issue affects MediaWik |
| CVE-2026-103470 | Awaiting Analysis | 未確認 | CWE-266 | In Internet2 Grouper before 7.5.1 (in some configurations), a user who is allowed to create or edit rules in the User Interface can escalate privileges. |
| CVE-2026-103471 | Deferred | 未確認 | CWE-770 | restbed through 5.0.0 buffers HTTP request headers without enforcing a maximum size limit, allowing remote unauthenticated attackers to exhaust server memory. Attackers can open TC |
| CVE-2026-103472 | Deferred | 未確認 | CWE-770 | restbed through 5.0.0 accepts WebSocket frames with declared payload lengths up to 2^63 bytes and buffers the payload without size limits in an unbounded stream buffer. Remote unau |
| CVE-2026-103473 | Awaiting Analysis | 未確認 | CWE-78 | Deno versions 2.7.0 through 2.9.7 on Windows contain a command injection vulnerability in node:child_process where shell arguments are escaped for the wrong shell type. Attackers c |
| CVE-2026-103474 | Deferred | 未確認 | CWE-434 | yii2-starter-kit through 4.2.0 fails to validate file types in the backend storage upload actions, allowing authenticated managers to upload PHP files. Attackers with manager role |
| CVE-2026-103475 | Deferred | 未確認 | CWE-489 | yii2-starter-kit through 4.2.0 exposes the Yii debug and Gii modules to all IP addresses by setting allowedIPs to ['*'] in its default development configuration. Unauthenticated re |
| CVE-2026-103476 | Deferred | 未確認 | CWE-639 | yii2-starter-kit through 4.2.0 fails to validate article publication status in the attachment-download endpoint, allowing unauthenticated attackers to download files from draft art |
| CVE-2026-103500 | Modified | 未確認 | CWE-122, CWE-787 | An attacker could cause a heap buffer overflow by getting a user to open an email that is greater than or equal to 2GB in size. This vulnerability was fixed in Thunderbird 157, Thu |
| CVE-2026-103547 | Deferred | 未確認 | CWE-863 | In ldapd in OpenBSD 7.8 before errata 057 and 7.9 before errata 021, delegated BSD authentication results are correlated only by the LDAP child process client file descriptor and L |
| CVE-2026-103548 | Awaiting Analysis | 未確認 | CWE-257, CWE-260, CWE-261 | Improperly stored passwords in the config file in Itron MV-90 xi 3.0 allows attackers to decode the passwords and password histories to gain access to the MV-90 application as any |
| CVE-2026-103584 | Awaiting Analysis | 未確認 | CWE-80 | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki CommonsMetadata extension allows Cross-Site Script |
| CVE-2026-103585 | Awaiting Analysis | 未確認 | CWE-80 | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki MediaSearch extension allows Cross-Site Scripting |
| CVE-2026-103587 | Deferred | 未確認 | CWE-79 | QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the back-office Hotel Reservation System Book Now search, where date_to and id_room_type parameters |
| CVE-2026-103588 | Deferred | 未確認 | CWE-79 | QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the exceptions field of the back-office Transplant a module form. Attackers can craft a malicious l |
| CVE-2026-103589 | Deferred | 未確認 | CWE-79 | QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the back-office room type editor that fails to escape room_num, floor, and comment field values in |
| CVE-2026-103590 | Deferred | 未確認 | CWE-79 | QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the back-office room type editor's length of stay fields. Attackers can induce authenticated admini |
| CVE-2026-103591 | Deferred | 未確認 | CWE-73 | DeepWiki-Open through commit d92819a contains an unauthenticated arbitrary file read vulnerability in the GET /codemap/file endpoint via the repo_url parameter. Attackers can suppl |
| CVE-2026-103592 | Deferred | 未確認 | CWE-348 | simple-php-router through 5.4.1.7 contains an IP restriction bypass vulnerability in the IpRestrictAccess middleware that allows remote unauthenticated attackers to bypass IP white |
| CVE-2026-1037 | Awaiting Analysis | 未確認 | CWE-79 | IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows an unauthentica |
| CVE-2026-10420 | Deferred | 未確認 | CWE-822 | Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower: before 102d3dc75cf8e58e68e4bea54ae3c803992c91be. |
| CVE-2026-10518 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab EE affecting all versions from 17.9 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allo |
| CVE-2026-10542 | Analyzed | 未確認 | CWE-639 | Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 fail to validate channel action ownership which allows channel managers to update acti |
| CVE-2026-10556 | Analyzed | 未確認 | CWE-476, CWE-754 | Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 fail to validate null entries in Microsoft Graph webhook notification payloads, which |
| CVE-2026-10575 | Analyzed | 未確認 | CWE-122 | IBM MQ could allow an authenticated attacker to cause a denial of service or potentially escalate privileges due to a heap buffer overflow when processing MQPUT operations with mal |
| CVE-2026-10594 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-10726 | Awaiting Analysis | 未確認 | CWE-295, CWE-73 | Cato Windows SDP Client before version 6.12.6 contains an arbitrary file disclosure vulnerability. A low-privileged local user can cause the Windows service, running as Local Syste |
| CVE-2026-10739 | Awaiting Analysis | 未確認 | CWE-23, CWE-59, CWE-73 | Cato Networks SDP Client for Windows before 6.12.6 allows a local user to delete arbitrary files with SYSTEM privileges via improper validation of a client-supplied SID over a loca |
| CVE-2026-10744 | Awaiting Analysis | 未確認 | CWE-122 | IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially escalate privileges due to an integer overflow in MQ |
| CVE-2026-10747 | Awaiting Analysis | 未確認 | CWE-122 | IBM MQ Appliance could allow a remote attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow in protocol message processing befor |
| CVE-2026-10751 | Awaiting Analysis | 未確認 | CWE-502 | IBM MQ Java and JMS client libraries could allow an authenticated attacker to execute arbitrary code on client applications due to a deserialization filter bypass in exception hand |
| CVE-2026-10758 | Awaiting Analysis | 未確認 | CWE-190 | Esri LERC is an open-source image or raster format which supports rapid encoding and decoding for any pixel type. A Heap based Out-of-Bounds Write via Integer Overflow in LERC vers |
| CVE-2026-10764 | Deferred | 未確認 | CWE-321 | Information disclosure in BVMS 4.5 up to 12.3 including allows man-in-the-middle attackers to gain unauthorized access to sensitive data. |
| CVE-2026-10821 | Deferred | 未確認 | CWE-74 | The Yoast SEO Premium WordPress plugin before 27.6.1 does not sanitize control characters from redirect origins before writing them to the site's Apache configuration file when the |
| CVE-2026-10832 | Awaiting Analysis | 未確認 | CWE-770 | A flaw was found in the DERDecoder class within wildfly-elytron-asn1. A remote attacker can exploit this resource exhaustion vulnerability by sending a specially crafted DER (Disti |
| CVE-2026-10841 | Undergoing Analysis | 未確認 | CWE-444 | IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are vulnerable to HTTP request smuggling. |
| CVE-2026-10853 | Analyzed | 未確認 | CWE-470 | IBM MQ could allow an authenticated attacker with cluster access to cause a denial of service or potentially execute arbitrary code due to improper validation of cluster command me |
| CVE-2026-10858 | Awaiting Analysis | 未確認 | CWE-122 | IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer underflo |
| CVE-2026-11314 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-11355 | Deferred | 未確認 | CWE-862 | The DT LMS – elearning, WordPress LMS plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple AJAX handlers (including |
| CVE-2026-11363 | Deferred | 未確認 | CWE-502 | The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.14.6 via deseriali |
| CVE-2026-11375 | Analyzed | 未確認 | CWE-122 | IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a stack buffer overflow when processing XA transaction identi |
| CVE-2026-11378 | Analyzed | 未確認 | CWE-190 | IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow in distribution list processing. |
| CVE-2026-11381 | Undergoing Analysis | 未確認 | CWE-122 | IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to improper validation of message distribution list structures. |
| CVE-2026-11388 | Awaiting Analysis | 未確認 | CWE-415 | Double Free vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.1.0 befo |
| CVE-2026-11389 | Awaiting Analysis | 未確認 | CWE-125, CWE-685, CWE-843 | Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Core |
| CVE-2026-11415 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-11432 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-11446 | Deferred | 未確認 | CWE-862 | The Booktics – Booking Calendar for Appointments and Service Businesses plugin for WordPress is vulnerable to unauthorized modification of data in all versions up to, and including |
| CVE-2026-11496 | Deferred | 未確認 | CWE-862 | The Woo PDF Invoice Builder plugin (also distributed as "PDF Builder for WooCommerce") for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and in |
| CVE-2026-11537 | Awaiting Analysis | 未確認 | CWE-650 | IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet. |
| CVE-2026-11538 | Analyzed | 未確認 | CWE-117 | IBM WebSphere Application Server 9.0 and 8.5 is affected by a log injection vulnerability through crafted LTPA token cookies. |
| CVE-2026-11539 | Awaiting Analysis | 未確認 | CWE-306 | IBM WebSphere Application Server 9.0 and 8.5 is affected by an authentication bypass vulnerability in the SOAP/JMX connector. |
| CVE-2026-11540 | Awaiting Analysis | 未確認 | CWE-863 | IBM WebSphere Application Server 9.0 and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet. |
| CVE-2026-11545 | Awaiting Analysis | 未確認 | CWE-862 | IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to obtain sensitive information from the administrative console due to missing authorization checks. |
| CVE-2026-11548 | Awaiting Analysis | 未確認 | CWE-444 | IBM WebSphere Application Server 8.5 and 9.0, and and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are affected by an HTTP request smuggling vulnerability. |
| CVE-2026-11549 | Awaiting Analysis | 未確認 | CWE-284 | IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are affected by a virtual host bypass vulnerability. |
| CVE-2026-11573 | Deferred | 未確認 | CWE-674 | Uncontrolled recursion (CWE-674) in the QDomDocument/QDomNode serialization path of the Qt XML module (QtXml, qtbase). QDomElementPrivate::save() and QDomNodePrivate::save() recurs |
| CVE-2026-11608 | Deferred | 未確認 | CWE-79 | The WP Customer Reviews plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpcr3_fname' parameter in all versions up to, and including, 3.7.8 due to insu |
| CVE-2026-11613 | Deferred | 未確認 | CWE-98 | The Divi Ajax Filter plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.1.2 via the 'custom_loop_template' parameter parameter. This |
| CVE-2026-1168 | Analyzed | 未確認 | CWE-770 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have |
| CVE-2026-11710 | Awaiting Analysis | 未確認 | CWE-444 | IBM WebSphere Application Server 8.5 is affected by an HTTP request smuggling vulnerability due to improper handling of Content-Length headers. |
| CVE-2026-11711 | Awaiting Analysis | 未確認 | CWE-502 | IBM WebSphere Application Server 9.0 and 8.5 is affected by a deserialization vulnerability in the Name Service component. |
| CVE-2026-11716 | Awaiting Analysis | 未確認 | CWE-122 | IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code during queue manager startup |
| CVE-2026-11722 | Awaiting Analysis | 未確認 | CWE-444 | IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are affected by an HTTP request smuggling vulnerability. |
| CVE-2026-11725 | Awaiting Analysis | 未確認 | CWE-190 | IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow in MQINQ request processing. |
| CVE-2026-11726 | Awaiting Analysis | 未確認 | CWE-125 | IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to obtain sensitive information or cause a denial of service due to improper validation of messa |
| CVE-2026-11727 | Awaiting Analysis | 未確認 | CWE-122 | IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 IBM MQ C client could allow a remote attacker to cause a denial of service or potentially execute arbitrary code due to improper valid |
| CVE-2026-11728 | Awaiting Analysis | 未確認 | CWE-787 | IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 C |
| CVE-2026-11729 | Awaiting Analysis | 未確認 | CWE-502 | IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 C |
| CVE-2026-11744 | Awaiting Analysis | 未確認 | CWE-79 | An input validation vulnerability exists in the PaperCut Hive embedded application for Ricoh devices. The application fails to properly sanitize input received during the NFC card |
| CVE-2026-11757 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in KA Informatics Technologies Ltd. Co. Bar Association Website allows Reflected |
| CVE-2026-11765 | Deferred | 未確認 | CWE-88 | Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Argume |
| CVE-2026-11796 | Awaiting Analysis | 未確認 | CWE-306 | Asset Suite allows unauthenticated users to access PropertiesReloadServlet, CacheFlushServlet, MetadataCacheFlushServlet and ResourceBundleReloadServlet, which could result in deni |
| CVE-2026-11813 | Deferred | 未確認 | CWE-276 | A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a local authenticated user to escalate privileges. |
| CVE-2026-11821 | Deferred | 未確認 | CWE-862 | The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4. |
| CVE-2026-11838 | Deferred | 未確認 | CWE-306 | Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation |
| CVE-2026-11864 | Awaiting Analysis | 未確認 | CWE-643 | IBM Cloud Pak for Business Automation 26.0.0 through 26.0.0 Interim Fix 001, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 008, and 24.0.0 through 24.0.0 |
| CVE-2026-11871 | Deferred | 未確認 | CWE-200 | The Team Members WordPress plugin before 9.3 does not perform any authorization or visibility check in an unauthenticated AJAX action that returns full team member records by ID, a |
| CVE-2026-11873 | Awaiting Analysis | 未確認 | CWE-209 | An Apache-proxied Dogtag CA REST endpoint exposed by IdM (POST /ca/rest/certrequests) returns HTTP 500 with internal Java stack traces for unauthenticated malformed requests. The s |
| CVE-2026-11874 | Rejected | 未確認 | Rejected reason: Red Hat Product Security has come to the conclusion that this CVE is not needed. | |
| CVE-2026-11891 | Awaiting Analysis | 未確認 | CWE-416 | Use After Free vulnerability in Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GP |
| CVE-2026-11895 | Deferred | 未確認 | CWE-79 | The HT Mega Addons for Elementor – Elementor Widgets & Template Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Data Table 'display_options' Setting i |
| CVE-2026-11899 | Deferred | 未確認 | CWE-862 | The PDF Builder for WooCommerce. Create invoices,packing slips and more plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.0.11. Thi |
| CVE-2026-11918 | Awaiting Analysis | 未確認 | CWE-184 | IBM ContextForge MCP Gateway <= v1.0.4 IBM mcp-context-forge could allow an authenticated user to bypass protection mechanisms due to incomplete recursive inspection of nested payl |
| CVE-2026-11921 | Awaiting Analysis | 未確認 | CWE-522 | IBM Verify Identity Access containers may not apply management password change operations correctly. |
| CVE-2026-11926 | Awaiting Analysis | 未確認 | CWE-400 | IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources. |
| CVE-2026-11927 | Awaiting Analysis | 未確認 | CWE-74 | IBM Security Verify Identity Access reverse proxy may allow parameters to be injected in requests to third party services. |
| CVE-2026-11928 | Awaiting Analysis | 未確認 | CWE-787 | IBM Verify Identity Access is vulnerable to a buffer overflow attack. |
| CVE-2026-11929 | Awaiting Analysis | 未確認 | CWE-327 | IBM Security Verify Identity Access Reverse Proxy in certain configurations may provide weaker than expected cryptographic validation of user supplied data. |
| CVE-2026-11934 | Awaiting Analysis | 未確認 | CWE-285 | IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to improper validation of user supplied input. |
| CVE-2026-11984 | Deferred | 未確認 | CWE-862 | The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.8.16 due to a missing capability check |
| CVE-2026-11993 | Analyzed | 未確認 | CWE-770 | Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 fail to properly enforce the limit of concurrent files being processed and handled fai |
| CVE-2026-11996 | Deferred | 未確認 | CWE-79 | The Advanced Popups plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'Notification Button Link' Field in all versions up to, and including, 1.2.3 due to insuff |
| CVE-2026-12037 | Deferred | 未確認 | CWE-918 | The Asset CleanUp: Page Speed Booster plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.4.0.5 via the 'page_url' parameter. |
| CVE-2026-12042 | Deferred | 未確認 | CWE-79 | The WP2Social Auto Publish plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.4.12 due to insufficient inp |
| CVE-2026-12101 | Awaiting Analysis | 未確認 | CWE-289 | IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to improper validation of user supplied requests. |
| CVE-2026-12106 | Deferred | 未確認 | CWE-918 | The Auto Upload Images plugin for WordPress is vulnerable to Limited Server-Side Request Forgery in all versions up to, and including, 3.3.2 via the downloadImage function. This ma |
| CVE-2026-12150 | Awaiting Analysis | 未確認 | CWE-121 | IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 C |
| CVE-2026-12215 | Deferred | 未確認 | CWE-434 | The OTP Login & Register Woocommerce plugin for WordPress is vulnerable to Authentication Bypass via OTP Brute Force in all versions up to, and including, 2.7.2. The vulnerability |
| CVE-2026-12227 | Deferred | 未確認 | CWE-98 | The Visual Composer Website Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 45.16.0 via the `vcv-template` parameter. This |
| CVE-2026-12230 | Deferred | 未確認 | CWE-79 | The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'layout_custom_css' parameter in |
| CVE-2026-12258 | Deferred | 未確認 | CWE-284 | Inadequate access control in Hiperdino’s REST v1.0 API. The public endpoint ‘customer/check’ could allow an authenticated attacker to enter a telephone number or an email address. |
| CVE-2026-12264 | Awaiting Analysis | 未確認 | CWE-434 | Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Arbitrary file write via HA Failover Config sync upload leading to remote code execution. |
| CVE-2026-12265 | Awaiting Analysis | 未確認 | CWE-284 | Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Insufficient access control in HA failover endpoint leading to destructive PostgreSQL database operations. |
| CVE-2026-12267 | Awaiting Analysis | 未確認 | CWE-20 | ManageEngine DDI Central versions below 6201 are vulnerable to Command injection in Windows DNS Query Resolution Policy name field leading to remote code execution. |
| CVE-2026-12268 | Awaiting Analysis | 未確認 | CWE-20 | ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT record push leading to remote code execution. |
| CVE-2026-12269 | Awaiting Analysis | 未確認 | CWE-269, CWE-434 | Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived configuration injection vulnerability in the HA configuration workflow. This issue could allow an authenti |
| CVE-2026-12284 | Analyzed | 未確認 | CWE-346 | Mattermost Desktop App versions <=6.2 6.2.2.0 fails to validate the IPC sender in the leaveCall handler which allows a malicious or compromised Mattermost server (or a user with sc |
| CVE-2026-12285 | Awaiting Analysis | 未確認 | CWE-416 | Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileg |
| CVE-2026-12342 | Awaiting Analysis | 未確認 | CWE-20 | This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated user remote code execution on the IdentityIQ server due to improper input validation of submitte |
| CVE-2026-12345 | Awaiting Analysis | 未確認 | CWE-59 | The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic link, causi |
| CVE-2026-12351 | Awaiting Analysis | 未確認 | CWE-74 | IBM MQ 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 LTS, and 10.0.0.0 could allow a remote attacker to execute ar |
| CVE-2026-12354 | Awaiting Analysis | 未確認 | CWE-913 | IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 C |
| CVE-2026-12355 | Awaiting Analysis | 未確認 | CWE-74 | IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 C |
| CVE-2026-12358 | Awaiting Analysis | 未確認 | CWE-674 | IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources. |
| CVE-2026-12370 | Awaiting Analysis | 未確認 | CWE-1336 | ZohoCorp ManageEngine OpManager, NetFlow Analyzer, and Network Configuration Manager versions 12.8.667 and below were vulnerable to a Server-Side Template Injection vulnerability i |
| CVE-2026-12384 | Deferred | 未確認 | CWE-639 | Authorization bypass through User-Controlled key vulnerability in TECHIN2B TECHIN2B Application allows Privilege Abuse. This issue affects TECHIN2B Application: from V1.0.7676.13 |
| CVE-2026-12387 | Awaiting Analysis | 未確認 | CWE-416 | Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileg |
| CVE-2026-12402 | Deferred | 未確認 | CWE-79 | The OTP Login & Register Woocommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'fb-config' Setting in all versions up to, and including, 2.7.3 due to in |
| CVE-2026-1242 | Deferred | 未確認 | CWE-863 | The BlockSpare plugin for WordPress is vulnerable to authorization bypass due to incorrect logic in the permission callback in all versions up to, and including, 4.2.6 due to the u |
| CVE-2026-12470 | Deferred | 未確認 | CWE-269 | The CMP – Coming Soon & Maintenance Plugin by NiteoThemes plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a mis |
| CVE-2026-12483 | Deferred | 未確認 | CWE-434 | The LearnDash LMS plugin for WordPress is vulnerable to Unrestricted File Type Upload in versions up to and including 5.1.5. This is due to insufficient input validation in the 'le |
| CVE-2026-12518 | Awaiting Analysis | 未確認 | CWE-269 | A local privilege escalation vulnerability in the Logitech Logi Options+ updater service on Windows allows a low-privileged local user to execute arbitrary code as SYSTEM. |
| CVE-2026-12526 | Deferred | 未確認 | CWE-287 | The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.7 does not verify that the requester is authorized to edit the targeted user account in the update-user action of |
| CVE-2026-1255 | Deferred | 未確認 | CWE-200 | The YS LeadGen plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4 due to the 'ysleadgen_get_captured_data' AJAX action |
| CVE-2026-12559 | Deferred | 未確認 | CWE-79 | A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText Vendor Invoice Management for SAP Solutions Capture Validation application. Under certain conditio |
| CVE-2026-1256 | Deferred | 未確認 | CWE-79 | The YS LeadGen plugin for WordPress is vulnerable to authorization bypass and Stored Cross-Site Scripting via multiple AJAX endpoints in all versions up to, and including, 2.1.4 du |
| CVE-2026-12611 | Deferred | 未確認 | CWE-400 | A client may issue HTTP/2 requests to a Jetty server that result in blocking writes that are never unblocked, eventually causing all threads to be blocked and the whole server to b |
| CVE-2026-12645 | Analyzed | 未確認 | CWE-862 | A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server. |
| CVE-2026-12646 | Analyzed | 未確認 | CWE-862 | A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server. |
| CVE-2026-12647 | Analyzed | 未確認 | CWE-862 | A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server. |
| CVE-2026-12648 | Analyzed | 未確認 | CWE-502 | A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server. |
| CVE-2026-12650 | Analyzed | 未確認 | CWE-502 | A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server. |
| CVE-2026-12651 | Analyzed | 未確認 | CWE-502 | A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server. |
| CVE-2026-12661 | Awaiting Analysis | 未確認 | CWE-121 | A denial-of-service security issue exists within FactoryTalk® Historian Machine Edition. A network adjacent attacker who is authenticated could send crafted requests to the web in |
| CVE-2026-12663 | Awaiting Analysis | 未確認 | CWE-306 | A security issue exists within ControlFLASH™, where the installer grants write permissions to the "Everyone" group on a product installation directory. This could allow arbitrary c |
| CVE-2026-12666 | Awaiting Analysis | 未確認 | CWE-611 | IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 C |
| CVE-2026-12667 | Awaiting Analysis | 未確認 | CWE-611 | IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 C |
| CVE-2026-12682 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ankaref Innovation and Technology Inc. LIBRID/LIBREF allows Stored XSS. This |
| CVE-2026-12683 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ankaref Innovation and Technology Inc. LIBRID/LIBREF allows Stored XSS. This |
| CVE-2026-12704 | Awaiting Analysis | 未確認 | CWE-294 | When SAML IdP-initiated login is enabled in Grafana Enterprise, the SAML library skips validation of the InResponseTo field on all SAML responses, including SP-initiated logins. Th |
| CVE-2026-12718 | Deferred | 未確認 | CWE-89 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Karel Electronic Industry and Trade Inc. KarelIPS allows Blind SQL Injection. |
| CVE-2026-12728 | Awaiting Analysis | 未確認 | CWE-502 | IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 C |
| CVE-2026-12739 | Deferred | 未確認 | CWE-862 | The WP Easy Pay – Payment and Donation form Builder for Square plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.0. This is due t |
| CVE-2026-12742 | Awaiting Analysis | 未確認 | CWE-862 | IBM Business Automation Workflow containers and traditional could allow an authenticated attacker to trigger restricted import actions due to missing authorization controls. |
| CVE-2026-12744 | Analyzed | 未確認 | CWE-502 | A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server. |
| CVE-2026-12745 | Analyzed | 未確認 | CWE-502 | A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server. |
| CVE-2026-12747 | Deferred | 未確認 | CWE-79 | The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'tag' Shortcode Attribute in all versions up to, and including, 3.29.11 due t |
| CVE-2026-12749 | Analyzed | 未確認 | CWE-79 | IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI |
| CVE-2026-12750 | Analyzed | 未確認 | CWE-79 | IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI |
| CVE-2026-12751 | Analyzed | 未確認 | CWE-80 | IBM Cloud Pak for Business Automation is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web |
| CVE-2026-12752 | Awaiting Analysis | 未確認 | CWE-611 | IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit |
| CVE-2026-12756 | Awaiting Analysis | 未確認 | CWE-611 | IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit |
| CVE-2026-12757 | Deferred | 未確認 | CWE-94 | The The Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution |
| CVE-2026-12758 | Awaiting Analysis | 未確認 | CWE-862 | IBM Cloud Pak for Business Automation could allow a remote attacker to bypass authorization and invoke restricted endpoints due to improper validation of HTTP headers. |
| CVE-2026-12759 | Awaiting Analysis | 未確認 | CWE-400 | IBM Cloud Pak for Business Automation could allow an authenticated user to cause a denial of service due to uncontrolled resource consumption. |
| CVE-2026-12763 | Awaiting Analysis | 未確認 | CWE-306 | IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to access another user's MCP server context due to improper cache key isolation in the MCP Tools compone |
| CVE-2026-12765 | Awaiting Analysis | 未確認 | CWE-918 | IBM Langflow OSS 1.0.0 through 1.10.2 is vulnerable to server-side request forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized requests from the system, |
| CVE-2026-12766 | Awaiting Analysis | 未確認 | CWE-918 | IBM Langflow OSS 1.0.0 through 1.11.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, p |
| CVE-2026-12767 | Awaiting Analysis | 未確認 | CWE-918 | IBM Langflow OSS 1.0.0 through 1.11.5 is vulnerable to server-side request forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized requests from the system, |
| CVE-2026-12793 | Deferred | 未確認 | CWE-269 | The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.6.2. This is due to the plugin n |
| CVE-2026-12843 | Deferred | 未確認 | CWE-862 | The LearnDash LMS plugin for WordPress is vulnerable to authorization bypass in versions 4.25.0 - 5.1.6. This is due to the plugin not properly verifying that a user is authorized |
| CVE-2026-12853 | Deferred | 未確認 | CWE-862 | The Flamingo plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.2. This is due to the plugin not properly verifying that a user is |
| CVE-2026-12855 | Awaiting Analysis | 未確認 | CWE-20 | Unvalidated memory boundary could result in arbitrary code execution. The vulnerability exists in the code developed specifically for HP projects. |
| CVE-2026-12858 | Deferred | 未確認 | CWE-269 | Improper Privilege Management vulnerability in ESET AV Remover (standalone) allows Privilege Escalation via especially crafted RPC. |
| CVE-2026-12865 | Deferred | 未確認 | CWE-79 | The Photo Gallery by 10Web WordPress plugin before 1.8.44 does not escape two request parameters before reflecting them into input-attribute values on its admin pages (one on the |
| CVE-2026-12882 | Analyzed | 未確認 | CWE-407 | Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 fail to parse Markdown autolinks with unmatched trailing closing parentheses in linear |
| CVE-2026-12910 | Analyzed | 未確認 | CWE-306 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have a |
| CVE-2026-12944 | Awaiting Analysis | 未確認 | CWE-918 | IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privileges (UID=0) on the Langflow server by submitting components containing s |
| CVE-2026-12954 | Deferred | 未確認 | CWE-20 | The Mapster WP Maps plugin for WordPress is vulnerable to Arbitrary User Meta Write in all versions up to, and including, 1.23.0 via the `my_profile_update()` function. This is due |
| CVE-2026-12956 | Deferred | 未確認 | CWE-862 | The WP Event Solution (Eventin) plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 4.1.22 via the create_item() handler for the /wp-json/ |
| CVE-2026-12962 | Deferred | 未確認 | CWE-942 | A Permissive Cross-domain Security Policy with Untrusted Domains in Armoury Crate allows a remote user to obtain a local user's NTLM hash by convincing the user to visit a crafted |
| CVE-2026-12974 | Awaiting Analysis | 未確認 | CWE-1284, CWE-183 | A Security Policy Bypass vulnerability exists in Forcepoint Security Engine (NGFW). This issue affects Forcepoint Security Engine (NGFW): from 7.1.0 through 7.1.13, from 7.3.0 th |
| CVE-2026-12985 | Analyzed | 未確認 | CWE-601 | Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7 Mattermost failed to validate Dynamic Client Registration redirect URIs by URL component (matching glob pat |
| CVE-2026-12995 | Deferred | 未確認 | CWE-639 | The Custom Field Template plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.7.8 via the edit_meta_value due to missing |
| CVE-2026-13016 | Awaiting Analysis | 未確認 | CWE-89 | ServiceNow has remediated a SQL injection vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could enable an unauthenticated user, in certain circu |
| CVE-2026-13018 | Analyzed | 未確認 | CWE-20 | Insufficient validation of untrusted input in Codecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially perform out of bounds memory access via a craf |
| CVE-2026-13046 | Analyzed | 未確認 | CWE-502 | A deserialization of untrusted data vulnerability in WatchGuard Fireware OS's SAML single sign-on session handling (samld) allows an attacker who has already obtained the ability t |
| CVE-2026-13087 | Rejected | 未確認 | Rejected reason: This CVE was reserved in error and duplicates CVE-2026-89530. | |
| CVE-2026-13107 | Awaiting Analysis | 未確認 | CWE-611 | IBM Business Automation Workflow containers and traditional may use programming model artifacts that are vulnerable to XML Entity Injection attacks by default. |
| CVE-2026-13144 | Deferred | 未確認 | CWE-284 | The WP Travel WordPress plugin before 12.0.2 does not properly verify that the requester is authorized to modify the targeted booking on one branch of its bank-deposit handler, al |
| CVE-2026-13146 | Deferred | 未確認 | CWE-639 | The WP Travel WordPress plugin before 12.0.2 does not properly verify that the requester owns the booking targeted by its bank-deposit slip submission, allowing an unauthenticated |
| CVE-2026-13148 | Deferred | 未確認 | CWE-401 | Missing release of memory after effective lifetime vulnerability in Softing smartLink allows resource leak exposure. This issue affects smartLink HW-PN: from 1.04 before 1.10. |
| CVE-2026-13159 | Deferred | 未確認 | CWE-862 | The Real Estate Papi WordPress theme through 1.0.5 does not perform capability or CSRF checks on one of its AJAX actions, allowing any authenticated user, such as a subscriber, to |
| CVE-2026-13179 | Deferred | 未確認 | CWE-79 | The WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shapes_values Paramet |
| CVE-2026-13191 | Deferred | 未確認 | CWE-89 | The Create plugin for WordPress is vulnerable to generic SQL Injection via the 'order_by' parameter in all versions up to, and including, 2.5.3 due to insufficient escaping on the |
| CVE-2026-13200 | Deferred | 未確認 | CWE-89 | The Create plugin for WordPress is vulnerable to generic SQL Injection via the 'order' parameter in all versions up to, and including, 2.5.3 due to insufficient escaping on the use |
| CVE-2026-13203 | Deferred | 未確認 | CWE-79 | The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom_id' shortcode attribute of the dslc_modules_sec |
| CVE-2026-13210 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have a |
| CVE-2026-13224 | Analyzed | 未確認 | CWE-22, CWE-23 | A path traversal vulnerability in the Fireware OS WebUI management agent allows an authenticated administrator to read or list arbitrary files on the local filesystem by sending a |
| CVE-2026-13248 | Deferred | 未確認 | CWE-434, CWE-73, CWE-78 | An Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command Interface vulnerability in the web management interface in Honeywell PD45 Indust |
| CVE-2026-13249 | Deferred | 未確認 | CWE-306, CWE-434, CWE-78 | An unauthenticated Remote Code Execution via Arbitrary File Upload vulnerability in the web management interface in Honeywell PD45 Industrial Printer version F10.19.010040, allows |
| CVE-2026-13260 | Awaiting Analysis | 未確認 | CWE-770 | IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources. |
| CVE-2026-13265 | Awaiting Analysis | 未確認 | CWE-611 | IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 C |
| CVE-2026-13272 | Awaiting Analysis | 未確認 | CWE-1385 | IBM Verify Identity Access is missing origin validation which could allow a remote attacker to perform operations as the victim and potentially launch further attacks against the s |
| CVE-2026-13275 | Awaiting Analysis | 未確認 | CWE-611 | IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 C |
| CVE-2026-13276 | Awaiting Analysis | 未確認 | CWE-79 | IBM Verify Identity Access 11.0.0 through 11.0.3 Interim Fix 001 and IBM Security Verify Access 10.0.0 through 10.0.9.2 Interim Fix 001 and IBM Verify Identity Access Container 11. |
| CVE-2026-13277 | Awaiting Analysis | 未確認 | CWE-601 | IBM Verify Identity Access could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a |
| CVE-2026-13285 | Awaiting Analysis | 未確認 | CWE-611 | IBM MQ is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information o |
| CVE-2026-13287 | Awaiting Analysis | 未確認 | CWE-611 | IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 C |
| CVE-2026-13293 | Awaiting Analysis | 未確認 | CWE-502 | IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 C |
| CVE-2026-13297 | Awaiting Analysis | 未確認 | CWE-1336 | IBM Verify Identity Access Advanced Access Control may be vulnerable to an information disclosure attack. |
| CVE-2026-13326 | Awaiting Analysis | 未確認 | CWE-125, CWE-191 | An out-of-bounds read in Qt NFC's language code length parsing allows a physically proximate attacker to cause a denial of service or limited memory disclosure via a crafted NFC ta |
| CVE-2026-13327 | Awaiting Analysis | 未確認 | CWE-295 | Improper certificate validation on LDAPS connections to Active Directory in Devolutions Server 2026.2.16 and earlier allows a network-positioned attacker to intercept privileged di |
| CVE-2026-13336 | Awaiting Analysis | 未確認 | CWE-78 | CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause execution of Linux Operating system command |
| CVE-2026-13337 | Awaiting Analysis | 未確認 | CWE-564 | CWE-564: SQL Injection: Hibernate vulnerability exists that could allow the injection of a malicious HQL query in the NetBotz database when a malicious user is logged into the NetB |
| CVE-2026-13348 | Awaiting Analysis | 未確認 | CWE-307 | CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to gain unauthorized access to a user account by performing an |
| CVE-2026-13354 | Deferred | 未確認 | CWE-79 | The Asset CleanUp: Page Speed Booster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 1.4.0.5 due to ins |
| CVE-2026-13355 | Deferred | 未確認 | CWE-269 | The Meta Box AIO plugin for WordPress is vulnerable to Privilege Escalation to Administrator in versions up to, and including, 3.11.0. This is due to a chained flaw: the populate_v |
| CVE-2026-13359 | Deferred | 未確認 | CWE-79 | The Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via cntctfrm_contact_dropdown Param |
| CVE-2026-13407 | Deferred | 未確認 | CWE-116 | The Royal Elementor Addons WordPress plugin before 1.7.1067 does not properly sanitize and escape values submitted through its form widget before including them in the body of admi |
| CVE-2026-13417 | Analyzed | 未確認 | CWE-754 | Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 fail to validate the type of `fields.properties` on block creation which allows an aut |
| CVE-2026-13447 | Deferred | 未確認 | CWE-287 | The Mstore Api plugin for WordPress is vulnerable to Authentication Bypass via JWT Forgery in versions up to, and including, 4.20.0 This is due to missing cryptographic signature v |
| CVE-2026-13456 | Deferred | 未確認 | CWE-98 | The WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and inclu |
| CVE-2026-13465 | Awaiting Analysis | 未確認 | CWE-121 | Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trus |
| CVE-2026-13466 | Awaiting Analysis | 未確認 | CWE-131 | Incorrect calculation of buffer size vulnerability in Altera Trusted Firmware on HPS allows Overflow Buffers. This issue affects Trusted Firmware: through socfpga_v2.14.0. |
| CVE-2026-13467 | Awaiting Analysis | 未確認 | CWE-787 | Out-of-bounds write vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firm |
| CVE-2026-13471 | Deferred | 未確認 | CWE-639 | The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.6 |
| CVE-2026-13608 | Modified | 未確認 | CWE-923 | A flaw in the libcurl SASL negotiation for LDAP authentication allows an incomplete handshake sequence to be misinterpreted as a successful cryptographic verification. An attacker |
| CVE-2026-13611 | Deferred | 未確認 | CWE-200, CWE-862 | The KiviCare WordPress plugin before 4.5.5 does not perform authorization checks on some of its REST endpoints, allowing unauthenticated attackers to disclose the patient roster an |
| CVE-2026-13623 | Awaiting Analysis | 未確認 | CWE-79 | An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Theme API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2. |
| CVE-2026-13635 | Awaiting Analysis | 未確認 | CWE-116 | An improper encoding or escaping of output vulnerability in Auth API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows |
| CVE-2026-13639 | Awaiting Analysis | 未確認 | CWE-331 | An insufficient entropy vulnerability in login logic in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote attackers |
| CVE-2026-13666 | Awaiting Analysis | 未確認 | CWE-93 | An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability in Sharing API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009 |
| CVE-2026-13673 | Awaiting Analysis | 未確認 | CWE-732 | An incorrect permission assignment for critical resource vulnerability in LDAP API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4 |
| CVE-2026-13683 | Awaiting Analysis | 未確認 | CWE-89 | An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in EventScheduler API in Synology DiskStation Manager (DSM) before 7.2.1-69057 |
| CVE-2026-13684 | Awaiting Analysis | 未確認 | CWE-116 | An improper encoding or escaping of output vulnerability in SCGI in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remo |
| CVE-2026-13709 | Deferred | 未確認 | CWE-79 | The Graphina – Charts and Graphs For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'iq_tree_tree_chart_template' Widget Setting in all versions up |
| CVE-2026-13719 | Awaiting Analysis | 未確認 | CWE-200, CWE-863 | An authenticated user can list alert rules stored in folders they are not allowed to read through the alert rules API list endpoint. When the set of folders the user may read was e |
| CVE-2026-13720 | Awaiting Analysis | 未確認 | CWE-285, CWE-345, CWE-915 | An Editor can set file-provisioning metadata (the grafana.app/managedBy, grafana.app/managerId and grafana.app/sourcePath annotations) when creating a dashboard through the dashboa |
| CVE-2026-13745 | Awaiting Analysis | 未確認 | CWE-15, CWE-829 | A vulnerability in the Gemini CLI prior to version 0.39.1 allows attackers to achieve arbitrary code execution by tricking a victim into starting the CLI within an untrusted direct |
| CVE-2026-13770 | Deferred | 未確認 | CWE-79 | The AppMySite – WordPress & WooCommerce Mobile App Builder (No-Code Android & iOS App Maker) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via save_ams_license_ |
| CVE-2026-14199 | Analyzed | 未確認 | CWE-1023, CWE-290, CWE-863 | Only self-managed Grafana instances with Auth Proxy authentication and identity caching enabled (sync_ttl greater than zero) are affected. The Auth Proxy cache key concatenated the |
| CVE-2026-14215 | Deferred | 未確認 | CWE-862 | The Booking for Appointments and Events Calendar WordPress plugin before 2.4.9 does not require authentication or a valid request token before running the post-booking action chai |
| CVE-2026-14255 | Awaiting Analysis | 未確認 | CWE-674 | A maliciously crafted IFC file, when parsed through certain Autodesk products, can trigger an Uncontrolled Recursion vulnerability. A malicious actor may leverage this vulnerabilit |
| CVE-2026-14259 | Analyzed | 未確認 | CWE-862 | Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 fail to enforce board creation permissions when importing archive files which allows a |
| CVE-2026-14275 | Awaiting Analysis | 未確認 | CWE-78 | IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute arbitrary commands with normal user privileges on the system |
| CVE-2026-14276 | Awaiting Analysis | 未確認 | CWE-78 | IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute arbitrary commands with normal user privileges on the system |
| CVE-2026-14277 | Awaiting Analysis | 未確認 | CWE-78 | IBM i Access Family 1.1.2.0 through 1.1.9.15 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of |
| CVE-2026-14281 | Deferred | 未確認 | CWE-269 | The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and inc |
| CVE-2026-14296 | Awaiting Analysis | 未確認 | CWE-347 | When using the Direct XIP update strategy, the main application image starts other cores (i.e. radio core), based on the currently active slot without additional verification. The |
| CVE-2026-14297 | Awaiting Analysis | 未確認 | CWE-787 | A buffer overflow in the Bluetooth Continuous Glucose Monitoring Service (CGMS) Record Access Control Point (RACP) write handler allows an authenticated BLE peer to overf |
| CVE-2026-14311 | Deferred | 未確認 | CWE-862 | The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing ownership verification |
| CVE-2026-14321 | Deferred | 未確認 | CWE-400 | The divi-dash WordPress plugin before 1.0.7 does not validate the source of the client IP address it uses for rate limiting and banning, allowing unauthenticated attackers to spoof |
| CVE-2026-14323 | Deferred | 未確認 | CWE-22 | The Printcart Web to Print Product Designer for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.8.5 via the 'mockups' |
| CVE-2026-14326 | Deferred | 未確認 | CWE-639 | The Timetics WordPress plugin through 1.0.61 does not enforce per-object ownership when updating appointments through its REST API, allowing users with its custom staff role to mod |
| CVE-2026-14344 | Analyzed | 未確認 | CWE-862 | Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 fail to enforce the board-creation permission which allows an unauthorized authenticat |
| CVE-2026-14349 | Deferred | 未確認 | CWE-862 | The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2.3. This is due to the |
| CVE-2026-14350 | Awaiting Analysis | 未確認 | CWE-117 | IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements |
| CVE-2026-14357 | Deferred | 未確認 | CWE-862 | The DevKit Pro plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.3.0. This is due to a missing capability check and missing nonce vali |
| CVE-2026-14359 | Deferred | 未確認 | CWE-269 | The YITH WooCommerce Waitlist Premium plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 3.35.0. This is due to the add_user_in_waiting_li |
| CVE-2026-14441 | Awaiting Analysis | 未確認 | CWE-1025 | A logic flaw in Java cache key handling object comparison handling could lead to improper identifier resolution when processing specific user account structures. The issue has been |
| CVE-2026-14442 | Awaiting Analysis | 未確認 | CWE-532 | An information exposure vulnerability in the job scheduling component of SANnav allows sensitive credentials to be written to application logs in plain text. When scheduled support |
| CVE-2026-14443 | Awaiting Analysis | 未確認 | CWE-532 | Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav versions before 3.0.1a permit extension switch pre-shared keys to be written to system logs. Indiv |
| CVE-2026-14444 | Deferred | 未確認 | CWE-269 | The WP Fusion (Pro) plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.47.13. This is due to insufficient authorization checks on th |
| CVE-2026-14466 | Deferred | 未確認 | CWE-79 | It’s possible to run a stored XSS in Stormshield’s web administration panel. To exploit this vulnerability, a SNS administrator with appropriate permissions must inject some ma |
| CVE-2026-14470 | Analyzed | 未確認 | CWE-22 | IBM Langflow OSS 1.0.0 through 1.10.2 could allow an authenticated attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing |
| CVE-2026-14472 | Deferred | 未確認 | CWE-79 | The Kubio AI Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via kubio/copyright Block Content in all versions up to, and including, 2.8.4 due to ins |
| CVE-2026-14505 | Awaiting Analysis | 未確認 | CWE-22 | Tanium addressed a path traversal vulnerability in Tanium Data Service. |
| CVE-2026-14559 | Deferred | 未確認 | CWE-287 | The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not verify a user's password before authenticating them, allowing unauthenticated attackers to log in as any regi |
| CVE-2026-14560 | Deferred | 未確認 | CWE-94 | The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not properly validate uploaded files, relying on a client-supplied content type and preserving the original filen |
| CVE-2026-14562 | Deferred | 未確認 | CWE-200 | The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not perform any authorization or ownership checks before returning WooCommerce order metadata and the URLs of cus |
| CVE-2026-14563 | Deferred | 未確認 | CWE-287 | The advanced-customized-prompts WordPress plugin through 1.0.1 does not verify the password before issuing an authenticated session for a supplied email address in an unauthenticat |
| CVE-2026-14565 | Deferred | 未確認 | CWE-79 | The advanced-customized-prompts WordPress plugin through 1.0.1 does not perform any capability, ownership, or nonce check before saving popup configuration to a product, nor escape |
| CVE-2026-14566 | Deferred | 未確認 | CWE-639 | The advanced-customized-prompts WordPress plugin through 1.0.1 does not perform any capability, ownership, or nonce check before updating WooCommerce order item metadata for a supp |
| CVE-2026-14780 | Awaiting Analysis | 未確認 | CWE-94 | A vulnerability exists in the PaperCut NG/MF platform's device-scripting functionality due to insufficient sanitization and access restrictions within the embedded execution engine |
| CVE-2026-14805 | Deferred | 未確認 | CWE-269 | The Consulting theme for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 6.7.16. This is due to a combination of two flaws: (1) the masterstudy_ms |
| CVE-2026-14828 | Awaiting Analysis | 未確認 | CWE-89 | Zohocorp ManageEngine Password Manager Pro versions before 13235, PAM360 versions before 8561, and Access Manager Plus versions before 4405 are vulnerable to an authenticated SQL I |
| CVE-2026-14844 | Deferred | 未確認 | CWE-79 | The Master Slider WordPress plugin through 3.11.2 does not sanitise and escape some of its shortcode attributes before outputting them in an inline script context, which could all |
| CVE-2026-14850 | Deferred | 未確認 | CWE-640 | The password reset funcionality is vulnerable to unauthorized account modification due to improper validation of the user_id parameter. An attacker can manipulate this predictable |
| CVE-2026-14855 | Deferred | 未確認 | CWE-79 | The RT Mega Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'css[left]' parameter in all versions up to, and including, 1.5.1 due to insufficient inp |
| CVE-2026-14873 | Deferred | 未確認 | CWE-862 | The Bulk Password Reset plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.3.3. This is due to the plugin not p |
| CVE-2026-14876 | Deferred | 未確認 | CWE-79 | The Smart Slider 3 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data-href' parameter in all versions up to, and including, 3.5.1.38 due to insufficien |
| CVE-2026-14892 | Awaiting Analysis | 未確認 | CWE-863 | Tanium addressed an improper access controls vulnerability in Tanium Server. |
| CVE-2026-14913 | Awaiting Analysis | 未確認 | CWE-89 | ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.669 and below were vulnerable to an SQL Injection vulnerability in Rule Management Search Reports. |
| CVE-2026-14916 | Awaiting Analysis | 未確認 | CWE-241 | A JWT signature verification vulnerability affects Kong components that perform JWT validation for MCP OAuth2 or DataKit integrations inside Kong API Gateway Enterprise. The affect |
| CVE-2026-14917 | Awaiting Analysis | 未確認 | CWE-288 | A SAML authentication bypass vulnerability affects the Kong SAML plugin when the validate_assertion_signature option is explicitly set to false. This option is enabled by default. |
| CVE-2026-14957 | Deferred | 未確認 | CWE-252, CWE-617 | In FIPS mode, Libreswan's add_decoded_cert() function calls CERT_ExtractPublicKey() and asserts that the result is not NULL. However, CERT_ExtractPublicKey() returns NULL when publ |
| CVE-2026-14962 | Deferred | 未確認 | CWE-89 | The ELEX WooCommerce Request a Quote WordPress plugin before 2.4.1 does not properly sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated users |
| CVE-2026-14975 | Deferred | 未確認 | CWE-22 | The WP File Download plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.3.8 via the 'remoteurl' parameter. This makes it possible for |
| CVE-2026-14982 | Deferred | 未確認 | CWE-22 | The WP File Download plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete function in all versions. This makes it po |
| CVE-2026-14986 | Awaiting Analysis | 未確認 | CWE-787 | The ITE it51xxx I2C driver, when operating as an I2C target (slave) in buffer mode (CONFIG_I2C_TARGET + CONFIG_I2C_TARGET_BUFFER_MODE), copies host-supplied write data into the fix |
| CVE-2026-14989 | Deferred | 未確認 | CWE-79 | The Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpl_user_preference' parameter in all versions up |
| CVE-2026-15004 | Deferred | 未確認 | CWE-79 | The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image alt text in all versions up to, and includ |
| CVE-2026-15019 | Deferred | 未確認 | CWE-22 | The Direct Download for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.19 via the (top-level include) function. This |
| CVE-2026-15027 | Deferred | 未確認 | CWE-78 | CGServiSign developed by Changing has a OS Command Injection vulnerability. Unauthenticated remote attackers can induce victims to visit a malicious web page and inject arbitrary O |
| CVE-2026-15095 | Deferred | 未確認 | CWE-22 | The Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping & Social Channels plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and i |
| CVE-2026-15098 | Deferred | 未確認 | CWE-79 | The Real3D Flipbook Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'lightboxtext' shortcode attribute (and other unsanitized attributes handled by o |
| CVE-2026-15101 | Deferred | 未確認 | CWE-79 | The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in all versions up to, and including, 8.7.4 due to insufficient |
| CVE-2026-15140 | Deferred | 未確認 | CWE-266 | A privilege-escalation issue in the Portworx Operator when deployed on Red Hat OpenShift (OCP). Only under specific conditions during the initial provisioning of a Portworx storage |
| CVE-2026-15232 | Deferred | 未確認 | CWE-639 | The MotoPress Appointment Booking WordPress plugin before 2.4.8 does not perform an authorization or ownership check when handling a user-supplied booking identifier on an unauthen |
| CVE-2026-15247 | Deferred | 未確認 | CWE-862 | The Search Atlas SEO WordPress plugin before 2.6.24 does not perform a nonce or capability check before processing a settings update in one of its early-priority handlers, allowin |
| CVE-2026-15273 | Deferred | 未確認 | CWE-79 | The Automatic.css plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REQUEST_URI in all version 4.0.0 due to insufficient input sanitization and output escaping. |
| CVE-2026-15275 | Deferred | 未確認 | CWE-89 | The WP Multi Store Locator Pro plugin for WordPress is vulnerable to generic SQL Injection via the 'store_locatore_search_radius' parameter in all versions up to, and including, 4. |
| CVE-2026-15278 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-15354 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-32566. Reason: This candidate is a reservation duplicate of CVE-2026-32566 Notes: All CVE users | |
| CVE-2026-15358 | Awaiting Analysis | 未確認 | CWE-428 | ZohoCorp ManageEngine OpManager and Network Configuration Manager versions before 12.8.671 were vulnerable to an unauthorized Path Traversal vulnerability. |
| CVE-2026-15390 | Awaiting Analysis | 未確認 | CWE-459, CWE-787 | Das U-Boot with CONFIG_IP_DEFRAG=y parameter fails to clear IP reassembly state after delivering a complete datagram. An attacker who can deliver fragmented IP traffic can execute |
| CVE-2026-15396 | Awaiting Analysis | 未確認 | CWE-444 | IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are vulnerable to HTTP request smuggling, caused by improper |
| CVE-2026-15398 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-82223 Reason: This candidate is a reservation duplicate of CVE-2026-82223. Notes: All CVE users | |
| CVE-2026-15402 | Deferred | 未確認 | CWE-79 | The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'etn_shedule_objective' sched |
| CVE-2026-15406 | Deferred | 未確認 | CWE-98 | The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4. |
| CVE-2026-15412 | Awaiting Analysis | 未確認 | CWE-601 | IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 could allow a remote attacker to conduct phishing attacks, u |
| CVE-2026-15417 | Awaiting Analysis | 未確認 | CWE-369 | In the silabser.sys Windows 8 driver for CP210x devices, a local unprivileged user can use incorrect driver settings to cause a kernel crash. |
| CVE-2026-15418 | Awaiting Analysis | 未確認 | CWE-130 | In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to leak up to 145 bytes of uninitiali |
| CVE-2026-15419 | Awaiting Analysis | 未確認 | CWE-121 | In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to corrupt kernel pool memory, result |
| CVE-2026-15431 | Awaiting Analysis | 未確認 | CWE-1220 | A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.53.2.0. The vulnerability could potentially allow a local |
| CVE-2026-15439 | Deferred | 未確認 | CWE-89 | The GamiPress plugin for WordPress is vulnerable to authenticated (Subscriber+) SQL Injection via the 'q' parameter of the wpForo integration AJAX selector (action gamipress_wpforo |
| CVE-2026-15442 | Analyzed | 未確認 | CWE-416 | In all builds that make use of (D)TLS, including default builds, there is a series of conditional states during the TLS shutdown which could lead to a heap-use-after free. If an ap |
| CVE-2026-15451 | Deferred | 未確認 | CWE-269 | The MemberPress Corporate Accounts plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 1.5.39. This is due to a mass assignment vulnerabili |
| CVE-2026-15460 | Awaiting Analysis | 未確認 | CWE-666 | The Bluetooth Classic (BR/EDR) L2CAP receive handler bt_l2cap_br_recv() in subsys/bluetooth/host/classic/l2cap_br.c dispatched inbound data PDUs based only on the destination chann |
| CVE-2026-15461 | Awaiting Analysis | 未確認 | CWE-843 | The Sierra Wireless HL78xx modem GNSS driver (drivers/modem/hl78xx/, later drivers/modem/vendor_standalone/hl78xx/) embeds a generic struct gnss_nmea0183_match_data match_data insi |
| CVE-2026-15462 | Deferred | 未確認 | CWE-89 | The Sticky Chat Widget plugin for WordPress is vulnerable to SQL Injection via the 'scw_form_fields' parameter array keys of the 'scw_save_form_data' AJAX action in versions up to, |
| CVE-2026-15463 | Deferred | 未確認 | CWE-79 | The SSL Zen — SSL Certificate Installer & HTTPS Redirects plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'host' parameter in all versions up to, and i |
| CVE-2026-15550 | Deferred | 未確認 | CWE-862 | The Ninja Forms - Save Progress plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 3.0.30. This is due to the lack of capability checks a |
| CVE-2026-15579 | Awaiting Analysis | 未確認 | CWE-787 | An out-of-bounds write vulnerability exists in some of the Ethernet switches because of improper validation of the username field length during Web login processing. This may allow |
| CVE-2026-15600 | Deferred | 未確認 | CWE-89 | Alior Bank PrestaShop module "raty" for commercial partners is vulnerable to SQL Injection in the toggleCategoryPromotionAction method. The module inserts value of the POST paramet |
| CVE-2026-15609 | Deferred | 未確認 | CWE-79 | The Bridge - Creative Multipurpose WordPress Theme theme for WordPress is vulnerable to Stored Cross-Site Scripting via 'circle_line' Shortcode Attribute in all versions up to, and |
| CVE-2026-15634 | Awaiting Analysis | 未確認 | CWE-444 | IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are vulnerable to HTTP request smuggling, caused by improper |
| CVE-2026-15638 | Awaiting Analysis | 未確認 | CWE-327 | An unauthenticated user with access to Secret Server could leverage a padding oracle to decrypt or encrypt data using one of the server's cryptographic keys. The key itself is not |
| CVE-2026-15639 | Awaiting Analysis | 未確認 | CWE-79 | An attacker can craft a malicious link that, if used by a legitimate user, may cause the user's browser to run JavaScript supplied by the attacker. |
| CVE-2026-15640 | Awaiting Analysis | 未確認 | CWE-290 | Under certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user. |
| CVE-2026-15650 | Deferred | 未確認 | CWE-79 | The RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'pointer_menu_item' Block Attribute in all vers |
| CVE-2026-15660 | Deferred | 未確認 | CWE-862 | The SEO Booster plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 7.4.7. This is due to a missing capability check on the handle_oauth_c |
| CVE-2026-15664 | Deferred | 未確認 | CWE-79 | The Quill Forms | Conversational Multi Step Forms, Surveys & quizzes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Multiple Choice 'Other' Value in all vers |
| CVE-2026-15667 | Deferred | 未確認 | CWE-98 | The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4. |
| CVE-2026-15688 | Deferred | 未確認 | CWE-303 | Incorrect Implementation of Authentication Algorithm Vulnerability in Mitsubishi Electric GX Works3 and Motion Control Setting allows a local attacker to successfully authenticate |
| CVE-2026-15710 | Awaiting Analysis | 未確認 | CWE-908 | An information leakage vulnerability exists in the Endpoint DLP component (epdlpdrv.sys) of Netskope Client for Windows prior to version R141. An internal communication channel use |
| CVE-2026-15731 | Deferred | 未確認 | CWE-79 | The WP Multilang – Translation and Multilingual Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post content in all versions up to, and including, |
| CVE-2026-15758 | Deferred | 未確認 | CWE-200 | The 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includin |
| CVE-2026-15760 | Deferred | 未確認 | CWE-862 | The Divi Essential plugin for WordPress is vulnerable to sensitive information exposure in versions up to, and including, 5.8.1 via the dnxte_get_database_tables and dnxte_get_data |
| CVE-2026-15796 | Deferred | 未確認 | CWE-79 | The Builderall for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'bg_video_service_url' Setting in all versions up to, and including, 3.0.2 due to |
| CVE-2026-15797 | Deferred | 未確認 | CWE-79 | The Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post_title |
| CVE-2026-15801 | Awaiting Analysis | 未確認 | CWE-22 | A vulnerability was found in CRI-O related to the container checkpoint and restore feature. When CRI-O is configured to restore containers from checkpoint archives, insufficient va |
| CVE-2026-15814 | Analyzed | 未確認 | CWE-409 | Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 fail to limit the amount of memory allocated when decoding uploaded image files which |
| CVE-2026-15815 | Awaiting Analysis | 未確認 | CWE-22, CWE-59, CWE-94 | Grafana OSS and Grafana Enterprise did not safely resolve symbolic links when extracting plugin archives. A crafted plugin archive can chain relative symbolic link entries to escap |
| CVE-2026-15820 | Deferred | 未確認 | CWE-79 | The Builderall for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Photo Module 'attributes' Setting in all versions up to, and including, 3.0.2 due |
| CVE-2026-15823 | Deferred | 未確認 | CWE-862 | The Builderall Cheetah For Wp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the disable() function in versions up to, |
| CVE-2026-15887 | Awaiting Analysis | 未確認 | CWE-918 | IBM WebSphere Application Server 9.0, and 8.5 is affected by blind server-side request forgery when processing SOAP requests. |
| CVE-2026-15889 | Deferred | 未確認 | CWE-79 | The Aruba HiSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Content in all versions up to, and including, 3.0.14 due to insufficient inpu |
| CVE-2026-15890 | Awaiting Analysis | 未確認 | CWE-323, CWE-362 | The default AEAD nonce provider for the PSA Internal Trusted Storage transform module, secure_storage_its_transform_aead_get_nonce() in subsys/secure_storage/src/its/transform/aead |
| CVE-2026-15891 | Awaiting Analysis | 未確認 | CWE-476 | The MQTT-SN client keepalive handler process_ping() in subsys/net/lib/mqtt_sn/mqtt_sn.c removes the gateway record after PINGREQ retries are exhausted. It invoked SYS_SLIST_PEEK_HE |
| CVE-2026-15892 | Awaiting Analysis | 未確認 | CWE-401 | The mcumgr SMP settings-management group handlers settings_mgmt_read(), settings_mgmt_write(), and settings_mgmt_delete() in subsys/mgmt/mcumgr/grp/settings_mgmt/src/settings_mgmt. |
| CVE-2026-15893 | Awaiting Analysis | 未確認 | CWE-617 | net_if_ipv6_calc_reachable_time() in subsys/net/ip/net_if.c derives a randomized ND reachable time from ipv6->base_reachable_time as min_reachable + sys_rand32_get() % (max_reachab |
| CVE-2026-15913 | Deferred | 未確認 | CWE-23 | In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT allows Web Users with both Secure Folders and Secure Mail p |
| CVE-2026-15915 | Awaiting Analysis | 未確認 | CWE-552 | IBM Concert 1.0.0 through 3.0.0 could allow a local attacker to obtain sensitive information due to recursive copying of build context directories into container images. |
| CVE-2026-15923 | Awaiting Analysis | 未確認 | CWE-835 | The Zephyr SDIO subsystem function sdio_io_rw_extended_helper() in subsys/sd/sdio.c finishes transfers with a byte-I/O loop that uses size = MIN(remaining, func->cis.max_blk_size) |
| CVE-2026-15924 | Awaiting Analysis | 未確認 | CWE-416 | Zephyr's TLS socket layer in subsys/net/lib/sockets/sockets_tls.c keeps a single process-global array, client_cache, of cached client sessions that is shared by every TLS socket co |
| CVE-2026-15926 | Rejected | 未確認 | Rejected reason: Red Hat Product Security has determined that this CVE ID is not needed | |
| CVE-2026-15933 | Awaiting Analysis | 未確認 | CWE-256 | OptimiDoc Server (On-Premise) stores credentials for external services in cleartext. An authenticated administrator can view previously configured service passwords, including SMTP |
| CVE-2026-15937 | Deferred | 未確認 | CWE-295 | Improper certificate validation in Checkmk <2.5.0p10 allows a relay and a push agent that share the same UUID to reuse each other's mTLS certificate to authenticate against agent r |
| CVE-2026-15946 | Deferred | 未確認 | CWE-862 | The Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization plugin for WordPress is vulnerable to authorization bypass in all versions up to, |
| CVE-2026-15947 | Deferred | 未確認 | CWE-862 | The Metasync plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_instant_indexing_settings() function in versions |
| CVE-2026-15952 | Deferred | 未確認 | CWE-732 | Incorrect Permission Assignment for Critical Resource vulnerability in ABB Protection and control IED manager (PCM600). This issue affects Protection and control IED manager (PCM6 |
| CVE-2026-15953 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ABB Protection and control IED manager (PCM600). This issue affects Protection and |
| CVE-2026-15955 | Awaiting Analysis | 未確認 | CWE-22 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow a remote attacker to perform an arbitrary file write due to improper validation of file paths. |
| CVE-2026-15984 | Deferred | 未確認 | CWE-79 | The QuickCal plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Custom Field Parameters in all versions up to, and including, 1.0.20 due to insufficient input sa |
| CVE-2026-16003 | Deferred | 未確認 | CWE-782 | Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to add an arbitrary process identifier to the driver's whitelist via a crafted IOCTL requ |
| CVE-2026-16004 | Deferred | 未確認 | CWE-782 | Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to read and write arbitrary PCI/PCIe configuration space via crafted IOCTL requests by by |
| CVE-2026-16005 | Deferred | 未確認 | CWE-763 | Release of Invalid Pointer or Reference in Armoury Crate driver allows a local user to free arbitrary memory via a crafted IOCTL request by bypassing the driver's verification, whi |
| CVE-2026-16006 | Deferred | 未確認 | CWE-497 | Exposure of Sensitive System Information to an Unauthorized Control Sphere in Armoury Crate driver allows a local user to obtain kernel virtual addresses via a crafted IOCTL reques |
| CVE-2026-16025 | Deferred | 未確認 | CWE-1284 | Improper validation of specified quantity in input vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API WHMCS Module allows Input Data |
| CVE-2026-16028 | Deferred | 未確認 | CWE-401 | Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that stream_state never removes from the connection stream table. When a stream reaches th |
| CVE-2026-16037 | Deferred | 未確認 | CWE-208 | Observable timing discrepancy vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API WHMCS Module allows Black Box Reverse Engineering. |
| CVE-2026-16140 | Awaiting Analysis | 未確認 | CWE-863 | OpenBMC's IPMI implementation, phosphor-net-ipmid, is vulnerable to a logic flaw where the authorization context of an existing session can be replaced with a target account while |
| CVE-2026-16141 | Awaiting Analysis | 未確認 | CWE-457, CWE-798 | OpenBMC's IPMI implementation, phosphor-net-ipmid, contains a logic flaw in which an unauthenticated client can force the RAKP Message 1 handler to return before it overwrites the |
| CVE-2026-16147 | Awaiting Analysis | 未確認 | CWE-416 | The ITE IT82xx2 USB device-controller driver (drivers/usb/udc/udc_it82xx2.c) mishandles multi-packet OUT transfers on non-control endpoints. In work_handler_out() the active transf |
| CVE-2026-16148 | Awaiting Analysis | 未確認 | CWE-666 | The ITE it82xx2 USB device-controller driver initialized its bus-suspend detection work with k_work_init_delayable(&priv->suspended_work, suspended_handler) inside it82xx2_enable() |
| CVE-2026-16172 | Awaiting Analysis | 未確認 | CWE-125 | Netskope was notified of an out-of-bounds heap read affecting the Endpoint DLP (EPDLP) service of the Netskope Client. A local standard user could potentially send a specially craf |
| CVE-2026-16174 | Awaiting Analysis | 未確認 | CWE-190 | Netskope was notified about a potential gap in Netskope Endpoint DLP (EPDLP) running on Windows systems. Successful exploitation of the gap could potentially allow a privileged use |
| CVE-2026-16180 | Analyzed | 未確認 | CWE-776 | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 Toolkit could allow an authenticate |
| CVE-2026-16185 | Awaiting Analysis | 未確認 | CWE-862 | IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication on an admin console servlet. |
| CVE-2026-16186 | Awaiting Analysis | 未確認 | CWE-79 | IBM WebSphere Application Server 9.0, and 8.5 is affected by a reflected cross-site scripting vulnerability. |
| CVE-2026-16187 | Awaiting Analysis | 未確認 | CWE-862 | IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication and obtain sensitive information by sending a crafted unauthenticated request. |
| CVE-2026-16188 | Awaiting Analysis | 未確認 | CWE-117 | IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to inject forged log entries into the server's administrative log. |
| CVE-2026-16189 | Awaiting Analysis | 未確認 | CWE-117 | IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to inject forged log entries into the server's administrative log. |
| CVE-2026-16190 | Awaiting Analysis | 未確認 | CWE-862 | IBM WebSphere Application Server 9.0, and 8.5 is affected by an authorization bypass vulnerability. |
| CVE-2026-16264 | Deferred | 未確認 | CWE-639 | The Newsletters WordPress plugin before 4.18.1 does not perform an ownership check on some of its subscriber management actions, and issues a management session to unauthenticated |
| CVE-2026-16272 | Deferred | 未確認 | CWE-348 | Use of less trusted source vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API WHMCS Module allows Exploitation of Trusted Identifiers |
| CVE-2026-16281 | Deferred | 未確認 | CWE-639 | The Classified Listing WordPress plugin before 6.1.1 does not verify that the caller owns or can edit the target listing before its AI image-editing AJAX action deletes or attache |
| CVE-2026-16302 | Deferred | 未確認 | CWE-200 | The Spectra Legacy – Gutenberg Blocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.20.0 via the editor_assets functi |
| CVE-2026-16310 | Deferred | 未確認 | CWE-639 | The MemberDash plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.8.5 via the 'id' parameter due to missing validation o |
| CVE-2026-16335 | Analyzed | 未確認 | CWE-22 | IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to read, write, or delete arbitrary files due to a path traversal vulnerabilit |
| CVE-2026-16338 | Analyzed | 未確認 | CWE-73 | IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to perform an arbitrary file write due to improper validation of file paths. |
| CVE-2026-16346 | Analyzed | 未確認 | CWE-285 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an |
| CVE-2026-1641 | Deferred | 未確認 | CWE-918 | The Wow Elements Addons for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.11.2. This is due to the plugin pass |
| CVE-2026-16426 | Awaiting Analysis | 未確認 | CWE-918 | IBM Concert 1.0.0 through 3.0.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potenti |
| CVE-2026-16428 | Analyzed | 未確認 | CWE-94 | IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to execute arbitrary code due to improper configuration of the XSLT transforma |
| CVE-2026-16432 | Analyzed | 未確認 | CWE-611 | IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage PxXMLInput operator could allow a remote authenticated attacker to obtain sensitive information due to an XML external ent |
| CVE-2026-16435 | Awaiting Analysis | 未確認 | CWE-650 | IBM WebSphere Application Server 9.0, and 8.5 is affected by an authentication bypass vulnerability when using XD or Intelligent-Management features. |
| CVE-2026-1645 | Deferred | 未確認 | CWE-79 | The Hostel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom_currency' parameter and the 'locale_url' setting in all versions up to, and including, |
| CVE-2026-16466 | Analyzed | 未確認 | CWE-78 | IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to execute arbitrary commands due to os command injection. |
| CVE-2026-16468 | Analyzed | 未確認 | CWE-78 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to OS command injection. |
| CVE-2026-16469 | Analyzed | 未確認 | CWE-78 | IBM DataStage on Cloud Pak for Data 5.4.0.0 px-runtime could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements |
| CVE-2026-16482 | Deferred | 未確認 | CWE-89 | The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'compare' parameter in all versions up to, and includ |
| CVE-2026-16497 | Awaiting Analysis | 未確認 | CWE-834 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause excessive iteration. A successful exploit of this vulnerability might lead to denial |
| CVE-2026-16502 | Deferred | 未確認 | CWE-502 | The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.1.18 via deserialization of un |
| CVE-2026-16512 | Awaiting Analysis | 未確認 | CWE-125 | gptp_handle_msg() in subsys/net/l2/ethernet/gptp/gptp.c dereferenced the gPTP header returned by GPTP_HDR() and switched on hdr->message_type without first checking that the receiv |
| CVE-2026-16513 | Undergoing Analysis | 未確認 | CWE-787 | The userspace verifier z_vrfy_rtio_sqe_copy_in_get_handles() in subsys/rtio/rtio_syscalls.c (subsys/rtio/rtio_handlers.c before v4.3.0) validated the RTIO object handle and the sqe |
| CVE-2026-16514 | Awaiting Analysis | 未確認 | CWE-125 | gptp_mi_qualify_announce() in subsys/net/l2/ethernet/gptp/gptp_mi.c walks the Path Trace TLV of a received IEEE 802.1AS Announce message, comparing each clock identity against the |
| CVE-2026-16515 | Awaiting Analysis | 未確認 | CWE-406 | net_icmpv6_send_error() in subsys/net/ip/icmpv6.c implemented only one of the three RFC 4443 section 2.4 suppression rules (do not answer an ICMPv6 error with an ICMPv6 error). It |
| CVE-2026-16542 | Deferred | 未確認 | CWE-918 | The Import and export users and customers WordPress plugin before 2.4.5 does not validate a user-supplied URL before requesting it server-side during a CSV import, allowing high-pr |
| CVE-2026-16557 | Deferred | 未確認 | CWE-200 | The Nimble Page Builder WordPress plugin through 3.3.8 does not perform an authorization check when returning page-builder content through an authenticated AJAX action, allowing an |
| CVE-2026-16582 | Deferred | 未確認 | CWE-862 | The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to unauthorized modification of data in all versions up to, and including, 2.4.5. This |
| CVE-2026-16588 | Deferred | 未確認 | CWE-89 | The WP Directory Kit plugin for WordPress is vulnerable to blind SQL Injection via the 'order_by' parameter in all versions up to, and including, 1.5.4 due to insufficient escaping |
| CVE-2026-16591 | Deferred | 未確認 | CWE-79 | The WP Directory Kit WordPress plugin before 1.5.8 does not sanitize and escape some of its category and location fields before outputting them in page attributes, allowing users w |
| CVE-2026-16592 | Deferred | 未確認 | CWE-200 | The WP Directory Kit WordPress plugin through 1.5.7 does not check authorization or listing visibility in one of its shortcodes, allowing users with a role as low as Contributor to |
| CVE-2026-16593 | Deferred | 未確認 | CWE-89 | The WP Directory Kit WordPress plugin through 1.5.7 does not sanitize and escape some widget settings before using them in a SQL statement, allowing authenticated users with access |
| CVE-2026-16596 | Deferred | 未確認 | CWE-89 | The WP Directory Kit plugin for WordPress is vulnerable to generic SQL Injection via the 'data_fields_list' parameter in all versions up to, and including, 1.5.4 due to insufficien |
| CVE-2026-16647 | Analyzed | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Disable Login Page allows Functionality Bypass. This issue affects Disable Login Page versions: fro |
| CVE-2026-16649 | Deferred | 未確認 | CWE-79 | The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Body Field Value in all versions up to, and including, 2.10.5 due to insufficient input |
| CVE-2026-16651 | Awaiting Analysis | 未確認 | CWE-129 | temporalio/sqlparser can panic when Parse, ParseStrictDDL, or ParseNext processes a MySQL version comment whose contents are empty or consist only of one to five decimal digits. Ex |
| CVE-2026-16652 | Awaiting Analysis | 未確認 | CWE-606 | Temporal Server did not bound the work performed while searching for a Schedule's next action time. An authenticated caller with namespace write permission could create or update a |
| CVE-2026-16660 | Analyzed | 未確認 | CWE-125 | IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to an out-of-bounds read. |
| CVE-2026-16672 | Analyzed | 未確認 | CWE-78 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS c |
| CVE-2026-16673 | Analyzed | 未確認 | CWE-78 | IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to execute arbitrary OS commands due to improper neutralization of special cha |
| CVE-2026-16675 | Awaiting Analysis | 未確認 | CWE-307 | A privilege escalation security issue exists within FactoryTalk® Activation Manager. The security issue stems from custom actions in the installer that spawn visible console window |
| CVE-2026-16689 | Analyzed | 未確認 | CWE-532 | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obt |
| CVE-2026-16693 | Analyzed | 未確認 | CWE-327 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to the use of hardcoded cryptographic constants to obfuscate encryption |
| CVE-2026-16702 | Awaiting Analysis | 未確認 | CWE-476 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a remote authenticated attacker to cause a denial of |
| CVE-2026-16726 | Deferred | 未確認 | CWE-120 | Buffer overflow vulnerability in Panasonic Industry USB Driver for MINAS A5/A6 allows attackers to stop Windows. |
| CVE-2026-16750 | Deferred | 未確認 | CWE-862 | The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to unauthorized access of data due to missing authorization checks in mvl_ajax_dealer_lo |
| CVE-2026-16769 | Awaiting Analysis | 未確認 | CWE-440 | An unencrypted 'pause encryption request' message causes a denial of service in the in the RS9116W/SiWx917. See vulnerability B-E10 in the related paper below. |
| CVE-2026-16777 | Deferred | 未確認 | CWE-22 | The Store Exporter – Export WooCommerce Products, Orders, Subscriptions, Customers plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2 |
| CVE-2026-16778 | Deferred | 未確認 | CWE-79 | The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dslc_module_downloads_output' Shortcode Content in all ver |
| CVE-2026-16786 | Deferred | 未確認 | CWE-79 | The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via dslc_module_testimonials_output Shortcode in all versions u |
| CVE-2026-16787 | Deferred | 未確認 | CWE-79 | The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dslc_custom_field' Shortcode in all versions up to, and in |
| CVE-2026-16788 | Deferred | 未確認 | CWE-79 | The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via dslc_module_projects_output Shortcode in all versions up to |
| CVE-2026-16794 | Analyzed | 未確認 | CWE-862 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.11 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have all |
| CVE-2026-16826 | Analyzed | 未確認 | CWE-78 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command. |
| CVE-2026-16876 | Deferred | 未確認 | CWE-306 | An authentication bypass vulnerability exists in the WebGUI of Series UNIVERGE IX-R/IX-V. A user could bypass authentication and execute arbitrary CLI commands by tampering with We |
| CVE-2026-16892 | Analyzed | 未確認 | CWE-287 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication during service-name matching. |
| CVE-2026-16941 | Analyzed | 未確認 | CWE-863 | IBM i 7.6, 7.5, and 7.4 could allow a remote authenticated attacker to modify certain system messages due to improper authorization. |
| CVE-2026-16960 | Deferred | 未確認 | CWE-200 | The Loops & Logic WordPress plugin before 4.3.0 does not restrict its public template-data action to the data a visitor is permitted to see, allowing unauthenticated users to read |
| CVE-2026-16966 | Deferred | 未確認 | CWE-200 | The Solace Extra WordPress plugin before 1.7.0 does not perform any authorization or post-status checks in one of its AJAX actions, allowing unauthenticated visitors to read the co |
| CVE-2026-16983 | Deferred | 未確認 | CWE-200 | The Gutentor WordPress plugin before 4.0.6 does not apply the correct context restriction to one of its REST endpoints, exposing the plaintext passwords of password-protected post |
| CVE-2026-17037 | Deferred | 未確認 | CWE-79 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘comment’ parameter in all versions up to, |
| CVE-2026-17038 | Deferred | 未確認 | CWE-798 | DrEryk Gabinet before 11.5.0 uses hard-coded API credentials in its ticket reporting component. These credentials can be used to authenticate directly to the ticket system API. Thi |
| CVE-2026-17047 | Awaiting Analysis | 未確認 | CWE-352 | IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information due to improper request validation. |
| CVE-2026-17050 | Awaiting Analysis | 未確認 | CWE-415 | The experimental USB host stack allocates a per-device configuration-descriptor buffer, udev->cfg_desc, from the dedicated usb_device_heap in usbh_device_set_configuration() (subsy |
| CVE-2026-17051 | Awaiting Analysis | 未確認 | CWE-787 | The Intel SEDI IPM (inter-processor mailbox) driver in drivers/ipm/ipm_sedi.c handles an inbound message interrupt in ipm_event_dispose(). It read the peer-written doorbell registe |
| CVE-2026-17052 | Awaiting Analysis | 未確認 | CWE-787 | The Time-aware GPIO syscall verification handler z_vrfy_tgpio_pin_read_ts_ec() in drivers/timeaware_gpio/timeaware_gpio_handlers.c validated only the port device object and passed |
| CVE-2026-17054 | Awaiting Analysis | 未確認 | CWE-125 | The Espressif ESP-hosted Wi-Fi driver (drivers/wifi/esp_hosted/) parses frames received over SPI from the ESP co-processor in esp_hosted_event_task(). For control frames it took th |
| CVE-2026-17057 | Analyzed | 未確認 | CWE-306 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and affect data integrity due to missing authentication for critical functions. |
| CVE-2026-17086 | Deferred | 未確認 | CWE-502 | The ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.5.5 via des |
| CVE-2026-17102 | Analyzed | 未確認 | CWE-78 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an |
| CVE-2026-17133 | Awaiting Analysis | 未確認 | CWE-78 | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to improper neutralization of speci |
| CVE-2026-17149 | Deferred | 未確認 | CWE-79 | The Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'wrapper' S |
| CVE-2026-17156 | Awaiting Analysis | 未確認 | CWE-502 | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to insecure deserialization. |
| CVE-2026-17176 | Deferred | 未確認 | CWE-78 | An OS command injection vulnerability in the TDDP module of Deco BE11000 and Deco M9 Plus allows an adjacent network attacker to execute arbitrary commands with root privileges by |
| CVE-2026-17207 | Analyzed | 未確認 | CWE-787 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and compromise integrity due to a buffer overflow. |
| CVE-2026-17255 | Analyzed | 未確認 | CWE-787 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper validation of the prefix length in ICMPv6 Router Advertisements. |
| CVE-2026-17259 | Analyzed | 未確認 | CWE-121 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a stack-based buffer overflow. |
| CVE-2026-17262 | Awaiting Analysis | 未確認 | CWE-78 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to improper validation of FTP authentication commands. |
| CVE-2026-17270 | Analyzed | 未確認 | CWE-121 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to a stack-based buffer overflow. |
| CVE-2026-17273 | Analyzed | 未確認 | CWE-476 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a NULL pointer dereference. |
| CVE-2026-17274 | Analyzed | 未確認 | CWE-330 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to predictable server seeds. |
| CVE-2026-17413 | Analyzed | 未確認 | CWE-129 | IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the RT |
| CVE-2026-17416 | Awaiting Analysis | 未確認 | CWE-502 | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to insecure deserialization. |
| CVE-2026-17440 | Analyzed | 未確認 | CWE-674 | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to cau |
| CVE-2026-17442 | Analyzed | 未確認 | CWE-532 | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obt |
| CVE-2026-17443 | Analyzed | 未確認 | CWE-611 | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote authenticated |
| CVE-2026-17444 | Analyzed | 未確認 | CWE-611 | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote authenticated |
| CVE-2026-17463 | Awaiting Analysis | 未確認 | CWE-400 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a remote authenticated attacker to cause a denial of |
| CVE-2026-17465 | Awaiting Analysis | 未確認 | CWE-400 | IBM Concert 1.0.0 through 3.0.0 could allow a remote authenticated attacker to cause a denial of service due to improper enforcement of storage limits. |
| CVE-2026-17467 | Awaiting Analysis | 未確認 | CWE-327 | IBM Cloud Pak for Data System (Yosemite 1.0) 3.0.5.2 could allow a remote attacker to obtain sensitive information due to the use of weak or deprecated cryptographic protocols. |
| CVE-2026-17469 | Analyzed | 未確認 | CWE-193, CWE-787 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to cause a denial of service due to an off-by-one write in the LPD queue name parser. |
| CVE-2026-17470 | Analyzed | 未確認 | CWE-787 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a buffer overflow. |
| CVE-2026-17472 | Awaiting Analysis | 未確認 | CWE-269 | IBM Concert 1.0.0 through 3.0.0 could allow a remote authenticated attacker to access or modify unauthorized resources due to the use of wildcards in RBAC permission definitions. |
| CVE-2026-17483 | Analyzed | 未確認 | CWE-285 | IBM Db2 Mirror for i 7.4, 7.5, and 7.6 IBM i could allow a local attacker to delete historical flight-recorder archives due to improper access control in an SQL procedure. |
| CVE-2026-17495 | Awaiting Analysis | 未確認 | CWE-27 | moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. In versions 2.29.2 through 2.30.1, a specially crafted non-string object passed to |
| CVE-2026-17499 | Analyzed | 未確認 | CWE-78 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command. |
| CVE-2026-17503 | Analyzed | 未確認 | CWE-20 | IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the pa |
| CVE-2026-17504 | Undergoing Analysis | 未確認 | CWE-191 | IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the pa |
| CVE-2026-17509 | Deferred | 未確認 | CWE-89 | The WPML Multilingual CMS plugin for WordPress is vulnerable to time-based SQL Injection via the ‘elementIds’ parameter in all versions up to, and including, 4.9.5 due to insuffici |
| CVE-2026-17511 | Analyzed | 未確認 | CWE-212 | IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the pa |
| CVE-2026-17517 | Deferred | 未確認 | CWE-200 | The Content Views WordPress plugin before 4.5.1.2 does not check whether the user requesting a view is allowed to read the posts it returns, allowing unauthenticated attackers to |
| CVE-2026-17526 | Awaiting Analysis | 未確認 | CWE-862 | Keycloak is an open-source identity and access management solution. A vulnerability was discovered where a user with the impersonation role can impersonate a realm administrator. T |
| CVE-2026-17539 | Awaiting Analysis | 未確認 | CWE-476 | RTU500 has a vulnerability, where high-load scenarios, such as sending GI requests at short intervals, may cause a NULL pointer dereference in the last entry of the enhanced messag |
| CVE-2026-17545 | Analyzed | 未確認 | CWE-67 | On Windows, PHP's filesystem and stream APIs do not reject reserved device names such as CON, PRN, AUX, NUL, COM1 to COM9, LPT1 to LPT9, CONIN$ and CONOUT$ when they appear as a co |
| CVE-2026-17553 | Deferred | 未確認 | CWE-269 | The WP EasyCart plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.9.3. This is due to the ec_ajax_save_page_default_options() AJAX hand |
| CVE-2026-17563 | Deferred | 未確認 | CWE-862 | The User Frontend WordPress plugin before 4.3.11 does not enforce its subscription-purchase requirement when processing frontend post submissions, only when rendering the form, all |
| CVE-2026-17576 | Deferred | 未確認 | CWE-89 | The InfiniteWP Client plugin for WordPress is vulnerable to SQL Injection via the get_comments action in versions up to, and including, 1.13.9. This is due to insufficient escaping |
| CVE-2026-17577 | Deferred | 未確認 | CWE-79 | The SSL Zen plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'uri' (and 'host') parameters in versions up to, and including, 4.7.42. The ssl_zen_message |
| CVE-2026-1758 | Awaiting Analysis | 未確認 | CWE-384 | Session fixation vulnerability in Secomea GateManager (webserver module) allows Session Fixation. This issue affects GateManager: 11.5;0, 11.4.625515072:0. Fixed in Version 11. |
| CVE-2026-17585 | Deferred | 未確認 | CWE-200 | The Royal Addons for Elementor – Addons and Templates Kit for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1 |
| CVE-2026-17586 | Deferred | 未確認 | CWE-79 | The VK All in One Expansion Unit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'vkExUnit_cta_img_position' Post Meta in all versions up to, and including, 9 |
| CVE-2026-17589 | Deferred | 未確認 | CWE-89 | The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to generic SQL Injection via the 'product_order' parameter in all versions up to, and including, 5.9.2 due to |
| CVE-2026-1759 | Awaiting Analysis | 未確認 | CWE-280 | Improper handling of insufficient permissions or privileges vulnerability in Secomea GateManager allows Privilege Escalation. This issue affects GateManager: 11.5;0, 11.4.62551507 |
| CVE-2026-17602 | Deferred | 未確認 | CWE-22 | The SSL Zen — SSL Certificate Installer & HTTPS Redirects plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.7.42 via the 'file_name' |
| CVE-2026-17607 | Deferred | 未確認 | CWE-89 | The WP Inventory Manager plugin for WordPress is vulnerable to SQL Injection via the 'where' shortcode attribute of the [wpinventory] shortcode in versions up to, and including, 2. |
| CVE-2026-17618 | Analyzed | 未確認 | CWE-862 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote unauthenticated attacker to view and modify sensitive information and cause a denial of service du |
| CVE-2026-17619 | Awaiting Analysis | 未確認 | CWE-89 | IBM Platform RTM is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete infor |
| CVE-2026-17620 | Analyzed | 未確認 | CWE-523 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift 4.0.6.0 through 4.0.6.0.0.6.0 Refresh (Operator 4.4.6+20260807.081800)4.0.7.04.0.8.04.0.9.04.0.10.0 Interim Fix 064 IBM |
| CVE-2026-17621 | Analyzed | 未確認 | CWE-22 | IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot do |
| CVE-2026-17622 | Analyzed | 未確認 | CWE-22 | IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory |
| CVE-2026-17627 | Analyzed | 未確認 | CWE-639 | IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to obtain sensitive information and inject messages into workflow history due to improper authoriz |
| CVE-2026-17628 | Awaiting Analysis | 未確認 | CWE-287 | IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to change the password of an account due to improper authentication. |
| CVE-2026-17631 | Analyzed | 未確認 | CWE-918 | IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to obtain sensitive information due to a server-side request forgery (SSRF) vulnerability. |
| CVE-2026-17635 | Analyzed | 未確認 | CWE-306 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to perform unauthorized actions due to improper configuration of HTTP method-based securi |
| CVE-2026-17636 | Analyzed | 未確認 | CWE-787 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to execute arbitrary code due to improper validation of a specified quantit |
| CVE-2026-17637 | Analyzed | 未確認 | CWE-502 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow an adjacent-network attacker to execute arbitrary code due to deserialization of untrusted data. |
| CVE-2026-17643 | Analyzed | 未確認 | CWE-522 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information and perform unauthorized actions due to insufficiently pro |
| CVE-2026-17644 | Analyzed | 未確認 | CWE-798 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to gain unauthorized access to sensitive information and modify transaction data due to th |
| CVE-2026-17645 | Analyzed | 未確認 | CWE-269 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to gain elevated privileges due to improper privilege management. |
| CVE-2026-17646 | Analyzed | 未確認 | CWE-611 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to improper restriction of XML external |
| CVE-2026-17647 | Analyzed | 未確認 | CWE-829 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to execute arbitrary commands due to the inclusion of functionality from an untrusted cont |
| CVE-2026-18021 | Deferred | 未確認 | CWE-94 | The The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.10.3 |
| CVE-2026-18023 | Deferred | 未確認 | CWE-226 | Sensitive Information in Resource Not Removed Before Reuse in ASUS Armoury Crate driver allows a local user to disclose sensitive information from uninitialized memory via a crafte |
| CVE-2026-18042 | Deferred | 未確認 | CWE-862 | The WP Travel WordPress plugin before 12.0.2 does not verify that the requester is authorized to act on the booking targeted by one of its front-end payment-message handlers, allo |
| CVE-2026-18056 | Deferred | 未確認 | CWE-287 | The HivePress Authentication plugin for WordPress is vulnerable to Authentication Bypass via the access_token parameter in all versions up to, and including, 1.1.4. This is due to |
| CVE-2026-18058 | Deferred | 未確認 | CWE-862 | The mobile Smart Connect dashboard UI was subject to manipulation by 3rd party apps. When paired with a phishing attack, this manipulation could result in escalated privileges of a |
| CVE-2026-18061 | Analyzed | 未確認 | CWE-611 | Improper restriction of XML external entity references in the RemoteQueryCachePlugin in AWS Advanced JDBC Wrapper 3.3.0 through 4.2.0 might allow an actor with write access to the |
| CVE-2026-18063 | Deferred | 未確認 | CWE-79 | The Job Postings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'position_button' parameter in all versions up to, and including, 2.8.1 due to insufficie |
| CVE-2026-18065 | Awaiting Analysis | 未確認 | CWE-290 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to gain access to sensitive information through session IP binding bypass in Navigator for i. |
| CVE-2026-18066 | Analyzed | 未確認 | CWE-918 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information and trigger unauthorized actions due to server-side reques |
| CVE-2026-18069 | Awaiting Analysis | 未確認 | CWE-367 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to obtain ownership of arbitrary file system objects due to a time-of-check to time-of-use (TOCTOU) race condition. |
| CVE-2026-18073 | Analyzed | 未確認 | CWE-78 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to inject parameters into a CL command due to improper neutralization of special elements. |
| CVE-2026-18074 | Analyzed | 未確認 | CWE-287 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to perform unauthorized actions due to improper authentication and missing authorization. |
| CVE-2026-18076 | Analyzed | 未確認 | CWE-401 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a memory leak. |
| CVE-2026-18078 | Analyzed | 未確認 | CWE-190 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to an integer overflow. |
| CVE-2026-18090 | Awaiting Analysis | 未確認 | CWE-125 | A flaw was found in gdk-pixbuf. This vulnerability allows a remote attacker to cause a heap out-of-bounds read by providing a specially crafted Apple Icon Image (.icns) file. The u |
| CVE-2026-18095 | Analyzed | 未確認 | CWE-787 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to execute arbitrary code due to a buffer overflow. |
| CVE-2026-18104 | Analyzed | 未確認 | CWE-327 | IBM Db2 Mirror for i 7.6, 7.5, and 7.4 could allow a local attacker to obtain sensitive information due to the use of the AES Electronic Codebook (ECB) mode for encryption. |
| CVE-2026-18105 | Analyzed | 未確認 | CWE-400, CWE-770 | An uncontrolled resource consumption vulnerability in Fireware OS's diagnostic tasks feature allows a low-privileged, authenticated user to cause a denial of service of the system' |
| CVE-2026-18110 | Analyzed | 未確認 | CWE-862 | Concrete CMS 9 (9.0.0 through 9.5.2) does not perform an authorization check on the user selector autocomplete endpoint (/ccm/system/user/autocomplete), which backs the "Preview as |
| CVE-2026-18111 | Analyzed | 未確認 | CWE-306 | Concrete CMS 9 before 9.5.3 was vulnerable to stored cross-site scripting (XSS) in the Feature, Feature Link, Hero Image, and Image blocks and before Concrete 8.5.21 in the feature |
| CVE-2026-18113 | Awaiting Analysis | 未確認 | CWE-79 | In Concrete CMS 9.0 to 9.5.2, the Top Navigation Bar block did not HTML-escape dropdown child page names before writing them into the page, so a user who could create or rename pag |
| CVE-2026-18114 | Analyzed | 未確認 | CWE-22 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to read arbitrary files due to improper path canonicalization. |
| CVE-2026-18115 | Awaiting Analysis | 未確認 | CWE-862 | Concrete CMS 9.2.0 to 9.5.2 did not enforce per-field edit_user_properties permissions on the REST API user write endpoints (PUT /ccm/api/1.0/users/{uID} and POST /ccm/api/1.0/user |
| CVE-2026-18116 | Analyzed | 未確認 | CWE-79 | Concrete CMS 8.3.0 to 9.5.2 stored calendar event names without sanitization and rendered them without HTML escaping in the workflow approval and deletion notifications shown in th |
| CVE-2026-18117 | Analyzed | 未確認 | CWE-79 | Concrete CMS 9.0.0 through 9.5.3 is vulnerable to stored XSS via the custom page alias name (customAliasName) because the Edit Alias dialog applied only trim() to the submitted val |
| CVE-2026-18119 | Analyzed | 未確認 | CWE-79 | Concrete CMS below 9.5.3 did not sanitize custom style values in the Block Design dialog before writing them into page CSS via a DOM sink, permitting stored cross-site scripting. A |
| CVE-2026-18120 | Analyzed | 未確認 | CWE-862 | Concrete CMS before 9.5.3 exposed a legacy Express entry search endpoint that returned entry result JSON without invoking the canViewExpressEntries() permission check applied by th |
| CVE-2026-18121 | Deferred | 未確認 | CWE-639, CWE-862 | Concrete CMS 9.5.2 and below is vulnerable to an authorization bypass (IDOR) because the frontend calendar lightbox endpoint (/ccm/calendar/view_event/{bID}/{occurrence_id}) does n |
| CVE-2026-18122 | Deferred | 未確認 | CWE-862 | Concrete CMS 9.2.0 to 9.5.2 Express REST API list endpoint exposes restricted Express entries via Missing Authorization; the Concrete CMS REST API's Express entry collection endpoi |
| CVE-2026-18123 | Analyzed | 未確認 | CWE-470 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to cause a denial of service due to the improper use of reflection with externally contro |
| CVE-2026-18124 | Analyzed | 未確認 | CWE-522 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information due to insufficiently protected credentials. |
| CVE-2026-18131 | Analyzed | 未確認 | CWE-79 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary JavaScript in an authenticated user's browser due to improper neutra |
| CVE-2026-18132 | Analyzed | 未確認 | CWE-862 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to perform unauthorized payment mutation actions due to missing authorizati |
| CVE-2026-18133 | Analyzed | 未確認 | CWE-22 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to modify server files due to path traversal. |
| CVE-2026-18134 | Analyzed | 未確認 | CWE-319 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive information. |
| CVE-2026-18137 | Analyzed | 未確認 | CWE-89 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary ESQL commands due to improper neutralization of special elements use |
| CVE-2026-18143 | Deferred | 未確認 | CWE-434 | The Request a Quote for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.9.2 via the `afrfq_submit_quote_via_popup()` |
| CVE-2026-18145 | Analyzed | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability in the spamBlocker (spamd) service of WatchGuard Fireware OS allows an authenticated attacker with administrator privileges to crash the |
| CVE-2026-18147 | Awaiting Analysis | 未確認 | CWE-79 | A flaw was found in FreeIPA. An unauthenticated remote attacker could exploit a DOM Cross-Site Scripting (XSS) vulnerability in the FreeIPA/IdM Web UI password reset page. By entic |
| CVE-2026-18149 | Analyzed | 未確認 | CWE-772 | undici's retry handler can leave an already-exposed response body pending forever. When a server returns a successful response that declares a Content-Length, sends only part of th |
| CVE-2026-18151 | Awaiting Analysis | 未確認 | CWE-362 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a race condition during the WebSocket handshake process. |
| CVE-2026-18152 | Analyzed | 未確認 | CWE-347 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to forge validly-signed messages due to improper verification of cryptographic signatures |
| CVE-2026-18153 | Analyzed | 未確認 | CWE-327 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information and forge authentication tags due to the us |
| CVE-2026-18154 | Analyzed | 未確認 | CWE-321 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to the use of a hard-coded or predictable cryptograph |
| CVE-2026-18156 | Analyzed | 未確認 | CWE-862 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to bypass security controls by forging user identities due to improper auth |
| CVE-2026-18161 | Analyzed | 未確認 | CWE-778 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to falsify transaction audit logs due to improper validation of a client-su |
| CVE-2026-18162 | Analyzed | 未確認 | CWE-94 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary code due to improper neutralization of user-controlled input within |
| CVE-2026-18163 | Analyzed | 未確認 | CWE-502 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary code due to improper deserialization of untrusted data. |
| CVE-2026-18167 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability exists in the EasyMesh module of TP-Link Archer AX55 v4. When Mesh mode is enabled, a LAN attacker may submit crafted input that causes |
| CVE-2026-18169 | Analyzed | 未確認 | CWE-22 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to improper validation of symbolic link |
| CVE-2026-18170 | Analyzed | 未確認 | CWE-770 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to cause a denial of service due to allocation of resources without limits or throttling. |
| CVE-2026-18172 | Analyzed | 未確認 | CWE-611 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper restriction of XML external entity refere |
| CVE-2026-18173 | Analyzed | 未確認 | CWE-295 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper enforcement of mutual TLS authentication. |
| CVE-2026-18175 | Analyzed | 未確認 | CWE-285 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to manipulate database transactions due to improper authorization in the DDM target dispatcher. |
| CVE-2026-18176 | Analyzed | 未確認 | CWE-319 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive information. |
| CVE-2026-18177 | Analyzed | 未確認 | CWE-862 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute unauthorized payment actions due to missing authorization checks. |
| CVE-2026-18179 | Analyzed | 未確認 | CWE-862 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to clear active chat sessions due to improper authorization. |
| CVE-2026-18180 | Analyzed | 未確認 | CWE-89 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to SQL injection. |
| CVE-2026-18181 | Analyzed | 未確認 | CWE-321 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to bypass authentication and access sensitive information due to a hard-coded cryptograph |
| CVE-2026-18184 | Analyzed | 未確認 | CWE-611 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw. |
| CVE-2026-18185 | Analyzed | 未確認 | CWE-306 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to access sensitive information and modify system configurations due to missing authentic |
| CVE-2026-18198 | Deferred | 未確認 | CWE-89 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in TAC Information Services Internal and External Trade Inc. GOLDENHORN ONEIT all |
| CVE-2026-18210 | Deferred | 未確認 | CWE-89 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in TRtek Technological Products Computer Software Hardware Industry and Trade Lim |
| CVE-2026-18212 | Awaiting Analysis | 未確認 | CWE-401 | A flaw was found in the SAML Redirect Binding implementation of Keycloak, an open-source identity and access management solution. The issue occurs because the custom DEFLATE compre |
| CVE-2026-18221 | Analyzed | 未確認 | CWE-287 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to gain unauthorized access due to improper validation of client-supplied authentication parameters. |
| CVE-2026-18232 | Deferred | 未確認 | CWE-200 | The WP Directory Kit WordPress plugin through 1.5.7 does not check the status or ownership of a listing before returning its content through one of its public AJAX actions, allowin |
| CVE-2026-18238 | Awaiting Analysis | 未確認 | CWE-126, CWE-1288 | The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause |
| CVE-2026-18251 | Awaiting Analysis | 未確認 | CWE-1385 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to improper validation of the WebSocket origin. |
| CVE-2026-18311 | Deferred | 未確認 | CWE-79 | Readwise Reader for Android contains a cross-site scripting vulnerability due to missing HTML sanitization in its processing of imported document metadata. Attacker-controlled fiel |
| CVE-2026-18312 | Deferred | 未確認 | CWE-79 | Readwise Reader for Android constructs URLs in its WebView using attacker-controlled metadata without proper encoding or escaping. The application interpolates untrusted values dir |
| CVE-2026-18313 | Awaiting Analysis | 未確認 | CWE-401 | rpcapd can allocate up to 65536 bytes per each RPCAP_MSG_UPDATEFILTER_REQ or RPCAP_MSG_STARTCAP_REQ message received from the client, but it never frees the memory, so it leaks mem |
| CVE-2026-18317 | Deferred | 未確認 | CWE-862 | The Foxtool All-in-One: Contact chat button, Custom login, Media optimize images plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2. |
| CVE-2026-18320 | Deferred | 未確認 | CWE-79 | Readwise Reader for Android uses a sanitize-html configuration that permits all attributes on SVG and PATH elements due to a wildcard attribute rule. This configuration fails to re |
| CVE-2026-18329 | Awaiting Analysis | 未確認 | CWE-636 | Description NGINX JavaScript (njs) and QuickJS (qjs) engines have a vulnerability when a js_access handler performs asynchronous request body processing and an exception is thrown |
| CVE-2026-18330 | Deferred | 未確認 | CWE-321 | A hard-coded cryptographic key vulnerability exists in the web module of TP-Link Archer AX55 v4. A LAN attacker who captures an HTTP login session may use the known shared RSA priv |
| CVE-2026-18335 | Deferred | 未確認 | CWE-918 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 6.2.0 |
| CVE-2026-18341 | Analyzed | 未確認 | CWE-122, CWE-191 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to corrupt memory due to an integer underflow. |
| CVE-2026-18345 | Deferred | 未確認 | CWE-862 | The WP User Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Connect::complete() function in versions up to, |
| CVE-2026-18346 | Deferred | 未確認 | CWE-862 | The TikTok plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.4.1. This is due to the plugin not properly verifying that a user is a |
| CVE-2026-18351 | Deferred | 未確認 | CWE-434 | The Drag and Drop File Upload for Elementor Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.6.0 via the elementor_file_upl |
| CVE-2026-18355 | Awaiting Analysis | 未確認 | CWE-191 | A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). In sasl_io_start_packet(), the wrapped-record length read from the wire is valida |
| CVE-2026-18364 | Deferred | 未確認 | CWE-862 | The zportals WordPress plugin before 6.4.2 does not perform any capability or nonce check on several of its AJAX actions, allowing users with a subscriber-level account to modify t |
| CVE-2026-18365 | Deferred | 未確認 | CWE-200 | The zportals WordPress plugin before 6.4.2 does not perform any capability or nonce check on one of its AJAX actions, allowing users with a subscriber-level account to disclose the |
| CVE-2026-18386 | Deferred | 未確認 | CWE-22 | The WP BackItUp Community Edition plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.1.0 via the 'backup_file' parameter parameter. T |
| CVE-2026-18404 | Deferred | 未確認 | CWE-79 | The Social Chat – Click To Chat App Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'consent_message' JSON Attribute in .qlwapp data-box in all version |
| CVE-2026-18405 | Deferred | 未確認 | CWE-79 | The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content i |
| CVE-2026-18406 | Deferred | 未確認 | CWE-79 | The SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Text Field Entity-Encoded Payload |
| CVE-2026-18413 | Undergoing Analysis | 未確認 | CWE-787 | The ADC API requires each driver to reject a sampling sequence whose destination buffer is too small: the buffer_size field of struct adc_sequence in include/zephyr/drivers/adc.h d |
| CVE-2026-18414 | Undergoing Analysis | 未確認 | CWE-787 | The ADC API requires each driver to reject a sampling sequence whose destination buffer is too small: the buffer_size field of struct adc_sequence in include/zephyr/drivers/adc.h d |
| CVE-2026-18415 | Undergoing Analysis | 未確認 | CWE-787 | ieee802154_send() in subsys/net/l2/ieee802154/ieee802154.c copies the outgoing packet into a single fixed 125-byte transmit buffer (tx_frame_buf_pool, sized IEEE802154_MTU). In bui |
| CVE-2026-18416 | Undergoing Analysis | 未確認 | CWE-125 | The CoAP link-format helper match_path_uri() in subsys/net/lib/coap/coap_link_format.c compares a registered resource path against the URI carried in a Uri-Query href= option. That |
| CVE-2026-18417 | Undergoing Analysis | 未確認 | CWE-843 | The native BSD-socket layer recorded a pending asynchronous socket error by type-punning it into struct net_context's void user_data field (ctx->user_data = INT_TO_POINTER(-status) |
| CVE-2026-18421 | Awaiting Analysis | 未確認 | CWE-862 | Concrete CMS 9 through 9.5.2 does not perform an authorization check in three actions of the Boards data source dashboard controller (update, update_data_source, and delete_data_so |
| CVE-2026-18422 | Analyzed | 未確認 | CWE-862 | Concrete CMS before 9.5.3 did not enforce a destination-side authorization check and did not validate a CSRF token in the multilingual page assignment backend action (Backend\Page\ |
| CVE-2026-18423 | Analyzed | 未確認 | CWE-639 | Concrete CMS 9.0.0 through 9.5.2 is vulnerable to Insecure direct object reference (IDOR) in the Express saved search preset delete and edit dialogs . An authenticated user holdin |
| CVE-2026-18424 | Analyzed | 未確認 | CWE-918 | Concrete CMS 9.0.0 to 9.5.2 is vulnerable to Server-Side Request Forgery iremote file import via cross-port reuse of a host's validated DNS pin. When multiple remote URLs share the |
| CVE-2026-18425 | Analyzed | 未確認 | CWE-352, CWE-862 | Concrete CMS 9 before 9.5.3 authorized the dashboard sitemap reorder action (Concrete\Controller\Backend\Dashboard\SitemapUpdate) using only the global access_sitemap task permissi |
| CVE-2026-18426 | Analyzed | 未確認 | CWE-862 | Concrete CMS 9.0.0 through 9.5.2 did not enforce a block-level edit-permission check on the Express Form block's control-management actions, which relied solely on CSRF token valid |
| CVE-2026-18439 | Deferred | 未確認 | CWE-639 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 4.0.7 via the tutor_qu |
| CVE-2026-18441 | Deferred | 未確認 | CWE-639 | The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and i |
| CVE-2026-18442 | Deferred | 未確認 | CWE-89 | The WCFM Marketplace – Multivendor Marketplace for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'wcfmmp_user_location_lng' parameter in all versi |
| CVE-2026-18453 | Awaiting Analysis | 未確認 | CWE-476 | A flaw was found in 389 Directory Server. A missing NULL pointer check in the paged results handling of op_shared_search allows an unauthenticated remote attacker to crash the LDAP |
| CVE-2026-18457 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, f |
| CVE-2026-18458 | Awaiting Analysis | 未確認 | CWE-125, CWE-685, CWE-843 | Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Core |
| CVE-2026-18459 | Awaiting Analysis | 未確認 | CWE-682 | Incorrect Calculation vulnerability in RTI Connext Professional (Core Libraries) allows Abuse Existing Functionality. This issue affects Connext Professional: from 7.4.0 before 7.7 |
| CVE-2026-18460 | Awaiting Analysis | 未確認 | CWE-193, CWE-787 | Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before |
| CVE-2026-18461 | Awaiting Analysis | 未確認 | CWE-134 | Use of Externally-Controlled Format String vulnerability in RTI Connext Professional (Core Libraries) allows Format String Injection. This issue affects Connext Professional: from |
| CVE-2026-18462 | Awaiting Analysis | 未確認 | CWE-190, CWE-284 | Integer Overflow or Wraparound, Improper Access Control vulnerability in RTI Connext Professional (Core Libraries) allows Shared Resource Manipulation. This issue affects Connext P |
| CVE-2026-18467 | Deferred | 未確認 | CWE-269 | The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.0.3. The 5.0.3 patch introduced a w |
| CVE-2026-18480 | Deferred | 未確認 | CWE-269 | The SureCart WordPress plugin before 4.6.3 does not ensure that the account affected by a customer update is the same account its permission check authorised, allowing users with |
| CVE-2026-18486 | Analyzed | 未確認 | CWE-200 | IBM ContextForge MCP Gateway <= v1.0.7 MCP Context Forge could allow a remote authenticated attacker to obtain sensitive credentials and escalate privileges due to improper validat |
| CVE-2026-18488 | Deferred | 未確認 | CWE-79 | The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'tagName' Block Attribute (blocksy/dynamic-data) in all versions up to, and including, 2 |
| CVE-2026-18489 | Analyzed | 未確認 | CWE-488 | IBM ContextForge MCP Gateway - Translate utility <= 1.0.8 MCP Context Forge could allow a remote attacker to obtain sensitive information from other sessions due to exposure of dat |
| CVE-2026-18490 | Analyzed | 未確認 | CWE-502 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to unauthenticated remote code execution via Java native deserialization on the PayDir Business Rules Man |
| CVE-2026-18495 | Awaiting Analysis | 未確認 | CWE-122 | A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the `tiff2pdf` utility due to an integer truncation error when processing crafted BigTIFF files. An atta |
| CVE-2026-18505 | Analyzed | 未確認 | CWE-601 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to open redirect in the PMP `HostHeaderFilter` (`HostHeaderFilter.java:151`). An unauthenticated attacker |
| CVE-2026-18515 | Awaiting Analysis | 未確認 | CWE-22 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to place files into the file system with Navigator for i when they should be blocked by Navigator configura |
| CVE-2026-18540 | Analyzed | 未確認 | CWE-444 | undici's retry interceptor can append the body of a ranged retry response to bytes already delivered from an earlier partial response while still presenting the original response's |
| CVE-2026-18550 | Deferred | 未確認 | CWE-269 | The Nokri - Job Board WordPress Theme for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 1.6.6. This is due to insuffici |
| CVE-2026-18555 | Deferred | 未確認 | CWE-79 | The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'icn' parameter in all ve |
| CVE-2026-18561 | Deferred | 未確認 | CWE-89 | The Unlimited Elements For Elementor plugin for WordPress is vulnerable to SQL Injection via the 'addontype' parameter in versions up to, and including, 2.0.16. This is due to insu |
| CVE-2026-18562 | Deferred | 未確認 | CWE-79 | The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via SEO-friendly permalink filter URL segments in vers |
| CVE-2026-18567 | Analyzed | 未確認 | CWE-367 | IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a local attacker to obtain information due to a race condition involving a predictable Unix domain socket path in a world-writabl |
| CVE-2026-18579 | Deferred | 未確認 | CWE-79 | The WP Photo Album Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'HTTP_X_FORWARDED_FOR' parameter in all versions up to, and including, 9.2.08.003 |
| CVE-2026-18594 | Deferred | 未確認 | CWE-862 | The Advanced Contact form 7 DB plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.3. This is due to the plugin not properly verify |
| CVE-2026-18595 | Deferred | 未確認 | CWE-79 | The WP-Lister Lite for eBay plugin for WordPress is vulnerable to Stored Cross-Site Scripting via AJAX Cron Handler Request Parameter in all versions up to, and including, 3.8.9 du |
| CVE-2026-18626 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0. |
| CVE-2026-18630 | Deferred | 未確認 | CWE-89 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Softwa |
| CVE-2026-18658 | Awaiting Analysis | 未確認 | CWE-89 | IBM Operational Decision Manager 9.6.0.0, 9.5.0.0, 8.11.1.0, 8.11.0.1, 8.12.0.1, 9.5.0.1, and 9.0.0.1 is vulnerable to SQL injection. An unauthenticated attacker can execute arbitr |
| CVE-2026-18672 | Awaiting Analysis | 未確認 | CWE-22 | In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient validation of client-supplied state in RadImageEditor may allow an attacker to influence which file is returned |
| CVE-2026-18730 | Modified | 未確認 | CWE-918 | A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause the Manage API to send crafted outbo |
| CVE-2026-18743 | Awaiting Analysis | 未確認 | CWE-131 | A flaw was found in popt. This vulnerability allows an attacker to provide specially crafted configuration content to a host, which, when loaded, can lead to a small memory corrupt |
| CVE-2026-18745 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-18746 | Undergoing Analysis | 未確認 | CWE-476 | parse_write_op() in subsys/net/lib/lwm2m/lwm2m_message_handling.c handles inbound CoAP WRITE/CREATE requests that carry a Block1 option. For the first block of a transfer it called |
| CVE-2026-18747 | Undergoing Analysis | 未確認 | CWE-125, CWE-191 | The MCUmgr SMP-over-console transport decodes a base64 frame, reads a 16-bit packet length from it, verifies a CRC and then unconditionally strips the trailing CRC with rx_ctxt->nb |
| CVE-2026-18752 | Deferred | 未確認 | CWE-89 | The Persistent Login plugin for WordPress is vulnerable to generic SQL Injection via 'wppl_device_id' Cookie in all versions up to, and including, 3.1.0 due to insufficient escapin |
| CVE-2026-18765 | Deferred | 未確認 | CWE-89 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Teracity Software Technologies Inc. E-OSB allows SQL Injection. This issue af |
| CVE-2026-18771 | Deferred | 未確認 | CWE-306 | Missing authentication for critical function vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows Authentication Bypass. This i |
| CVE-2026-18780 | Deferred | 未確認 | CWE-352 | Cross-Site request forgery (CSRF) vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows Cross Site Request Forgery. This issue a |
| CVE-2026-18782 | Deferred | 未確認 | CWE-89 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Command Line Exe |
| CVE-2026-18783 | Deferred | 未確認 | CWE-306 | Missing authentication for critical function vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Authentication Bypass. This issue affects Trex MES: thr |
| CVE-2026-18796 | Awaiting Analysis | 未確認 | CWE-1342 | Any application that uses external QSPI flash for encrypted XIP on nRF5340 and relies on that encryption for confidentiality and/or integrity of the externally stored |
| CVE-2026-18808 | Deferred | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in Klemsan Electrical Electronics Inc. KIO (Klemsan Internet Objects) allows Code Injection. This issue aff |
| CVE-2026-18825 | Deferred | 未確認 | CWE-346 | An Origin Validation Error in the middleware of the connect-xcors npm package allows an attacker to bypass origin verification and perform a cross domain authenticated request. |
| CVE-2026-18843 | Deferred | 未確認 | CWE-79 | The Beaver Builder Plugin (Starter Version) plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'no_results_message' node_preview Parameter in all versions up |
| CVE-2026-18851 | Analyzed | 未確認 | CWE-862 | Missing authorization in Ivanti Endpoint Manager Mobile before version 12.10.0.0, 12.9.0.2, and 12.8.0.4 allows a remote authenticated attacker to escalate their privileges to admi |
| CVE-2026-18857 | Analyzed | 未確認 | CWE-125 | IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the BMC firmware management interface. The h |
| CVE-2026-18858 | Analyzed | 未確認 | CWE-267 | IBM i 7.6, and 7.5 could allow a local authenticated attacker to obtain information from a privileged file when using SSH. |
| CVE-2026-18869 | Awaiting Analysis | 未確認 | CWE-918 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions and access internal network services due to improper validation of FTP PORT |
| CVE-2026-18870 | Analyzed | 未確認 | CWE-125 | IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 could allow a remote attacker to obtain |
| CVE-2026-18872 | Analyzed | 未確認 | CWE-79 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to stored cross-site scripting (CWE-79) in the FTM UI NetworkAcknowledgement React component (NetworkAckn |
| CVE-2026-18875 | Analyzed | 未確認 | CWE-74 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to RAG poisoning via unauthenticated runbook upsert (CWE-74) in the FTM AI agent server (api.vectordb.run |
| CVE-2026-18887 | Analyzed | 未確認 | CWE-200 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow an authenticated attacker to obtain sensitive information in PASE. An attacker could exploit this vulnerability to access information about |
| CVE-2026-18905 | Analyzed | 未確認 | CWE-918 | IBM ContextForge MCP Gateway (`mcp-contextforge-gateway`) <= v1.0.6 MCP Context Forge could allow a remote authenticated attacker to obtain sensitive information due to a DNS rebin |
| CVE-2026-18911 | Awaiting Analysis | 未確認 | CWE-20 | ManageEngine DataSecurity Plus versions before 6310 are vulnerable to an agent authentication bypass, allowing unenrolled agents to send requests without proper authentication. |
| CVE-2026-18912 | Awaiting Analysis | 未確認 | CWE-89 | ManageEngine DataSecurity Plus versions before 6310 are vulnerable to an authenticated SQL injection vulnerability, allowing an authenticated technician to execute arbitrary SQL qu |
| CVE-2026-18922 | Awaiting Analysis | 未確認 | CWE-287 | A flaw was found in 389 Directory Server. During SASL PLAIN authentication, a stale identity carried in a Cyrus SASL auxiliary property from a prior failed bind attempt can be inst |
| CVE-2026-18924 | Modified | 未確認 | CWE-416 | A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process |
| CVE-2026-18931 | Deferred | 未確認 | CWE-798 | Use of Hard-coded Credentials vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows Retrieve Embedded Sensitive Data. This issue |
| CVE-2026-18944 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-18944. Reason: This candidate is a reservation duplicate of CVE-2026-18944. Notes: All CVE user | |
| CVE-2026-18957 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Menulux Software Inc. Menulux Portal allows Stored XSS. This issue affects Me |
| CVE-2026-18964 | Deferred | 未確認 | CWE-79 | The Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty plugin for WordPress is vulnerable to Reflected Cross-Site Scri |
| CVE-2026-18986 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Entity Browser allows Stored XSS. This issue affects Entity Browser ver |
| CVE-2026-18994 | Deferred | 未確認 | CWE-926 | A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distributed exclusively in the Chinese market, that could allow a loca |
| CVE-2026-19032 | Awaiting Analysis | 未確認 | CWE-470, CWE-610 | jackson-databind's deserializer for java.nio.file.Path resolves an attacker-supplied URI without restricting the URI scheme. In JDKFromStringDeserializer.NioPathHelper.deserialize, |
| CVE-2026-19033 | Awaiting Analysis | 未確認 | CWE-349 | For a secondary zone with transfers restricted by TSIG, `named` may start to serve the data provided in a zone transfer before the final message with the TSIG signature arrives. Th |
| CVE-2026-19043 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Menulux Software Inc. Menulux Portal allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Menulux Portal: bef |
| CVE-2026-19051 | Deferred | 未確認 | CWE-256 | Plaintext storage of a password vulnerability in Menulux Software Inc. Menulux Portal allows Retrieve Embedded Sensitive Data. This issue affects Menulux Portal: before 2026090321 |
| CVE-2026-19057 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Gastromenum Gastromenum Ticket and QR Menu System allows Stored XSS. This iss |
| CVE-2026-19072 | Awaiting Analysis | 未確認 | CWE-1269, CWE-164 | Velociraptor stores the compiled VQL in the hunt object internally to avoid having to recompile the artifacts for each endpoint in the hunt. Although the field "compiled_collector_ |
| CVE-2026-19080 | Deferred | 未確認 | CWE-204 | Observable response discrepancy vulnerability in Menulux Software Inc. Menulux Portal allows Account Footprinting. This issue affects Menulux Portal: before 20260903211448. |
| CVE-2026-19081 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Gastromenum Gastromenum Ticket and QR Menu System allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Gastro |
| CVE-2026-19086 | Awaiting Analysis | 未確認 | CWE-125 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a denial of service as a result of a buffer overflow in a PASE process. An authenticated attacker could leverage this to terminate their ow |
| CVE-2026-19087 | Analyzed | 未確認 | CWE-250 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to achieve privilege escalation within the container due to improper privilege management. |
| CVE-2026-19116 | Deferred | 未確認 | CWE-502 | The User Frontend WordPress plugin before 4.3.11 does not prevent user-supplied field values from being deserialized when a submitted post is reopened in its frontend editing form |
| CVE-2026-19117 | Deferred | 未確認 | CWE-290 | Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and then authenticate as that user. This issue affects on-premi |
| CVE-2026-19118 | Analyzed | 未確認 | CWE-367 | A time-of-check time-of-use race condition vulnerability was identified in GitHub Enterprise Server that allowed remote code execution. Exploitation required an authenticated user |
| CVE-2026-19125 | Deferred | 未確認 | CWE-287 | The EthPress – Web3 Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.3.5. This is due to the verify_login() function in app |
| CVE-2026-19136 | Deferred | 未確認 | CWE-78 | A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application, distributed exclusively in the Chinese market, that could allow operating system com |
| CVE-2026-19179 | Analyzed | 未確認 | CWE-74 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to manipulate database queries due to improper neutralization of special elements in a bo |
| CVE-2026-19201 | Analyzed | 未確認 | CWE-674 | An uncontrolled recursion vulnerability in the Windows SIPA event log parser of Google go-attestation versions up to and including 0.6.1 allows an attacker to cause a denial of ser |
| CVE-2026-19202 | Awaiting Analysis | 未確認 | CWE-524 | A caching flaw in the toolbox-core package of the mcp-toolbox-sdk-python SDK causes the same Google ID token to be cached and reused across different audiences. If an application u |
| CVE-2026-19203 | Deferred | 未確認 | CWE-444 | A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty and an intermediary proxy to interpret different request boundaries, potentially r |
| CVE-2026-19204 | Deferred | 未確認 | CWE-770, CWE-789 | A client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing Jetty to attempt a large memory allocation and potentially exhaust the |
| CVE-2026-19205 | Deferred | 未確認 | CWE-204 | Observable response discrepancy vulnerability in GastroMenum GastroMenum Web Panel allows Account Footprinting. This issue affects GastroMenum Web Panel: before 31.08.2026. |
| CVE-2026-19219 | Awaiting Analysis | 未確認 | CWE-345, CWE-434 | In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient integrity protection of dialog request parameters used by the RadEditor file browser may allow an attacker who |
| CVE-2026-19224 | Deferred | 未確認 | CWE-94 | The Hummingbird Performance WordPress plugin before 3.21.2 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a mu |
| CVE-2026-19232 | Analyzed | 未確認 | CWE-863 | Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaini |
| CVE-2026-19233 | Awaiting Analysis | 未確認 | CWE-918 | CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized command execution and disclosure of server data when an attacker with a privileged ac |
| CVE-2026-19248 | Awaiting Analysis | 未確認 | CWE-674 | QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input. |
| CVE-2026-19251 | Deferred | 未確認 | CWE-200 | The Ultimate Member WordPress plugin before 2.13.0 does not check whether a comment has been approved, or whether the profile it belongs to is private, before returning profile ac |
| CVE-2026-19267 | Analyzed | 未確認 | CWE-306 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to missing authentication on the Business Rules Manager commands REST endpoint (`CommandsResource.java:31 |
| CVE-2026-19273 | Awaiting Analysis | 未確認 | CWE-287 | IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.6_2, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.6_2, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6. |
| CVE-2026-19274 | Awaiting Analysis | 未確認 | CWE-284 | IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.323 IBM Instana Agent Operator could allow an authenticated Kubernetes tenant to hijack or permanently destroy anot |
| CVE-2026-19280 | Awaiting Analysis | 未確認 | CWE-787 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a denial of service as a result of a buffer overflow in a PASE process. An authenticated attacker could leverage this to terminate their ow |
| CVE-2026-19283 | Awaiting Analysis | 未確認 | CWE-863 | IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.323 IBM Instana Agent Operator could allow an authenticated remote attacker to obtain sensitive information, caused |
| CVE-2026-19290 | Awaiting Analysis | 未確認 | CWE-284 | IBM Sterling File Gateway 6.2.0.0 through 6.2.0.6_1, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 could allow a remote attacker to obtain sensitive information due to improper access contr |
| CVE-2026-19298 | Analyzed | 未確認 | CWE-94 | IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to execute arbitrary code due to an authorization bypass in the flow build process. |
| CVE-2026-19299 | Analyzed | 未確認 | CWE-22 | IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to obtain sensitive information due to path traversal. |
| CVE-2026-19300 | Analyzed | 未確認 | CWE-200 | IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote attacker to obtain sensitive information due to incomplete scrubbing of sensitive credential fields. |
| CVE-2026-19301 | Analyzed | 未確認 | CWE-918 | IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. |
| CVE-2026-19302 | Analyzed | 未確認 | CWE-22 | IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of symbolic links. |
| CVE-2026-19303 | Analyzed | 未確認 | CWE-22 | IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to delete arbitrary local files or directories due to improper limitation of a pathname to a restr |
| CVE-2026-19304 | Analyzed | 未確認 | CWE-918 | IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to obtain sensitive information from internal services due to a URL parser discrepancy. |
| CVE-2026-19305 | Analyzed | 未確認 | CWE-918 | IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. |
| CVE-2026-19306 | Analyzed | 未確認 | CWE-22 | IBM Langflow OSS 1.0.0 through 1.11.2 allows an authenticated attacker to read arbitrary files from the server filesystem — including server secret material (secret_key, JWT signin |
| CVE-2026-19397 | Deferred | 未確認 | CWE-306 | Missing authentication for a critical function in ASUS Control Center Express Agent allows an unauthenticated nearby user to control the host via a direct connection to the agent w |
| CVE-2026-19407 | Awaiting Analysis | 未確認 | CWE-330 | Bucket Squatting in Google Cloud Gemini Enterprise Agent Platform SDK for Python versions prior to 1.166.1 allows an attacker to achieve Remote Code Execution (RCE) and tenant-proj |
| CVE-2026-19436 | Deferred | 未確認 | CWE-284 | The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not reconcile the value of the gift card coupon it issues against the amount actually collected at check |
| CVE-2026-19438 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ABB Mint Workbench I. This issue affects Mint Workbench I: through 5876. |
| CVE-2026-19439 | Deferred | 未確認 | CWE-200 | The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not have any authorisation check when displaying gift card details, allowing unauthenticated users to re |
| CVE-2026-19444 | Awaiting Analysis | 未確認 | CWE-22 | A path traversal vulnerability was discovered in the Kubernetes kubectl client's kubectl cp command on Windows. When copying files from a container, kubectl runs tar inside the con |
| CVE-2026-19445 | Awaiting Analysis | 未確認 | CWE-416 | A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its sni_callback assigns a different context to SSLSocket.context (the documented wa |
| CVE-2026-19453 | Deferred | 未確認 | CWE-269 | The JetBackup WordPress plugin before 3.1.23.5 does not verify the role or capabilities of the account it preserves across a restore or migration before granting it administrator |
| CVE-2026-19471 | Awaiting Analysis | 未確認 | CWE-79 | Multiple stored cross-site scripting security issues exist within ArmorStart® LT. Stored XSS occurs when user input is not properly sanitized and is stored on the server, allowing |
| CVE-2026-19472 | Awaiting Analysis | 未確認 | CWE-770 | A denial-of-service security issue exists within ArmorStart® LT. The security issue stems from improper handling of a crafted HTTP PUT request sent to the embedded web server. This |
| CVE-2026-19475 | Awaiting Analysis | 未確認 | CWE-400 | An authenticated user with permission to query a SQL data source can bypass the fix for CVE-2026-33375 by injecting the timeGroup macro through a WHERE clause, which Grafana's rege |
| CVE-2026-19477 | Deferred | 未確認 | CWE-121 | There is stack-based buffer overflow vulnerability recently discovered in MCC Universal Library for Linux (uldaq). This may result in information disclosure or arbitrary code exec |
| CVE-2026-19479 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-19480 | Analyzed | 未確認 | CWE-20 | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to b |
| CVE-2026-19486 | Awaiting Analysis | 未確認 | CWE-918 | A Server-Side Request Forgery (SSRF) vulnerability in Google Cloud Gemini Enterprise Agent Platform App Builder versions prior to 2026-06-01 on Google Cloud Platform allows an unau |
| CVE-2026-19492 | Analyzed | 未確認 | CWE-457 | IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in a hypervisor call interface. An a |
| CVE-2026-19499 | Awaiting Analysis | 未確認 | CWE-122 | Calling strfmon and strfmon_l in the GNU C Library version 2.38 to 2.44 can write past the end of the caller-supplied output buffer when a conversion uses right-justified width pad |
| CVE-2026-19504 | Awaiting Analysis | 未確認 | CWE-918 | Fabric.js loadFromJSON Server-Side Request Forgery Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Fabric.j |
| CVE-2026-19513 | Deferred | 未確認 | CWE-434 | The Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.0.2. This is due to insufficient validation of multi-file uplo |
| CVE-2026-19515 | Deferred | 未確認 | CWE-78 | The WSO2 Integrator MI VS Code extension fails to properly sanitize or validate user-supplied input when processing Micro Integrator projects opened from untrusted sources. This al |
| CVE-2026-19532 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in HAVELSAN Inc. Liman MYS allows Path Traversal. This issue affects Liman MYS: from 2 |
| CVE-2026-19534 | Analyzed | 未確認 | CWE-248, CWE-252 | undici's WebSocket client crashes the whole Node.js process during the opening handshake when a server responds with a subprotocol that the client never requested. A default WebSoc |
| CVE-2026-19535 | Awaiting Analysis | 未確認 | CWE-352 | Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the LuCI administrative web interface of Advantech EKI-1242IEIMS in firmware version V |
| CVE-2026-19542 | Awaiting Analysis | 未確認 | CWE-121 | Calling tdelete on a sufficiently deep tree in the GNU C Library version 2.1 to 2.44 may write one pointer past the end of an alloca-allocated array on the stack, which may crash t |
| CVE-2026-19543 | Awaiting Analysis | 未確認 | CWE-20 | IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 performs input validation exclusively on the client side and fails to enforce th |
| CVE-2026-19547 | Awaiting Analysis | 未確認 | CWE-426 | Ghostscript for Windows is vulnerable to local privilege escalation through PostScript resource file hijacking. Due to the application searching for PostScript resource files in pr |
| CVE-2026-19553 | Awaiting Analysis | 未確認 | CWE-297 | ssl.SSLContext.wrap_bio() didn't require the server_hostname argument to not be None if ssl.SSLContext.check_hostname was set. Due to a missing parameter check in SSLObject, if the |
| CVE-2026-19573 | Deferred | 未確認 | CWE-79 | The Affiliate Super Assistent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘doCommentShortcode’ function in all versions up to, and including, 1.10.2 d |
| CVE-2026-19583 | Awaiting Analysis | 未確認 | CWE-732 | Velociraptor allows some sensitive artifacts to be gated by additional permissions. For example, the Linux.Sys.BashShell artifact allows arbitrary command execution on endpoints, a |
| CVE-2026-19584 | Awaiting Analysis | 未確認 | CWE-1336, CWE-94 | Velociraptor allows for the creation of notebook backups in its default enabled daily backup feature. When Velociraptor restores the backup, the notebook cell content is interpolat |
| CVE-2026-19590 | Awaiting Analysis | 未確認 | CWE-427 | OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations trusted the repository's local core.hooksPath setting. If a |
| CVE-2026-19591 | Awaiting Analysis | 未確認 | CWE-150 | OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe because their command-safety parser interpr |
| CVE-2026-19592 | Awaiting Analysis | 未確認 | CWE-15 | OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git repository metadata without disabling the repository-local core.f |
| CVE-2026-19593 | Undergoing Analysis | 未確認 | CWE-15 | OpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and working-tree status when a user opened a workspace. If the workspace contains a repository with |
| CVE-2026-19596 | Awaiting Analysis | 未確認 | CWE-611 | An XML External Entity (XXE) vulnerability exists in the XML collector of multiple versions of OpenNMS Meridian and Horizon. When OpenNMS collects XML from a source whose response |
| CVE-2026-19599 | Awaiting Analysis | 未確認 | CWE-78 | ZohoCorp ManageEngine OpManager MSP versions 12.8.709 and below were vulnerable to a Remote Code Execution vulnerability in the Notification Profile module. |
| CVE-2026-19607 | Awaiting Analysis | 未確認 | CWE-287 | A flaw was found in the first-broker-login flow of the keycloak-services component. This component handles the initial authentication and account linking when a user logs in via an |
| CVE-2026-19612 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-19614 | Deferred | 未確認 | CWE-611 | The API is prone to XML external entity (XXE) injection. By default, XML external entity support is enabled. This issue affects NanoXML: 2.2.3. |
| CVE-2026-19619 | Analyzed | 未確認 | CWE-79 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have a |
| CVE-2026-19624 | Awaiting Analysis | 未確認 | CWE-88 | A flaw was found in NetworkManager-l2tp. The plugin writes attacker-controlled VPN connection properties (vpn.data and vpn.secrets values) unescaped into a generated ipsec.conf fil |
| CVE-2026-19625 | Awaiting Analysis | 未確認 | CWE-284 | When a Quarkus application has multiple endpoints secured by individual OIDC provider tenants, such as "/oidc-provider1" that is secured by the OIDC Provider 1 and "/oidc-provider2 |
| CVE-2026-19633 | Awaiting Analysis | 未確認 | CWE-89 | PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to execute arbitrary code by abusing operators, domain casts, or view subqueries that carry unt |
| CVE-2026-19634 | Awaiting Analysis | 未確認 | CWE-89 | PostgreSQL Anonymizer contains a SQL injection vulnerability in two import functions. A user can create a malicious JSON document containing specially crafted object names. If a su |
| CVE-2026-19640 | Awaiting Analysis | 未確認 | CWE-863 | On affected platforms running Arista EOS, an authenticated user with access to the gNMI (gRPC Network Management Interface) may receive incorrect authorization results, potentially |
| CVE-2026-19641 | Awaiting Analysis | 未確認 | CWE-116 | On affected platforms running Arista EOS with password authentication configured, a specially crafted password can create orphan authentication sessions. Repeated exploitation of t |
| CVE-2026-19644 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-19645 | Awaiting Analysis | 未確認 | CWE-400 | IBM MQ Agent CD: v1.0.0, v1.0.1, v2.0.0, v2.0.1 An authenticated user with a valid session cookie can submit arbitrarily large or computationallyexpensive requests that cause the L |
| CVE-2026-19646 | Awaiting Analysis | 未確認 | CWE-1149 | IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 could allow a remote attacker to redirect users to an arbitrary domain due to im |
| CVE-2026-19649 | Analyzed | 未確認 | CWE-532 | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obt |
| CVE-2026-19651 | Awaiting Analysis | 未確認 | CWE-639 | IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5, and 3.33.1 through 3.33.3 could allow an attacker to bypass authorization by manipulating URL query parameters due to incorr |
| CVE-2026-19655 | Awaiting Analysis | 未確認 | CWE-20 | On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay/snooping configured with the information option (Option 82), or with the DHCP server |
| CVE-2026-19658 | Deferred | 未確認 | CWE-502 | The Give Tributes plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.3.1 via deserialization of untrusted input . This makes it poss |
| CVE-2026-19662 | Awaiting Analysis | 未確認 | CWE-416 | An attacker may be able to cause a `named` resolver to abort. The attack requires inducing the victim resolver to send multiple queries for a DNSSEC-signed zone hosted by an author |
| CVE-2026-19666 | Awaiting Analysis | 未確認 | CWE-416 | On a resolver configured to use ``dns64``, if an applicable answer from the authoritative server is malformed in a specific way, the resolver `named` process will exit unexpectedly |
| CVE-2026-19667 | Awaiting Analysis | 未確認 | CWE-197 | If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 bytes, then a flaw in `named` results in a negative cache entry of 0 bytes. When |
| CVE-2026-19668 | Awaiting Analysis | 未確認 | CWE-407 | A BIND recursive resolver may experience excessive resource consumption if it encounters large numbers of a particular kind of invalid DNSSEC record. Default limits on "max-record |
| CVE-2026-19698 | Deferred | 未確認 | CWE-74 | The GutenKit WordPress plugin before 2.5.1 does not validate or escape style settings saved against a post before using them to build the CSS it outputs on the front end, allowing |
| CVE-2026-19704 | Deferred | 未確認 | CWE-89 | The Comments WordPress plugin before 7.6.66 does not validate a value used to build a database query, allowing unauthenticated users to inject SQL and read comments they are not e |
| CVE-2026-19708 | Deferred | 未確認 | CWE-200 | The File Manager WordPress plugin before 8.0.5 does not prevent unauthenticated users from downloading its database backup archives, and in some cases writes them under a fixed fil |
| CVE-2026-19713 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-19719 | Deferred | 未確認 | CWE-79 | The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 3.0.1 does not escape the post title before outputting it in an inline JavaScript event handler, allow |
| CVE-2026-19723 | Deferred | 未確認 | CWE-79 | The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 3.0.1 does not properly escape a value taken from the incoming request before outputting it in an inli |
| CVE-2026-19727 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Indu |
| CVE-2026-19729 | Awaiting Analysis | 未確認 | CWE-22 | A flaw was found in the key provider component of the keycloak-services library, which is the core engine for the Red Hat Build of Keycloak. The issue occurs because a previous fix |
| CVE-2026-19733 | Deferred | 未確認 | CWE-918 | Server-Side request forgery (SSRF) vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Information and Docum |
| CVE-2026-19743 | Deferred | 未確認 | CWE-22 | Improper path validation in the local IPC service of TeamViewer Full Client and Host on Windows, Linux, and macOS prior to version 15.82 allows a local authenticated user with low |
| CVE-2026-19754 | Awaiting Analysis | 未確認 | CWE-89 | Baserow versions 2.2.0 through 2.3.3 contain an SQL injection vulnerability in the index() formula function. A low-privileged authenticated user who can create or modify Formula fi |
| CVE-2026-19759 | Awaiting Analysis | 未確認 | CWE-863 | An Incorrect Authorization vulnerability in the task configuration in Google Cloud Application Integration versions prior to 2026-06-17 on Google Cloud Platform allows an authentic |
| CVE-2026-19766 | Analyzed | 未確認 | CWE-287 | An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent |
| CVE-2026-19769 | Deferred | 未確認 | CWE-79 | The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Repeater Child 'type' Confusion via Unmatched A |
| CVE-2026-19773 | Awaiting Analysis | 未確認 | CWE-787 | libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affe |
| CVE-2026-19774 | Awaiting Analysis | 未確認 | CWE-121 | BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations |
| CVE-2026-19775 | Deferred | 未確認 | CWE-862 | The OpenStation — Desktop Windows, Dock & Virtual Desktops for WP Admin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.7. This |
| CVE-2026-19778 | Deferred | 未確認 | CWE-89 | The WPMR Google Feed Manager for WooCommerce – Sell on Google Merchant Center & Shopping plugin for WordPress is vulnerable to time-based SQL Injection via the 'feed' parameter in |
| CVE-2026-19780 | Awaiting Analysis | 未確認 | CWE-95 | Koha Eval Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Koha. Authentication |
| CVE-2026-19781 | Deferred | 未確認 | CWE-122 | Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affecte |
| CVE-2026-19795 | Awaiting Analysis | 未確認 | CWE-502 | Qiskit could allow a local attacker to cause a denial of service due to a stack overflow during deserialization of QPY payloads. A malicious QPY payload can trigger a segmentation |
| CVE-2026-19796 | Deferred | 未確認 | CWE-79 | The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'lsd[displ][style]' Parameter in all |
| CVE-2026-19797 | Deferred | 未確認 | CWE-79 | The User Access Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab_group_section' parameter in all versions up to, and including, 2.3.18 due |
| CVE-2026-19800 | Deferred | 未確認 | CWE-89 | The Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to SQL Injection via the 'status' parameter in all versions up |
| CVE-2026-19802 | Deferred | 未確認 | CWE-862 | The Checkout Custom Fields Builder for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.5. This is due to the plugin |
| CVE-2026-19804 | Deferred | 未確認 | CWE-94 | The s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions plugin for WordPress is vulnerable to Remote Code Execution in all |
| CVE-2026-19806 | Deferred | 未確認 | CWE-287 | The Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Ac |
| CVE-2026-19816 | Awaiting Analysis | 未確認 | CWE-863 | A flaw was found in PackageKit. PackageKit skips the polkit authorization check for transactions carrying the SIMULATE (dry-run) flag. In the dnf5 backend, the RepoRemove handler i |
| CVE-2026-19820 | Deferred | 未確認 | CWE-59 | A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Backblaze's folder to Windows OS system files during a backup. S |
| CVE-2026-1984 | Deferred | 未確認 | CWE-862 | The Ibtana – Ecommerce Product Addons plugin for WordPress is vulnerable to unauthorized post meta modification due to a missing capability check on the 'iepa_use_gt_editor' AJAX a |
| CVE-2026-19840 | Deferred | 未確認 | CWE-863 | The Notiqoo WordPress plugin before 1.4.14 does not have capability checks on several of its AJAX actions and builds the name of the option to write from user input, allowing user |
| CVE-2026-19843 | Awaiting Analysis | 未確認 | CWE-78 | A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name (DN) into a shell command st |
| CVE-2026-19855 | Deferred | 未確認 | CWE-74 | The CleanTalk WordPress plugin before 6.87 does not prevent unauthenticated, user-supplied comment content from being passed to WordPress's shortcode engine, allowing any visitor t |
| CVE-2026-19857 | Deferred | 未確認 | CWE-74 | The Formidable Forms WordPress plugin before 6.35 does not prevent a request-derived value from reaching the WordPress shortcode parser when it substitutes a supported token into a |
| CVE-2026-19858 | Deferred | 未確認 | CWE-200 | The JetFormBuilder — Dynamic Blocks Form Builder WordPress plugin before 3.6.5.2 does not perform authorisation checks when resolving request-derived data during page rendering, al |
| CVE-2026-19859 | Deferred | 未確認 | CWE-74 | The JetFormBuilder WordPress plugin before 3.6.5.2 does not sanitize a request parameter before rendering it as message content, allowing unauthenticated users to execute arbitrary |
| CVE-2026-19860 | Deferred | 未確認 | CWE-73 | The JetFormBuilder — Dynamic Blocks Form Builder WordPress plugin before 3.6.5.3 does not sufficiently restrict which PHP functions can be used as a custom field-validation callbac |
| CVE-2026-19861 | Deferred | 未確認 | CWE-79 | The JetFormBuilder — Dynamic Blocks Form Builder WordPress plugin before 3.6.5.2 does not properly sanitise and escape a form field's value before including it in the HTML notifica |
| CVE-2026-19862 | Deferred | 未確認 | CWE-93 | The JetFormBuilder WordPress plugin before 3.6.5.2 does not validate or strip line breaks from address values it sources from submitted form fields before adding them to the header |
| CVE-2026-19872 | Deferred | 未確認 | CWE-79 | HTML::FormHandler versions before 0.410000 for Perl allow cross-site scripting via a submitted value rendered unescaped in an error message. The wrappers and renderers that emit a |
| CVE-2026-19885 | Awaiting Analysis | 未確認 | CWE-787 | OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected |
| CVE-2026-19886 | Awaiting Analysis | 未確認 | CWE-119 | OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected ins |
| CVE-2026-19887 | Deferred | 未確認 | CWE-502 | The Welcart e-Commerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.12.1 via deserialization of untrusted input in the Telecom |
| CVE-2026-19888 | Awaiting Analysis | 未確認 | CWE-476 | Missing validation of a mandatory attribute in the SCRAM client-final-message parser in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to crash the process. A m |
| CVE-2026-19914 | Deferred | 未確認 | CWE-79 | The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom_order' parameter in all versions up to, and including, 2.12.1 due to insuff |
| CVE-2026-19915 | Awaiting Analysis | 未確認 | CWE-269 | A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.55.10.0. The vulnerability could potentially allow a local attacker to es |
| CVE-2026-19931 | Modified | 未確認 | CWE-488 | A flaw in libcurl makes it wrongly reuse an HTTP connection setup for a given hostname using Negotiate authentication, when the initial request is done using empty credentials. Thi |
| CVE-2026-19941 | Awaiting Analysis | 未確認 | CWE-345 | An inapplicable NSEC record may be accepted by a `named` resolver as proof that no wildcard exists, which could allow an attacker at the same or an upstream level of the zone name |
| CVE-2026-19944 | Deferred | 未確認 | CWE-89 | The WP Crowdfunding plugin for WordPress is vulnerable to generic SQL Injection via 'wpneo_reward' Post Meta in all versions up to, and including, 2.2.1 due to insufficient escapin |
| CVE-2026-19945 | Deferred | 未確認 | CWE-79 | The WP Crowdfunding plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'first_name' parameter in all versions up to, and including, 2.2.1 due to insufficient |
| CVE-2026-19946 | Deferred | 未確認 | CWE-862 | The Awesome Support plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 6.3.9. This is due to a missing capability check on the wpas_do_mr |
| CVE-2026-19948 | Deferred | 未確認 | CWE-862 | The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to authorization bypass in all versions up to |
| CVE-2026-19952 | Deferred | 未確認 | CWE-22 | The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the move_folders function in all versions |
| CVE-2026-19985 | Deferred | 未確認 | CWE-79 | The Relevanssi – A Better Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 4.28.1 via the 's', 'post_types', and 'order |
| CVE-2026-19991 | Deferred | 未確認 | CWE-22 | The UsersWP plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 1.2.70 via the upload_file_remove() AJAX handler. The plugin stores the |
| CVE-2026-20071 | Awaiting Analysis | 未確認 | CWE-290 | A vulnerability in the SSID bring-your-own-device (BYOD) onboarding workflow of Cisco ISE could allow an unauthenticated, adjacent attacker to hijack the onboarding session of  |
| CVE-2026-20072 | Awaiting Analysis | 未確認 | CWE-863 | A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to obtain sensitive information from network users that are outside |
| CVE-2026-20120 | Awaiting Analysis | 未確認 | CWE-284 | A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firew |
| CVE-2026-20121 | Awaiting Analysis | 未確認 | CWE-284 | A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firew |
| CVE-2026-20130 | Analyzed | 未確認 | CWE-74 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), engine |
| CVE-2026-20135 | Awaiting Analysis | 未確認 | CWE-415 | A vulnerability in the TLS 1.3 implementation in Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to |
| CVE-2026-20154 | Awaiting Analysis | 未確認 | CWE-835 | A vulnerability in the system rate-limiting process for syslog message 419002 of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat D |
| CVE-2026-20176 | Awaiting Analysis | 未確認 | CWE-77 | A vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this v |
| CVE-2026-20192 | Analyzed | 未確認 | CWE-284 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) enginee |
| CVE-2026-20194 | Awaiting Analysis | 未確認 | CWE-669 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), engine |
| CVE-2026-20211 | Awaiting Analysis | 未確認 | CWE-502 | A vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this v |
| CVE-2026-20212 | Awaiting Analysis | 未確認 | CWE-1327 | A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute code with root privileges. Th |
| CVE-2026-20222 | Awaiting Analysis | 未確認 | CWE-401 | A vulnerability in the EIGRP implementation in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow |
| CVE-2026-20234 | Analyzed | 未確認 | CWE-522 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) enginee |
| CVE-2026-20235 | Awaiting Analysis | 未確認 | CWE-89 | A vulnerability in the API of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to view sensitive information on an affected device. To exploit thi |
| CVE-2026-20237 | Awaiting Analysis | 未確認 | CWE-20 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), engine |
| CVE-2026-20242 | Awaiting Analysis | 未確認 | CWE-502 | A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitra |
| CVE-2026-20247 | Awaiting Analysis | 未確認 | CWE-89 | A vulnerability in Cisco ISE could allow an unauthenticated, remote attacker to conduct SQL injection attacks on an affected device. This vulnerability is due to improper valida |
| CVE-2026-20248 | Awaiting Analysis | 未確認 | CWE-195 | A vulnerability in the DNS over TCP implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could |
| CVE-2026-20249 | Awaiting Analysis | 未確認 | CWE-704 | A vulnerability in the certification authentication feature of Internet Key Exchange version 2 (IKEv2) for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and |
| CVE-2026-20250 | Awaiting Analysis | 未確認 | CWE-772 | A vulnerability in Datagram TLS (DTLS) message handling of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software |
| CVE-2026-20274 | Analyzed | 未確認 | CWE-664 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. |
| CVE-2026-20275 | Awaiting Analysis | 未確認 | CWE-682 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. |
| CVE-2026-20276 | Analyzed | 未確認 | CWE-691 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. |
| CVE-2026-20277 | Awaiting Analysis | 未確認 | CWE-693 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. |
| CVE-2026-20278 | Awaiting Analysis | 未確認 | CWE-707 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. |
| CVE-2026-20279 | Awaiting Analysis | 未確認 | CWE-284 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. |
| CVE-2026-20280 | Analyzed | 未確認 | CWE-703 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security rev |
| CVE-2026-20281 | Awaiting Analysis | 未確認 | CWE-401 | A vulnerability in Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 that are running Cisco Session Initiation Protocol (SIP) Software c |
| CVE-2026-20282 | Awaiting Analysis | 未確認 | CWE-641 | A vulnerability in Cisco ISE could allow an authenticated, remote attacker to obtain write access on the underlying operating system of an affected device. This vulnerability is |
| CVE-2026-20283 | Awaiting Analysis | 未確認 | CWE-78 | A vulnerability in the IPsec Open API endpoint of Cisco ISE could allow an authenticated, remote attacker to inject arbitrary commands on the underlying operating system. |
| CVE-2026-20284 | Awaiting Analysis | 未確認 | CWE-943 | A vulnerability in the SXP REST API of Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks. This vulnerability is due to insufficient valida |
| CVE-2026-20285 | Awaiting Analysis | 未確認 | CWE-285 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remot |
| CVE-2026-20286 | Awaiting Analysis | 未確認 | CWE-285 | A vulnerability in the web-based management interface of Cisco Identify Services Engine (ISE) could allow an authenticated, remote attacker to modify parts of the configuration on |
| CVE-2026-20287 | Awaiting Analysis | 未確認 | CWE-269 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) enginee |
| CVE-2026-20290 | Awaiting Analysis | 未確認 | CWE-805 | A vulnerability in SSL/TLS certificate parsing in the Snort 2 Detection Engine of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacke |
| CVE-2026-20293 | Awaiting Analysis | 未確認 | CWE-749 | A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with va |
| CVE-2026-20295 | Awaiting Analysis | 未確認 | CWE-789 | A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to ex |
| CVE-2026-20300 | Awaiting Analysis | 未確認 | CWE-89 | A vulnerability in Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected device. To exploit this vulnerability, the attacker must |
| CVE-2026-20305 | Awaiting Analysis | 未確認 | CWE-78 | A vulnerability in the diagnostic tools of Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to perform command injection attacks on the underlying operating syst |
| CVE-2026-20306 | Awaiting Analysis | 未確認 | CWE-78 | A vulnerability in the REST API of Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to perform command injection attacks on the underlying operating system and e |
| CVE-2026-20307 | Awaiting Analysis | 未確認 | CWE-502 | A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of |
| CVE-2026-20309 | Awaiting Analysis | 未確認 | CWE-79 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scri |
| CVE-2026-20322 | Awaiting Analysis | 未確認 | CWE-284 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security rev |
| CVE-2026-20323 | Awaiting Analysis | 未確認 | CWE-295 | A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to |
| CVE-2026-20324 | Awaiting Analysis | 未確認 | CWE-862 | A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to execu |
| CVE-2026-20325 | Awaiting Analysis | 未確認 | CWE-77 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security rev |
| CVE-2026-20326 | Awaiting Analysis | 未確認 | CWE-306 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. |
| CVE-2026-20329 | Awaiting Analysis | 未確認 | CWE-703 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Softwar |
| CVE-2026-20330 | Awaiting Analysis | 未確認 | CWE-707 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Softwar |
| CVE-2026-20331 | Awaiting Analysis | 未確認 | CWE-693 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Softwar |
| CVE-2026-20332 | Awaiting Analysis | 未確認 | CWE-284 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Softwar |
| CVE-2026-20333 | Awaiting Analysis | 未確認 | CWE-697 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Softwar |
| CVE-2026-20334 | Awaiting Analysis | 未確認 | CWE-710 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Softwar |
| CVE-2026-20335 | Awaiting Analysis | 未確認 | CWE-682 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Softwar |
| CVE-2026-20336 | Awaiting Analysis | 未確認 | CWE-664 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Softwar |
| CVE-2026-20340 | Awaiting Analysis | 未確認 | CWE-502 | A vulnerability in Cisco Secure FMC Software could allow an authenticated, remote attacker to execute arbitrary commands at the root privilege level. This vulnerability is |
| CVE-2026-20341 | Awaiting Analysis | 未確認 | CWE-502 | A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software could allow an authenticated, remote attacker to obtain root privileges. Th |
| CVE-2026-20342 | Awaiting Analysis | 未確認 | CWE-639 | A vulnerability in a specific file download API of Cisco Secure FMC Software could allow an authenticated, remote attacker to download arbitrary files from an affected system. T |
| CVE-2026-20343 | Awaiting Analysis | 未確認 | CWE-306 | A vulnerability in a critical API for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to download sensitive files and use unbounded disk space. This vu |
| CVE-2026-20344 | Awaiting Analysis | 未確認 | CWE-89 | A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to perform a SQL injection attack against an affect |
| CVE-2026-20350 | Awaiting Analysis | 未確認 | CWE-78 | A vulnerability in the web-based management interface of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to inject arbitrary operating system com |
| CVE-2026-20352 | Awaiting Analysis | 未確認 | CWE-119 | A vulnerability in the RADIUS feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an aff |
| CVE-2026-20353 | Awaiting Analysis | 未確認 | CWE-664 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducte |
| CVE-2026-20354 | Awaiting Analysis | 未確認 | CWE-354 | Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of Cisco Secure Email could allow an unauthenticated, remote attacker |
| CVE-2026-20355 | Awaiting Analysis | 未確認 | CWE-345 | Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of Cisco Secure Email could allow an unauthenticated, remote attacker |
| CVE-2026-20360 | Awaiting Analysis | 未確認 | CWE-200 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. |
| CVE-2026-20361 | Awaiting Analysis | 未確認 | CWE-89 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. |
| CVE-2026-20500 | Analyzed | 未確認 | CWE-295 | In Modem, there is a possible system crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is n |
| CVE-2026-20501 | Analyzed | 未確認 | CWE-122 | In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. Use |
| CVE-2026-20502 | Analyzed | 未確認 | CWE-122 | In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. Use |
| CVE-2026-20503 | Analyzed | 未確認 | CWE-617 | In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by t |
| CVE-2026-20504 | Analyzed | 未確認 | CWE-617 | In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by t |
| CVE-2026-20506 | Deferred | 未確認 | CWE-416 | In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the Syst |
| CVE-2026-20507 | Deferred | 未確認 | CWE-416 | In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the Syst |
| CVE-2026-20508 | Deferred | 未確認 | CWE-843 | In Power HAL, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the Syst |
| CVE-2026-20509 | Deferred | 未確認 | CWE-121 | In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the |
| CVE-2026-20510 | Deferred | 未確認 | CWE-415 | In camera middleware, there is a possible escalation of privilege due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained the |
| CVE-2026-20511 | Deferred | 未確認 | CWE-416 | In SurfaceFlinger, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the Syste |
| CVE-2026-20512 | Deferred | 未確認 | CWE-307 | In Audio HAL, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtain |
| CVE-2026-20513 | Deferred | 未確認 | CWE-35 | In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor has already obtained |
| CVE-2026-20514 | Deferred | 未確認 | CWE-307 | In Audio HAL, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtaine |
| CVE-2026-20515 | Deferred | 未確認 | CWE-416 | In gpu, there is a possible system crash due to use after free. This could lead to local information disclosure with User execution privileges needed. User interaction is needed fo |
| CVE-2026-20516 | Deferred | 未確認 | CWE-926 | In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could lead to local denial of service with User execution privileges needed. User int |
| CVE-2026-20517 | Deferred | 未確認 | CWE-416 | In geniezone, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the Syst |
| CVE-2026-20518 | Deferred | 未確認 | CWE-125 | In geniezone, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained th |
| CVE-2026-20683 | Analyzed | 未確認 | CWE-287 | An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visio |
| CVE-2026-20773 | Awaiting Analysis | 未確認 | CWE-863 | A role-based access control issue was identified in the administrative expression evaluation functionality. This could allow users with certain administrative roles to access expre |
| CVE-2026-21085 | Analyzed | 未確認 | CWE-787 | Out-of-bounds write in Keymaster trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory. |
| CVE-2026-21086 | Analyzed | 未確認 | CWE-20 | Improper authorization in ProxyHandler prior to SMR Aug-2026 Release 1 allows local attackers to access proxy configuration. |
| CVE-2026-21087 | Analyzed | 未確認 | CWE-787 | Out-of-bounds write in libmdnie.so prior to SMR Sep-2026 Release 1 allows local attackers to execute arbitrary code with system server privilege. |
| CVE-2026-21088 | Analyzed | 未確認 | CWE-20 | Improper input validation in loading a subtitle frame in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory. |
| CVE-2026-21089 | Analyzed | 未確認 | CWE-20 | Improper input validation in removing style tag in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory. |
| CVE-2026-21090 | Analyzed | 未確認 | CWE-787 | Out-of-bounds write in libsaviextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory. |
| CVE-2026-21091 | Analyzed | 未確認 | CWE-787 | Out-of-bounds write in libcodec2secevrcdec.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory. |
| CVE-2026-21092 | Analyzed | 未確認 | CWE-35 | Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image files with system server privilege. |
| CVE-2026-21093 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in PROCA trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory. |
| CVE-2026-21094 | Analyzed | 未確認 | CWE-20 | Improper input validation in wpa_supplicant prior to SMR Sep-2026 Release 1 allows adjacent attackers to write out-of-bounds memory. |
| CVE-2026-21095 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code. |
| CVE-2026-21096 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code. |
| CVE-2026-21097 | Analyzed | 未確認 | CWE-285 | Improper authentication in ActivityTaskManagerService prior to SMR Sep-2026 Release 1 allows local privileged attackers to launch arbitrary activity. |
| CVE-2026-21098 | Analyzed | 未確認 | CWE-284 | Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction. |
| CVE-2026-21099 | Analyzed | 未確認 | CWE-280 | Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information. |
| CVE-2026-21100 | Analyzed | 未確認 | CWE-284 | Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity. |
| CVE-2026-21101 | Analyzed | 未確認 | CWE-20 | Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege. |
| CVE-2026-21102 | Analyzed | 未確認 | CWE-416 | Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege. |
| CVE-2026-21103 | Analyzed | 未確認 | CWE-35 | Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege. |
| CVE-2026-21104 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code. |
| CVE-2026-21105 | Analyzed | 未確認 | CWE-284 | Improper access control in Collection prior to version 1.0.1.14 in Android 15 and 2.0.02.7 in Android 16 allows local attackers to access sensitive information. |
| CVE-2026-21106 | Awaiting Analysis | 未確認 | CWE-925 | Improper verification of intent by broadcast receiver in Samsung Cloud Assistant prior to version 9.0.5 allows local attackers to disable enhanced data protection settings. |
| CVE-2026-21107 | Analyzed | 未確認 | CWE-787 | Out-of-bounds write in Samsung Notes prior to version 4.4.45.5 allows local attackers to write out-of-bounds memory. |
| CVE-2026-21108 | Analyzed | 未確認 | CWE-926 | Improper export of android application components in Bixby Touch prior to version 4.3.01.17 allows local attackers to access sensitive information. |
| CVE-2026-21109 | Awaiting Analysis | 未確認 | CWE-284 | Improper access control in Watch Plugin prior to Android Watch 17 allows local attackers to access sensitive information. |
| CVE-2026-21110 | Awaiting Analysis | 未確認 | CWE-787 | Out-of-bounds write in libsavscmn.so prior to One UI 8.5 allows local attackers to execute arbitrary code. |
| CVE-2026-21111 | Awaiting Analysis | 未確認 | CWE-787 | Out-of-bounds write in libsthmbc.so prior to One UI 8.5 allows local attackers to write out-of-bounds memory. |
| CVE-2026-21112 | Analyzed | 未確認 | CWE-20 | Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privilege. User interaction is required for trig |
| CVE-2026-21113 | Analyzed | 未確認 | CWE-926 | Improper export of android application components in Visual Voicemail prior to version 20.1.00.05 allows local attackers to initiate call without proper permission. |
| CVE-2026-21391 | Awaiting Analysis | 未確認 | CWE-290 | An improper validation vulnerability exists within PingAM where a well-crafted request allows arbitrary or protected ID Token claims to be set or overridden. In certain configurati |
| CVE-2026-21586 | Awaiting Analysis | 未確認 | CWE-285 | This High severity Improper Authorization vulnerability was introduced in versions 7.4.0, 7.13.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 |
| CVE-2026-21587 | Awaiting Analysis | 未確認 | CWE-285 | This High severity Improper Authorization vulnerability was introduced in version 11.3.0 of Jira Service Management Data Center. This Improper Authorization vulnerability, with |
| CVE-2026-21588 | Awaiting Analysis | 未確認 | CWE-400 | This High severity DoS (Denial of Service) vulnerability was introduced in versions 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data C |
| CVE-2026-21806 | Analyzed | 未確認 | CWE-557 | HCL BigFix Service Management is affected by an Administrative Session Concurrency vulnerability. The application allows multiple simultaneous authenticated sessions for the same a |
| CVE-2026-21822 | Awaiting Analysis | 未確認 | CWE-22 | HCLSoftware AppScan 360° was affected by a Path Traversal vulnerability in the ASReportService component. Improper handling of file paths allows an authenticated attacker to read o |
| CVE-2026-21848 | Analyzed | 未確認 | CWE-284 | HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an authenticated attacker to exploit improper access controls, enabling th |
| CVE-2026-22094 | Deferred | 未確認 | CWE-1391 | The firmware for the EVbee DC-80 has a weak hardcoded root password, which allows attackers to login as root using the SSH daemon that is exposed to the network. |
| CVE-2026-22101 | Deferred | 未確認 | CWE-200 | The access to the service menu is obfuscated, but possible with only physical access. This menu exposes sensitive information such as serial numbers, MAC addresses, and WiFi networ |
| CVE-2026-22575 | Awaiting Analysis | 未確認 | CWE-284 | An improper access control vulnerability in Fortinet FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.10, FortiManager 7.2 all versions, FortiManager Cloud 7.6.2 th |
| CVE-2026-22590 | Awaiting Analysis | 未確認 | CWE-125, CWE-131 | eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Versions prior to 2.6.12, 2.14.6, 3.2.4, 3.3.1, and |
| CVE-2026-22591 | Awaiting Analysis | 未確認 | CWE-400, CWE-674 | eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to versions 2.6.12, 2.14.6, 3.2.4, and 3.4.3, |
| CVE-2026-2278 | Deferred | 未確認 | CWE-862 | The VW Writer Blog theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'vw_writer_blog_reset_all_settings' function in a |
| CVE-2026-2310 | Awaiting Analysis | 未確認 | CWE-91 | IBM webMethods Integration Server 11.1 IBM webMethods Integration is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could e |
| CVE-2026-23583 | Rejected | 未確認 | Rejected reason: Withdrawn by requester. | |
| CVE-2026-23584 | Rejected | 未確認 | Rejected reason: Withdrawn by requester. | |
| CVE-2026-23585 | Rejected | 未確認 | Rejected reason: Withdrawn by requester. | |
| CVE-2026-23586 | Rejected | 未確認 | Rejected reason: Withdrawn by requester. | |
| CVE-2026-23587 | Rejected | 未確認 | Rejected reason: Withdrawn by requester. | |
| CVE-2026-23588 | Rejected | 未確認 | Rejected reason: Withdrawn by requester. | |
| CVE-2026-23589 | Rejected | 未確認 | Rejected reason: Withdrawn by requester. | |
| CVE-2026-23590 | Rejected | 未確認 | Rejected reason: Withdrawn by requester. | |
| CVE-2026-23591 | Rejected | 未確認 | Rejected reason: Withdrawn by requester. | |
| CVE-2026-23786 | Awaiting Analysis | 未確認 | CWE-367 | An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A TOCTOU race condition in the Exynos DRM HDR Driver lea |
| CVE-2026-23787 | Awaiting Analysis | 未確認 | CWE-416 | An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A Use-After-Free in the Exynos DRM HDR driver (due to im |
| CVE-2026-23788 | Awaiting Analysis | 未確認 | CWE-122 | An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, and 1380. A heap overflow in the Exynos DRM HDR driver (due to improper buffer size validation) leads |
| CVE-2026-23789 | Awaiting Analysis | 未確認 | CWE-415 | An issue was discovered in MFC in Samsung Mobile Processor and Wearable Processor Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 2600, 1680, W920, W930, an |
| CVE-2026-23790 | Awaiting Analysis | 未確認 | CWE-415 | An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A double-free vulnerability in the Samsung Exynos DPU dr |
| CVE-2026-23791 | Awaiting Analysis | 未確認 | CWE-787 | An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. An out-of-bounds write vulnerability in the Exynos DPU d |
| CVE-2026-23792 | Awaiting Analysis | 未確認 | CWE-346 | An issue was discovered in NR RRC in Samsung Mobile Processor and Modem Exynos 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W1000, Modem 5300, Modem 5400, and Modem |
| CVE-2026-23793 | Awaiting Analysis | 未確認 | CWE-787 | An issue was discovered in Samsung Mobile Processor Exynos 1330, 1380, 1480, and 2400. An out-of-bounds memory access vulnerability in the camera GDC driver may lead to kernel memo |
| CVE-2026-2380 | Awaiting Analysis | 未確認 | CWE-256 | On affected platforms running Arista EOS with OpenConfig-related services (i.e., gNMI, gNSI, RESTCONF and NETCONF), sensitive requests and responses may be unintentionally logged. |
| CVE-2026-23855 | Awaiting Analysis | 未確認 | CWE-78 | Dell iDRAC9, 14G versions prior to 7.00.00.184, 15G/16G versions prior to 7.30.10.50, and Dell iDRAC10, 17G versions prior to 1.30.30.50, contain an Improper Neutralization of Spec |
| CVE-2026-2390 | Deferred | 未確認 | CWE-79 | The Powerkit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Lazy Load module's image processing in all versions up to, and including, 3.0.4. This is due |
| CVE-2026-24073 | Analyzed | 未確認 | CWE-787 | Memory corruption when processing decode statistics due to insufficient validation of offset against structure size. |
| CVE-2026-24074 | Analyzed | 未確認 | CWE-787 | Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations. |
| CVE-2026-24075 | Analyzed | 未確認 | CWE-126 | Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions. |
| CVE-2026-24081 | Analyzed | 未確認 | CWE-126 | Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled. |
| CVE-2026-2422 | Deferred | 未確認 | CWE-79 | The WP Composer – The Easiest Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pbwp_raw_shortcode' shortcode in all versions up to, and inclu |
| CVE-2026-24239 | Analyzed | 未確認 | CWE-502 | NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious data created by an attacker could cause remote code execution. A successful exploit of this vulnerabil |
| CVE-2026-24267 | Analyzed | 未確認 | CWE-502 | NVIDIA NeMo Speech for all platforms contains a vulnerability in the speech data explorer component, where malicious data created by an attacker could cause remote code execution. |
| CVE-2026-24442 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-2520 | Deferred | 未確認 | CWE-862 | The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'upda |
| CVE-2026-25254 | Analyzed | 未確認 | CWE-285 | Improper authorization leads to Remote Code Execution via SocketIO interface. |
| CVE-2026-25255 | Analyzed | 未確認 | CWE-749 | Exposed dangerous function lead to privilege escalation via gRPC server. |
| CVE-2026-25261 | Analyzed | 未確認 | CWE-822 | Memory corruption while processing rear sensor IOCTL calls. |
| CVE-2026-25262 | Analyzed | 未確認 | CWE-123 | Memory corruption while processing a crafted ELF file in the Primary Bootloader. |
| CVE-2026-25264 | Analyzed | 未確認 | CWE-427 | Privilege escalation due to weak configuration during package extraction process. |
| CVE-2026-25265 | Analyzed | 未確認 | CWE-378 | Privilege escalation due to weak configuration while temporary file handling. |
| CVE-2026-25275 | Analyzed | 未確認 | CWE-126 | Transient DOS when processing authentication frames with invalid FILS information element header lengths. |
| CVE-2026-25278 | Analyzed | 未確認 | CWE-367 | Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying. |
| CVE-2026-25280 | Analyzed | 未確認 | CWE-787 | Memory corruption when processing escape handling flow with insufficient user buffer sizes. |
| CVE-2026-25281 | Analyzed | 未確認 | CWE-770 | Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation. |
| CVE-2026-25282 | Analyzed | 未確認 | CWE-125 | Transient DOS when processing unverified data from a neighboring system causes out of bound memory access. |
| CVE-2026-25283 | Analyzed | 未確認 | CWE-121 | Memory Corruption when copying unverified data from an external source exceeds the allocated buffer size. |
| CVE-2026-25284 | Analyzed | 未確認 | CWE-126 | Information Disclosure when a pointer is reused after being deallocated. |
| CVE-2026-25290 | Analyzed | 未確認 | CWE-190 | Memory Corruption when validating large data buffers from external sources using addition to check buffer length. |
| CVE-2026-25294 | Analyzed | 未確認 | CWE-126 | Transient DOS while parsing frame during channel usage. |
| CVE-2026-25684 | Awaiting Analysis | 未確認 | CWE-20 | A file type attribution issue in Zscaler Internet Access File Type Control evaluation rules may allow improper evaluation of File Type Control policies in rare circumstances. |
| CVE-2026-25687 | Awaiting Analysis | 未確認 | CWE-366 | A race condition in the ZPA tunnel handler of affected versions of Zscaler Client Connector (ZCC) allows a heap corruption, resulting in a denial of service (client crash) and pote |
| CVE-2026-25706 | Awaiting Analysis | 未確認 | CWE-78 | Improper neutralization of special elements used in an OS command in yast2-samba-client allows an attacker who controls the content of an Active Directory directory tree - a rogue |
| CVE-2026-2573 | Deferred | 未確認 | CWE-79 | The GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘postBodyCss’ param |
| CVE-2026-25825 | Awaiting Analysis | 未確認 | CWE-706 | An issue was discovered in Keyfactor SignServer before 7.6.0. The output file to which SignerStatusReportWorker logs the report can be set to any path, even one that points to a fi |
| CVE-2026-25826 | Awaiting Analysis | 未確認 | CWE-532 | An issue was discovered in Keyfactor SignServer before 7.6.0. The attribute ATTRIBUTESFILE in PKCS11CryptoToken can be set to a readable file but not an accepted file (i.e., recogn |
| CVE-2026-25827 | Awaiting Analysis | 未確認 | CWE-538 | An issue was discovered in Keyfactor SignServer before 7.6.0. A number of properties were identified to not have any restrictions to what path they can be set to by an admin user. |
| CVE-2026-25832 | Awaiting Analysis | 未確認 | CWE-669 | In Mbed TLS 3.6.x before 3.6.7 and 4.1.x before 4.1.2, the TLS 1.3 client accepts HelloRetryRequest selecting an unadvertised group. |
| CVE-2026-2585 | Deferred | 未確認 | CWE-79 | The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘rootAttributes’ parameter in all versions up to, and including, 2.8.14 due to in |
| CVE-2026-26054 | Deferred | 未確認 | CWE-125 | SumatraPDF is a multi-format reader for Windows. Prior to 3.6, the MobiDoc::ParseHeader function in src/MobiDoc.cpp validates a record using kMobiHeaderMinLen but DecodeMobiDocHead |
| CVE-2026-26084 | Awaiting Analysis | 未確認 | CWE-284 | A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5. |
| CVE-2026-26212 | Awaiting Analysis | 未確認 | CWE-434 | Rara One Click Demo Import plugin for WordPress before 1.3.5 contains an arbitrary file upload vulnerability that allows authenticated attackers with Administrator privileges to up |
| CVE-2026-26350 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-2688 | Deferred | 未確認 | CWE-863 | The HIPAA FORMS WordPress plugin before 3.2.0 contains a hardcoded authentication bypass via a hardcoded parameter alongside all AJAX requests. The server explicitly checks for thi |
| CVE-2026-26947 | Awaiting Analysis | 未確認 | CWE-269 | Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Improper Privilege Management vulnerability. A high privileged attacker with |
| CVE-2026-26950 | Analyzed | 未確認 | CWE-345 | Dell SmartFabric Manager, versions prior to 2.2.1, contains an Insufficient Verification of Data Authenticity vulnerability. A low privileged attacker with remote access could pote |
| CVE-2026-27085 | Deferred | 未確認 | CWE-80 | Shop manager Content Injection in Astra WordPress Theme <= 4.13.12 versions. |
| CVE-2026-27086 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xtemos WoodMart allows DOM-Based XSS. This issue affects WoodMart: from n/a b |
| CVE-2026-27227 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2026-27347 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Crocoblock JetPopup allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects JetPopup: from n/a through 2 |
| CVE-2026-27371 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3.13.1 versions. |
| CVE-2026-27378 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Deposits and Partial Payments for WooCommerce <= 3.1.0 versions. |
| CVE-2026-27432 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in sc Internet Vivoo WP Rentals allows Exploiting Incorrectly Configured Access Control Security Levels. This issue |
| CVE-2026-27546 | Awaiting Analysis | 未確認 | CWE-288 | An unauthenticated remote attacker can exploit an authentication bypass in the _account_log function to log in as an admin, even when accounts are properly configured. |
| CVE-2026-27547 | Awaiting Analysis | 未確認 | CWE-78 | A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/get_iodd_menu_info endpoint using valid user or operator credentials allowing |
| CVE-2026-27548 | Awaiting Analysis | 未確認 | CWE-78 | A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/get_iodd_port_info endpoint using user or operator credentials allowing execut |
| CVE-2026-27549 | Awaiting Analysis | 未確認 | CWE-78 | A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/attached_devices_tab/do_upload endpoint using operator credentials allowing executi |
| CVE-2026-27550 | Awaiting Analysis | 未確認 | CWE-78 | A low-privileged remote attacker can exploit a command injection vulnerability in the Field_Shadow_Password class using operator credentials allowing execution of commands with roo |
| CVE-2026-27551 | Awaiting Analysis | 未確認 | CWE-78 | A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/parameterManage endpoint using user credentials allowing execution of commands |
| CVE-2026-27552 | Awaiting Analysis | 未確認 | CWE-863 | A low-privileged remote attacker can exploit improper authorization in the /index.php/attached_devices_tab/do_upload endpoint to upload IODD files to the device, potentially alteri |
| CVE-2026-27553 | Awaiting Analysis | 未確認 | CWE-497 | A low-privileged remote attacker can manipulate the schema path parameter in the /index.php/diagnostics_tab/ajax_diag_table_rows endpoint using a valid user cookie allowing disclos |
| CVE-2026-27554 | Awaiting Analysis | 未確認 | CWE-78 | A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/save_iodd_parameters endpoint using operator credentials allowing execution of |
| CVE-2026-27555 | Awaiting Analysis | 未確認 | CWE-98 | A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/get_iodd_port_info endpoint using a valid user cookie allowing execution of |
| CVE-2026-27556 | Awaiting Analysis | 未確認 | CWE-98 | A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/save_iodd_parameters endpoint using a valid operator cookie allowing execut |
| CVE-2026-27557 | Awaiting Analysis | 未確認 | CWE-35 | An unauthenticated remote attacker can exploit a path traversal vulnerability in the /index.php/view_uploaded_iodd_file endpoint allowing the SSH server's private keys to be read. |
| CVE-2026-27558 | Awaiting Analysis | 未確認 | CWE-78 | A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files endpoint using operator creden |
| CVE-2026-27559 | Awaiting Analysis | 未確認 | CWE-78 | A low-privileged remote attacker can exploit a command injection vulnerability in the /api/status/data endpoint by sending a crafted GET request with user credentials allowing exec |
| CVE-2026-27560 | Awaiting Analysis | 未確認 | CWE-78 | A high-privileged remote attacker can exploit a command injection vulnerability in the /api/status/data endpoint by sending a crafted DELETE request with admin credentials allowing |
| CVE-2026-27561 | Awaiting Analysis | 未確認 | CWE-78 | A high-privileged remote attacker can exploit a command injection vulnerability in the /api/iodd/config endpoint by sending a crafted GET request with admin credentials allowing ex |
| CVE-2026-27562 | Awaiting Analysis | 未確認 | CWE-78 | A high-privileged remote attacker can exploit a command injection vulnerability in the /api/iodd/config endpoint by sending a crafted PUT request with admin credentials allowing ex |
| CVE-2026-27563 | Awaiting Analysis | 未確認 | CWE-78 | A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by sending a crafted GET request with admin credentials allowi |
| CVE-2026-27564 | Awaiting Analysis | 未確認 | CWE-78 | A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by sending a PUT request with admin credentials allowing execu |
| CVE-2026-27565 | Awaiting Analysis | 未確認 | CWE-78 | An unauthenticated remote attacker can upload a malicious IODD file that places and executes a shell script with root privileges. The shell script remains active even after a reboo |
| CVE-2026-27867 | Deferred | 未確認 | CWE-79 | An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat (in this case, registration action is required) who has the vulnerable firmware version could |
| CVE-2026-2811 | Deferred | 未確認 | CWE-113 | The Ajaxify Comments WordPress plugin before 3.2 is vulnerable to HTTP Header Injection due to insufficient input sanitization and output escaping on user-supplied data. This makes |
| CVE-2026-28197 | Deferred | 未確認 | CWE-88 | An authenticated, low-privileged user with access to the NetBackup Flex OS management shell could supply a specially crafted input to a privileged administrative command, causing |
| CVE-2026-28198 | Deferred | 未確認 | CWE-347 | An authenticated, low-privileged user with access to the NetBackup Flex OS management shell could bypass the cryptographic signature verification step of a privileged support com |
| CVE-2026-28199 | Deferred | 未確認 | CWE-347 | An authenticated user with access to the NetBackup Flex OS management shell could read arbitrary files from the underlying operating system by supplying a specially crafted path |
| CVE-2026-28324 | Awaiting Analysis | 未確認 | CWE-345 | SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability due to the insufficient integrity checks. Installations conf |
| CVE-2026-28325 | Awaiting Analysis | 未確認 | CWE-502 | SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability stemming from deserialization of untrusted data when the app |
| CVE-2026-28326 | Awaiting Analysis | 未確認 | CWE-321 | SolarWinds Access Rights Manager was reported to be affected by an unauthenticated remote code execution vulnerability. The issue stems from a hardcoded static key. |
| CVE-2026-28523 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-28572 | Analyzed | 未確認 | CWE-601 | In onCreate of InstallLaunch.kt, there is a possible misleading UI due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution |
| CVE-2026-28582 | Analyzed | 未確認 | CWE-862 | In onCreate of ConfirmDeviceCredentialActivity.java, there is a possible unauthorized access to and modification of device credentials due to a missing permission check. This could |
| CVE-2026-28583 | Analyzed | 未確認 | CWE-693, CWE-787 | In validate_camera_metadata_structure of camera_metadata.c, there is a possible out of bounds write due to a logical error in the code. This could lead to local escalation of privi |
| CVE-2026-28584 | Analyzed | 未確認 | CWE-693 | In createSessionInternal of PackageInstallerService.java, there is a possible way to permanently DoS the device due to a logic error in the code. This could lead to local denial of |
| CVE-2026-28590 | Analyzed | 未確認 | CWE-347 | In multiple locations, there is a possible improper encryption key validation due to a logic error in the code. This could lead to local escalation of privilege with no additional |
| CVE-2026-28593 | Analyzed | 未確認 | CWE-356 | In getItemList of SettingsFragment.java, there is a possible user interaction bypass due to misleading or insufficient UI. This could lead to local escalation of privilege with no |
| CVE-2026-28594 | Analyzed | 未確認 | CWE-693 | In multiple locations, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges |
| CVE-2026-28596 | Analyzed | 未確認 | CWE-400 | In parseInterventionFromXml of GameManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with |
| CVE-2026-28599 | Analyzed | 未確認 | CWE-693 | In addCreatorToken of ActivityManagerService.java, there is a possible Intent Redirection Bypass due to a logic error in the code. This could lead to local escalation of privilege |
| CVE-2026-28600 | Analyzed | 未確認 | CWE-441 | In onCreate of PaymentDefaultDialog.java, there is a possible way to change default payment app due to a confused deputy. This could lead to local escalation of privilege with no a |
| CVE-2026-28602 | Analyzed | 未確認 | CWE-284 | In setClipboardAccessNotificationsEnabledForUser of ClipboardService.java, there is a possible mult-iuser isolation due to a logic error in the code. This could lead to local escal |
| CVE-2026-28603 | Analyzed | 未確認 | CWE-441 | In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible read/write access to private files due to a confused deputy. This could lead to local escala |
| CVE-2026-28604 | Analyzed | 未確認 | CWE-362 | In multiple locations, there is a possible use after free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User int |
| CVE-2026-28606 | Analyzed | 未確認 | CWE-287 | In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to a logic error in the code. This could lead to remote escalation of privilege withou |
| CVE-2026-28607 | Analyzed | 未確認 | CWE-441 | In multiple functions in multiple locations, there is a possible background activity launch bypass due to a confused deputy. This could lead to local escalation of privilege with n |
| CVE-2026-28609 | Analyzed | 未確認 | CWE-704 | In read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to improper casting. This could lead to remote code execution with no additional execution privileges |
| CVE-2026-28611 | Analyzed | 未確認 | CWE-862 | In multiple functions of NfcService.java, there is a possible silent payment session hijacking enablement due to a missing permission check. This could lead to local escalation of |
| CVE-2026-28612 | Analyzed | 未確認 | CWE-693 | In resolveActivity of ActivityStarter.java, there is a possible way to perform Intent Redirection attacks due to a logic error in the code. This could lead to local escalation of p |
| CVE-2026-28613 | Analyzed | 未確認 | CWE-20 | In initAppLinkTypeAndIntent of ChannelImpl.java, there is a possible launch an arbitrary intent due to improper input validation. This could lead to local escalation of privilege w |
| CVE-2026-28614 | Analyzed | 未確認 | CWE-441 | In onCreate of SlicePermissionActivity.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional exe |
| CVE-2026-28616 | Analyzed | 未確認 | CWE-441 | In Setup Wizard, there is a possible way to force connection to a malicious network due to confused deputy. This could lead to local escalation of privilege with no additional exec |
| CVE-2026-28617 | Analyzed | 未確認 | CWE-400 | In add of WifiNetworkSuggestionsManager.java, there is a possible persistent DOS due to resource exhaustion. This could lead to local denial of service with no additional execution |
| CVE-2026-28618 | Analyzed | 未確認 | CWE-122, CWE-787 | In dec_frm_prepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. |
| CVE-2026-28620 | Analyzed | 未確認 | CWE-863 | In multiple locations, there is a possible unauthorized URI access due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privil |
| CVE-2026-28622 | Analyzed | 未確認 | CWE-862 | In getQueryBuilderInternal of MediaProvider.java, there is a possible way to retrieve location metadata due to a permissions bypass. This could lead to local information disclosure |
| CVE-2026-28623 | Analyzed | 未確認 | CWE-862 | In writeToParcel of BleRssiRangingCapabilities.java, there is a possible way to obtain the Bluetooth MAC address due to a missing permission check. This could lead to local informa |
| CVE-2026-28624 | Analyzed | 未確認 | CWE-441 | In multiple locations, there is a possible read/write access to files without the proper permissions due to a confused deputy. This could lead to local escalation of privilege with |
| CVE-2026-28626 | Analyzed | 未確認 | CWE-601 | In onCreate of SetupPassthroughActivity.java, there is a possible way to launch arbitrary activity due to Intent redirection . This could lead to local escalation of privilege with |
| CVE-2026-28627 | Analyzed | 未確認 | CWE-693 | In btm_sec_encrypt_change of btm_sec.cc, there is a possible downgrade attack due to a logic error in the code. This could lead to remote information disclosure with no additional |
| CVE-2026-28630 | Analyzed | 未確認 | CWE-601 | In onCreate of ContactsPickerActivity.kt, there is a possible misleading UI due to a tapjacking/overlay attack. This could lead to local information disclosure with no additional e |
| CVE-2026-28631 | Analyzed | 未確認 | CWE-601 | In buildMiniResolver of IntentForwarderActivity.java, there is a possible consent bypass due to a tapjacking/overlay attack. This could lead to local escalation of privilege with n |
| CVE-2026-28633 | Analyzed | 未確認 | CWE-770 | In initForUserNoTracing of VoiceInteractionManagerService.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of serv |
| CVE-2026-28634 | Analyzed | 未確認 | CWE-693 | In handleUssdRequest of PhoneInterfaceManager.java, there is a possible way to send a USSD request without permission due to a logic error in the code. This could lead to local esc |
| CVE-2026-28636 | Analyzed | 未確認 | CWE-441 | In setupLayout of PickActivity.java, there is a possible bypass of the "Install unknown apps" security restriction due to a confused deputy. This could lead to local escalation of |
| CVE-2026-28638 | Analyzed | 未確認 | CWE-20 | In multiple functions of XmpDataParser.java, there is a possible improper data sanitization due to a logic error in the code. This could lead to local information disclosure with n |
| CVE-2026-28639 | Analyzed | 未確認 | CWE-693 | In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional |
| CVE-2026-28642 | Analyzed | 未確認 | CWE-693 | In executeRequest of ActivityStarter.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no |
| CVE-2026-28644 | Analyzed | 未確認 | CWE-441 | In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege wi |
| CVE-2026-28650 | Analyzed | 未確認 | CWE-693 | In setHiddenWhileSuspended of WindowState.java, there is a possible overlay bypass due to a logic error in the code. This could lead to local escalation of privilege with no additi |
| CVE-2026-28652 | Analyzed | 未確認 | CWE-862 | In multiple functions of RangingServiceImpl.java, there is a possible MITM due to a missing permission check. This could lead to remote information disclosure with no additional ex |
| CVE-2026-28653 | Analyzed | 未確認 | CWE-1190, CWE-787 | In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional executio |
| CVE-2026-28655 | Analyzed | 未確認 | CWE-693 | In multiple functions of RemoteViews.java, there is a possible background activity launch bypass due to a logic error in the code. This could lead to local escalation of privilege |
| CVE-2026-28656 | Analyzed | 未確認 | CWE-1021 | In multiple functions of DeviceAdminAdd.java, there is a possible way to an overlay due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no add |
| CVE-2026-28657 | Analyzed | 未確認 | CWE-441 | In onActivityResult of AppWidgetConfigActivityProxy.java, there is a possible unauthorized URI permission grant due to a confused deputy. This could lead to local escalation of pri |
| CVE-2026-28658 | Analyzed | 未確認 | CWE-693 | In findMetaAuthUid of AccountsDb.java, there is a possible frp bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional executio |
| CVE-2026-28659 | Analyzed | 未確認 | CWE-269 | In MicroXR Blobstore, there is a possible way to access other app's files due to a missing permission check. This could lead to local escalation of privilege with no additional exe |
| CVE-2026-28660 | Analyzed | 未確認 | CWE-693 | In getAllSessions of multiple files, there is a possible confused deputy due to a logic error in the code. This could lead to local information disclosure with no additional execut |
| CVE-2026-28662 | Analyzed | 未確認 | CWE-122, CWE-787 | In p2p_process_prov_disc_bootstrap_req of p2p_pd.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execut |
| CVE-2026-28663 | Analyzed | 未確認 | CWE-863 | In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of |
| CVE-2026-28664 | Analyzed | 未確認 | CWE-693 | In WriteImageToDisk of runtime_image.cc, there is a possible file tampering due to a logic error in the code. This could lead to local escalation of privilege with no additional ex |
| CVE-2026-28666 | Analyzed | 未確認 | CWE-863 | In multiple functions of LocalImageResolver.java, there is a possible Remote Persistent Denial of Service due to a DNG image rendering check bypass. This could lead to remote escal |
| CVE-2026-28668 | Analyzed | 未確認 | CWE-693 | In LimitRealloc of malloc_limit.cpp, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execut |
| CVE-2026-28671 | Analyzed | 未確認 | CWE-367 | In updateInternal of MediaProvider.java, there is a possible expose contents of files due to a race condition. This could lead to local information disclosure with no additional ex |
| CVE-2026-28836 | Analyzed | 未確認 | CWE-359 | A correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8.8. An attacker with physical access may be able to silently persist an Apple Accoun |
| CVE-2026-28899 | Analyzed | 未確認 | CWE-693 | A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.6, macOS Tahoe 26.7. An app may bypass Gatekeeper |
| CVE-2026-28933 | Analyzed | 未確認 | CWE-416 | A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to caus |
| CVE-2026-28934 | Analyzed | 未確認 | CWE-120 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a malicious disk image ma |
| CVE-2026-28935 | Analyzed | 未確認 | CWE-119 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27 |
| CVE-2026-28937 | Analyzed | 未確認 | CWE-284 | This issue was addressed through improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data. |
| CVE-2026-28938 | Analyzed | 未確認 | CWE-359 | A privacy issue was addressed by moving sensitive data. This issue is fixed in iOS 26.6 and iPadOS 26.6. An app may be able to fingerprint the user. |
| CVE-2026-28960 | Analyzed | 未確認 | CWE-20 | A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10. A remote attacker may be able to cause a denial-of-service. |
| CVE-2026-28966 | Analyzed | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia |
| CVE-2026-28968 | Analyzed | 未確認 | CWE-125 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia |
| CVE-2026-29810 | Deferred | 未確認 | CWE-390 | CyberPanel before 2.4.4 omits a "return 0" that is required by the business logic. |
| CVE-2026-29811 | Deferred | 未確認 | CWE-1025 | CyberPanel before 2.4.4 attempts to detect an "alais" domain (i.e., a second domain that serves the same content as a primary domain; normally spelled "alias") via an ORM query fil |
| CVE-2026-29812 | Deferred | 未確認 | CWE-778 | CyberPanel before 2.4.4 has no logging for actions that could potentially manipulate the child domains list. |
| CVE-2026-30754 | Analyzed | 未確認 | CWE-787 | A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nal_send function in libavformat/rtpenc_h264_hevc.c, a negative size parameter (size |
| CVE-2026-3096 | Deferred | 未確認 | CWE-20, CWE-603 | The product's web portals allow external links to be opened in a new browser tab. In certain configurations, the originating window retains access to the newly opened page, allowin |
| CVE-2026-31020 | Deferred | 未確認 | CWE-94 | In DocsGPT 0.15.0 and below, the application provides a custom prompt feature that allows users to define prompt content used during chatbot interactions. This functionality render |
| CVE-2026-31278 | Deferred | 未確認 | CWE-319 | An issue in the /api/v2/setting/adserversetting endpoint of Suprema BioStar 2 before 2.9.12 and and BioStar X before 1.0.2 allows attackers to obtain Active Directory service accou |
| CVE-2026-31377 | Awaiting Analysis | 未確認 | CWE-287 | An Improper Authentication vulnerability in the Apache Doris Frontend (FE) meta service allows an unauthenticated remote attacker to access internal metadata service endpoints. |
| CVE-2026-3174 | Deferred | 未確認 | CWE-862 | The Event Tickets and Registration plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Stripe OAuth return endpoint in |
| CVE-2026-31911 | Awaiting Analysis | 未確認 | CWE-617 | libpcap BPF interpreter calls abort() if it encounters a BPF instruction that has an invalid opcode. In particular uncommon use cases a crafted filter program can terminate the OS |
| CVE-2026-31912 | Awaiting Analysis | 未確認 | CWE-125, CWE-1285, CWE-823 | libpcap BPF interpreter detects neither reaching the end of the filter program buffer due to lack of a return instruction nor executing a jump instruction with an offset that trans |
| CVE-2026-32480 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WC Lovers WCFM Membership allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WCFM Membership: from |
| CVE-2026-3253 | Deferred | 未確認 | CWE-862 | The MailerLite – Signup forms (official) plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the forms() method of the Admi |
| CVE-2026-32599 | Deferred | 未確認 | CWE-89 | Netmaker makes networks with WireGuard. Prior to version 1.5.0, the `sqliteDeleteRecord` function in Netmaker's database layer constructs SQL `DELETE` statements using direct strin |
| CVE-2026-32641 | Deferred | 未確認 | CWE-248, CWE-703 | Parseable is a log analytics platform built for high-volume data ingestion and analysis. Prior to 3.0.0, src/handlers/http/middleware.rs uses unwrap() while parsing the x-amz-fireh |
| CVE-2026-32773 | Analyzed | 未確認 | CWE-80 | There is a lack of XSS escaping in the Spark History Server prior to 3.5.8 which allows a malicious Spark job to generate arbitrary unescaped frontend code which could lead to a mi |
| CVE-2026-33197 | Awaiting Analysis | 未確認 | CWE-184 | AMI APTIOV contains a vulnerability in BIOS where a privileged user may cause the “Incomplete List of Disallowed Inputs” by local access. Successful exploitation of this vulnerabil |
| CVE-2026-33387 | Awaiting Analysis | 未確認 | CWE-1336 | A template injection vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter. An authenticated user with the required privileg |
| CVE-2026-33388 | Awaiting Analysis | 未確認 | CWE-863 | An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges. A remote authenticated user with limited |
| CVE-2026-33389 | Awaiting Analysis | 未確認 | CWE-671 | An improper certificate/host key validation vulnerability was discovered in the Smart Polling functionality, which established encrypted connections to target devices without valid |
| CVE-2026-33391 | Awaiting Analysis | 未確認 | CWE-863 | An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient validation of user privileges. An authenticated user with limite |
| CVE-2026-33465 | Analyzed | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user with low-level |
| CVE-2026-33625 | Deferred | 未確認 | CWE-400 | LMDeploy is a toolkit for compressing, deploying, and serving large language models. Versions 012.1 through 0.12.2 contain a code injection vulnerability in `lmdeploy/pytorch/confi |
| CVE-2026-33630 | Deferred | 未確認 | CWE-415, CWE-416 | c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback be |
| CVE-2026-33639 | Deferred | 未確認 | CWE-89 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane interpolates the administrator-controlled tax_rate_ |
| CVE-2026-33920 | Awaiting Analysis | 未確認 | CWE-352 | A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to missing validation of the anti-CSRF token. An attacker with a v |
| CVE-2026-33956 | Awaiting Analysis | 未確認 | CWE-787 | An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, and 2500. Sending a malformed message to the test_msg sysfs entry causes an out-o |
| CVE-2026-33957 | Awaiting Analysis | 未確認 | CWE-787 | An issue was discovered in CustOS Driver in Samsung Mobile Processor Exynos 1580. Requesting oversized shared memory from the custos_iwc device enables out-of-bounds read and write |
| CVE-2026-33960 | Awaiting Analysis | 未確認 | CWE-787 | An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 1580, 1680, W920, W930, and W1000. . A malformed ioctl command to the Wi-Fi inte |
| CVE-2026-33962 | Awaiting Analysis | 未確認 | CWE-125 | An issue was discovered in Wi-Fi in Samsung Mobile Processor Exynos 850, 1280, 1330, 1380, 1480, 2400, W920, and W930. A malformed Netlink command can trigger an out-of-bounds read |
| CVE-2026-33963 | Awaiting Analysis | 未確認 | CWE-121 | An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. A stack-based buffer overflow occurs when a malformed messa |
| CVE-2026-33964 | Awaiting Analysis | 未確認 | CWE-822 | An issue was discovered in camera in Samsung Mobile Processor Exynos 1580 and 2500. An untrusted pointer dereference occurs when a malformed message is sent to the camera driver, c |
| CVE-2026-33966 | Awaiting Analysis | 未確認 | CWE-215 | An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. An information Leak occurs in the camera driver due to Inse |
| CVE-2026-33967 | Awaiting Analysis | 未確認 | CWE-787 | An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. In the camera driver, an out-of-bounds array access vulnera |
| CVE-2026-33968 | Awaiting Analysis | 未確認 | CWE-125 | An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. In the camera driver, a Time-of-Check Time-of-Use (TOCTOU) |
| CVE-2026-33970 | Awaiting Analysis | 未確認 | CWE-476 | An issue was discovered in NR RRC and L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 1680, W9 |
| CVE-2026-34151 | Deferred | 未確認 | CWE-24 | XWiki Platform is a generic wiki platform. Prior to 17.10.5 and 18.2.0, the /skin/ action in com.xpn.xwiki.web.SkinAction can resolve double-encoded parent-directory segments outsi |
| CVE-2026-3416 | Analyzed | 未確認 | CWE-330 | The API Publisher component previously used a non-cryptographic pseudorandom number generator (PRNG) to create shared secrets for Webhook HMAC validation. This PRNG lacks sufficien |
| CVE-2026-34223 | Deferred | 未確認 | CWE-94 | A vulnerability has been identified in Desigo CC ClickOnce Client V6 (All versions), Desigo CC ClickOnce Client V7 (All versions), Desigo CC family V8 (All versions), Desigo CC fam |
| CVE-2026-34412 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-34689 | Analyzed | 未確認 | CWE-22 | Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attac |
| CVE-2026-35160 | Analyzed | 未確認 | CWE-78 | Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A |
| CVE-2026-35189 | Analyzed | 未確認 | CWE-770 | Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Re |
| CVE-2026-35191 | Analyzed | 未確認 | CWE-440 | Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computat |
| CVE-2026-35867 | Deferred | 未確認 | CWE-78 | A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of the LB-LINK router AC1900_AZ2 V1.0.2 via shell metacharacters, if the |
| CVE-2026-3626 | Analyzed | 未確認 | CWE-209 | IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information c |
| CVE-2026-36392 | Deferred | 未確認 | CWE-79 | FairSketch Rise CRM Version 3.9.6 is vulnerable to Cross Site Scripting (XSS). An authenticated administrator can inject arbitrary JavaScript into an item's title, which is stored |
| CVE-2026-36433 | Deferred | 未確認 | CWE-94 | An issue in Actions Semiconductor Co. Ltd Tool- Media Player Utilities v.4.46 allows a physically proximate attacker execute arbitrary code via the Production.dll and RdiskUpgrade. |
| CVE-2026-36453 | Deferred | 未確認 | CWE-425 | Rhymix before 2.1.31 allows insecure direct object reference, aka RVE-2026-1. Arbitrary files can be accessed via extra variables. |
| CVE-2026-36467 | Deferred | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type in core/modules/media.php in CuteNews v.2.1.2 allows remote authenticated users with access to the Media Manager panel to execute ar |
| CVE-2026-36468 | Deferred | 未確認 | CWE-79 | Cross-site Scripting (XSS) in index.php in CuteNews v.2.1.2 allows remote unauthenticated attackers to supply an arbitrarily named URL parameter key, with part of its name containi |
| CVE-2026-36469 | Deferred | 未確認 | CWE-918 | CuteNews v.2.1.2 is vulnerable to Server-Side Request Forgery (SSRF) in core/modules/media.php -- upload_from_inet (Media Manager's "Upload by URL" functionality). |
| CVE-2026-36470 | Deferred | 未確認 | CWE-79 | CuteNews v.2.1.2 is vulnerable to Cross Site Scripting (XSS) in index.php. The value of the "Referer" header is copied into the response HTML unmodified/unescaped during POST messa |
| CVE-2026-36471 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data of the __post_data parameter in cn_parse_url() in CuteNews v.2.1.2 allows a remote attacker to inject arbitrary values into internal request varia |
| CVE-2026-36472 | Deferred | 未確認 | CWE-79 | CuteNews v.2.1.2 is vulnerable to Cross Site Scripting (XSS). Improper neutralization of the __referer value 2.0.1 allows a remote attacker to execute arbitrary JavaScript in the c |
| CVE-2026-36989 | Deferred | 未確認 | CWE-89 | A SQL Injection vulnerability exists in LuxSoft LuxCal through 5.3.4L via rssfeed.php and common/retrieve.php. |
| CVE-2026-37008 | Deferred | 未確認 | CWE-424 | CrewAI before fb2323b offers a Python blocklist approach that operates at the wrong level of abstraction, a different vulnerability than CVE-2026-2275. Import-time blocking of modu |
| CVE-2026-37152 | Deferred | 未確認 | CWE-798 | TOTOLINK X5000R V9.1.0cu.2415_B20250515 was discovered to contain a hardcoded password for root access. |
| CVE-2026-37603 | Deferred | 未確認 | CWE-307 | Improper Restriction of Excessive Authentication Attempts in the administration login of pH7Software pH7Builder (pH7 Social Dating CMS) through 19.2.0. The CAPTCHA escalation flag |
| CVE-2026-37604 | Deferred | 未確認 | CWE-290 | pH7Software pH7Builder (pH7 Social Dating CMS) through 18.2.0 resolves the client IP address in _protected/framework/Ip/Ip.class.php from the HTTP_CLIENT_IP and HTTP_X_FORWARDED_FO |
| CVE-2026-38056 | Awaiting Analysis | 未確認 | CWE-862 | A local privilege escalation vulnerability exists in the iDirect iQ200 VSAT terminal running firmware 23.0.1.0. The iQ200 is a rackmount satellite modem deployed across oil and gas |
| CVE-2026-38058 | Awaiting Analysis | 未確認 | CWE-497 | The endpoint on the iDirect iQ200 VSAT terminal returns the complete device configuration as JSON, including the SECURITY section which contains MD5-crypt password hashes for the r |
| CVE-2026-38332 | Deferred | 未確認 | CWE-125 | TinyEXIF before 1.1.0 has a heap-based buffer over-read in EntryParser::Fetch methods reachable via a crafted SubjectArea length. |
| CVE-2026-3850 | Deferred | 未確認 | CWE-79 | The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the `redirect_url` parameter of the `et_pb_contact_form` shortcode in all versions up to, and includin |
| CVE-2026-3851 | Deferred | 未確認 | CWE-79 | The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the Dynamic Content feature's legacy JSON format in all versions up to, and including, 4.27.6. This is |
| CVE-2026-3852 | Deferred | 未確認 | CWE-79 | The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the `skype_url` shortcode attribute of the Social Media Follow module in all versions up to, and inclu |
| CVE-2026-3853 | Deferred | 未確認 | CWE-79 | The Divi theme for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the `image_src` attribute of the `et_pb_video_slider_item` shortcode in all versions up to, |
| CVE-2026-3855 | Analyzed | 未確認 | CWE-99 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have |
| CVE-2026-38626 | Deferred | 未確認 | CWE-89 | Garlic-Hub v1.0.1 is vulnerable to SQL Injection in src/Modules/Items/Repositories/ItemsRepository.php. |
| CVE-2026-3869 | Awaiting Analysis | 未確認 | CWE-303 | CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity and availability of the PLC provided an appl |
| CVE-2026-38924 | Deferred | 未確認 | CWE-669 | In Oraios AI Serena before 1.0.0, the listen address of the MCP server in HTTP mode is 0.0.0.0. NOTE: the Supplier observed that 0.0.0.0 was a "potential security hazard" but the S |
| CVE-2026-38961 | Deferred | 未確認 | CWE-79 | Cross-Site Scripting (XSS) vulnerability in the RSS Widget of Netgate pfSense Plus (versions 26.03, 25.11.1) and pfSense CE (version 2.8.1) allows remote authenticated attackers to |
| CVE-2026-38998 | Awaiting Analysis | 未確認 | CWE-416 | A use-after-free in the SocketDescriptor::tcpReadHandler1 function (liveMedia/RTPInterface.cpp) of LIVE555 Streaming Media (version 2026.02.26) allows attackers to cause a Denial o |
| CVE-2026-38999 | Deferred | 未確認 | CWE-476 | A Null Pointer Dereference in the mk_sched_event_close function (mk_server/mk_scheduler.c) of Monkey through commit 4fb0c16 allows attackers to cause a Denial of Service (DoS) via |
| CVE-2026-39020 | Deferred | 未確認 | CWE-20 | An issue in WIngs3D v.2.4.1 allows a local attacker to cause a denial of service via a crafted Wavefront OBJ file |
| CVE-2026-39038 | Deferred | 未確認 | CWE-79 | BharatMLStack up to and including v1.3.0 is vulnerable to Cross Site Scripting (XSS) in the component Trufflebox UI (trufflebox-ui) in GenericNumerixTable.jsx. |
| CVE-2026-39039 | Deferred | 未確認 | CWE-79 | In BharatMLStack up to and including v1.3.0, Trufflebox UI stores the JWT authentication token, full user object, and session ID in the browser's localStorage, which is fully acces |
| CVE-2026-39040 | Deferred | 未確認 | CWE-79 | BharatMLStack up to and including 1.3.0 is vulnerable to Cross Site Scripting (XSS) via the component Trufflebox UI (trufflebox-ui) in ExpressionViewModal.jsx. |
| CVE-2026-39117 | Deferred | 未確認 | CWE-94 | An issue in AltumCode 66Uptime before v.54.0.0 and 66Uptime ping-servers plugin before v.2.0.0 allows a remote attacker to execute arbitrary code via the index.php |
| CVE-2026-39353 | Deferred | 未確認 | CWE-693, CWE-732, CWE-98 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2-rc-1, InvoicePlane builds its permitted template list by scanning |
| CVE-2026-39372 | Deferred | 未確認 | CWE-200, CWE-359 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane stores and serves uploaded image attachments withou |
| CVE-2026-39919 | Awaiting Analysis | 未確認 | CWE-122 | Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG 2000 output adapter (base/sjpx_openjpeg.c) that allows attackers to cause memory corrupti |
| CVE-2026-40058 | Awaiting Analysis | 未確認 | CWE-367 | CrowdStrike released a security update to address a vulnerability in the Falcon sensor for Windows. The vulnerability only exists when the Microsoft Office File Malicious Macro Rem |
| CVE-2026-4034 | Awaiting Analysis | 未確認 | CWE-74 | Injection Vulnerability in Tibco Administrator version 5.13.0 & prior allows an authenticated user to submit specially crafted input through the web-based administration console. |
| CVE-2026-4036 | Awaiting Analysis | 未確認 | CWE-89 | An improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Sharing API in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7. |
| CVE-2026-40530 | Awaiting Analysis | 未確認 | CWE-93 | An improper neutralization of CRLF sequences ('CRLF injection') vulnerability in User API in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009 |
| CVE-2026-40531 | Awaiting Analysis | 未確認 | CWE-190 | An integer overflow or wraparound vulnerability in File Operation in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2 allows remote authent |
| CVE-2026-40532 | Awaiting Analysis | 未確認 | CWE-425 | A direct request ('forced browsing') vulnerability in Wallpaper Path in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2 allows remote auth |
| CVE-2026-40533 | Awaiting Analysis | 未確認 | CWE-202 | An exposure of sensitive information through data queries vulnerability in Desktop API in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2 |
| CVE-2026-40534 | Awaiting Analysis | 未確認 | CWE-79 | An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Video API in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2. |
| CVE-2026-40535 | Awaiting Analysis | 未確認 | CWE-22 | An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Desktop API in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72 |
| CVE-2026-40536 | Awaiting Analysis | 未確認 | CWE-22 | An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Audio API in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-7280 |
| CVE-2026-40537 | Awaiting Analysis | 未確認 | CWE-918 | A server-side request forgery (SSRF) vulnerability in PersonMail API in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2 allows remote auth |
| CVE-2026-40538 | Awaiting Analysis | 未確認 | CWE-307 | An improper restriction of excessive authentication attempts vulnerability in Auto block in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009- |
| CVE-2026-40539 | Awaiting Analysis | 未確認 | CWE-295 | An improper certificate validation vulnerability in Email API in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2 allows man-in-the-middle |
| CVE-2026-40635 | Analyzed | 未確認 | CWE-377 | Dell PowerScale OneFS versions 9.12.0.0 through 9.13.1.0 contain an Insecure Temporary File vulnerability. A low privileged remote attacker could potentially exploit this vulnerabi |
| CVE-2026-40854 | Awaiting Analysis | 未確認 | CWE-290 | WNC T-Mobile 5G Box IDU router contains an authentication bypass vulnerability in the portal.cgi component. The session verification mechanism improperly validates the sessionid co |
| CVE-2026-40855 | Awaiting Analysis | 未確認 | CWE-78 | WNC T-Mobile 5G Box IDU router is vulnerable to a command injection. The vulnerability exists in the ping functionality within the /cgi-bin/portal.cgi endpoint, specifically affect |
| CVE-2026-40856 | Awaiting Analysis | 未確認 | CWE-306 | WNC T-Mobile 5G Box IDU router is vulnerable to improper access control. The vulnerability exists in the wnc_maccheck.cgi endpoint, which is accessible without authentication. It a |
| CVE-2026-40857 | Awaiting Analysis | 未確認 | CWE-352 | WNC T-Mobile 5G Box IDU router contains a cross-site request forgery (CSRF) vulnerability in the portal.cgi component. The anti-CSRF mechanism fails to validate the csrf_token_valu |
| CVE-2026-4103 | Deferred | 未確認 | CWE-79 | Insufficient HTML sanitization in the Publisher Portal and Developer Portal allows untrusted user input to be rendered without proper encoding or neutralization. This enables the i |
| CVE-2026-4123 | Deferred | 未確認 | CWE-862 | The RW Elephant Rental Inventory plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 2.3.13. This is due to a missing capability check o |
| CVE-2026-4129 | Awaiting Analysis | 未確認 | CWE-862 | There is an improper access control vulnerability in NI SystemLink that may allow an authenticated user with limited privileges to access host operating system files and directorie |
| CVE-2026-4130 | Awaiting Analysis | 未確認 | CWE-312 | There is a storage of sensitive information in cleartext vulnerability in NI SystemLink. This vulnerability may allow an attacker with local access to obtain sensitive information |
| CVE-2026-41573 | Awaiting Analysis | 未確認 | CWE-90 | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, IdentityResourceV1.queryCollection() passes the _queryId parameter from /json/{realm}/users to Cr |
| CVE-2026-41869 | Analyzed | 未確認 | CWE-404, CWE-862 | Missing Authorization, Improper Resource Shutdown and Job Interruption vulnerability in Apache Nutch Server (Nutch REST API). This issue affects Apache Nutch: from 1.10 through |
| CVE-2026-41870 | Analyzed | 未確認 | CWE-470, CWE-862, CWE-913, CWE-94 | Missing Authorization, Improper Control of Generation of Code ('Code Injection'), Improper Control of Dynamically-Managed Code Resources, Use of Externally-Controlled Input to Sele |
| CVE-2026-41871 | Analyzed | 未確認 | CWE-470, CWE-862 | Missing Authorization, Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Nutch Server (Nutch REST API). This issue affe |
| CVE-2026-41875 | Deferred | 未確認 | CWE-352 | Quick.Cart is vulnerable to Cross-Site Request Forgery in admin config panel. Malicious attacker can craft special website, which when visited by the admin, will automatically send |
| CVE-2026-41987 | Deferred | 未確認 | CWE-264 | Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-42322 | Deferred | 未確認 | CWE-434 | Piwigo is a full featured open source photo gallery application for the web. Prior to 16.4.0, admin/themes_standard_pages.php validates uploaded logo content by MIME type but reuse |
| CVE-2026-42323 | Deferred | 未確認 | CWE-89 | Piwigo is a full featured open source photo gallery application for the web. Prior to 16.4.0, admin/batch_manager.php accepts administrator-controlled dimension width, height, and |
| CVE-2026-42324 | Deferred | 未確認 | CWE-89 | Piwigo is a full featured open source photo gallery application for the web. Prior to 16.4.0, admin/element_set_ranks.php stores administrator-controlled image_order[] values witho |
| CVE-2026-42772 | Analyzed | 未確認 | CWE-407 | Issue summary: The QUIC stream reassembly algorithm performance deteriorates progressively as packets are arriving out of order. The worst case has a quadratic complexity proportio |
| CVE-2026-42784 | Awaiting Analysis | 未確認 | CWE-347 | A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capa |
| CVE-2026-42801 | Deferred | 未確認 | CWE-476 | NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux (as_rrc module) allows Pointer Manipulation. This vulnerability is associated with program file 3g.mod/lib/src/ |
| CVE-2026-42804 | Awaiting Analysis | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability exists in the Bosch Sensortec BHI360 SensorAPI(C-Library) in versions up to and including commit d6b200416a. The vulnerability is loc |
| CVE-2026-42805 | Awaiting Analysis | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability exists in the Bosch Sensortec BHI385 SensorAPI (C library) within the debug message parser function bhi385_parse_debug_message (located |
| CVE-2026-42806 | Awaiting Analysis | 未確認 | CWE-125 | An out-of-bounds read vulnerability was discovered in the Bosch BME690 SensorAPI (C-driver) in version v1.0.3 and prior, specifically within the field data parsing logic in read_al |
| CVE-2026-42807 | Awaiting Analysis | 未確認 | CWE-122 | A heap-based buffer overflow vulnerability in the PC bridge protocol decoder of BoschSensortec COINES_SDK (versions 2.10 through 2.12.2) allows attackers to cause a denial of servi |
| CVE-2026-42808 | Awaiting Analysis | 未確認 | CWE-120 | An issue was discovered in Bosch Sensortec COINES_SDK versions 2.0 through 2.11. The host streaming API function {{coines_read_stream_sensor_data()}} fails to validate the boun |
| CVE-2026-4327 | Deferred | 未確認 | CWE-94 | The The Welcomizer plugin for WordPress is vulnerable to Remote Code Execution in all versions up to and including 2.8.1. This is due to missing authorization checks on the twiz_aj |
| CVE-2026-4357 | Deferred | 未確認 | CWE-434 | The Embed HTML5 Game WordPress plugin through 1.3 does not properly restrict who can upload files via the plugin, as well as what can be uploaded, making it possible for unauthenti |
| CVE-2026-4361 | Deferred | 未確認 | CWE-918 | The Divi theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.27.6. This is due to the `et_pb_set_video_oembed_thumbnail_resolut |
| CVE-2026-43635 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-43641 | Deferred | 未確認 | CWE-78 | Softaculous Virtualizor before 3.2.9 (Patch 9) and 3.0.0 contains an OS command injection vulnerability in the billing module handler that allows unauthenticated remote attackers t |
| CVE-2026-43642 | Deferred | 未確認 | CWE-502 | Softaculous Virtualizor before 3.2.9 (Patch 9) and 3.0.0 contains a PHP object injection vulnerability in the billing module handler that allows unauthenticated remote attackers to |
| CVE-2026-43643 | Deferred | 未確認 | CWE-862 | Softaculous Virtualizor before 3.2.9 (Patch 9) and 3.0.0 contains an authorization bypass vulnerability in the billing module handler that allows unauthenticated remote attackers t |
| CVE-2026-43645 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-43664 | Analyzed | 未確認 | CWE-200 | This issue was addressed with improved data protection. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe |
| CVE-2026-43674 | Analyzed | 未確認 | CWE-287 | An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27. An attacker with physical access to an unlocked device may be abl |
| CVE-2026-43677 | Analyzed | 未確認 | CWE-787 | An out-of-bounds write issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malic |
| CVE-2026-43683 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause un |
| CVE-2026-43684 | Analyzed | 未確認 | CWE-416 | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Golden Gate 27, macOS Sequoia 15.8. An app may be able |
| CVE-2026-43686 | Analyzed | 未確認 | CWE-416 | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15. |
| CVE-2026-43687 | Analyzed | 未確認 | CWE-200 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visio |
| CVE-2026-43688 | Analyzed | 未確認 | CWE-1021 | A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. Processing a maliciously crafted file may |
| CVE-2026-43689 | Analyzed | 未確認 | CWE-862 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A maliciou |
| CVE-2026-43690 | Analyzed | 未確認 | CWE-362 | A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A local user may be able to read kernel mem |
| CVE-2026-43691 | Analyzed | 未確認 | CWE-22 | A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root pri |
| CVE-2026-43692 | Analyzed | 未確認 | CWE-20 | A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote user may cause an une |
| CVE-2026-43695 | Modified | 未確認 | CWE-285, CWE-863 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 2 |
| CVE-2026-43696 | Modified | 未確認 | CWE-862 | An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS Golden Gate 27. An app may be able to capture Touch Bar content without authoriz |
| CVE-2026-43697 | Modified | 未確認 | CWE-125 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously craft |
| CVE-2026-43702 | Analyzed | 未確認 | CWE-119 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, iOS 26.7 and iPadOS 26.7, macOS Sequoia 15.8, macOS Tahoe 26.6, macOS Tahoe |
| CVE-2026-43719 | Analyzed | 未確認 | CWE-416 | A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a maliciously craf |
| CVE-2026-43737 | Analyzed | 未確認 | CWE-863 | An authorization issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macO |
| CVE-2026-43741 | Analyzed | 未確認 | CWE-284 | A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access protecte |
| CVE-2026-43761 | Analyzed | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Mounting a malicious d |
| CVE-2026-43762 | Analyzed | 未確認 | CWE-284 | The issue was addressed with improved checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6. An app may be able to access user-sensitive data. |
| CVE-2026-43783 | Analyzed | 未確認 | CWE-362 | A race condition was addressed with improved locking. This issue is fixed in macOS Tahoe 26.6. A malicious app may be able to gain root privileges. |
| CVE-2026-43785 | Modified | 未確認 | CWE-863 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, vi |
| CVE-2026-43786 | Analyzed | 未確認 | CWE-280 | This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root priv |
| CVE-2026-43787 | Analyzed | 未確認 | CWE-693 | A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in a privileged network position ma |
| CVE-2026-43788 | Analyzed | 未確認 | CWE-190 | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27. Processing a maliciously crafted file may lead to a denial-of-service |
| CVE-2026-43789 | Modified | 未確認 | CWE-862 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access |
| CVE-2026-43790 | Modified | 未確認 | CWE-787 | The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote attacker may be able to cause une |
| CVE-2026-43791 | Modified | 未確認 | CWE-22 | A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to read arb |
| CVE-2026-43808 | Analyzed | 未確認 | CWE-416 | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able |
| CVE-2026-43815 | Modified | 未確認 | CWE-787 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Connecting to a malicious afpfs s |
| CVE-2026-44162 | Deferred | 未確認 | CWE-409 | fluent-plugin-s3 is an Amazon S3 input and output plugin for Fluentd. From 0.7.0 to 1.8.4, the in_s3 input plugin reads the entire decompressed payload of gzip, lzma2, and lzop obj |
| CVE-2026-44163 | Deferred | 未確認 | CWE-409 | fluent-plugin-opentelemetry is a Fluentd input and output plugin for forwarding OpenTelemetry Protocol data. Prior to 0.5.3, the in_opentelemetry HTTP input read the entire incomin |
| CVE-2026-44202 | Awaiting Analysis | 未確認 | CWE-918 | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the /sessionservice addSessionListener operation allows an authenticated user to register an arbi |
| CVE-2026-44203 | Awaiting Analysis | 未確認 | CWE-79 | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the OAuth 2.0 and OpenID Connect authorization endpoint does not sufficiently encode user-supplie |
| CVE-2026-44235 | Awaiting Analysis | 未確認 | CWE-125, CWE-191 | rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an undersized HEADER or METHOD frame during client login and cause un |
| CVE-2026-44236 | Awaiting Analysis | 未確認 | CWE-122 | rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an undersized connection.tune.frame_max value during amqp_login(), an |
| CVE-2026-44282 | Deferred | 未確認 | CWE-79 | Decidim is a participatory democracy framework. Prior to 0.32.0, a low-privilege process-scoped administrator or election editor with question-management rights can store HTML or s |
| CVE-2026-44300 | Awaiting Analysis | 未確認 | CWE-20, CWE-309 | OpenCost provides cost monitoring for Kubernetes workloads and cloud costs. Prior to 1.121.0, the POST /serviceKey endpoint in pkg/costmodel/router.go allows a network client to in |
| CVE-2026-44402 | Deferred | 未確認 | CWE-434 | Voltronic Power SNMP Web Pro 1.1 contains an unauthenticated remote code execution vulnerability in the upload.cgi firmware update endpoint that allows remote attackers to execute |
| CVE-2026-44506 | Deferred | 未確認 | CWE-200 | Medplum is a developer platform that enables development of healthcare apps. In Medplum versions 4.1.10 through 5.1.6, the /oauth2/register endpoint could return the client_secret |
| CVE-2026-44639 | Deferred | 未確認 | CWE-407 | NanoMQ is an MQTT broker. Prior to 0.24.14, NanoMQ's MQTT v5 property decoder in nng/src/supplemental/mqtt/mqtt_codec.c uses property_append() to walk the entire linked list for ea |
| CVE-2026-44642 | Deferred | 未確認 | CWE-89 | Piwigo is a full featured open source photo gallery application for the web. Prior to 16.4.0, check_upgrade_access_rights() in admin/include/functions_upgrade.php conditionally esc |
| CVE-2026-44715 | Awaiting Analysis | 未確認 | CWE-285 | OpenMRS is an open source electronic medical record system platform. Prior to versions 1.23.0 and 2.10.0, an authenticated user can trigger administrative DWR services. Specificall |
| CVE-2026-44756 | Awaiting Analysis | 未確認 | CWE-120 | A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under specific conditions, an unauthenticated attacker could exploit a crafted netw |
| CVE-2026-44766 | Awaiting Analysis | 未確認 | CWE-89 | SAP S/4HANA (Intercompany Matching and Reconciliation) allows a low-privileged authenticated user to inject malicious input into certain functions, which may be processed by the da |
| CVE-2026-44778 | Awaiting Analysis | 未確認 | CWE-20 | Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. From 0.28.0 until 0.53.1, the USDT not |
| CVE-2026-44793 | Awaiting Analysis | 未確認 | CWE-79 | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, certain federation endpoints in a non-default clustered configuration inconsistently encode user- |
| CVE-2026-44940 | Awaiting Analysis | 未確認 | CWE-200, CWE-312 | The rancher-extension-stackstate extension in SUSE Observability exposes service tokens in plain configuration or insecure locations rather than managing them securely. An attacker |
| CVE-2026-44950 | Awaiting Analysis | 未確認 | CWE-122 | fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) copies each glyph's bitmap into a single buffer. Existing checks validates only that the source slice (positi |
| CVE-2026-45048 | Awaiting Analysis | 未確認 | CWE-200, CWE-285 | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, SessionRequestHandler in the session management endpoint does not enforce ownership or privilege |
| CVE-2026-45051 | Awaiting Analysis | 未確認 | CWE-502 | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, WebAuthnAuthentication loads a serialized AuthenticatorImpl object graph from the configured user |
| CVE-2026-45052 | Awaiting Analysis | 未確認 | CWE-285 | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the Liberty Web Services SOAP receiver permits unauthenticated remote requests to write persisten |
| CVE-2026-45056 | Deferred | 未確認 | CWE-290 | matrix-sdk-crypto is a no-network-IO implementation of a state machine that handles end-to-end encryption for Matrix clients. Starting in version 0.12.0 and prior to version 0.17.0 |
| CVE-2026-45057 | Deferred | 未確認 | CWE-345 | matrix-sdk-ui provides GUI-centric utilities on top of matrix-rust-sdk. The message edit validation logic in the `matrix-sdk-ui` crate prior to 0.17.0 is missing a check: when rep |
| CVE-2026-45140 | Deferred | 未確認 | CWE-219, CWE-22, CWE-434, CWE-94 | Chamilo LMS is an open-source learning management system. Prior to 2.0.1, Chamilo LMS allows an unauthenticated remote attacker to execute arbitrary code on the server. The authori |
| CVE-2026-45143 | Deferred | 未確認 | CWE-79 | Chamilo LMS is an open-source learning management system. From 2.0.0 through at least 2.1.0, Chamilo LMS stores private Message.content without server-side sanitization and renders |
| CVE-2026-45197 | Awaiting Analysis | 未確認 | CWE-367 | Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a read and/or write data outside the Guest's virtualised GPU memor |
| CVE-2026-45200 | Awaiting Analysis | 未確認 | CWE-416 | Software installed and run as a non-privileged user may conduct improper GPU driver IOCTL calls to create an allocation scenario that when freed would cause double free and kernel |
| CVE-2026-45219 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-45220 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-45221 | Deferred | 未確認 | CWE-427 | Konga before 2.1.0 contains a privilege escalation vulnerability that allows low-privileged local attackers to execute arbitrary code by planting attacker-controlled OpenSSL config |
| CVE-2026-4523 | Analyzed | 未確認 | CWE-862 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have |
| CVE-2026-45234 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-45235 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-45236 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-45237 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-45238 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-45239 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-45240 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-45241 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-45381 | Deferred | 未確認 | CWE-79 | Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to 2.17.2, the /search endpoint inserts its user-controlled query parameter into a JavaScript s |
| CVE-2026-45515 | Analyzed | 未確認 | CWE-122, CWE-787 | In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation |
| CVE-2026-45519 | Analyzed | 未確認 | CWE-441 | In screenArgsForPermissionCheckIfAny of multiple locations there is a possible risk of unauthorized access due to a confused deputy. This could lead to local information disclosure |
| CVE-2026-45520 | Analyzed | 未確認 | CWE-441 | In onAttach of BiometricsSettingsBase.java, there is a possible authentication bypass due to a confused deputy. This could lead to local escalation of privilege with no additional |
| CVE-2026-45521 | Analyzed | 未確認 | CWE-693 | In openFile of AppFuseBridge.java, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional |
| CVE-2026-45525 | Analyzed | 未確認 | CWE-20 | In multiple locations, there is a possible improper data sanitization due to a logic error in the code. This could lead to local information disclosure with no additional execution |
| CVE-2026-45527 | Analyzed | 未確認 | CWE-190 | In convertCleanApertureToRect of HeifCleanAperture.cpp, there is a possible way to cause a temporary denial of service due to an integer overflow. This could lead to remote denial |
| CVE-2026-45528 | Analyzed | 未確認 | CWE-926 | In getManageSpaceActivityIntent of StorageManagerService.java, there is a possible LaunchAnyWhere chain due to an unsafe PendingIntent. This could lead to local escalation of privi |
| CVE-2026-45531 | Analyzed | 未確認 | CWE-122 | In read_boot_region of fsck.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution p |
| CVE-2026-4556 | Awaiting Analysis | 未確認 | CWE-78 | Exam4 is affected by a local privilege escalation vulnerability in the com.extegrity.LogTool privileged helper, which communicates with the application via XPC. The [ConsoleLogHelp |
| CVE-2026-45562 | Analyzed | 未確認 | CWE-78 | FreePBX is an open source IP PBX. Prior to versions 16.0.4 and 17.0.6, the FreePBX Music on Hold (MoH) module contains a critical security flaw that allows authenticated attackers |
| CVE-2026-45579 | Deferred | 未確認 | CWE-95 | DIRAC is an interware, meaning a software framework for distributed computing. Prior to versions 8.0.79, 9.0.22, and 9.1.10, the RequestManagementSystem/Service/ReqManagerHandler.p |
| CVE-2026-45720 | Deferred | 未確認 | CWE-294, CWE-367 | Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.6.6 and from 1.7.0 until 1.7.3, SAML.getSession in internal/pkg/auth/interceptor/saml.go checks S |
| CVE-2026-45723 | Awaiting Analysis | 未確認 | CWE-20, CWE-209, CWE-22, CWE-441, CWE-918 | Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.6.6 and 1.7.3, managementServer.CreateSchematic in internal/backend/grpc/schematics.go passes the |
| CVE-2026-45726 | Deferred | 未確認 | CWE-200, CWE-522, CWE-732 | Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. From 1.3.0 until 1.6.6 and 1.7.3, importing a standalone Talos cluster creates an ImportedClusterSecrets res |
| CVE-2026-45730 | Deferred | 未確認 | CWE-862 | Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.0, there is a vulnerability in Nuclio Dashboard's project management API, allowin |
| CVE-2026-45747 | Analyzed | 未確認 | CWE-476 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.16, the Lua TLS certificate information h |
| CVE-2026-45751 | Analyzed | 未確認 | CWE-416 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata's inspection-buff |
| CVE-2026-45752 | Analyzed | 未確認 | CWE-416 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, when cer |
| CVE-2026-45759 | Analyzed | 未確認 | CWE-400 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata could repeatedly |
| CVE-2026-45761 | Analyzed | 未確認 | CWE-122 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, a crafted rule using mixed |
| CVE-2026-45762 | Analyzed | 未確認 | CWE-843 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata's IP defragmentat |
| CVE-2026-45763 | Analyzed | 未確認 | CWE-770 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, when Lua |
| CVE-2026-45764 | Analyzed | 未確認 | CWE-843 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, a protocol change while pr |
| CVE-2026-45765 | Analyzed | 未確認 | CWE-400, CWE-770 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, DNP3 reassembly could buff |
| CVE-2026-45766 | Analyzed | 未確認 | CWE-400, CWE-770 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, certain NFS parser state s |
| CVE-2026-45767 | Analyzed | 未確認 | CWE-22 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, a malicious rule could pot |
| CVE-2026-45768 | Analyzed | 未確認 | CWE-400, CWE-770 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, LDAP tra |
| CVE-2026-45769 | Analyzed | 未確認 | CWE-400, CWE-770 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5,IKEv2 parser state could gr |
| CVE-2026-45770 | Analyzed | 未確認 | CWE-693, CWE-787 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, a Lua ru |
| CVE-2026-45794 | Awaiting Analysis | 未確認 | CWE-502 | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the anonymous Push Notification SNS callback handled by SnsMessageResource falls back to a CTS pr |
| CVE-2026-45801 | Deferred | 未確認 | CWE-269 | GLPI is a free asset and IT management software package. From 0.72 until 10.0.26 and 11.0.8, an authenticated user without the required permission can enable debug mode. The affect |
| CVE-2026-46352 | Analyzed | 未確認 | CWE-833 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, Suricata |
| CVE-2026-4637 | Deferred | 未確認 | CWE-79 | Paessler PRTG Network Monitor before version 26.2.120.1449 is affected by a reflected Cross-Site Scripting (XSS) vulnerability. When a request is made for a non-existent resource e |
| CVE-2026-4638 | Deferred | 未確認 | CWE-209 | PRTG Network Monitor before version 26.2.120.1449 ships a demo EXE/Script sensor that multiplies two integer parameters using cscript.exe. If a non-numeric value is passed instead, |
| CVE-2026-46387 | Analyzed | 未確認 | CWE-409 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata's HTTP/2 decompre |
| CVE-2026-4644 | Awaiting Analysis | 未確認 | CWE-863 | A Missing Authorization vulnerability in HTTP Connector in Google Cloud Integration Connectors versions prior to 2025-12-11 on Google Cloud Platform allows an authenticated user to |
| CVE-2026-46460 | Analyzed | 未確認 | CWE-863 | Dell PowerScale OneFS, versions 9.5.0.0 through 9.7.1.15, versions 9.8.0.0 through 9.13.1.0, and versions prior to 9.15.0.0, contain an Incorrect Authorization vulnerability. A low |
| CVE-2026-46488 | Deferred | 未確認 | CWE-256, CWE-287, CWE-328, CWE-836 | motionEye (mEye) is an online interface for a piece of software called "motion," which is a video surveillance program with motion detection. Prior to 0.44.0, motionEye accepts the |
| CVE-2026-46495 | Awaiting Analysis | 未確認 | CWE-502 | OpenDJ is an LDAPv3 compliant directory service. Prior to 5.1.1, the JMX RMI connector in opendj-server-legacy/src/main/java/org/opends/server/protocols/jmx/RmiConnector.java proce |
| CVE-2026-46498 | Awaiting Analysis | 未確認 | CWE-639 | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, OAuthTokenStore reads caller-supplied token identifiers from the shared Core Token Store (CTS) wi |
| CVE-2026-4657 | Deferred | 未確認 | CWE-79 | The Easy Google Fonts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the control_selectors meta field in all versions up to, and including, 2.0.4. This is du |
| CVE-2026-46619 | Awaiting Analysis | 未確認 | CWE-90 | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, MSISDNValidation in the MSISDN authentication module concatenates the request-supplied MSISDN val |
| CVE-2026-46623 | Awaiting Analysis | 未確認 | CWE-1391, CWE-620 | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the OAuth2 authentication module updates an existing local account with profile attributes that c |
| CVE-2026-46636 | Awaiting Analysis | 未確認 | CWE-1336 | Twig is a template language for PHP. From version 1.0.0 to before version 3.27.0, SecurityPolicy::checkMethodAllowed() unconditionally whitelists all method calls on instances of T |
| CVE-2026-46649 | Deferred | 未確認 | CWE-307 | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Server's GET /api/login_with_code/:id endpoint acce |
| CVE-2026-46650 | Deferred | 未確認 | CWE-79 | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, isAcceptedUrl() in packages/renderer/htmlUtils.ts uses an |
| CVE-2026-46655 | Awaiting Analysis | 未確認 | CWE-122, CWE-190 | virtio-win provides Windows paravirtualized drivers for QEMU and KVM. From mm210 until mm320, the Viosock driver permits a low-privilege local process to submit an IOCTL_SELECT req |
| CVE-2026-46696 | Deferred | 未確認 | CWE-269, CWE-284 | October System provides the system module for October Content Management System. Versions prior to 3.7.17 and 4.2.21 have a vulnerability in the Twig sandbox security policy that a |
| CVE-2026-46711 | Deferred | 未確認 | CWE-306 | Soft Machine is a Virtual Machine–based agentic development environment / Cloud OS. In versions 0.2.247 and prior, the workspace HTTP service that listens on 0.0.0.0:8080 inside ea |
| CVE-2026-47094 | Deferred | 未確認 | CWE-639 | SIMAC MyPHR 1.1 contains an insecure direct object reference (IDOR) vulnerability that allows authenticated attackers to access and modify arbitrary employee records due to missing |
| CVE-2026-47096 | Awaiting Analysis | 未確認 | CWE-79 | AJA HELO Plus firmware before 2.1.7 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers with network access to inject malicious JavaScript by |
| CVE-2026-47097 | Deferred | 未確認 | CWE-321 | AJA HELO Plus firmware before 2.1.7 contains an information disclosure vulnerability that allows unauthenticated attackers to decrypt sensitive diagnostics bundles by exploiting a |
| CVE-2026-47116 | Deferred | 未確認 | CWE-798 | LTSecurity LTK3500SF contains a hard-coded credentials vulnerability where the root and guest account passwords are stored in /etc/shadow as weak hashes recoverable with dictionary |
| CVE-2026-47132 | Deferred | 未確認 | CWE-20, CWE-200, CWE-89 | phpMyFAQ is an open source FAQ web application. Prior to version 4.2.0-alpha, an authenticated SQL LIKE wildcard injection vulnerability in phpMyFAQ’s chat user search allows any l |
| CVE-2026-47156 | Deferred | 未確認 | CWE-287, CWE-639 | MantisBT is an open source bug tracker. Versions 2.28.3 and earlier contain a critical authentication bypass in the SOAP API's mci_check_login() function. Any user knowing any vali |
| CVE-2026-47215 | Awaiting Analysis | 未確認 | CWE-22 | SingularityCE and SingularityPRO are open source container platforms. Prior to SingularityCE 4.4.2 and SingularityPRO 4.3.9 and 4.1.14, incorrect path-string matching in the singul |
| CVE-2026-47252 | Deferred | 未確認 | CWE-94 | Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, authenticated users with INSERT or UPDATE access to affected macOS virtual tables can execute operating-syst |
| CVE-2026-47253 | Deferred | 未確認 | CWE-22 | Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, the clear_plugin_cache(plugin) SQL scalar function in namespace/other_functions.go passes the caller-control |
| CVE-2026-47256 | Awaiting Analysis | 未確認 | CWE-22, CWE-74 | OpenTelemetry, also known as OTel, is a vendor-neutral open source Observability framework for instrumenting, generating, collecting, and exporting telemetry data such as traces, m |
| CVE-2026-47297 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-47321 | Awaiting Analysis | 未確認 | CWE-409, CWE-789 | The CompressionFilter class uses ZLib to deflate and inflate data sent and received. When we inflate incoming data, the filter does not control the resulting size, and create a buf |
| CVE-2026-47424 | Awaiting Analysis | 未確認 | CWE-693 | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, GroovySandboxValueFilter permits an authenticated server-side script author to escape the scripti |
| CVE-2026-47426 | Awaiting Analysis | 未確認 | CWE-287 | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the private_key_jwt client authentication path uses ClientJwksResolverCache without reliably bind |
| CVE-2026-47489 | Awaiting Analysis | 未確認 | CWE-281 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved. A successful exploit of this vul |
| CVE-2026-47491 | Awaiting Analysis | 未確認 | CWE-404 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can cause improper release of memory resources, leaving a mapping a |
| CVE-2026-47492 | Awaiting Analysis | 未確認 | CWE-862 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an attacker can cause improper access control. A successful exploit of this |
| CVE-2026-47493 | Awaiting Analysis | 未確認 | CWE-862 | NVIDIA vGPU software for Windows and Linux contains a vulnerability in the GPU kernel driver where a guest may access privileged host GPU resources for which it is not authorized. |
| CVE-2026-47494 | Awaiting Analysis | 未確認 | CWE-134 | NVIDIA GPU Display Driver for Linux contains a vulnerability where a user might be able to cause a format string issue. A successful exploit of this vulnerability might lead to cod |
| CVE-2026-47495 | Awaiting Analysis | 未確認 | CWE-787 | NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode layer where a user could cause an out-of-bounds write. A successful exploit of thi |
| CVE-2026-47496 | Awaiting Analysis | 未確認 | CWE-787 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where a guest VM user may cause an out-of-bounds write by sending a specially |
| CVE-2026-47497 | Awaiting Analysis | 未確認 | CWE-367 | NVIDIA Virtual GPU Manager contains a vulnerability in the GPU System Processor (GSP) tracing component where a guest VM user may cause improper access by sending crafted data thro |
| CVE-2026-47498 | Awaiting Analysis | 未確認 | CWE-787 | NVIDIA vGPU Manager contains a vulnerability in the GPU System Processor (GSP) plugin where a guest VM user may cause an out-of-bounds write by sending a specially crafted RPC mess |
| CVE-2026-47499 | Awaiting Analysis | 未確認 | CWE-125 | NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode layer where a guest could cause an out-of-bounds read. A successful exploit of thi |
| CVE-2026-47500 | Awaiting Analysis | 未確認 | CWE-416 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where improper cleanup of reference counts during error paths could lead to a use- |
| CVE-2026-47501 | Awaiting Analysis | 未確認 | CWE-787 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could cause an out-of-bounds write by supplying mismatched memory buffers during |
| CVE-2026-47502 | Awaiting Analysis | 未確認 | CWE-190 | NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode layer, where a guest user could cause an integer overflow leading to memory corrup |
| CVE-2026-47503 | Awaiting Analysis | 未確認 | CWE-787 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a guest VM user may cause an out-of-bounds write by sending a crafted R |
| CVE-2026-47504 | Awaiting Analysis | 未確認 | CWE-843 | NVIDIA Linux GPU Display Driver contains a vulnerability in the NGX updater where an outdated embedded cryptographic library is susceptible to type confusion. A successful exploit |
| CVE-2026-47505 | Awaiting Analysis | 未確認 | CWE-416 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an attacker could cause a use-after-free. A successful exploit of this vulnerability m |
| CVE-2026-47506 | Awaiting Analysis | 未確認 | CWE-121 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel-mode color transform path where excessive kernel stack use occurs when evaluating YCbCr420 display emul |
| CVE-2026-47507 | Awaiting Analysis | 未確認 | CWE-129 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an out-of-bounds array access. A successful exploit of t |
| CVE-2026-47508 | Awaiting Analysis | 未確認 | CWE-681 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an incorrect conversion between numeric types. A success |
| CVE-2026-47509 | Awaiting Analysis | 未確認 | CWE-787 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an out-of-bounds write. A successful exploit of this vul |
| CVE-2026-47510 | Awaiting Analysis | 未確認 | CWE-190 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an integer overflow leading to an out-of-bounds write to |
| CVE-2026-47511 | Awaiting Analysis | 未確認 | CWE-787 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an out-of-bounds write. A successful exploit of this vul |
| CVE-2026-47512 | Awaiting Analysis | 未確認 | CWE-125 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an out-of-bounds read leading to kernel information disc |
| CVE-2026-47513 | Awaiting Analysis | 未確認 | CWE-125 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an out-of-bounds read from kernel heap memory. A success |
| CVE-2026-47514 | Awaiting Analysis | 未確認 | CWE-200 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause exposure of kernel stack contents including return addre |
| CVE-2026-47515 | Awaiting Analysis | 未確認 | CWE-125 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an out-of-bounds read via an unbounded string operation. |
| CVE-2026-47516 | Awaiting Analysis | 未確認 | CWE-416 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user could cause a use-after-free. A successful exploit of this vulnerability might l |
| CVE-2026-47517 | Awaiting Analysis | 未確認 | CWE-476 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode driver where a local user may cause a null pointer dereference by submitting a crafted ioctl. A succ |
| CVE-2026-47518 | Awaiting Analysis | 未確認 | CWE-732 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in a secure microcontroller component, where incorrect permission assignment for a critical resource allows |
| CVE-2026-47519 | Awaiting Analysis | 未確認 | CWE-125 | NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this vulner |
| CVE-2026-47520 | Awaiting Analysis | 未確認 | CWE-125 | NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this vulner |
| CVE-2026-47521 | Awaiting Analysis | 未確認 | CWE-125 | NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this vulner |
| CVE-2026-47522 | Awaiting Analysis | 未確認 | CWE-20 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause improper input validation. A successful exploit of t |
| CVE-2026-47523 | Awaiting Analysis | 未確認 | CWE-787 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds write. A successful exploit of this |
| CVE-2026-47524 | Awaiting Analysis | 未確認 | CWE-125 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this |
| CVE-2026-47525 | Awaiting Analysis | 未確認 | CWE-129 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an improper validation of an array index. A successf |
| CVE-2026-47526 | Awaiting Analysis | 未確認 | CWE-476 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause a null pointer dereference. A successful exploit of this vuln |
| CVE-2026-47527 | Awaiting Analysis | 未確認 | CWE-125 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerabi |
| CVE-2026-47528 | Awaiting Analysis | 未確認 | CWE-824 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause an access of an uninitialized pointer. A successful exploit o |
| CVE-2026-47529 | Awaiting Analysis | 未確認 | CWE-787 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerabili |
| CVE-2026-47530 | Awaiting Analysis | 未確認 | CWE-787 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds write. A successful exploit of this |
| CVE-2026-47531 | Awaiting Analysis | 未確認 | CWE-476 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause a null pointer dereference. A successful exploit of |
| CVE-2026-47532 | Awaiting Analysis | 未確認 | CWE-787 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds write. A successful exploit of this |
| CVE-2026-47533 | Awaiting Analysis | 未確認 | CWE-129 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an improper validation of an array index. A successf |
| CVE-2026-47534 | Awaiting Analysis | 未確認 | CWE-369 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause a divide by zero. A successful exploit of this vulne |
| CVE-2026-47535 | Awaiting Analysis | 未確認 | CWE-125 | NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the firmware where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability m |
| CVE-2026-47536 | Awaiting Analysis | 未確認 | CWE-125 | NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this vulner |
| CVE-2026-47537 | Awaiting Analysis | 未確認 | CWE-787 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerabili |
| CVE-2026-47538 | Awaiting Analysis | 未確認 | CWE-787 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerab |
| CVE-2026-47539 | Awaiting Analysis | 未確認 | CWE-681 | NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an incorrect numeric conversion. A successful exploit of t |
| CVE-2026-47540 | Awaiting Analysis | 未確認 | CWE-191 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an integer underflow. A successful exploit of this v |
| CVE-2026-47541 | Awaiting Analysis | 未確認 | CWE-787 | NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds write. A successful exploit of this vulne |
| CVE-2026-47542 | Awaiting Analysis | 未確認 | CWE-20 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause improper input validation. A successful exploit of t |
| CVE-2026-47543 | Awaiting Analysis | 未確認 | CWE-20 | VIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause improper input validation. A successful exploit of th |
| CVE-2026-47544 | Awaiting Analysis | 未確認 | CWE-125 | NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this vulner |
| CVE-2026-47545 | Awaiting Analysis | 未確認 | CWE-125 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this |
| CVE-2026-47546 | Awaiting Analysis | 未確認 | CWE-20 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause improper input validation. A successful exploit of this vulne |
| CVE-2026-47547 | Awaiting Analysis | 未確認 | CWE-20 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause improper input validation. A successful exploit of this vulne |
| CVE-2026-47548 | Awaiting Analysis | 未確認 | CWE-787 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds write. A successful exploit of this |
| CVE-2026-47549 | Awaiting Analysis | 未確認 | CWE-476 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel module where an unprivileged local user could cause a NULL pointer dereference. A successful exploit of t |
| CVE-2026-47550 | Awaiting Analysis | 未確認 | CWE-119 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an unprivileged local user can supply an untrusted pointer that the driver dereference |
| CVE-2026-47551 | Awaiting Analysis | 未確認 | CWE-416 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where a user could cause a use-after-free. A successful exploit of this vulnerabil |
| CVE-2026-47552 | Awaiting Analysis | 未確認 | CWE-862 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could bypass an authorization check and modify privileged configura |
| CVE-2026-47553 | Awaiting Analysis | 未確認 | CWE-787 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause an out-of-bounds write. A successful exploi |
| CVE-2026-47554 | Awaiting Analysis | 未確認 | CWE-347 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where improper verification of cryptographic signatures may cause signature verification to be |
| CVE-2026-47555 | Awaiting Analysis | 未確認 | CWE-908 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where a user could cause uninitialized kernel memory to be copied back to userspac |
| CVE-2026-47556 | Awaiting Analysis | 未確認 | CWE-190 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause an integer overflow that leads to an out-of |
| CVE-2026-47557 | Awaiting Analysis | 未確認 | CWE-476 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause a NULL pointer dereference. A successful exploit of thi |
| CVE-2026-47558 | Awaiting Analysis | 未確認 | CWE-415 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause a double-free of imported memory state. A successful ex |
| CVE-2026-47559 | Awaiting Analysis | 未確認 | CWE-862 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could access memory belonging to another user's process. A successfu |
| CVE-2026-47560 | Awaiting Analysis | 未確認 | CWE-416 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause a use-after-free. A successful exploit of this vulnerab |
| CVE-2026-47561 | Awaiting Analysis | 未確認 | CWE-787 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where the size of an ioctl input buffer is not validated, allowing an unprivileged caller to t |
| CVE-2026-47562 | Awaiting Analysis | 未確認 | CWE-116 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could inject crafted text into the kernel log because the supplied version string |
| CVE-2026-47563 | Awaiting Analysis | 未確認 | CWE-476 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could cause a NULL pointer dereference. A successful exploit of this vulnerabilit |
| CVE-2026-47565 | Awaiting Analysis | 未確認 | CWE-362 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a privileged user could trigger a race condition that leads to an out-of-bounds write. A |
| CVE-2026-47566 | Awaiting Analysis | 未確認 | CWE-401 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause a memory leak in error paths leading to kernel memory e |
| CVE-2026-47567 | Awaiting Analysis | 未確認 | CWE-400 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a user could cause uncontrolled resource consumption by exhausting the DRM VMA offset a |
| CVE-2026-47568 | Awaiting Analysis | 未確認 | CWE-400 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could cause uncontrolled kernel log generation by repeatedly invoking an interfac |
| CVE-2026-47569 | Awaiting Analysis | 未確認 | CWE-843 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could cause a type confusion via a handle recycle race. A successful exploit of t |
| CVE-2026-47570 | Awaiting Analysis | 未確認 | CWE-427 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the CUDA driver where an attacker could cause a library to be loaded from an uncontrolled search path. A successfu |
| CVE-2026-47571 | Awaiting Analysis | 未確認 | CWE-863 | NVIDIA GPU Display Driver for Windows contains a vulnerability in kernel-mode escape handling where an attacker with local access could bypass an authorization check that is intend |
| CVE-2026-47572 | Awaiting Analysis | 未確認 | CWE-843 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could cause type confusion. A successful exploit of this vulnerability might lead |
| CVE-2026-47573 | Awaiting Analysis | 未確認 | CWE-787 | NVIDIA NVAPI for Windows contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, den |
| CVE-2026-47574 | Awaiting Analysis | 未確認 | CWE-669 | NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability where an attacker could cause incorrect resource transfer between spheres. A successful exploit of this vulnerabi |
| CVE-2026-47575 | Awaiting Analysis | 未確認 | CWE-787 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the display driver DIAG escape handler where a local unprivileged attacker may cause an integer overflow and out-o |
| CVE-2026-47576 | Awaiting Analysis | 未確認 | CWE-125 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module through which an attacker might initiate an out-of-bounds read. Successful exploitation of this |
| CVE-2026-47577 | Awaiting Analysis | 未確認 | CWE-190 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker could cause an incorrect comparison. A successful exploit of this vulnerabilit |
| CVE-2026-47578 | Awaiting Analysis | 未確認 | CWE-131 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an attacker could cause an incorrect buffer size calculation. A successful exploit of |
| CVE-2026-47579 | Awaiting Analysis | 未確認 | CWE-416 | The NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode driver through which a user might trigger a use-after-free condition. Successful exploitation |
| CVE-2026-47580 | Awaiting Analysis | 未確認 | CWE-862 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker could cause a missing authorization issue. A successful exploit of this vulner |
| CVE-2026-47581 | Awaiting Analysis | 未確認 | CWE-667 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where a user could cause improper locking. A successful exploit of this vulnerability might lead |
| CVE-2026-47582 | Awaiting Analysis | 未確認 | CWE-787 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability |
| CVE-2026-47583 | Awaiting Analysis | 未確認 | CWE-843 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker could cause type confusion. A successful exploit of this vulnerability might l |
| CVE-2026-47584 | Awaiting Analysis | 未確認 | CWE-476 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker with local access could cause a NULL pointer dereference. A successful exploit |
| CVE-2026-47585 | Awaiting Analysis | 未確認 | CWE-191 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker could cause an integer underflow. A successful exploit of this vulnerability m |
| CVE-2026-47586 | Awaiting Analysis | 未確認 | CWE-416 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel module where an attacker could cause a use-after-free. A successful exploit of this vulnerabi |
| CVE-2026-47587 | Awaiting Analysis | 未確認 | CWE-416 | NVIDIA GPU Display Driver for Linux contains a vulnerability where an unprivileged user could cause a use-after-free. A successful exploit of this vulnerability might lead to code |
| CVE-2026-47588 | Awaiting Analysis | 未確認 | CWE-416 | NVIDIA GPU Display Driver for Linux contains a vulnerability where an unprivileged user could cause a use-after-free condition by issuing a sequence of driver commands. A successfu |
| CVE-2026-47589 | Awaiting Analysis | 未確認 | CWE-416 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user may cause a use-after-free condition by issuing a sequence of driver commands. A |
| CVE-2026-47590 | Awaiting Analysis | 未確認 | CWE-416 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user may cause a use-after-free condition by issuing a sequence of driver commands. A |
| CVE-2026-47591 | Awaiting Analysis | 未確認 | CWE-863 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could bypass read-only memory protection due to incorrect authoriza |
| CVE-2026-47592 | Awaiting Analysis | 未確認 | CWE-125 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause an out-of-bounds read. A successful exploit |
| CVE-2026-47593 | Awaiting Analysis | 未確認 | CWE-121 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an unprivileged user can cause an out-of-bounds write. A successful exploit of this vu |
| CVE-2026-47594 | Awaiting Analysis | 未確認 | CWE-416 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user may cause a use-after-free condition by issuing a sequence of driver commands. A |
| CVE-2026-47595 | Awaiting Analysis | 未確認 | CWE-281 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can write to read-only memory because the memory's permissions are |
| CVE-2026-47596 | Awaiting Analysis | 未確認 | CWE-281 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can write to read-only memory because the memory's permissions are |
| CVE-2026-47597 | Awaiting Analysis | 未確認 | CWE-416 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the open-source kernel module Resource Server where an unprivileged local user could cause a use-after-f |
| CVE-2026-47598 | Awaiting Analysis | 未確認 | CWE-416 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module event delivery path where an unprivileged local user could cause a use-after-free thro |
| CVE-2026-47599 | Awaiting Analysis | 未確認 | CWE-281 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module where an unprivileged local user could cause improper preservation of memory access pe |
| CVE-2026-47600 | Awaiting Analysis | 未確認 | CWE-908 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an error-handling path could operate on an improperly initialized resource. |
| CVE-2026-47601 | Awaiting Analysis | 未確認 | CWE-787 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the open-source kernel module DMA-BUF import path where an unprivileged local user could cause improper |
| CVE-2026-47602 | Awaiting Analysis | 未確認 | CWE-119 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user can cause the driver to dereference an untrusted pointer. A su |
| CVE-2026-47603 | Awaiting Analysis | 未確認 | CWE-862 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel state due to missing |
| CVE-2026-47604 | Awaiting Analysis | 未確認 | CWE-862 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel state due to missing |
| CVE-2026-47625 | Awaiting Analysis | 未確認 | CWE-862 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could abuse missing authorization. A successful exploit of this vulnerability might lead to info |
| CVE-2026-47679 | Deferred | 未確認 | CWE-22 | GLPI is a free asset and IT management software package. From 10.0.0 until 10.0.26 and 11.0.8, any logged-in GLPI user can exploit insufficient path validation in the profile-pictu |
| CVE-2026-47680 | Deferred | 未確認 | CWE-23 | The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In version |
| CVE-2026-47701 | Awaiting Analysis | 未確認 | CWE-200 | The OpenTelemetry Operator is a Kubernetes Operator for the OpenTelemetry Collector. Prior to 0.152.0, cmd/otel-allocator TargetAllocator instances with targetAllocator.prometheusC |
| CVE-2026-47773 | Awaiting Analysis | 未確認 | CWE-131, CWE-787 | ArduinoBLE enables Bluetooth Low Energy connectivity on certain Arduino models. Versions prior to 2.0.2 contain a missing bounds check in the ATT layer write request handler that a |
| CVE-2026-47780 | Deferred | 未確認 | CWE-20 | free5GC is an open-source implementation of the 5G core network. In 4.2.3 and earlier, HandleCreateEeSubscriptions and HandleQueryeesubscriptions in free5gc/udr internal/sbi/api_da |
| CVE-2026-47839 | Awaiting Analysis | 未確認 | CWE-284 | A vulnerability allows users authenticating through a federated OIDC provider to obtain the uaa.admin scope despite operators restricting that provider through externalGroupsWhitel |
| CVE-2026-4792 | Deferred | 未確認 | CWE-862 | The Bread plugin for WordPress is vulnerable to information exposure in versions up to and including 2.9.12. This is due to the lack of authentication and authorization checks on t |
| CVE-2026-48019 | Awaiting Analysis | 未確認 | CWE-93 | Laravel is a web application framework. Prior to versions 12.60.0 and 13.10.0, a CRLF injection vulnerability in Laravel's email validation, in combination with how Symfony Mailer |
| CVE-2026-4806 | Deferred | 未確認 | CWE-862 | The Custom Thank You Page for WooCommerce plugin for WordPress is vulnerable to unauthorized access and loss of data due to a missing capability check on the save_option() function |
| CVE-2026-48070 | Deferred | 未確認 | CWE-22 | Docmost is open-source collaborative wiki and documentation software. Prior to 0.80.1, authenticated users can store attacker-controlled avatarUrl values that are later reused by a |
| CVE-2026-48072 | Deferred | 未確認 | CWE-22 | Docmost is open-source collaborative wiki and documentation software. Prior to 0.80.1, the public avatar and logo image endpoint accepts attacker-controlled fileName path segments |
| CVE-2026-48073 | Deferred | 未確認 | CWE-639 | Docmost is open-source collaborative wiki and documentation software. From 0.70.0 until 0.80.1, a low-privileged authenticated user who can edit an exportable page can embed a forg |
| CVE-2026-48100 | Deferred | 未確認 | CWE-349 | Payy is an Ethereum L2 zk-rollup for privacy preserving and regulatory compliant transactions. Prior to version 1.3.0, agg_agg forwards the compacted message stream from its inner |
| CVE-2026-4813 | Deferred | 未確認 | CWE-94 | A vulnerability in the Lutece Core XSL export management module up to version 7.1.7, which allows authenticated administrators to execute code remotely. The XML/XSLT processing con |
| CVE-2026-48273 | Analyzed | 未確認 | CWE-95 | ColdFusion is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability that could result in arbitrary code execution in t |
| CVE-2026-48361 | Analyzed | 未確認 | CWE-79 | Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Maliciou |
| CVE-2026-48482 | Deferred | 未確認 | CWE-22 | GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, a form administrator can use Form import with a crafted illustration or scene identifier that tra |
| CVE-2026-48486 | Deferred | 未確認 | CWE-190 | Signum Node is a HDD-mined cryptocurrency using an energy efficient and fair Proof-of-Commitment (PoC+) consensus algorithm. Prior to version 3.9.9, an integer overflow in BlockSer |
| CVE-2026-48490 | Deferred | 未確認 | CWE-120 | ArduinoCore-avr contains the source code and configuration files of the Arduino AVR Boards platform. A vulnerability in versions prior to 1.8.8 allows an attacker to trigger a stac |
| CVE-2026-48496 | Awaiting Analysis | 未確認 | CWE-770 | OpenTelemetry eBPF Profiler is a production-scale agent for profiling applications across multiple programming languages. Starting in version 0.0.202527 and prior to version 0.0.20 |
| CVE-2026-48521 | Analyzed | 未確認 | CWE-476 | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's ProdClusterManagerFactory::allocateConn |
| CVE-2026-48540 | Deferred | 未確認 | CWE-79 | Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers |
| CVE-2026-48541 | Deferred | 未確認 | CWE-79 | Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers |
| CVE-2026-48542 | Deferred | 未確認 | CWE-79 | Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers |
| CVE-2026-48543 | Deferred | 未確認 | CWE-79 | Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers |
| CVE-2026-48707 | Deferred | 未確認 | CWE-918 | InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Server-Side Request Forgery (SSRF) vulnerability in the file upload functionality (` |
| CVE-2026-48717 | Awaiting Analysis | 未確認 | CWE-285 | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, AuthorizationCodeGrantTypeHandler requires a code_verifier only when the realm-wide codeVerifierE |
| CVE-2026-48722 | Awaiting Analysis | 未確認 | CWE-276, CWE-732 | Nextflow is a DSL for data-driven computational pipelines. From 25.09.2-edge until 25.10.6 and 26.04.3, nextflow auth login writes Seqera Platform OIDC bearer tokens to ${NXF_HOME: |
| CVE-2026-48737 | Deferred | 未確認 | CWE-918 | pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, is_global_address in src/pyload/core/utils/web/check.py relies on Python's global-addr |
| CVE-2026-48785 | Awaiting Analysis | 未確認 | CWE-22 | Apptainer is an open source container platform. Prior to version 1.5.1, Image.AuthorizedPath applies plain string-prefix matching to the limit container paths directive in apptaine |
| CVE-2026-48826 | Deferred | 未確認 | CWE-269, CWE-639 | HomeBox is a home inventory and organization system. Prior to 0.26.0, HandleWipeInventory in backend/app/api/handlers/v1/v1_ctrl_actions.go authorizes POST /v1/actions/wipe-invento |
| CVE-2026-48888 | Deferred | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in Automattic WooCommerce allows HTTP DoS. This issue affects WooCommerce: from n/a before 11.1.0. |
| CVE-2026-48932 | Awaiting Analysis | 未確認 | CWE-444 | A flaw in Node.js HTTP client can cause a request desynchronization for Node.js-based forwarding proxies that rebuild outbound headers from the visible `IncomingMessage` headers wh |
| CVE-2026-48974 | Deferred | 未確認 | CWE-841, CWE-862 | HomeBox is a home inventory and organization system. Prior to 0.26.0, POST /v1/groups/members invokes HandleGroupMemberAdd and GroupService.AddMember using a caller-supplied userID |
| CVE-2026-48975 | Deferred | 未確認 | CWE-639 | HomeBox is a home inventory and organization system. Prior to 0.26.0, MaintenanceEntryRepository.Update and MaintenanceEntryRepository.Delete in backend/internal/data/repo/repo_mai |
| CVE-2026-48976 | Deferred | 未確認 | CWE-522, CWE-639 | HomeBox is a home inventory and organization system. Prior to 0.26.0, NotifierRepository.Update in backend/internal/data/repo/repo_notifier.go updates a notifier through UpdateOneI |
| CVE-2026-48977 | Awaiting Analysis | 未確認 | CWE-123, CWE-1284, CWE-823 | OpenSlide is a C library for reading whole slide image files. From 3.4.1 until 4.0.1, OpenSlide's parse_level0_xml() processing in src/openslide-vendor-ventana.c accepts nonpositiv |
| CVE-2026-48987 | Deferred | 未確認 | CWE-400, CWE-401, CWE-770 | pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, EventManager in src/pyload/core/managers/event_manager.py appends a Client object to t |
| CVE-2026-49030 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security iss | |
| CVE-2026-49117 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-49118 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-49137 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-49153 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-49154 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-49155 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-49156 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-4921 | Analyzed | 未確認 | CWE-209 | IBM Guardium Data Protection 12.2 could allow an administrative user to obtain sensitive information when a detailed technical error message is returned in the browser. This inform |
| CVE-2026-49243 | Deferred | 未確認 | CWE-79 | Webmin is a web-based system administration tool for Unix-like servers. Prior to version 2.650, Webmin users who click on a malicious link to their server are vulnerable to this XS |
| CVE-2026-49249 | Deferred | 未確認 | CWE-400, CWE-770 | Boruta is a standalone authorization server that aims to implement OAuth 2.0 and Openid Connect up to decentralized identity specifications. Prior to version 0.10.0, BorutaIdentity |
| CVE-2026-49250 | Deferred | 未確認 | CWE-407 | Conform, a type-safe form validation library, allows the parsing of nested objects in the form of object.property. From 1.8.0 until 1.19.4, the parseSubmission future API in packag |
| CVE-2026-49254 | Deferred | 未確認 | CWE-200, CWE-306 | Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.4.4, manager/router/router.go registers GET /api/v1/oauth and GET /api/v1/oauth/:i |
| CVE-2026-49292 | Deferred | 未確認 | CWE-862 | Kiwi TCMS is an open source test management system. Prior to 16.0, the unauthenticated /init-db/ page handled by InitDBView in tcms/core/views.py remains reachable after initial se |
| CVE-2026-49309 | Deferred | 未確認 | CWE-264 | Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-49310 | Deferred | 未確認 | CWE-264 | Permission control vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-49311 | Deferred | 未確認 | CWE-275 | Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-49312 | Deferred | 未確認 | CWE-264 | Permission control vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-49313 | Deferred | 未確認 | CWE-264 | Permission control vulnerability in the app lock module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-49314 | Deferred | 未確認 | CWE-125 | OOB write vulnerability in the rendering and composition module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-49315 | Deferred | 未確認 | CWE-264 | DoS vulnerability in the input device module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-49329 | Awaiting Analysis | 未確認 | CWE-407 | A flaw was found in openshift/oauth-server. The OAuth login and error page endpoints pass the unauthenticated Accept-Language header to golang.org/x/text/language.ParseAcceptLangua |
| CVE-2026-49362 | Analyzed | 未確認 | CWE-306 | An unauthenticated remote attacker can create arbitrary durable queues via the CORE protocol, leading to unauthorized broker state manipulation and potential denial of service. Th |
| CVE-2026-49363 | Analyzed | 未確認 | CWE-306 | An unauthenticated remote attacker connecting with the CORE protocol can discover cluster node details by sending a SUBSCRIBE_TOPOLOGY request prior to authentication. This issu |
| CVE-2026-49364 | Analyzed | 未確認 | CWE-306 | An unauthenticated network-adjacent attacker can leverage discovery to capture cluster administrative credentials during the initial cluster connection handshake. This issue affec |
| CVE-2026-49400 | Deferred | 未確認 | CWE-502 | October System provides the system module for October Content Management System. Prior to versions 3.7.17 and 4.2.21, the backend `SessionMaker` trait stored widget session state a |
| CVE-2026-49439 | Deferred | 未確認 | CWE-862 | OpenRemote is an open-source internet-of-things platform. Prior to version 1.24.1, the predicted datapoint write endpoint allows users with only `read:assets` privileges to write p |
| CVE-2026-49446 | Deferred | 未確認 | CWE-285, CWE-290 | Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as a server manager. Prior to 0.22.19, tokenMiddleware in src/p |
| CVE-2026-49449 | Deferred | 未確認 | CWE-200, CWE-522, CWE-829 | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. From 1.4.0 until 3.7.2, packages/renderer/MdToHtml/rules/katex.ts enables |
| CVE-2026-4945 | Deferred | 未確認 | CWE-639 | The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and inclu |
| CVE-2026-49450 | Deferred | 未確認 | CWE-345, CWE-353, CWE-494 | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Desktop for Windows omits publisherName from packag |
| CVE-2026-49453 | Deferred | 未確認 | CWE-20, CWE-22 | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.6.15 and 3.7.2, Joplin accepts synchronized resource metadata w |
| CVE-2026-49455 | Deferred | 未確認 | CWE-352 | Waku is the minimal React framework. Prior to version 1.0.0-beta.1, Waku's RSC request dispatcher invokes server actions without validating the request's Origin (or Sec-Fetch-Site) |
| CVE-2026-49456 | Deferred | 未確認 | CWE-601 | Waku is the minimal React framework. Prior to version 1.0.0-beta.1, the unstable_redirect() helper exported from waku/router/server (packages/waku/src/router/define-router.tsx:156– |
| CVE-2026-49462 | Deferred | 未確認 | CWE-1188, CWE-200 | NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and partner organizations. In versions up to |
| CVE-2026-49463 | Deferred | 未確認 | CWE-200, CWE-285 | NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and partner organizations. The `nl.nl-portal |
| CVE-2026-49464 | Deferred | 未確認 | CWE-639 | NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and partner organizations. The `nl.nl-portal |
| CVE-2026-49469 | Deferred | 未確認 | CWE-90 | GLPI is a free asset and IT management software package. From 0.70 until 10.0.26 and 11.0.8, an authenticated hotliner or technician can submit crafted criteria through the user im |
| CVE-2026-49470 | Deferred | 未確認 | CWE-307 | GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, the time-based one-time password verification endpoint does not limit failed submissions per user |
| CVE-2026-49509 | Deferred | 未確認 | CWE-125 | Out-of-bounds read vulnerability in Samsung Opensource rLottie allows Overread Buffers. This issue affects rLottie: 25648aef19187b3f87f4d9420b8d761453ad4630. |
| CVE-2026-49810 | Awaiting Analysis | 未確認 | CWE-532 | Dell Command Powershell Provider (DCPP), versions prior to 2.10.2 contain an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local ac |
| CVE-2026-49811 | Awaiting Analysis | 未確認 | CWE-732 | Dell Command | Monitor (DCM), versions prior to 10.13.2, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access |
| CVE-2026-49830 | Awaiting Analysis | 未確認 | CWE-20 | DSpace open source software is a repository application which provides durable access to digital resources. Prior to versions 7.6.7, 8.4, 9.3, and 10.0, when ingesting an aggregate |
| CVE-2026-49831 | Awaiting Analysis | 未確認 | CWE-22 | DSpace open source software is a repository application which provides durable access to digital resources. Prior to versions 7.6.7, 8.4, 9.3, and 10.0, the Curation Task feature a |
| CVE-2026-49832 | Awaiting Analysis | 未確認 | CWE-94 | DSpace open source software is a repository application which provides durable access to digital resources. From versions 8.0-rc1 to before 8.4, versions 9.0-rc1 to before 9.3, and |
| CVE-2026-49833 | Awaiting Analysis | 未確認 | CWE-22 | DSpace open source software is a repository application which provides durable access to digital resources. From versions 8.0-rc1 to before 8.4, 9.0-rc1 to before 9.3, and 10-rc1 t |
| CVE-2026-49836 | Deferred | 未確認 | CWE-22, CWE-73 | psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.17.1, `SmartObject.save()` writes an embedded smart object to a path taken verbatim fro |
| CVE-2026-49837 | Deferred | 未確認 | CWE-125 | GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. Versions prior to 4.6.0 contain a BGP OPEN capability parsing issue where sever |
| CVE-2026-49838 | Deferred | 未確認 | CWE-129 | GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. Prior to version 4.7.0, GoBGP accepts a zero-length AS_PATH during UPDATE decod |
| CVE-2026-49846 | Deferred | 未確認 | CWE-22, CWE-697 | libks provides foundational support for signalwire C products. Prior to version 2.0.11, `clean_uri()` in libks's HTTP request parser fails to reject URIs whose path has more segmen |
| CVE-2026-49850 | Deferred | 未確認 | CWE-22, CWE-98 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane exposes Invoices::delete() and Invoices::delete_inv |
| CVE-2026-49865 | Deferred | 未確認 | CWE-918 | Kimai is an open-source time tracking application. Versions prior to 2.58.0 contain a server-side request forgery vulnerability in their invoice PDF preview and generation workflow |
| CVE-2026-49879 | Analyzed | 未確認 | CWE-787 | In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privil |
| CVE-2026-49881 | Analyzed | 未確認 | CWE-693 | In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege with |
| CVE-2026-49882 | Analyzed | 未確認 | CWE-122 | In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution |
| CVE-2026-49883 | Analyzed | 未確認 | CWE-269 | In checkReadPermission of PermissionsManager.java, there is a possible way to monitor sensitive device state data due to a missing permission check. This could lead to local inform |
| CVE-2026-49884 | Analyzed | 未確認 | CWE-120 | In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional |
| CVE-2026-49887 | Analyzed | 未確認 | CWE-288 | In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a possible unauthorized app update due to a permissions bypass. This could lead to local escalation of p |
| CVE-2026-49895 | Analyzed | 未確認 | CWE-120 | In get_eht_operation_channel_width of ieee802_11_common.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote (proximal/adjacent) in |
| CVE-2026-49918 | Analyzed | 未確認 | CWE-787 | In multiple functions, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges |
| CVE-2026-49919 | Analyzed | 未確認 | CWE-190 | In tt_face_colr_blend_layer of ttcolr.c, there is a possible remote code execution due to an integer overflow. This could lead to local escalation of privilege with no additional e |
| CVE-2026-49921 | Analyzed | 未確認 | CWE-122 | In multiple locations, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges neede |
| CVE-2026-49927 | Analyzed | 未確認 | CWE-190 | In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges |
| CVE-2026-49932 | Analyzed | 未確認 | CWE-122 | In parseParts of PduParser.java, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution |
| CVE-2026-49947 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-49992 | Deferred | 未確認 | CWE-352 | Kimai is an open-source time tracking application. Versions prior to 2.58.0 contain authenticated cross-site request forgery issues in their default team creation shortcuts for pro |
| CVE-2026-49994 | Deferred | 未確認 | CWE-306, CWE-862 | Bluehood monitors local bluetooth activity. Prior to version 0.7.1, when auth_enabled is set in Bluehood, only the HTML page handlers enforced session validation. The /api/* handle |
| CVE-2026-49995 | Deferred | 未確認 | CWE-79 | Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to 2.17.2, the newsletter cron field stored in the newsletters table is inserted by data/interf |
| CVE-2026-50006 | Deferred | 未確認 | CWE-22, CWE-284, CWE-434, CWE-73, CWE-862 | Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, anyquery server forwards unauthenticated SQL from its MySQL-compatible server port to SQLite without restric |
| CVE-2026-50013 | Deferred | 未確認 | CWE-362, CWE-820 | Hoverfly is an open source API simulation tool. Prior to version 1.12.8, when Hoverfly is running in Diff mode, the `AddDiff()` function writes to the shared `responsesDiff` map wi |
| CVE-2026-50018 | Deferred | 未確認 | CWE-400, CWE-770 | Hoverfly is an open source API simulation tool. Prior to version 1.12.8, remote post-serve actions use `http.DefaultClient` without any timeout configuration. When the remote endpo |
| CVE-2026-50022 | Deferred | 未確認 | CWE-441 | Metacat is data repository software that helps researchers preserve, share, and discover data. Prior to 3.4.2, MetacatSolrIndex.query forwards the client-controlled qt parameter th |
| CVE-2026-50024 | Deferred | 未確認 | CWE-22, CWE-23 | GitHacker is a tool that restores Git repositories from exposed .git directories. In 1.1.7 and earlier, add_head_file_tasks parses an attacker-controlled ref path from .git/HEAD an |
| CVE-2026-50025 | Deferred | 未確認 | CWE-200, CWE-306, CWE-346, CWE-352, CWE-862 | Mousehole is a background service to update a seedbox IP for MAM and web app to manage it. Prior to version 0.4.05, Mousehole's HTTP/WebSocket management boundary is reachable with |
| CVE-2026-50093 | Deferred | 未確認 | CWE-434 | A vulnerability has been identified in Siveillance Control Pro V3.0 (All versions < V3.0.12.2173), Siveillance Control Pro V4.0 (All versions < V4.0.9.2178), Siveillance Control V3 |
| CVE-2026-50125 | Deferred | 未確認 | CWE-400 | MKP is a Model Context Protocol server for Kubernetes. Prior to 0.4.1, cmd/server/main.go exposes the default HTTP endpoint and pkg/mcp/server.go registers the unauthenticated get_ |
| CVE-2026-50157 | Awaiting Analysis | 未確認 | CWE-598 | Auth0 Symfony is a Symfony SDK for Auth0 Authentication and Management APIs. From 5.0.0-BETA0 until 5.9.0, the Authorizer::authenticate() and Authorizer::supports() paths in the Au |
| CVE-2026-50158 | Deferred | 未確認 | CWE-73 | yutu is an AI-powered toolkit for managing and growing YouTube channels. Prior to 0.10.9, the caption-download MCP tool accepts a caller-controlled file parameter through cmd/capti |
| CVE-2026-50165 | Deferred | 未確認 | CWE-284 | alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. An Improper Access Control issue in versions prior to 2.0-M5-2605 allows an |
| CVE-2026-50166 | Awaiting Analysis | 未確認 | CWE-295 | Kuma is a modern Envoy-based service mesh that can run on every cloud across both Kubernetes and VMs. Prior to 2.7.26, 2.9.16, 2.11.14, 2.12.11, and 2.13.7, a kumactl profile manua |
| CVE-2026-50227 | Deferred | 未確認 | CWE-306, CWE-78 | An unauthenticated local attacker can connect to the MQTT broker over its localhost WebSocket endpoint in Acer NitroSense software (versions up to and including 5.2.62). This allow |
| CVE-2026-50228 | Deferred | 未確認 | CWE-489 | An unauthenticated local attacker can connect to the Electron DevTools endpoint exposed by Acer NitroSense software (versions up to and including 5.2.63) on localhost TCP port 9993 |
| CVE-2026-50270 | Awaiting Analysis | 未確認 | CWE-770 | dd-trace-java is a Datadog APM client for Java. Prior to 1.62.0, W3C baggage extraction does not enforce DD_TRACE_BAGGAGE_MAX_ITEMS, which defaults to 64, or DD_TRACE_BAGGAGE_MAX_B |
| CVE-2026-50275 | Awaiting Analysis | 未確認 | CWE-770 | The Datadog PHP Tracer provides application performance monitoring and distributed tracing for PHP. Prior to 1.19.2, ddtrace_deserialize_baggage in ext/distributed_tracing_headers. |
| CVE-2026-50276 | Awaiting Analysis | 未確認 | CWE-770 | dd-trace-rb is Datadog's client library for Ruby. Prior to 2.32.0, W3C baggage extraction does not enforce DD_TRACE_BAGGAGE_MAX_ITEMS, which defaults to 64, or DD_TRACE_BAGGAGE_MAX |
| CVE-2026-50277 | Awaiting Analysis | 未確認 | CWE-770 | dd-trace-cpp is the Datadog distributed tracing library for C++. Prior to 2.1.0, dd-trace-cpp parses incoming W3C baggage headers without enforcing DD_TRACE_BAGGAGE_MAX_ITEMS or DD |
| CVE-2026-50285 | Deferred | 未確認 | CWE-1284, CWE-770 | Pomerium is an identity and context-aware access proxy. Prior to 0.32.8, decodeQueryStringV2 in pkg/hpke/url.go performs zstd decompression of attacker-controlled data without an o |
| CVE-2026-50291 | Analyzed | 未確認 | CWE-125 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to versions 3.0.16.0 and 3.1.11.0, processin |
| CVE-2026-50349 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevat |
| CVE-2026-50547 | Deferred | 未確認 | CWE-22, CWE-98 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane's Invoices::generate_xml() method appends a databas |
| CVE-2026-50553 | Deferred | 未確認 | CWE-20, CWE-22 | Note Mark is an open-source note-taking application. Prior to version 0.19.5, Note Mark validates book and note slug values with the OpenAPI/huma tag pattern:"[a-z0-9-]+". huma com |
| CVE-2026-50554 | Deferred | 未確認 | CWE-200, CWE-285 | Note Mark is an open-source note-taking application. Prior to version 0.19.5, GET /api/books/{bookID}/notes is an unauthenticated endpoint that accepts a "deleted" query parameter. |
| CVE-2026-50572 | Analyzed | 未確認 | CWE-416 | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's HTTP external-authorization client can |
| CVE-2026-50603 | Deferred | 未確認 | CWE-321 | A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encry |
| CVE-2026-50604 | Deferred | 未確認 | CWE-306 | A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. The socket handshake process does not properly require authentic |
| CVE-2026-50605 | Deferred | 未確認 | CWE-284 | A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. Insufficient access controls within a privileged service may all |
| CVE-2026-50606 | Deferred | 未確認 | CWE-321 | A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES e |
| CVE-2026-50607 | Deferred | 未確認 | CWE-668 | A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. A WebSocket service was configured to listen on all network |
| CVE-2026-50608 | Deferred | 未確認 | CWE-306 | A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The WebSocket handshake process does not properly require au |
| CVE-2026-50609 | Deferred | 未確認 | CWE-284 | A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. Insufficient access controls within a privileged Named Pipe |
| CVE-2026-50610 | Deferred | 未確認 | CWE-284 | A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense due to insufficient access controls in a privileged service. |
| CVE-2026-50894 | Deferred | 未確認 | CWE-434 | easyadmin v2.0.2.2 is vulnerable to Unrestricted Upload of File with Dangerous Type in the background management interface which allows authenticated remote attackers to execute ar |
| CVE-2026-51133 | Deferred | 未確認 | CWE-79 | Cross Site Scripting vulnerability in za-internet GmbH C-MOR Video Surveillance <= V6.0104 allows a remote attacker to execute arbitrary code via the size parameter in ptzpreset.pm |
| CVE-2026-51134 | Deferred | 未確認 | CWE-22 | The C-MOR Video Surveillance web interface (up to version 6.0104) is vulnerable to Path Traversal via the 'cam' parameter in show-movies.pml. |
| CVE-2026-5132 | Analyzed | 未確認 | CWE-409 | Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 fail to limit size of unpacked SDP messages compressed with zlib, which allows attacke |
| CVE-2026-51568 | Deferred | 未確認 | CWE-22 | modelscope Agentscope v1.0.18-v1.0.0 is vulnerable to Path Traversal in write_text_file. |
| CVE-2026-51570 | Deferred | 未確認 | CWE-22 | modelscope Agentscope v1.0.0-v1.0.8 is vulnerable to Path Traversal in insert_text_file. |
| CVE-2026-51741 | Deferred | 未確認 | CWE-284 | Incorrect access control in the clearDiagnosisLog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to erase diagnosis logs via sending a crafted POST |
| CVE-2026-51742 | Deferred | 未確認 | CWE-284 | Incorrect access control in the discoverWan function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to trigger WAN discovery logic via sending a crafted POST |
| CVE-2026-51743 | Deferred | 未確認 | CWE-284 | Incorrect access control in the guest_wifi_sync function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to disable guest virtual AP interfaces via sending a |
| CVE-2026-51744 | Deferred | 未確認 | CWE-284 | Incorrect access control in the recv_mesh_info_sync function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to force mesh configuration synchronization from |
| CVE-2026-51745 | Deferred | 未確認 | CWE-284 | Incorrect access control in the updatePriStaList function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to refresh the primary station list via sending a cr |
| CVE-2026-51747 | Deferred | 未確認 | CWE-284 | Incorrect access control in the keepAlive function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to emit indirect mesh heartbeat information toward the mast |
| CVE-2026-51748 | Deferred | 未確認 | CWE-284 | Incorrect access control in the sendStaticInfoToMaster function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to update stored slave inventory records via s |
| CVE-2026-51750 | Deferred | 未確認 | CWE-284 | Incorrect access control in the updatePriChannel function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to rescan and switch the primary mesh channel via se |
| CVE-2026-51751 | Deferred | 未確認 | CWE-284 | Incorrect access control in the delSlaveDevice function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove a specified slave device from local mesh man |
| CVE-2026-51752 | Deferred | 未確認 | CWE-284 | Incorrect access control in the staticInfoSend function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to trigger static information reporting to the configu |
| CVE-2026-51754 | Deferred | 未確認 | CWE-284 | Incorrect access control in the updateSlaveIpList function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to overwrite the slave IP inventory state via sendi |
| CVE-2026-51756 | Deferred | 未確認 | CWE-284 | Incorrect access control in the meshSlaveUpgfw function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to start firmware flashing using existing upgrade file |
| CVE-2026-51757 | Deferred | 未確認 | CWE-284 | Incorrect access control in the meshSlaveUpdate function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to start a firmware download or flash workflow on the |
| CVE-2026-51760 | Deferred | 未確認 | CWE-284 | Incorrect access control in the informSyncUpgfw function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to mass-trigger firmware update activity across mesh |
| CVE-2026-51761 | Deferred | 未確認 | CWE-284 | Incorrect access control in the updateLanIp function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to refresh the LAN address state via sending a crafted MQ |
| CVE-2026-51762 | Deferred | 未確認 | CWE-284 | Incorrect access control in the meshInfoKick function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to kick or clean stale mesh information/state and trigge |
| CVE-2026-51763 | Deferred | 未確認 | CWE-284 | Incorrect access control in the freeStaClient function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to forcibly disconnect wireless clients via sending a c |
| CVE-2026-51764 | Deferred | 未確認 | CWE-284 | Incorrect access control in the recvSlaveCloudCheckStatus function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to overwrite cloud-result tracking files vi |
| CVE-2026-51765 | Deferred | 未確認 | CWE-284 | Incorrect access control in the recvIndirectMeshInfo function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to insert or replace mesh neighbor records via s |
| CVE-2026-51766 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setDevReboot function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reboot the local device and, on a master, fan out reb |
| CVE-2026-51767 | Deferred | 未確認 | CWE-284 | Incorrect access control in the recvClearPairCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reset pairing state and reboot the device via sen |
| CVE-2026-51768 | Deferred | 未確認 | CWE-284 | Incorrect access control in the setElinkQosConfig function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to modify privileged QoS policy on the master devic |
| CVE-2026-51769 | Deferred | 未確認 | CWE-284 | Incorrect access control in the remoteCloudUpdateCheck function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to restart the cloud update check workflow via |
| CVE-2026-51770 | Deferred | 未確認 | CWE-284 | Incorrect access control in the sendToMasterQosConfig function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to forward attacker-controlled QoS settings to |
| CVE-2026-51772 | Awaiting Analysis | 未確認 | CWE-918 | A Server-Side Request Forgery (SSRF) vulnerability exists in the Image API (v2) of OpenStack Glance. When the show_multiple_locations configuration option is enabled in glance-api. |
| CVE-2026-51773 | Awaiting Analysis | 未確認 | CWE-918 | An issue in the VMware datastore driver of OpenStack glance_store. When an authenticated attacker provides a maliciously crafted image location URI pointing to an external server, |
| CVE-2026-51788 | Deferred | 未確認 | CWE-400 | An issue in cleverange_auth v.0.1.10 allows a remote attacker to cause a denial of service via the account_verification function and the accounts/models.py component |
| CVE-2026-51852 | Deferred | 未確認 | CWE-22 | agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.save_file_b64. The save_file_b64 method accepts user-controlle |
| CVE-2026-51853 | Deferred | 未確認 | CWE-22 | agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.__init__. The FileBrowser class initializes with the host root |
| CVE-2026-51856 | Deferred | 未確認 | CWE-94 | In agentscope 1.0.18, 1.0.19, and 1.0.19 when the RealtimeAgent session exposes execute_python_code as an available tool, a remote WebSocket user can prompt the agent to call that |
| CVE-2026-51857 | Deferred | 未確認 | CWE-94 | In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, CodeExecutionToolkit can run model-produced Python code through SubprocessInterpreter without an approval boundary. |
| CVE-2026-51858 | Deferred | 未確認 | CWE-94 | In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, TerminalToolkit.shell_exec allows prompt-driven shell command execution without an approval boundary. |
| CVE-2026-51859 | Deferred | 未確認 | CWE-22 | bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to directory traversal in save_download_file (src/backend/bisheng/core/cache/utils.py:290). |
| CVE-2026-51860 | Deferred | 未確認 | CWE-22 | bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to Directory Traversal in src/backend/bisheng/linsight/domain/task_exec.py. |
| CVE-2026-51861 | Deferred | 未確認 | CWE-94 | bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to Code Injection in src/backend/bisheng/api/v1/validate.py. |
| CVE-2026-51862 | Deferred | 未確認 | CWE-22 | DB-GPT 0.8.0 contains directory traversal in skill_upload (packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/agentic_data_api.py:40). A remote attacker can use the validated exploita |
| CVE-2026-51864 | Deferred | 未確認 | CWE-22 | DB-GPT v0.7.5 and v0.8.0 contains directory traversal in python_file_upload (packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/python_upload_api.py:42). A remote attacker can use the |
| CVE-2026-51866 | Deferred | 未確認 | CWE-94 | In DB-GPT 0.7.5 and 0.8.0, a skill uploaded through the real /api/v1/skills/upload route can later be executed through the real /api/v1/chat/react-agent flow. |
| CVE-2026-51867 | Deferred | 未確認 | CWE-284 | agentgpt v.1.0.0 is vulnerable to Incorrect Access Control in next/src/server/api/routers/agentRouter.ts. An externally reachable path accepts a caller-selected object or tenant id |
| CVE-2026-51869 | Deferred | 未確認 | CWE-284 | DB-GPT v0.8.0 sandbox API silently falls back to LocalRuntime and executes code on host. |
| CVE-2026-51870 | Deferred | 未確認 | CWE-78 | DeepTutor v1.4.0 is vulnerable to command execution in /tutorbot/agent/tools/shell.py:ExecTool.execute. |
| CVE-2026-51871 | Deferred | 未確認 | CWE-94 | Devika v1.0 is vulnerable to Code Injection in the Runner.execute function in src/agents/runner/runner.py which allows an attacker to achieve arbitrary code execution by exploiting |
| CVE-2026-51872 | Deferred | 未確認 | CWE-94 | Devika v1.0 is vulnerable to Code Injection via the Runner.run_code function in src/agents/runner/runner.py. |
| CVE-2026-51934 | Deferred | 未確認 | CWE-120 | Buffer Overflow vulnerability in Shenzhen Jixiang Tengda Technology Co., Ltd. Tenda A18 v.15.13.07.09 allows a remote attacker to execute arbitrary code via the fromSetCmdlineRun f |
| CVE-2026-51936 | Awaiting Analysis | 未確認 | CWE-89 | Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipher_export convenience function can be used to copy the contents of one attached database into another. It is most o |
| CVE-2026-51956 | Deferred | 未確認 | CWE-284 | A Broken Object Level Authorization vulnerability exists in Grashjs Atlas CMMS prior to v1.6.0. An authenticated user from one tenant can read and modify another tenant's company r |
| CVE-2026-51974 | Deferred | 未確認 | CWE-94 | An eval() injection vulnerability in the get_list function in modules/meta_parser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remote attackers to execute arbitrary Python |
| CVE-2026-51990 | Deferred | 未確認 | CWE-94 | An issue in Sogou Sogou Input Method < 16.3.0.3498 (fixed in 16.3.0.3498) allows a remote attacker to execute arbitrary code via the biz_helper.exe component |
| CVE-2026-51994 | Deferred | 未確認 | CWE-918 | mcp-remote versions 0.1.32 through 0.1.38 are vulnerable to Server-Side Request Forgery (SSRF) via the resource_metadata URL extracted from a remote MCP server's WWW-Authenticate h |
| CVE-2026-51995 | Deferred | 未確認 | CWE-200 | An issue in geelen mcp-remote 0.1.32 through 0.1.38 allows a remote attacker to obtain sensitive information via the src/lib/authorization-server-metadata.ts, src/lib/utils.ts comp |
| CVE-2026-51996 | Deferred | 未確認 | CWE-328 | An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the src/lib/utils.ts and the getServerUrlHash function |
| CVE-2026-51997 | Deferred | 未確認 | CWE-20, CWE-918, CWE-94 | An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the open() functions |
| CVE-2026-52001 | Deferred | 未確認 | CWE-200 | An issue in geelen mcp-remote 0.1.18 through 0.1.38 allows a remote attacker to obtain sensitive information via the SSE transport eventSourceInit fetch wrapper " src/lib/utils.ts |
| CVE-2026-52022 | Analyzed | 未確認 | CWE-400 | An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the IMS P-CSCF registration handling components |
| CVE-2026-52023 | Modified | 未確認 | CWE-362, CWE-415 | An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the ims_registrar_pcscf module, specifically the pcscf_save_pending/save_pending p |
| CVE-2026-52097 | Deferred | 未確認 | CWE-94 | An issue in AppFlowy 0.11.8 allows a remote attacker to execute arbitrary code via the afLaunchUri, _afLaunchLocalUri (url_launcher.dart), OpenFilex.open, localPathRegex (common_pa |
| CVE-2026-52098 | Analyzed | 未確認 | CWE-94 | An issue in Flowise 3.1.2 allows a remote attacker to execute arbitrary code via the /api/v1/prediction/<flowId> endpoint |
| CVE-2026-52111 | Deferred | 未確認 | CWE-284 | An issue in fast-note-sync-service <=2.13.7 allows a remote attacker to escalate privileges via the admin configuration endpoint exposes authTokenKey |
| CVE-2026-52130 | Analyzed | 未確認 | CWE-674 | llama.cpp b5693 and before is vulnerable to Uncontrolled Recursion in common/json-schema-to-grammar.cpp, resulting in a denial of service. |
| CVE-2026-52131 | Analyzed | 未確認 | CWE-617 | llama.cpp b5693 and before has a Reachable Assertion via the gguf_reader::read function. |
| CVE-2026-52132 | Analyzed | 未確認 | CWE-674 | llama.cpp through commit 97f06e9, when started with the --reranking flag, allows remote attackers to cause a denial of service (std::bad_alloc and HTTP 500) via a negative top_n va |
| CVE-2026-52295 | Analyzed | 未確認 | CWE-120, CWE-125 | FFmpeg before 9.0 has an out-of-bounds read because the copied extradata lacked required padding before GetBitContext-based access in libavformat/iamf_writer.c. |
| CVE-2026-52296 | Analyzed | 未確認 | CWE-125 | FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c. |
| CVE-2026-52297 | Analyzed | 未確認 | CWE-125 | FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in mov_read_iacb in libavformat/mov.c. |
| CVE-2026-52307 | Deferred | 未確認 | CWE-79 | An authenticated stored cross-site scripting (XSS) vulnerability in the Column Management component of ClassCMS 1CMS v5.6 allows attackers to execute arbitrary web scripts or HTML |
| CVE-2026-52482 | Deferred | 未確認 | CWE-200 | An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the inetd service spawns /app/sh_for_telnet |
| CVE-2026-52483 | Deferred | 未確認 | CWE-78 | The ping diagnostics and other similar functions of the MitraStar GPT-2741GNAC-N2-SV router with firmware BR_g8.10_1.11(WVK.0)b46 allow authenticated users execute arbitrary OS com |
| CVE-2026-52484 | Deferred | 未確認 | CWE-78 | An issue in MitraStar GPT-2742GX4X5v6-SV GL_g2.5_100XNT0b23_3 allows an authenticated attacker to execute arbitrary code via the /cgi-bin/device-management-utilities-internet.cgi c |
| CVE-2026-52486 | Awaiting Analysis | 未確認 | CWE-347 | An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of service via the verify function in the SIgnedDocument module |
| CVE-2026-52622 | Deferred | 未確認 | CWE-200 | An issue in Wellav Technologies Co., Ltd Wellav WES Emergency Broadcast Terminal WES100, WES270, WES280, and WES290 before 08-08-2023 allows a remote attacker to obtain sensitive i |
| CVE-2026-52630 | Deferred | 未確認 | CWE-89 | SQL Injection vulnerability in Woltlab WCF v.6.2.4 and before allows a remote attacker to updateUserOptions in UserEditor.class.php and the update action in UserAction.class.php |
| CVE-2026-5267 | Deferred | 未確認 | CWE-306 | Ciena Navigator Network Control Suite (NCS) contains an information exposure vulnerability in an event-streaming API that does not properly enforce authentication. An unauthenticat |
| CVE-2026-52691 | Deferred | 未確認 | CWE-89 | ** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Griffin Hive Metastore Module. This |
| CVE-2026-52724 | Awaiting Analysis | 未確認 | CWE-295 | Kuma is a modern Envoy-based service mesh that can run on every cloud across both Kubernetes and VMs. Prior to 2.7.26, 2.9.16, 2.11.14, 2.12.11, and 2.13.7, Universal mode kuma-dp |
| CVE-2026-52727 | Deferred | 未確認 | CWE-321 | lxc-ci contains continuous integration and image-build scripts for LXC. Prior to the 2026-05-28 Arch Linux image publication, images built from images/archlinux.yaml retain the sam |
| CVE-2026-52740 | Awaiting Analysis | 未確認 | CWE-863 | GoCD is a continuous deliver server. From 18.7.0 until 26.1.0, the Get Template Config API compares HTTP method names case-sensitively when selecting authorization filters. A lower |
| CVE-2026-52741 | Awaiting Analysis | 未確認 | CWE-80 | GoCD is a continuous deliver server. From 18.3.0 until 26.1.0, GoCD can generate unescaped tracking-tool links from commit comments when a project uses a lenient Tracking Tool regu |
| CVE-2026-52742 | Awaiting Analysis | 未確認 | CWE-863 | GoCD is a continuous deliver server. From 12.3.1 until 26.1.0, legacy routes under /go/admin/restful/* expose historical full server configuration to pipeline group administrators |
| CVE-2026-52743 | Awaiting Analysis | 未確認 | CWE-639, CWE-863 | GoCD is a continuous deliver server. Prior to 26.1.0, the internal GoCD UI /jobStatus.json API does not validate that a requested server-assigned job ID belongs to the pipeline and |
| CVE-2026-52744 | Deferred | 未確認 | CWE-862 | GoCD is a continuous deliver server. From 20.2.0 until 26.1.0, the internal GoCD UI fetch-artifact auto-suggestion API at /go/api/internal/pipelines/**/upstream does not adequately |
| CVE-2026-52745 | Deferred | 未確認 | CWE-89 | CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. Prior to 1.7.0, the POST /account-pool/page endpoint allows an auth |
| CVE-2026-52748 | Deferred | 未確認 | CWE-306 | The Kaon AR2140X router contains a vulnerability where the backup functionality is accessible without authentication. This allows an unauthenticated remote attacker to trigger a co |
| CVE-2026-52749 | Deferred | 未確認 | CWE-287 | The Kaon AR2140X router improperly issues session cookies in responses to unauthenticated HTTP requests. This vulnerability allows a remote attacker to obtain a valid session ident |
| CVE-2026-52762 | Deferred | 未確認 | CWE-1336 | YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki Bazar contains a stored Server-Side Template Injection (SSTI) vulnerability in the semantic template featur |
| CVE-2026-52763 | Deferred | 未確認 | CWE-1287, CWE-89 | YesWiki is a wiki system written in PHP. Prior to version 4.6.6, the recentchanges action (actions/recentchanges.php) accepts a period argument from two disjoint parameter spaces. |
| CVE-2026-52766 | Deferred | 未確認 | CWE-276, CWE-862 | YesWiki is a wiki system written in PHP. Prior to version 4.6.6, the {{erasespamedcomments}} wiki action (actions/EraseSpamedCommentsAction.php) accepts a suppr[] array from POST a |
| CVE-2026-52767 | Deferred | 未確認 | CWE-347 | YesWiki is a wiki system written in PHP. From version 4.6.2 to before version 4.6.6, HttpSignatureService::verifySignature() checks the result of PHP's openssl_verify() with a loos |
| CVE-2026-52769 | Deferred | 未確認 | CWE-918 | YesWiki is a wiki system written in PHP. From version 4.6.2 to before version 4.6.6, the POST /api/forms/{formId}/actor/inbox route - exposed publicly with acl:"public" - accepts a |
| CVE-2026-52770 | Deferred | 未確認 | CWE-89 | YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki’s public Bazar entry-listing APIs are vulnerable to unauthenticated SQL injection in numeric query / querie |
| CVE-2026-52771 | Deferred | 未確認 | CWE-89 | YesWiki is a wiki system written in PHP. From version 4.2.0 to before version 4.6.6, ApiController::deletePage() interpolates a page tag retrieved from the database into a DELETE F |
| CVE-2026-52772 | Deferred | 未確認 | CWE-116, CWE-79 | YesWiki is a wiki system written in PHP. Prior to version 4.6.6, Bazar form-field templates still apply |raw('html') to field.label / field.hint in attribute and label-body context |
| CVE-2026-52773 | Deferred | 未確認 | CWE-80 | YesWiki is a wiki system written in PHP. From version 4.1.0 to before version 4.6.6, YesWiki's archived-revision view reflects the time GET parameter into a hidden HTML input in ha |
| CVE-2026-52774 | Deferred | 未確認 | CWE-80 | YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki's Bazar widget handler reflects the id GET parameter into HTML attributes using strip_tags() only. Because |
| CVE-2026-52775 | Deferred | 未確認 | CWE-89 | YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki through the latest development branch contains a SQL injection vulnerability in ReactionManager::deleteUser |
| CVE-2026-52777 | Deferred | 未確認 | CWE-352, CWE-502 | YesWiki is a wiki system written in PHP. Prior to version 4.6.6, there is an authenticated PHP object injection vulnerability in BazarImportAction via unserialize. This issue has b |
| CVE-2026-52819 | Deferred | 未確認 | CWE-863 | Kimai is an open-source time tracking application. Prior to 2.57.0, the GET /api/timesheets list endpoint accepts user and users[] target identifiers from a caller with view_other_ |
| CVE-2026-52820 | Deferred | 未確認 | CWE-639 | Kimai is an open-source time tracking application. Prior to 2.57.0, PATCH /api/timesheets/{id} and POST /api/timesheets accept a user-controlled project identifier through Timeshee |
| CVE-2026-52821 | Deferred | 未確認 | CWE-639, CWE-862 | Kimai is an open-source time tracking application. Prior to 2.57.0, GET or POST requests to /en/admin/activity/create/{project} and /en/admin/project/create/{customer} require only |
| CVE-2026-52822 | Deferred | 未確認 | CWE-285, CWE-862 | Kimai is an open-source time tracking application. Prior to 2.58.0, PATCH /api/timesheets/{id}/restart, PATCH /api/timesheets/{id}/duplicate, and the web duplicate workflow can der |
| CVE-2026-52823 | Deferred | 未確認 | CWE-352 | Kimai is an open-source time tracking application. Prior to 2.58.0, TimesheetController exposes GET /api/timesheets/{id}/stop and GET /api/timesheets/{id}/restart, which reuse an a |
| CVE-2026-52824 | Deferred | 未確認 | CWE-1188 | Kimai is an open-source time tracking application. Prior to 2.58.0, the official Docker image sets APP_SECRET to the public value change_this_to_something_unique in Dockerfile, and |
| CVE-2026-52825 | Deferred | 未確認 | CWE-285, CWE-862 | Kimai is an open-source time tracking application. Prior to 2.58.0, POST /api/teams/{id}/members/{userId} and POST /api/teams/{id}/activities/{activityId} verify that a teamlead ma |
| CVE-2026-52826 | Deferred | 未確認 | CWE-285, CWE-639 | Kimai is an open-source time tracking application. Prior to 2.57.0, GET or POST requests to /en/admin/project/{id}/rate/{rate}, /en/admin/customer/{id}/rate/{rate}, and /en/admin/a |
| CVE-2026-52827 | Deferred | 未確認 | CWE-287 | Kimai is an open-source time tracking application. Prior to 2.59.0, the KIMAI_SESSION cookie issued after password verification but before TOTP completion is accepted by every /api |
| CVE-2026-52828 | Deferred | 未確認 | CWE-862 | Kimai is an open-source time tracking application. Prior to 2.58.0, ExportController::createExportTemplate() and ExportController::editExportTemplate() inherit only the class-level |
| CVE-2026-52831 | Deferred | 未確認 | CWE-78 | Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.4, the Nuclio controller builds a curl invocation string for each cron trigger an |
| CVE-2026-52832 | Deferred | 未確認 | CWE-22 | Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.5, Nuclio Dashboard exposes POST /api/functions without authentication by default |
| CVE-2026-52833 | Deferred | 未確認 | CWE-94 | Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.5, Nuclio's Java runtime generates a build.gradle file during function builds usi |
| CVE-2026-52835 | Deferred | 未確認 | CWE-22, CWE-434 | Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to 2.17.2, the import_config handler and the database_file branch of import_database in plexpy/ |
| CVE-2026-52836 | Awaiting Analysis | 未確認 | CWE-125 | OpenDDS is an open source C++ implementation of the Object Management Group (OMG) Data Distribution Service (DDS). Prior to 3.34.0, a network attacker can crash a reachable OpenDDS |
| CVE-2026-52850 | Deferred | 未確認 | CWE-639, CWE-862 | Docmost is open-source collaborative wiki and documentation software. Prior to 0.90.1, an authenticated workspace member who does not belong to a private space can call the transcl |
| CVE-2026-52851 | Deferred | 未確認 | CWE-89 | Traccar is an open source GPS tracking system. Prior to 6.14.0, an authenticated, non-readonly user with access to an object usable in a permission pair can submit DELETE /api/perm |
| CVE-2026-52852 | Deferred | 未確認 | CWE-674 | Traccar is an open source GPS tracking system. Prior to 6.14.0, an authenticated user with permission to manage groups and request reports can create a cyclic group-parent hierarch |
| CVE-2026-52853 | Deferred | 未確認 | CWE-269 | Docmost is open-source collaborative wiki and documentation software. Prior to 0.90.1, an authenticated workspace ADMIN can use the workspace invitation flow to invite an external |
| CVE-2026-53459 | Deferred | 未確認 | CWE-636, CWE-755 | Bambuddy is a self-hosted print archive and management system for Bambu Lab 3D printers. Starting in version 0.1.6 and prior to version 0.2.4.4, a fail-open in the authentication c |
| CVE-2026-53493 | Awaiting Analysis | 未確認 | CWE-400, CWE-770, CWE-834 | containerd is an open-source container runtime. Prior to versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1, a crafted OCI index graph can force very high CPU/memory usage during Pul |
| CVE-2026-53495 | Awaiting Analysis | 未確認 | CWE-400 | containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd on Linux with the CRI plugin enabled can indefinitely block the drainExecSyncI |
| CVE-2026-53496 | Awaiting Analysis | 未確認 | CWE-248, CWE-755 | ExifReader is a JavaScript Exif information parser. Prior to 4.40.1, ExifReader.load() and the asynchronous file and URL loaders can pass attacker-supplied HEIC or AVIF data to the |
| CVE-2026-53534 | Awaiting Analysis | 未確認 | CWE-78 | JabRef is a desktop application for managing BibTeX and BibLaTeX libraries. Prior to 6.0-alpha.6, when jabsrv or JabRef's built-in HTTP server is enabled, the GET /better-bibtex/ca |
| CVE-2026-53554 | Deferred | 未確認 | CWE-22 | SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, the POST /api/v1/datasource/parseExcel endpoint in backend/apps/datasource/api/d |
| CVE-2026-53555 | Deferred | 未確認 | CWE-79 | SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, an authenticated uploader can submit an image/svg+xml assistant UI logo through |
| CVE-2026-53556 | Deferred | 未確認 | CWE-89 | SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, the POST /api/v1/datasource/previewData endpoint in backend/apps/datasource/crud |
| CVE-2026-53557 | Deferred | 未確認 | CWE-89 | SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, an authenticated user can supply a crafted sheet["tableName"] value in the Excel |
| CVE-2026-53581 | Awaiting Analysis | 未確認 | CWE-22, CWE-73 | OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.9 of opnsense/core and version 26.4_20 of BE/opnsense/core, a path traversal vulnerability in the N |
| CVE-2026-53600 | Deferred | 未確認 | CWE-20, CWE-843 | async-tar is a tar archive reading/writing library for async Rust. Prior to version 0.6.1, async-tar mis-applies a buffered PAX size extension to an intermediary extension header ( |
| CVE-2026-53602 | Deferred | 未確認 | CWE-285, CWE-862 | nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.7, two related authorization gaps let a host that should no longer be trusted obtain a fr |
| CVE-2026-53603 | Deferred | 未確認 | CWE-312, CWE-522 | nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.8, Operator session tokens are stored in plaintext in the operator_sessions table (the to |
| CVE-2026-53604 | Deferred | 未確認 | CWE-212, CWE-316 | nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.8, the web handler renderMobileBundle passes the real *pki.CAResolver directly into mobil |
| CVE-2026-53605 | Deferred | 未確認 | CWE-250, CWE-269 | Reachy Mini ISO for Wireless contains the necessary files to build a custom Raspberry Pi OS image for the Reachy Mini Wireless robot, using pi-gen. Prior to version 0.2.4, the Reac |
| CVE-2026-53610 | Deferred | 未確認 | CWE-79 | GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, an attacker can craft a URL for a dashboard that reflects attacker-controlled markup without suff |
| CVE-2026-53611 | Deferred | 未確認 | CWE-78 | Looking Glass is a modern, stateless network-diagnostic platform — a single self-contained Go binary that fronts a fleet of routers over SSH and exposes ping / traceroute / BGP loo |
| CVE-2026-53625 | Deferred | 未確認 | CWE-862 | GLPI is a free asset and IT management software package. From 0.70 until 10.0.26 and 11.0.8, a technician can manipulate the authtype value through the API to change another user's |
| CVE-2026-53626 | Deferred | 未確認 | CWE-639, CWE-862 | GLPI is a free asset and IT management software package. From 11.0.5 until 11.0.8, under certain conditions, permission logic can grant access to a document without confirming that |
| CVE-2026-53627 | Deferred | 未確認 | CWE-862 | GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, a low-privileged authenticated user can use the new API (v2) to perform update operations that th |
| CVE-2026-53628 | Deferred | 未確認 | CWE-285 | GLPI is a free asset and IT management software package. From 0.84 until 10.0.26 and 11.0.8, an administrator holding the Update auth and sync or Update auth, sync and 2FA right ca |
| CVE-2026-53629 | Deferred | 未確認 | CWE-89 | GLPI is a free asset and IT management software package. From 9.4.0 until 10.0.26 and 11.0.8, an attacker with the READ right on logs can craft a URL for the history tab that injec |
| CVE-2026-53635 | Deferred | 未確認 | CWE-862 | Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 59bb6d6, the view function set_course_mode_price() at lms/djangoapps/instructo |
| CVE-2026-53636 | Deferred | 未確認 | CWE-294 | Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 3a5ac85, a security vulnerability has been identified in the Open edX LMS plat |
| CVE-2026-53637 | Deferred | 未確認 | CWE-672, CWE-841 | Sylius is an Open Source eCommerce Framework on Symfony. Versions 2.0.0 through 2.0.17, 2.1.0 through 2.1.14, and 2.2.0 through 2.2.5 contain an improper workflow enforcement vulne |
| CVE-2026-53638 | Deferred | 未確認 | CWE-863 | Sylius is an Open Source eCommerce Framework on Symfony. Starting in version 2.0.0 and prior to version 2.0.18, 2.1.15, and 2.2.6, an authorization bypass vulnerability exists in t |
| CVE-2026-53639 | Deferred | 未確認 | CWE-639 | Sylius is an Open Source eCommerce Framework on Symfony. Starting in version 2.0.0 and prior to version 2.0.18, 2.1.15, and 2.2.6, the `GET /api/v2/shop/payment-requests/{hash}` an |
| CVE-2026-53649 | Deferred | 未確認 | CWE-306, CWE-352, CWE-434, CWE-942 | Joro is a web exploitation framework. Prior to version 1.1.1, Joro's default proxy mode exposes a local API on 127.0.0.1:9090 that performs no authentication and applies a wildcard |
| CVE-2026-53658 | Awaiting Analysis | 未確認 | CWE-90 | Fabric CA is a Certificate Authority for Hyperledger Fabric. Prior to 1.5.21, when fabric-ca is configured with an LDAP backend, Client.GetUser in lib/server/ldap/client.go inserts |
| CVE-2026-53659 | Deferred | 未確認 | CWE-409 | http4k is a functional toolkit for Kotlin HTTP applications. Prior to 4.51.0.0, 5.42.0.0, and 6.49.0.0, ServerFilters.GZip, RequestFilters.GunZip, and the underlying Gzip request-b |
| CVE-2026-53660 | Awaiting Analysis | 未確認 | CWE-1004, CWE-1188, CWE-1275 | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the default configuration initializes the iPlanetDirectoryPro SSO cookie with HttpOnly disabled a |
| CVE-2026-53670 | Awaiting Analysis | 未確認 | CWE-682 | PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, in the Prevail eBPF verifier, EbpfTransformer::add() silently skips of |
| CVE-2026-53671 | Awaiting Analysis | 未確認 | CWE-682 | PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, the abstract transformer in prevail treats writes through a T_CTX-type |
| CVE-2026-53679 | Rejected | 未確認 | Rejected reason: Red Hat Product Security has come to the conclusion that this CVE is not needed. | |
| CVE-2026-53681 | Rejected | 未確認 | Rejected reason: Red Hat Product Security has come to the conclusion that this CVE is not needed. | |
| CVE-2026-53682 | Awaiting Analysis | 未確認 | CWE-200, CWE-284, CWE-497 | An unauthenticated client can query the Security Domain hosts inventory via GET /ca/rest/securityDomain/hosts and receive a structured response enumerating internal PKI/CA hosts an |
| CVE-2026-53683 | Awaiting Analysis | 未確認 | CWE-601 | reset_password.html parses query string parameters and uses the 'url' parameter as a redirection target (window.location = url) after password reset, optionally delayed by a 'delay |
| CVE-2026-53706 | Awaiting Analysis | 未確認 | CWE-682 | PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, the prevail eBPF verifier accepts ALU32 ADD and SUB instructions that |
| CVE-2026-53708 | Deferred | 未確認 | CWE-350, CWE-367, CWE-918 | ContextForge is an AI gateway, registry, and proxy that provides centralized discovery, guardrails, and management for MCP, A2A, and REST or gRPC APIs. Prior to 1.0.3, the /admin/g |
| CVE-2026-53710 | Deferred | 未確認 | CWE-693, CWE-94 | MCP Context Forge is an AI gateway, registry, and proxy for MCP, A2A, REST, and gRPC APIs. Prior to 1.0.2, the python_sandbox_server in mcp-servers/python/python_sandbox_server/src |
| CVE-2026-53713 | Awaiting Analysis | 未確認 | CWE-20 | Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, to_absolute_normalized_path in i |
| CVE-2026-53714 | Awaiting Analysis | 未確認 | CWE-306 | Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, the xDS gRPC server in GatewayNa |
| CVE-2026-53715 | Awaiting Analysis | 未確認 | CWE-362 | Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, HTTPServer.ServeHTTP in internal |
| CVE-2026-53716 | Awaiting Analysis | 未確認 | CWE-789 | Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, getFileFromGZ in internal/wasm/h |
| CVE-2026-53717 | Awaiting Analysis | 未確認 | CWE-789 | Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, internal/wasm/imagefetcher.go fo |
| CVE-2026-53718 | Awaiting Analysis | 未確認 | CWE-862 | Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, an HTTPRoute can use an extensio |
| CVE-2026-53719 | Awaiting Analysis | 未確認 | CWE-476 | Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, translateSecurityPolicyForRoute |
| CVE-2026-53720 | Deferred | 未確認 | CWE-122, CWE-1284, CWE-787 | pymonocypher uses cython to wrap the Monocypher C library. Prior to version 4.0.2.8, the argon2i_32 implementation does not check the nb_blocks size. If the caller does not provide |
| CVE-2026-53728 | Deferred | 未確認 | CWE-345, CWE-601 | Medplum is a developer platform that enables development of healthcare apps. Prior to version 5.1.6, the external identity provider callback at GET /auth/external accepts attacker- |
| CVE-2026-53752 | Awaiting Analysis | 未確認 | CWE-674, CWE-770 | docx4j is an open source Java library for creating, editing, and saving OpenXML packages, including DOCX, PPTX, and XLSX files. Prior to 11.5.14, PropertyResolver and adjacent help |
| CVE-2026-53756 | Deferred | 未確認 | CWE-89 | Emlog is an open source website building system. Prior to version 2.6.16, Emlog CMS Pro contains a blind SQL injection in User_Model::getUserDataByLogin(). The $account parameter i |
| CVE-2026-53757 | Deferred | 未確認 | CWE-22 | Emlog is an open source website building system. In versions 2.6.29 and prior, the emUnZip() function extracts all ZIP entries via ZipArchive::extractTo() without validating entry |
| CVE-2026-53758 | Deferred | 未確認 | CWE-79 | Emlog is an open source website building system. In versions 2.6.29 and prior, article content is processed by Parsedown without enabling safe mode, which means raw HTML including |
| CVE-2026-53760 | Deferred | 未確認 | CWE-352 | Admidio is an open-source user management solution. In versions 5.0.11 and prior, the modules/plugins.php endpoint handles plugin installation, uninstallation, and update operation |
| CVE-2026-53761 | Deferred | 未確認 | CWE-287 | Frappe CRM is an open-source customer relationship management tool. Prior to version 1.73.0, there is an authentication bypass vulnerability via logged invitation keys in crm/api. |
| CVE-2026-53769 | Deferred | 未確認 | CWE-862, CWE-863 | Avo is a framework to create admin panels for Ruby on Rails apps. From version 2.28.0 to before version 3.32.0, Avo's direct attachment upload endpoint lacks server-side upload aut |
| CVE-2026-53924 | Deferred | 未確認 | CWE-284 | Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools with customizable parameters and voting mechanisms. Prior to 0x |
| CVE-2026-53932 | Awaiting Analysis | 未確認 | CWE-77, CWE-78 | laravel-backup-restore restores database backups made with spatie/laravel-backup. Prior to version 1.9.4, a crafted backup archive can trigger OS command injection during database |
| CVE-2026-53933 | Deferred | 未確認 | CWE-203 | Maravel, a PHP framework oriented towards dependency injection, prior to version 10.73.1 has a side-channel information disclosure issue. When a route was compiled with dynamic pla |
| CVE-2026-53937 | Awaiting Analysis | 未確認 | CWE-400, CWE-770 | MCP Kotlin SDK is the Kotlin Multiplatform software development kit for the Model Context Protocol. In versions 0.7.0 through 0.12.0, `ReadBuffer.append` in `kotlin-sdk-core/src/co |
| CVE-2026-53938 | Awaiting Analysis | 未確認 | CWE-122, CWE-787 | OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption (JOSE). Prior to version 0.6.2.5, cjose's JWE decryption path for the AES Key Wrap key-manage |
| CVE-2026-53939 | Awaiting Analysis | 未確認 | CWE-321, CWE-330 | OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption (JOSE). In versions 0.6.1 through 0.6.2.5, when cjose encrypts a JWE using an AES-CBC-HMAC co |
| CVE-2026-53940 | Awaiting Analysis | 未確認 | CWE-22, CWE-73 | Conda is a system-level binary package and environment manager that runs on major operating systems and platforms. Prior to 26.5.2, parse_entry_point_def in conda/common/path/pytho |
| CVE-2026-53941 | Awaiting Analysis | 未確認 | CWE-770 | Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. From 0.27.0 until 0.53.1, the uprobe l |
| CVE-2026-53952 | Deferred | 未確認 | CWE-285, CWE-306, CWE-489 | GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. A logic flaw in GetSimple CMS (v3.4.0a and below) and GetSimpleCMS-CE |
| CVE-2026-53954 | Deferred | 未確認 | CWE-400 | Bugsink is a self-hosted error tracking tool. Prior to version 2.2.2, Bugsink stores every set of custom tags supplied with an incoming event, allowing a caller with a valid projec |
| CVE-2026-53956 | Deferred | 未確認 | CWE-22, CWE-73 | Rattler is a library that provides common functionality used within the conda ecosystem. `rattler_cache` prior to version 0.9.0 and `py-rattler` prior to version 0.24.0 were vulner |
| CVE-2026-53957 | Deferred | 未確認 | CWE-918 | Contentful MCP Server is a Model Context Protocol server for the Contentful Management API. Prior to @contentful/mcp-server 1.7.19 and @contentful/mcp-tools 0.4.5, export_space and |
| CVE-2026-53966 | Awaiting Analysis | 未確認 | CWE-862 | XWiki Platform is a generic wiki platform. From 13.4-rc-1 until 16.10.17, 17.4.10, 17.10.4, and 18.1.0-rc-1, the Live Data edit REST API allows a user who can edit a page to change |
| CVE-2026-53968 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-53969 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-53971 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-53972 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-53973 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-53978 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-53979 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-53988 | Deferred | 未確認 | CWE-306 | Dockhand before 1.0.40 contains an authentication bypass vulnerability in its git webhook endpoints that allows unauthenticated remote attackers to trigger arbitrary stack redeploy |
| CVE-2026-53989 | Deferred | 未確認 | CWE-601 | Dockhand before 1.0.36 contains an open redirect vulnerability in the OIDC initiation endpoint that allows unauthenticated remote attackers to redirect authenticated users to attac |
| CVE-2026-5399 | Deferred | 未確認 | CWE-79 | The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Slider field in User Profile settings in versions up to and including 4.5.13.1. This i |
| CVE-2026-53990 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-5400 | Deferred | 未確認 | CWE-79 | The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Media field filter values in versions up to, and including, 4.5.13 This is due to insu |
| CVE-2026-54047 | Deferred | 未確認 | CWE-287, CWE-349, CWE-602 | Laci Synchroni is a decentralized mod and appearance sync server and plugin for Dalamud. Versions of the backend prior to 1.2.3 have an improper authentication vulnerability in the |
| CVE-2026-54048 | Analyzed | 未確認 | CWE-918 | Specifying tblproperties('avro.schema.url'=' http://...' ) or with a 'file:///' URI on a table in Impala 2.0.0 to 4.5.1 on all platforms allows an attacker to trigger a GET request |
| CVE-2026-54050 | Awaiting Analysis | 未確認 | CWE-639 | Sakai is a Collaboration and Learning Environment (CLE). From 23.0 until 23.5 and 25.3, the DELETE /api/users/{userId}/profile/image endpoint allows an authenticated user to delete |
| CVE-2026-54053 | Deferred | 未確認 | CWE-22 | Many Notes is a Markdown note-taking web application designed for simplicity. Prior to 0.16.0, the ZIP vault import implemented in app/Actions/ProcessImportedVault.php accepts arch |
| CVE-2026-54054 | Deferred | 未確認 | CWE-918 | Transmute is a free, open-source, self-hosted file conversion and compression tool. Prior to version 1.3.0, Transmute's URL import endpoint, `POST /api/files/url`, is vulnerable to |
| CVE-2026-54072 | Deferred | 未確認 | CWE-601 | Authorizer is an open-source, self-hostable authentication and authorization server. Prior to version 2.2.1, the `/authorize` endpoint accepts any `redirect_uri` without validating |
| CVE-2026-54076 | Deferred | 未確認 | CWE-862, CWE-863 | ArcadeDB is a Multi-Model DBMS. Prior to 26.6.1, the fix for CVE-2026-44221 added an UPDATE_SCHEMA authorization check only to LocalDocumentType.createProperty, while the remaining |
| CVE-2026-54077 | Deferred | 未確認 | CWE-22, CWE-776, CWE-918 | ArcadeDB is a Multi-Model DBMS. Prior to 26.6.1, the IMPORT DATABASE statement in engine/src/main/java/com/arcadedb/query/sql/parser/ImportDatabaseStatement.java did not require ad |
| CVE-2026-54087 | Deferred | 未確認 | CWE-434, CWE-79 | EasyAdmin is a fast and modern admin generator for Symfony applications. From 5.0.0 until 5.0.13, FileField and ImageField can accept browser-executable uploads while templates/cru |
| CVE-2026-5410 | Deferred | 未確認 | CWE-79 | The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the spinner field in versions up to, and including, 4.5.13 This is due to insufficient inp |
| CVE-2026-54135 | Deferred | 未確認 | CWE-400, CWE-770 | AirSane is a SANE frontend, and a scanner server that supports Apple's AirScan protocol. Versions prior to 0.4.12 have a vulnerability in the custom HTTP server implementation of A |
| CVE-2026-54147 | Deferred | 未確認 | CWE-327 | http4k is a functional toolkit for Kotlin HTTP applications. Prior to 4.51.0.0, 5.42.0.0, and 6.50.0.0, DigestAuthProvider.verify in http4k-security-digest ignores its configured a |
| CVE-2026-54148 | Deferred | 未確認 | CWE-294 | http4k is a functional toolkit for Kotlin HTTP applications. Prior to 4.51.0.0, 5.42.0.0, and 6.50.0.0, DigestAuthProvider.verify in http4k-security-digest does not compare the uri |
| CVE-2026-54150 | Deferred | 未確認 | CWE-22 | next-video is a library for adding video to Next.js applications. Prior to 2.8.1, the GET endpoint exported by next-video/request-handler and commonly mounted at /api/video accepts |
| CVE-2026-54155 | Awaiting Analysis | 未確認 | CWE-347 | node-opcua is an OPC UA implementation for TypeScript and Node.js. Prior to 2.166.0, the UserNameIdentityToken authentication handler in packages/node-opcua-server/source/opcua_ser |
| CVE-2026-54156 | Awaiting Analysis | 未確認 | CWE-770 | node-opcua is an OPC UA implementation for TypeScript and Node.js. Prior to 2.166.0, the process-global g_alreadyUsedNonce cache used by nonceAlreadyBeenUsed in packages/node-opcua |
| CVE-2026-54160 | Awaiting Analysis | 未確認 | CWE-829 | Network UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS, PDU and SCD hardware. Prior to commits 658b24e and 1aa31d1, the |
| CVE-2026-54165 | Deferred | 未確認 | CWE-79 | Dobase is an open-source, self-hosted workspace with installable tools. Versions prior to 2026.06.03 have a one-click stored DOM-based cross-site scripting (XSS) vulnerability in t |
| CVE-2026-54166 | Deferred | 未確認 | CWE-918 | Shelf is a platform for tracking physical assets. Prior to version 1.20.3, authenticated users with the `asset:import` permission can trigger server-side HTTP requests to attacker- |
| CVE-2026-54167 | Awaiting Analysis | 未確認 | CWE-345 | Pipelines-as-Code is a CI/CD system that lets users define Tekton pipelines in source code repositories. Prior to 0.37.8, 0.39.6, 0.42.1, and 0.48.0, the GitHub App provider accept |
| CVE-2026-54168 | Awaiting Analysis | 未確認 | CWE-269, CWE-862 | Pipelines-as-Code is a CI/CD system that lets users define Tekton pipelines in source code repositories. Prior to 0.37.8, 0.39.6, 0.42.1, and 0.48.0, a GitHub App installation toke |
| CVE-2026-54174 | Deferred | 未確認 | CWE-345, CWE-354 | melange allows users to build apk packages using declarative pipelines. Apko prior to version 1.2.9, corresponding to melange prior to version 0.50.4, verified the control section |
| CVE-2026-54175 | Deferred | 未確認 | CWE-620 | backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administration panels. Prior to 6. |
| CVE-2026-54176 | Deferred | 未確認 | CWE-287, CWE-620 | backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 |
| CVE-2026-54177 | Deferred | 未確認 | CWE-434 | backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 |
| CVE-2026-54178 | Deferred | 未確認 | CWE-22, CWE-285, CWE-639 | backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administration panels. Prior to 6. |
| CVE-2026-54180 | Deferred | 未確認 | CWE-639, CWE-863 | backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 |
| CVE-2026-54181 | Deferred | 未確認 | CWE-1023, CWE-79 | backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 |
| CVE-2026-54182 | Deferred | 未確認 | CWE-116, CWE-20, CWE-78 | backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administration panels. Prior to 4. |
| CVE-2026-54237 | Deferred | 未確認 | CWE-862, CWE-94 | Wavelog is web-based amateur radio logging software. From 1.8 until 2.4.2, Wavelog exposes /install/ajax.php and /install/includes/interface_assets/triggers.php after installation |
| CVE-2026-54239 | Awaiting Analysis | 未確認 | CWE-345, CWE-639 | Faust.js is a headless WordPress toolkit. Prior to 1.8.11, the FaustWP WordPress plugin authenticates only the ciphertext in its token envelope and excludes the 16-byte initializat |
| CVE-2026-54240 | Deferred | 未確認 | CWE-190, CWE-787 | libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate pixel offsets, allowing a crafted HEVC stream |
| CVE-2026-54241 | Deferred | 未確認 | CWE-122, CWE-190 | libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate the sample adaptive offset input-buffer size, |
| CVE-2026-54246 | Deferred | 未確認 | CWE-306 | Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.27.13, the routesrv component serves cluster-wide control-plane data without application-layer authe |
| CVE-2026-54247 | Deferred | 未確認 | CWE-770 | Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.26.22, Handler in dataclients/kubernetes/admission/admission.go passes the body of requests to the K |
| CVE-2026-54248 | Deferred | 未確認 | CWE-347, CWE-501 | Doco-CD is a GitOps continuous delivery tool that automatically deploys and updates Docker Compose projects/services and Swarm stacks. Prior to version 0.90.1, a trust-boundary fla |
| CVE-2026-54251 | Deferred | 未確認 | CWE-664 | netty-incubator-codec-ohttp implements Oblivious HTTP (OHTTP) gateway and client functionality using Netty. Prior to 0.0.23.Final, the OHTTP gateway decryption path in codec-ohttp/ |
| CVE-2026-54253 | Deferred | 未確認 | CWE-79 | TS3 Manager is modern web interface for maintaining Teamspeak3 servers. Prior to 2.2.6, the /api/download handler in packages/server/routes/api.js passes the attacker-controlled po |
| CVE-2026-54254 | Deferred | 未確認 | CWE-20, CWE-200 | Cyberdrop-DL is a bulk asynchronous downloader for multiple file hosts. From 8.5.0 until 9.14.0, the Pixeldrain crawler uses substring host matching instead of requiring the input |
| CVE-2026-54258 | Deferred | 未確認 | CWE-639 | ZoneMinder is a free, open source closed-circuit television software application. Versions prior to 1.36.39, 1.38.4, and 1.39.11 allow an authenticated low-privileged user with coa |
| CVE-2026-54333 | Deferred | 未確認 | CWE-787 | UEFI Firmware Parser parses BIOS, Intel ME, and UEFI firmware structures including volumes, file systems, and files. Prior to 1.14, MakeTable() in uefi_firmware/compression/Tiano/D |
| CVE-2026-54334 | Deferred | 未確認 | CWE-787 | UEFI Firmware Parser parses BIOS, Intel ME, and UEFI firmware structures including volumes, file systems, and files. Prior to 1.14, ReadCLen() in uefi_firmware/compression/Tiano/De |
| CVE-2026-54337 | Deferred | 未確認 | CWE-88 | Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.14, an argument Injection in the video upload function allows unauthenticated attacker to write/overw |
| CVE-2026-54339 | Deferred | 未確認 | CWE-918 | Glean is a self-hosted RSS reader and personal knowledge management tool. Prior to 0.2.6, POST /api/feeds/discover passes an attacker-supplied feed_url to discover_feed(feed_url), |
| CVE-2026-54343 | Awaiting Analysis | 未確認 | CWE-22 | Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version 2.52.1, a remote attacker can request a traversal path handl |
| CVE-2026-54354 | Awaiting Analysis | 未確認 | CWE-89 | MapServer is a system for developing web-based GIS applications. Prior to 8.6.4, MapServer's PostGIS runtime filter translation in src/mappostgis.cpp and msPostGISLayerTranslateFil |
| CVE-2026-54355 | Awaiting Analysis | 未確認 | CWE-79 | MapServer is a system for developing web-based GIS applications. From 6.0 until 8.6.4, MapServer's OpenLayers HTML output for SERVICE=WMS&REQUEST=GetMap&FORMAT=application/openlaye |
| CVE-2026-54446 | Deferred | 未確認 | CWE-306 | NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64 NetLicensing. Prior to 0.1.6, network |
| CVE-2026-54447 | Deferred | 未確認 | CWE-732 | garminconnect is a Python 3 API wrapper for Garmin Connect that retrieves statistics and manages activities. Prior to 0.3.5, garminconnect/client.py Client.dump creates the OAuth t |
| CVE-2026-54450 | Deferred | 未確認 | CWE-918 | ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol (MCP) servers. Prior to 0.29.1, networking.IsPrivateIP in pkg/networking/utilitie |
| CVE-2026-54451 | Awaiting Analysis | 未確認 | CWE-674 | Elixir protobuf is a pure Elixir implementation of Google Protobuf. From 0.8.0 until 0.16.1, services that decode attacker-controlled protobuf bytes with Protobuf.Decoder can be ta |
| CVE-2026-54452 | Deferred | 未確認 | CWE-918 | safeurl is a server-side request forgery protection library. Prior to 0.2.4, the privateNetworks list in ip.go omits the IPv6 ranges 64:ff9b:1::/48, 5f00::/16, 3fff::/20, and 100:0 |
| CVE-2026-54460 | Deferred | 未確認 | CWE-306 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to 1.1.1, POST /api/auth/passkeys accepts a request-body userId an |
| CVE-2026-54461 | Deferred | 未確認 | CWE-1333 | Habitica is a habit tracker application that treats goals like a role-playing game. From 4.172.1 until 5.48.2, a query parameter on Habitica's /api/v3/groups/:groupId/members route |
| CVE-2026-54471 | Analyzed | 未確認 | CWE-280 | Dell SmartFabric Manager, versions prior to 2.2.1, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with remote acce |
| CVE-2026-54495 | Awaiting Analysis | 未確認 | CWE-668 | The OpenFeature Operator allows users to expose feature flags to applications. In version 0.9.2 and earlier, a tenant who can create a controller-owned workload can use the openfea |
| CVE-2026-54501 | Deferred | 未確認 | CWE-20, CWE-250, CWE-77, CWE-78, CWE-88 | Browsertrix is a high-fidelity, browser-based crawling service for web archiving that can be self-hosted or used through Webrecorder's hosted instance. From 1.15.0 until 1.22.8, Br |
| CVE-2026-54503 | Awaiting Analysis | 未確認 | CWE-80 | plone.app.textfield provides a zope.schema-style field type called RichText for storing a value with a related MIME type. Prior to 2.0.2, 3.0.2, and 4.0.1, depending on the release |
| CVE-2026-54504 | Deferred | 未確認 | CWE-306, CWE-668 | MCP Documentation Server is a local-first document management and semantic search server for AI coding agents. From 1.13.0 until 1.13.1, the automatically started Web UI in src/ser |
| CVE-2026-54506 | Deferred | 未確認 | CWE-116, CWE-185, CWE-79 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.5, app/controller/user/profile.php accepts the user[bio] fiel |
| CVE-2026-54507 | Deferred | 未確認 | CWE-918 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.5, the oEmbedProxy() handler in admin/controller/editor/edito |
| CVE-2026-54510 | Deferred | 未確認 | CWE-287, CWE-352 | Speakr is a personal, self-hosted web application designed for transcribing audio recordings. Prior to 0.8.21-alpha, the csrf_exempt_for_api_tokens() before_request hook in src/app |
| CVE-2026-54519 | Deferred | 未確認 | CWE-862 | AI Agent Automation is a modular AI agent workflow automation platform with schedulers, tools, and observability. Prior to 0.9.1, backend/src/controllers/memory.controller.js authe |
| CVE-2026-54520 | Deferred | 未確認 | CWE-22 | AI Agent Automation is a modular AI agent workflow automation platform with schedulers, tools, and observability. Prior to 0.9.1, the executeStep file-step implementation in backen |
| CVE-2026-54521 | Awaiting Analysis | 未確認 | CWE-79 | FairEmail is a fully featured, open source, privacy-friendly email app for Android. Prior to 1.2319, the ActivityAMP AMP message renderer in app/src/main/java/eu/faircode/email/Act |
| CVE-2026-54524 | Deferred | 未確認 | CWE-89 | Frappe HR is an open-source human resources management solution (HRMS). Prior to 16.7.0, an authenticated user with the HR User role can inject SQL through filters in the Salary Pa |
| CVE-2026-54529 | Awaiting Analysis | 未確認 | CWE-20, CWE-200, CWE-248, CWE-639 | SQLAdmin is a flexible Admin interface for SQLAlchemy models. Prior to 0.27.1, ModelView.sort_query in sqladmin/models.py accepts the attacker-controlled sortBy list-view query par |
| CVE-2026-54541 | Deferred | 未確認 | CWE-248 | Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to 1.6.0, a malicious state-sync peer can crash a syncing node |
| CVE-2026-54542 | Deferred | 未確認 | CWE-125 | Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to 1.6.0, a malicious state-sync peer can crash a syncing node |
| CVE-2026-54544 | Deferred | 未確認 | CWE-918 | Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.16, two API endpoints that trigger outbound HTTP requests are missing the @login_required decorator. |
| CVE-2026-54546 | Awaiting Analysis | 未確認 | CWE-918 | CloudTAK is a browser-based Common Operating Picture and situational awareness tool compatible with TAK. Prior to 13.22.1, the authenticated PUT /api/basemap endpoint passes an att |
| CVE-2026-54547 | Deferred | 未確認 | CWE-287 | Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads. Prior to version 1.0.115, AuthInjectionMiddleware in meta_ads_mcp/core/http_auth_integra |
| CVE-2026-54549 | Deferred | 未確認 | CWE-918 | Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads. Prior to version 1.0.115, the upload_ad_image tool in meta_ads_mcp/core/ads.py passes an |
| CVE-2026-54551 | Deferred | 未確認 | CWE-285 | WireGuard Portal, or wg-portal, is a web-based configuration portal for WireGuard server management. From 2.2.0 until 2.3.0, the authenticated GET /api/v0/ws statistics WebSocket i |
| CVE-2026-54559 | Awaiting Analysis | 未確認 | CWE-119, CWE-121, CWE-122 | PocketSphinx is a small speech recognizer. Prior to 5.1.1, the trie language-model loaders in src/lm/ngram_model_trie.c do not adequately validate boundary conditions in ARPA, DMP, |
| CVE-2026-54561 | Deferred | 未確認 | CWE-209, CWE-22 | MCP Memory Keeper is an MCP server for persistent context management in AI coding assistants. Prior to 0.13.0, context_import in src/index.ts passes the caller-controlled filePath |
| CVE-2026-54565 | Deferred | 未確認 | CWE-1385, CWE-200, CWE-359, CWE-918 | rhwp is an HWP viewer and editor implemented in Rust and WebAssembly. Prior to rhwp 0.7.15 and rhwp Chrome and Firefox extension 0.2.4, the browser extensions use an all-URLs host |
| CVE-2026-54567 | Deferred | 未確認 | CWE-178, CWE-434 | Flask-Reuploaded provides file uploads for Flask. From 1.5.0 until 1.6.0, UploadSet.save(storage, name=...) in src/flask_uploads/flask_uploads.py applies lowercase_ext to the defau |
| CVE-2026-54571 | Deferred | 未確認 | CWE-190 | ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, RP2040 and RP2350. Prior to 3.11.1, the multipart/form-data parser in src/WebRequest.cpp |
| CVE-2026-54575 | Deferred | 未確認 | CWE-367, CWE-78 | mport is the MidnightBSD Package Manager. Prior to 2.7.8, privileged package fetch and cache-cleaning operations used race-prone path handling across libmport/fetch.c, libmport/cle |
| CVE-2026-54576 | Deferred | 未確認 | CWE-367, CWE-59 | mport is the MidnightBSD Package Manager. Prior to 2.7.8, do_actual_install() in libmport/bundle_read_install_pkg.c used path-based lstat(), chown(), stat(), and chmod() operations |
| CVE-2026-54577 | Deferred | 未確認 | CWE-20, CWE-693 | mport is the MidnightBSD Package Manager. Prior to 2.7.8, the audit command in mport/mport.c computed option-adjusted local_argv and local_argc values but passed the original argum |
| CVE-2026-54578 | Deferred | 未確認 | CWE-354, CWE-755 | mport is the MidnightBSD Package Manager. Prior to 2.7.8, mport_verify_package() in libmport/verify.c could continue after MD5File() or SHA256_File() failed and compare an expected |
| CVE-2026-54579 | Deferred | 未確認 | CWE-125, CWE-345 | mport is the MidnightBSD Package Manager. Prior to 2.7.8, ping() in libmport/ping.c accepted ICMP replies without validating icmp_id or icmp_seq and parsed the reply using a fixed |
| CVE-2026-54580 | Deferred | 未確認 | CWE-354, CWE-755 | mport is the MidnightBSD Package Manager. Prior to 2.7.8, libmport/util.c did not make every truncated, corrupt, or failed zstd stream fatal in mport_decompress_zstd(), and libmpor |
| CVE-2026-54581 | Deferred | 未確認 | CWE-345, CWE-347 | mport is the MidnightBSD Package Manager. Prior to 2.7.8, the mport_fetch_bootstrap_index() function in libmport/fetch.c could return success when bootstrap index hash verification |
| CVE-2026-54582 | Deferred | 未確認 | CWE-668, CWE-73 | mport is the MidnightBSD Package Manager. Prior to 2.7.8, package installation lacked a preflight check for incoming non-directory assets that already existed on disk. The affected |
| CVE-2026-54583 | Deferred | 未確認 | CWE-22, CWE-73 | mport is the MidnightBSD Package Manager. Prior to 2.7.8, libmport/fetch.c did not consistently reject empty, dot, dot-dot, or slash-containing bundle filenames before composing pa |
| CVE-2026-54584 | Deferred | 未確認 | CWE-377, CWE-73 | mport is the MidnightBSD Package Manager. mport before 2.7.8 used TMPDIR while extracting package metafiles, including when running as root or in setuid/setgid contexts. An attacke |
| CVE-2026-54585 | Deferred | 未確認 | CWE-22 | mport is the MidnightBSD Package Manager. Prior to 2.7.8, create_sample_file() in libmport/bundle_read_install_pkg.c did not constrain absolute source and destination paths from th |
| CVE-2026-54586 | Deferred | 未確認 | CWE-319, CWE-345 | mport is the MidnightBSD Package Manager. Prior to 2.7.8, the mport_fetch_index(), mport_fetch_bootstrap_index(), and mport_fetch_bundle() paths in libmport/fetch.c accepted non-HT |
| CVE-2026-54587 | Deferred | 未確認 | CWE-367, CWE-59 | mport is the MidnightBSD Package Manager. Prior to 2.7.8, directory assets handled as ASSET_DIR or ASSET_DIR_OWNER_MODE in libmport/bundle_read_install_pkg.c used path-based mport_ |
| CVE-2026-54594 | Awaiting Analysis | 未確認 | CWE-799 | OmniBlocks is a monorepo for the OmniBlocks project. Prior to the June 6, 2026 workflow remediation, .github/workflows/disc.yml runs for the issues opened event and the issues edit |
| CVE-2026-54596 | Deferred | 未確認 | CWE-89 | ITFlow provides an IT documentation, ticketing and accounting system for small managed service providers. Prior to version 26.07, an authenticated Technician or higher with access |
| CVE-2026-54597 | Deferred | 未確認 | CWE-89 | ITFlow provides an IT documentation, ticketing and accounting system for small managed service providers. Prior to version 26.07, an authenticated user with module_support write pe |
| CVE-2026-54604 | Awaiting Analysis | 未確認 | CWE-758, CWE-908 | OpenSlide is a C library for reading whole slide image files. Prior to 4.0.1, a behavior change in libtiff 4.7.1 causes the indirect TIFF tile path in src/openslide-decode-tiff.c a |
| CVE-2026-54608 | Deferred | 未確認 | CWE-345, CWE-862 | MythicalDash is a Pterodactyl client area. In 3.5.4-aurora and earlier, GET /api/stripe/process in backend/app/Api/System/Gateways/Stripe.php creates a pending row in mythicaldash_ |
| CVE-2026-54611 | Deferred | 未確認 | CWE-434, CWE-94 | InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Remote Code Execution (RCE) issue that allows remote authenticated attackers to exec |
| CVE-2026-54612 | Deferred | 未確認 | CWE-22, CWE-94 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. From 1.0.0 until 1.0.8.5, saveGlobalElements() in admin/controller/editor/gl |
| CVE-2026-54613 | Deferred | 未確認 | CWE-22 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.5, getThemeFolder() in admin/controller/editor/revisions.php |
| CVE-2026-54617 | Deferred | 未確認 | CWE-200, CWE-22, CWE-522 | GravitLauncher is an open-source Minecraft launcher based on sashok724's v3. Prior to 5.7.12, an unauthenticated remote actor can send a raw HTTP request target without a leading s |
| CVE-2026-54618 | Deferred | 未確認 | CWE-306, CWE-522, CWE-601 | Obsidian Web MCP is a secure remote MCP server for Obsidian vaults. Prior to 0.2.0, /oauth/authorize issues an authorization code without a login, consent, or session check, and /o |
| CVE-2026-54626 | Deferred | 未確認 | CWE-122, CWE-787 | SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. In 0.9.10 and earlier, the TGA_INDEXED_RLE path selected by i |
| CVE-2026-54627 | Awaiting Analysis | 未確認 | CWE-122, CWE-787 | SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. In 0.9.10 and earlier, psd_private_sail_pixel_format() in src |
| CVE-2026-54628 | Deferred | 未確認 | CWE-284, CWE-441, CWE-862, CWE-918 | Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, anyquery server exposes URL-capable SQLite virtual table modules such as json_reader and log_reader through |
| CVE-2026-54629 | Deferred | 未確認 | CWE-22, CWE-284, CWE-552, CWE-73, CWE-862 | Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, anyquery server exposes file-backed SQLite virtual table modules such as csv_reader and log_reader through i |
| CVE-2026-54632 | Deferred | 未確認 | CWE-20, CWE-755 | SIPSorcery is a WebRTC, SIP, and VoIP library for C# and .NET. Prior to 10.0.9, RTPChannel.OnRTPPacketReceived and the STUNAttribute.ParseMessageAttributes, STUNXORAddressAttribute |
| CVE-2026-54633 | Awaiting Analysis | 未確認 | CWE-125 | PoDoFo is a C++17 PDF manipulation library. From version 1.0.0 until 1.1.1, processing a crafted PDF with an Indexed color-space image can cause a heap out-of-bounds read in PdfCol |
| CVE-2026-54634 | Deferred | 未確認 | CWE-787, CWE-908 | Hamlib is a ham radio control library for radios, rotators, and amplifiers. Prior to 4.7.2, the unauthenticated rigctld send_raw command on TCP port 4532 reaches rigctl_send_raw() |
| CVE-2026-54637 | Deferred | 未確認 | CWE-918 | Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.4.4-rc.3, the scheduler's default unauthenticated v1 gRPC flow accepts attacker-co |
| CVE-2026-54642 | Deferred | 未確認 | CWE-352 | CubeCart is an ecommerce software solution. Prior to 6.7.5, the reset_id download-counter action and delete_card stored-payment-card action in admin/sources/orders.index.inc.php us |
| CVE-2026-54643 | Deferred | 未確認 | CWE-862 | CubeCart is an ecommerce software solution. Prior to 6.7.5, the delete-note handler in admin/sources/orders.index.inc.php verifies only the presence of order_id and delete-note par |
| CVE-2026-54644 | Awaiting Analysis | 未確認 | CWE-79 | CubeCart is an ecommerce software solution. Prior to 6.7.5, the _errorMessage method in classes/gui.class.php uses strip_tags to permit anchor elements in error, information, and w |
| CVE-2026-54645 | Deferred | 未確認 | CWE-79 | CubeCart is an ecommerce software solution. Prior to 6.7.5, admin/sources/products.index.inc.php reads the description, description_short, and spec_copy rich-text fields from $GLOB |
| CVE-2026-54646 | Deferred | 未確認 | CWE-89 | CubeCart is an ecommerce software solution. Prior to 6.7.5, admin/sources/maintenance.index.inc.php places administrator-controlled tablename values into ALTER TABLE, CHECK TABLE, |
| CVE-2026-54647 | Deferred | 未確認 | CWE-89 | CubeCart is an ecommerce software solution. Prior to 6.7.5, admin/sources/settings.index.inc.php directly concatenates the administrator-controlled download_expire POST parameter i |
| CVE-2026-54648 | Deferred | 未確認 | CWE-862 | CubeCart is an ecommerce software solution. Prior to 6.7.5, the GDPR tools in admin/sources/customers.gdpr.inc.php rely on page-level CC_PERM_READ access and do not require CC_PERM |
| CVE-2026-54649 | Deferred | 未確認 | CWE-200, CWE-201 | punchin-email is a Cloudflare Email Worker that provides two-way role aliases while relaying mail to a private inbox. Prior to 1.5.0, handleInbound delivers inbound alias mail with |
| CVE-2026-54670 | Deferred | 未確認 | CWE-22, CWE-306 | WeGIA is a web manager for charitable institutions. Prior to 3.8.5, the contribution request dispatcher in web/html/contribuicao/controller/control.php accepts attacker-controlled |
| CVE-2026-54671 | Deferred | 未確認 | CWE-639, CWE-862 | WeGIA is a web manager for charitable institutions. Prior to 3.8.5, WeGIA maps InternoControle to an empty resource array in web/controle/control.php, and verificarPermissao in web |
| CVE-2026-54674 | Analyzed | 未確認 | CWE-78 | FreePBX is an open source IP PBX. Prior to versions 16.0.39 and 17.0.7, users authenticated via User Control Panel (UCP) are able to execute arbitrary commands on the PBX as the we |
| CVE-2026-54675 | Analyzed | 未確認 | CWE-22, CWE-434, CWE-73 | FreePBX is an open source IP PBX. Prior to versions 16.0.10 and 17.0.5, a critical vulnerability exists in the sound language upload and conversion functionality that allows an aut |
| CVE-2026-54676 | Deferred | 未確認 | CWE-862 | Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.0, users with personal API tokens can retrieve replies from questions in private spaces they cannot access |
| CVE-2026-54677 | Deferred | 未確認 | CWE-862 | Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.0, authenticated users who are not members of a private space can create content in questions belonging to |
| CVE-2026-54688 | Deferred | 未確認 | CWE-918 | mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.2.0, web_url_read passes a caller-suppli |
| CVE-2026-54689 | Deferred | 未確認 | CWE-200, CWE-918 | mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.2.0, the web_url_read URL policy in src/ |
| CVE-2026-54692 | Deferred | 未確認 | CWE-131, CWE-787 | SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to 1.0.0, sail_codec_load_frame_v8_xbm() in src/sail-co |
| CVE-2026-54694 | Deferred | 未確認 | CWE-116, CWE-183, CWE-20, CWE-693, CWE-79 | SkillTree is a micro-learning gamification platform. Prior to version 4.4.2, two independent code flaws combine into a single exploitable attack chain, with three distinct exploita |
| CVE-2026-54708 | Analyzed | 未確認 | CWE-22, CWE-94 | FreePBX is an open source IP PBX. Prior to versions 16.0.72 and 17.0.7, a critical vulnerability exists in the FreePBX backup Module that allows authenticated attackers to execute |
| CVE-2026-54710 | Analyzed | 未確認 | CWE-20, CWE-94 | FreePBX is an open source IP PBX. Prior to versions 16.0.40 and 17.0.7, a critical remote code execution (RCE) vulnerability exists in the superfecta module due to unsafe inclusion |
| CVE-2026-54716 | Deferred | 未確認 | CWE-770 | Valhalla is an open source routing engine and accompanying libraries for use with OpenStreetMap data. In 3.7.0 and earlier, a POST request to /sources_to_targets containing an excl |
| CVE-2026-54723 | Deferred | 未確認 | CWE-304 | devpi is a Python package index staging server and packaging, testing, and release tool. Prior to 6.20.2 and 7.0.0b3, a server configured with the primary or deprecated master role |
| CVE-2026-54724 | Deferred | 未確認 | CWE-601 | Kiwi TCMS is an open source test management system. Prior to 16.1, the account confirmation endpoint accepted an unvalidated next parameter, allowing an unauthenticated attacker to |
| CVE-2026-54734 | Awaiting Analysis | 未確認 | CWE-918 | Prebid Server Java is the Java version of Prebid Server. Prior to 3.43.0, certain bidder adapters interpolate user-supplied parameters into outbound request URLs without using Http |
| CVE-2026-54752 | Deferred | 未確認 | CWE-502, CWE-829 | NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. The validation test harness can deserialize pull-request-controlled |
| CVE-2026-54767 | Deferred | 未確認 | CWE-306, CWE-798 | WeGIA is a web manager for charitable institutions. Prior to 3.8.5, web/html/socio/sistema/controller/deletar_socios.php exposes an unauthenticated GET endpoint whose chave paramet |
| CVE-2026-54790 | Deferred | 未確認 | CWE-89 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane stores an administrator-controlled custom_field_tab |
| CVE-2026-5480 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-54872 | Analyzed | 未確認 | CWE-208 | Issue summary: The generic elliptic-curve scalar multiplication used for ECDSA and SM2 signature operations with curves that do not have a dedicated implementation leaks informatio |
| CVE-2026-54873 | Analyzed | 未確認 | CWE-770 | Issue summary: QUIC process may keep memory for QUIC packet buffer for much longer period than necessary. Impact summary: Remote peer can exploit this vulnerability by sending mal |
| CVE-2026-54875 | Analyzed | 未確認 | CWE-208 | Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An |
| CVE-2026-54907 | Awaiting Analysis | 未確認 | CWE-1188 | Caddy Proxy Manager is a web interface for managing Caddy Server reverse proxies and certificates. Prior to 1.5.1, Caddy Proxy Manager enables email and password self-registration |
| CVE-2026-54915 | Deferred | 未確認 | CWE-601 | Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to 2.17.2, the unauthenticated /auth/redirect endpoint in plexpy/webauth.py removes forward sla |
| CVE-2026-54916 | Deferred | 未確認 | CWE-427, CWE-829 | NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. The absence of tests/init.py and the lack of --import-mode=importlib |
| CVE-2026-54918 | Deferred | 未確認 | CWE-15, CWE-829, CWE-918 | NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. In the affected repository revisions, NETBOX_DT_LIBRARY_URL in tests |
| CVE-2026-55007 | Analyzed | 未確認 | CWE-415 | Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-55060 | Awaiting Analysis | 未確認 | CWE-863 | GoCD is a continuous deliver server. From 13.1.0 until 26.1.0, the /go/api/support/process_list endpoint does not enforce its intended administrator-only authorization. An authenti |
| CVE-2026-55061 | Deferred | 未確認 | CWE-88 | uniget is a universal installer and updater for (container) tools. Prior to 0.27.6, the hooks edit command in cmd/uniget/hooks.go parses UNIGET_EDITOR or EDITOR with strings.Split( |
| CVE-2026-55062 | Deferred | 未確認 | CWE-22, CWE-23, CWE-36, CWE-73 | uniget is a universal installer and updater for (container) tools. Prior to 0.27.6, the hooks edit command in cmd/uniget/hooks.go concatenates an unvalidated hook filename with the |
| CVE-2026-55071 | Awaiting Analysis | 未確認 | CWE-94 | MCP-for-Stata is a MCP server for integrating Stata into agent loops with a safety-first design. Prior to version 1.19.0, the ado_package_install MCP tool in stata-mcp concatenates |
| CVE-2026-55072 | Deferred | 未確認 | CWE-20, CWE-89 | Pimcore is an Open Source Data & Experience Management Platform. Prior to 2026.1.5, an authenticated user with the objects permission can submit a malicious ClassDefinition UID bec |
| CVE-2026-55073 | Deferred | 未確認 | CWE-918 | WeasyPrint helps web developers to create PDF documents. Prior to 70.0, server-side applications that configure a restrictive url_fetcher and pass attacker-influenced values to HTM |
| CVE-2026-55074 | Deferred | 未確認 | CWE-59 | Ansible FreeBSD Jail Connection Plugin is an Ansible connection plugin for FreeBSD Jails via jexec. Through version 1.3.0, the jailexec connection plugin's put_file resolved a tran |
| CVE-2026-55091 | Deferred | 未確認 | CWE-1321, CWE-915 | flat-to-nested converts a hierarchy from a flat representation to a nested representation. Prior to 1.1.2, FlatToNested.prototype.convert in index.js uses attacker-influenced id an |
| CVE-2026-55093 | Deferred | 未確認 | CWE-125, CWE-190 | Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit. Prior to 0.21.16, 0.22.2, and 0.23.1, tract-nnef uses unchecked usize multiplication in nnef/src |
| CVE-2026-55094 | Deferred | 未確認 | CWE-20, CWE-250, CWE-306, CWE-94, CWE-95 | Taskcluster is the task execution framework that supports Mozilla's continuous integration and release processes. Prior to version 100.3.0, Taskcluster is vulnerable to unauthentic |
| CVE-2026-55096 | Deferred | 未確認 | CWE-184, CWE-918 | fast-mcp-telegram is a Telegram MCP Server. Prior to version 30.1, the send_message/send_message_to_phone MCP tools accept files as a list of http(s) URLs, which the server downloa |
| CVE-2026-55102 | Deferred | 未確認 | CWE-209, CWE-532 | hashi-vault-js is a Node.js module for interacting with the HashiCorp Vault API. Prior to 0.5.2, every API method in src/Vault.js passes failed requests through parseAxiosError(), |
| CVE-2026-55105 | Deferred | 未確認 | CWE-79 | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.6.15 and 3.7.2, packages/renderer/MdToHtml/rules/fountain.ts pa |
| CVE-2026-55107 | Deferred | 未確認 | CWE-470, CWE-94 | Kobako is a Ruby gem that embeds a Wasm-isolated mruby interpreter inside applications, allowing execution of untrusted Ruby scripts (LLM-generated code, user formulas, student sub |
| CVE-2026-55149 | Deferred | 未確認 | CWE-789 | Vouch Proxy is an SSO and OAuth/OIDC login solution for Nginx using the auth_request module. Prior to 0.48.0, Cookie in pkg/cookie/cookie.go parses the total part count from an att |
| CVE-2026-55156 | Deferred | 未確認 | CWE-22 | Token Optimizer MCP measures token savings per AI coding agent, optimizes context, and shares a live local knowledge graph across 16 CLI clients. Prior to version 5.1.0, the dashbo |
| CVE-2026-55157 | Deferred | 未確認 | CWE-78 | Token Optimizer MCP measures token savings per AI coding agent, optimizes context, and shares a live local knowledge graph across 16 CLI clients. Prior to version 5.1.0, token-opti |
| CVE-2026-55158 | Deferred | 未確認 | CWE-78 | Conflibot warns in advance when merging a pull request will cause conflicts in other open pull requests. Prior to 1.2.1, src/index.ts builds git checkout, git merge, and git format |
| CVE-2026-55159 | Deferred | 未確認 | CWE-93 | luci-app-adblock-fast a WebUI for fast, lightweight DNS-based ad-blocker for OpenWrt that works with dnsmasq, smartdns, or unbound. Prior to 1.2.4-2, the luci.adblock-fast.setCronE |
| CVE-2026-55160 | Deferred | 未確認 | CWE-918 | Stringer is a self-hosted, anti-social RSS reader. Prior to commit 75cb095, an unrestricted Server-Side Request Forgery (SSRF) vulnerability allows any authenticated user to force |
| CVE-2026-55174 | Deferred | 未確認 | CWE-345, CWE-347 | UltrafastSecp256k1 is a high-performance, multi-backend secp256k1 engine with reproducible audit evidence, compatibility shims, and profile-based review scopes. Prior to version 4. |
| CVE-2026-55176 | Deferred | 未確認 | CWE-863 | Soft Machine is a Virtual Machine–based agentic development environment / Cloud OS. In versions 0.2.247 and prior, two authentication helpers in /app/server.js — verifyContainerAut |
| CVE-2026-55177 | Awaiting Analysis | 未確認 | CWE-918 | CloudTAK is a browser-based Common Operating Picture and situational awareness tool compatible with TAK. Prior to version 13.10.0, every route in the ESRI helper family (api/routes |
| CVE-2026-55178 | Deferred | 未確認 | CWE-200, CWE-639, CWE-862 | GeoLens is a self-hosted geospatial data catalog with semantic search, OGC and STAC APIs, and a map builder. Prior to 1.2.3, multiple read and link endpoints authorize only the res |
| CVE-2026-55179 | Deferred | 未確認 | CWE-639 | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Server's GET /items/:id/content route in packages/s |
| CVE-2026-55181 | Deferred | 未確認 | CWE-284 | Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.30.3, Tugtainer's OIDC authentication can still be initiated even when OIDC_ENABLED=f |
| CVE-2026-55209 | Deferred | 未確認 | CWE-120, CWE-125, CWE-129, CWE-476 | resdata is software for reading and writing result files from the Eclipse reservoir simulator. Prior to 6.2.9, resdata insufficiently validates numeric fields, grid dimensions, key |
| CVE-2026-55210 | Deferred | 未確認 | CWE-290 | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Server's UserModel.ssoLogin() returns an existing a |
| CVE-2026-55211 | Deferred | 未確認 | CWE-125 | Surfio is a library for reading and writing surface files. Prior to 0.0.19, surfio does not correctly validate size fields in IRAP files, leading to a buffer overflow when untruste |
| CVE-2026-55214 | Deferred | 未確認 | CWE-116 | GLPI is a free asset and IT management software package. From 11.0.6 until 11.0.8, an authenticated technician can store active markup in supplier website fields. Any user who open |
| CVE-2026-55217 | Deferred | 未確認 | CWE-285 | GLPI is a free asset and IT management software package. From 0.85 until 10.0.26 and 11.0.8, a low-privileged authenticated user can create, update, or delete knowledge base commen |
| CVE-2026-5522 | Awaiting Analysis | 未確認 | CWE-798 | IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 005 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outb |
| CVE-2026-55221 | Deferred | 未確認 | CWE-532 | Boruta is a standalone authorization server that aims to implement OAuth 2.0 and Openid Connect up to decentralized identity specifications. Prior to version 0.10.0, Boruta logged |
| CVE-2026-55224 | Deferred | 未確認 | CWE-22 | MineAdmin is a ready-to-use backend management system suitable for quickly building website backends, operation platforms, permission centers, internal management systems, CMS, CRM |
| CVE-2026-55225 | Awaiting Analysis | 未確認 | CWE-250, CWE-269, CWE-441 | Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. In Strimzi 1.0.0 and earlier, an attacker who can create a Ka |
| CVE-2026-55226 | Awaiting Analysis | 未確認 | CWE-269, CWE-272 | Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. In Strimzi 1.0.0 and earlier, deploying only the Topic Operat |
| CVE-2026-55235 | Deferred | 未確認 | CWE-287 | langgraph-api implements the LangGraph API for rapid development and testing. Prior to 0.10.0, langgraph-api permits a run or cron to specify a relative webhook target that is deli |
| CVE-2026-55236 | Deferred | 未確認 | CWE-285 | langgraph-api implements the LangGraph API for rapid development and testing. Prior to 0.10.0, the langgraph-api run-creation path authorizes the assistant attached to a run by dis |
| CVE-2026-55244 | Deferred | 未確認 | CWE-248 | ASTEVAL is an evaluator of Python expressions and statements. Prior to 1.0.9, FROM_PY in asteval/astutils.py exposes BaseException, SystemExit, KeyboardInterrupt, and GeneratorExit |
| CVE-2026-55250 | Deferred | 未確認 | CWE-294, CWE-613, CWE-672 | Maravel, a PHP framework oriented towards dependency injection, prior to version 10.74.0 has a high-severity Token Replay Vulnerability arising from a structural lifecycle mismatch |
| CVE-2026-55253 | Awaiting Analysis | 未確認 | CWE-943 | LangChain MongoDB provides integrations between MongoDB, Atlas, LangChain, and LangGraph. Prior to langgraph-checkpoint-mongodb 0.3.0 and langgraph-store-mongodb 0.4.0, MongoDBSave |
| CVE-2026-55256 | Analyzed | 未確認 | CWE-20 | In parsePartHeaders of multiple files, there is a possible persistent denial of service due to improper input validation. This could lead to remote denial of service with no additi |
| CVE-2026-55273 | Analyzed | 未確認 | CWE-20 | In AppendCommentLine of AnnotationProcessor.cpp, there is a possible supply chain risk due to improper input validation. This could lead to local escalation of privilege with no ad |
| CVE-2026-55277 | Analyzed | 未確認 | CWE-120 | In checkUiccListenConfigNeeded of RoutingManager.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) code exec |
| CVE-2026-55285 | Analyzed | 未確認 | CWE-120 | In openLogicalChannel of multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional |
| CVE-2026-55290 | Analyzed | 未確認 | CWE-120 | In setTo of ResourceTypes.cpp, there is a possible out-of-bounds heap read due to a missing bounds check. This could lead to local information disclosure with no additional executi |
| CVE-2026-55294 | Analyzed | 未確認 | CWE-122 | In ihevcd_get_tu_data_size of ihevcd_utils.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additi |
| CVE-2026-55301 | Analyzed | 未確認 | CWE-120, CWE-787 | In Wave6VpuDecFlush of wave6.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution |
| CVE-2026-55302 | Analyzed | 未確認 | CWE-693 | In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges nee |
| CVE-2026-55304 | Analyzed | 未確認 | CWE-693 | In addr_remap_address_map of remap.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System exe |
| CVE-2026-55306 | Analyzed | 未確認 | CWE-20 | In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges neede |
| CVE-2026-55317 | Analyzed | 未確認 | CWE-20, CWE-787 | In printf of printf.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges n |
| CVE-2026-55318 | Analyzed | 未確認 | CWE-362, CWE-416 | In multiple locations, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User int |
| CVE-2026-55323 | Analyzed | 未確認 | CWE-122, CWE-787 | In gf_base_update_finger_base of gf_base.c, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no addition |
| CVE-2026-55331 | Analyzed | 未確認 | CWE-120 | In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileg |
| CVE-2026-55332 | Analyzed | 未確認 | CWE-20, CWE-787 | In multiple locations, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges n |
| CVE-2026-55343 | Analyzed | 未確認 | CWE-120 | In decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional executio |
| CVE-2026-55351 | Analyzed | 未確認 | CWE-190, CWE-787 | In VPU, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User in |
| CVE-2026-55359 | Analyzed | 未確認 | CWE-693 | In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges neede |
| CVE-2026-55365 | Analyzed | 未確認 | CWE-787 | In multiple functions of remap.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution p |
| CVE-2026-55366 | Analyzed | 未確認 | CWE-693 | In IP Multimedia Subsystem, there is a possible authentication bypass due to a logic error in the code. This could lead to remote escalation of privilege with no additional executi |
| CVE-2026-55374 | Deferred | 未確認 | CWE-74, CWE-918 | canto-saas-api is a PHP library for interacting with the Canto SaaS API. Prior to version 3.0.0, Request::buildRequestUrl() joins values returned by Request::getPathVariables() wit |
| CVE-2026-55375 | Deferred | 未確認 | CWE-209, CWE-598 | canto-saas-api is a PHP library for interacting with the Canto SaaS API. Prior to version 3.0.0, OAuth2Request::getQueryParams() places app_id, app_secret, refresh_token, and code |
| CVE-2026-55416 | Deferred | 未確認 | CWE-89 | Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, an authenticated user with reports_config permission can place attacker-co |
| CVE-2026-55421 | Deferred | 未確認 | CWE-918 | Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 00b7c3c, the endpoint accepts user-supplied files[].url, performs a server-sid |
| CVE-2026-55451 | Deferred | 未確認 | CWE-1321 | gettext-converter provides gettext resource conversion utilities for JavaScript. Prior to 1.3.3, js2i18next() in lib/js2i18next.js splits nested translation keys using options.keys |
| CVE-2026-55456 | Rejected | 未確認 | Rejected reason: This CVE is a duplicate of another CVE. | |
| CVE-2026-55473 | Deferred | 未確認 | CWE-918 | HomeBox is a home inventory and organization system. Prior to 0.26.0, the default-on BlockBogonNets and BlockCloudMetadata notifier SSRF protections in backend/internal/sys/validat |
| CVE-2026-55494 | Deferred | 未確認 | CWE-284 | Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.30.4, Tugtainer Agent allows unauthenticated access to Docker management APIs when AG |
| CVE-2026-55512 | Deferred | 未確認 | CWE-400 | nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. From version 0.2.0 to before version 0.5.0, when OIDC is enabled, GET /ui/oidc/login is reachable without auth |
| CVE-2026-55513 | Deferred | 未確認 | CWE-613 | nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. From version 0.3.0 to before version 0.5.0, the nebula-mgmt Web UI host-creation path ignores both the server- |
| CVE-2026-55556 | Awaiting Analysis | 未確認 | CWE-122 | Rsyslog is a rocket-fast system for log processing. From 8.2110.0 until 8.2604.0, the optional imhttp module's parse_auth_header function in contrib/imhttp/imhttp.c allocates a zer |
| CVE-2026-55563 | Awaiting Analysis | 未確認 | CWE-863 | Feast is the open source feature store for AI and machine learning. Prior to 0.65.0, .github/workflows/pr_integration_tests.yml uses pull_request_target with the synchronize event |
| CVE-2026-55567 | Awaiting Analysis | 未確認 | CWE-367 | BleachBit cleans files to free disk space and to maintain privacy. Prior to 6.0.1, privileged Windows cleaning does not lock and validate a target's parent directory before deletio |
| CVE-2026-55591 | Deferred | 未確認 | CWE-918 | Signal K Server is a server application that runs on a central hub in a boat. Prior to 2.28.0, makeRemoteRequest() in src/serverroutes.ts accepted attacker-controlled host, port, u |
| CVE-2026-55610 | Awaiting Analysis | 未確認 | CWE-639 | InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.1, in InvoiceShelf's multi- |
| CVE-2026-55617 | Deferred | 未確認 | CWE-613 | Hydro is a next-generation high-performance online judge platform. From 4.10.4 until 5.0.2, the session recreation logic in packages/hydrooj/src/service/layers/base.ts creates a re |
| CVE-2026-55625 | Awaiting Analysis | 未確認 | CWE-639, CWE-863 | GoCD is a continuous deliver server. From 16.1.0 until 26.1.0, the internal material connection test APIs at /go/api/admin/internal/material_test and /go/api/internal/config_repos/ |
| CVE-2026-55630 | Deferred | 未確認 | CWE-79 | Kiwi TCMS is an open source test management system. Prior to 16.1, TestCase.extra_link and TestPlan.extra_link accepted unsanitized user input and rendered stored values verbatim, |
| CVE-2026-55632 | Awaiting Analysis | 未確認 | CWE-863 | GoCD is a continuous deliver server. From 20.2.0 until 26.1.0, the internal pipeline structure API used for autocompletion while editing pipeline, template, environment, and user-p |
| CVE-2026-55636 | Deferred | 未確認 | CWE-863 | Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.6, charts/capsule/templates/configuration.yaml configures the validating webhook with n |
| CVE-2026-55650 | Deferred | 未確認 | CWE-79 | Outerbase Studio is a lightweight browser-based database GUI supporting PostgreSQL, MySQL, and SQLite. In version 0.10.2 and earlier, TextComponent in src/components/chart/index.ts |
| CVE-2026-55658 | Deferred | 未確認 | CWE-862 | Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools with customizable parameters and voting mechanisms. In 3e595f3 |
| CVE-2026-55690 | Deferred | 未確認 | CWE-79 | The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev and various parser tags for embedding video clips from various video sharing services. Pri |
| CVE-2026-55691 | Deferred | 未確認 | CWE-79 | The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev and various parser tags for embedding video clips from various video sharing services. Pri |
| CVE-2026-55692 | Deferred | 未確認 | CWE-79 | The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev and various parser tags for embedding video clips from various video sharing services. Pri |
| CVE-2026-55701 | Awaiting Analysis | 未確認 | CWE-863 | The OpenTelemetry Collector Contrib repository contains components for the OpenTelemetry Collector. Prior to 0.151.0, the githubreceiver validates the receiver/githubreceiver/confi |
| CVE-2026-55770 | Deferred | 未確認 | CWE-90 | OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, OpenBao used EscapeLDAPValue, an RFC 4514 distinguished-name escaping function, where RFC 4515 L |
| CVE-2026-55774 | Awaiting Analysis | 未確認 | CWE-863 | OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, an OpenBao user with access to sys/leases/revoke/:lease_id in one namespace could revoke a lease |
| CVE-2026-55775 | Awaiting Analysis | 未確認 | CWE-285 | OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, OpenBao users granted capabilities on /sys/namespaces/root within a non-root namespace could exp |
| CVE-2026-55776 | Deferred | 未確認 | CWE-617 | OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, an authenticated OpenBao caller with write access to transit/keys/* could terminate the server p |
| CVE-2026-55795 | Deferred | 未確認 | CWE-307 | Craft Commerce is an ecommerce platform for Craft CMS. From 4.0.0 until 4.11.2 and 5.6.5, CartController in src/controllers/CartController.php activates its RateLimiter only when t |
| CVE-2026-55828 | Deferred | 未確認 | CWE-22, CWE-59 | qbee transport is a remote access transport protocol implementation. Prior to 1.26.25, the extractTar routine uses strictly lexical path validation that does not account for on-dis |
| CVE-2026-55832 | Deferred | 未確認 | CWE-22 | Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit. Prior to 0.21.17, 0.22.3, and 0.23.2, the tract-onnx crate passes the attacker-controlled extern |
| CVE-2026-55837 | Deferred | 未確認 | CWE-200, CWE-306, CWE-346 | dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.20.0, the local OAuth helper in src/dbt_mcp/oauth/fastapi_app.py exposes GET /dbt_platform_context w |
| CVE-2026-55846 | Awaiting Analysis | 未確認 | CWE-22 | Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. Prior to 2.39.0, the HTTP server started by allure serve and allure open uses URI.getPath |
| CVE-2026-55847 | Awaiting Analysis | 未確認 | CWE-79 | Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. Prior to 2.39.0, the ansi.js helper at allure-generator/src/main/javascript/helpers/ansi. |
| CVE-2026-55863 | Deferred | 未確認 | CWE-862 | motionEye (mEye) is an online interface for a piece of software called "motion," which is a video surveillance program with motion detection. Prior to 0.44.0, the ActionHandler.pos |
| CVE-2026-55864 | Deferred | 未確認 | CWE-918 | GeoNetwork is a catalog application to manage spatially referenced resources. Prior to 4.2.17 and 4.4.12, POST /api/tools/ogc/sld accepted a caller-supplied WMS server URL and perf |
| CVE-2026-55866 | Awaiting Analysis | 未確認 | CWE-863 | SpiceDB is an open source database system for creating and managing security-critical application permissions. From 1.34.0 until 1.54.0, SpiceDB can return PERMISSIONSHIP_HAS_PERMI |
| CVE-2026-55870 | Awaiting Analysis | 未確認 | CWE-200, CWE-522 | GoCD is a continuous deliver server. Prior to 26.1.0, GoCD can return unmasked credentials that administrators stored in the userinfo portion of source control material URLs throug |
| CVE-2026-55887 | Deferred | 未確認 | CWE-88 | MCP Gateway allows easy and secure running and deployment of MCP servers. From 0.21.0 until 0.42.2, Docker MCP Gateway YAML-unmarshalled the attacker-controlled io.docker.server.me |
| CVE-2026-55897 | Deferred | 未確認 | CWE-78 | luci-app-advanced-reboot is a LuCI (web interface) application for OpenWrt that provides a way to reboot your router into an alternative firmware partition or perform reboot oper |
| CVE-2026-55946 | Modified | 未確認 | CWE-77 | Ai command injection in Microsoft Copilot allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-55951 | Deferred | 未確認 | CWE-770 | The Erlang/OTP httpc HTTP client does not enforce a limit on the total size of response headers received from a server. The max_header_size option defaults to nolimit, and httpc_re |
| CVE-2026-56101 | Awaiting Analysis | 未確認 | CWE-697 | OpenBSD before commit 1ee99df contains an inverted comparison vulnerability in the ieee80211_michael_mic_failure() function within sys/net80211/ieee80211_crypto_tkip.c that allows |
| CVE-2026-56125 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-56126 | Awaiting Analysis | 未確認 | CWE-79 | pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Status: Monitoring privilege to inject arbitrary JavaScript via graph configuration parameters in / |
| CVE-2026-56127 | Awaiting Analysis | 未確認 | CWE-79 | pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Rules: Edit privilege to inject arbitrary JavaScript via the descr parameter in /firewall |
| CVE-2026-56128 | Awaiting Analysis | 未確認 | CWE-79 | pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Schedules: Edit privilege to inject arbitrary JavaScript via the descr parameter in /fire |
| CVE-2026-56143 | Analyzed | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130). A user with elevated privilege |
| CVE-2026-56172 | Analyzed | 未確認 | CWE-416 | Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-56177 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-56198 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally. |
| CVE-2026-56207 | Analyzed | 未確認 | CWE-347 | Signature of Bearer token is not verified in last step of SAML2 authentication for Impala's hs2-http interface, allowing altering user name and acting as another user. This issu |
| CVE-2026-56590 | Analyzed | 未確認 | CWE-434 | HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an unauthenticated attacker to up |
| CVE-2026-56592 | Analyzed | 未確認 | CWE-307 | HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to inadequate account lockouts, which could allow an unauthenticated attack |
| CVE-2026-56595 | Analyzed | 未確認 | CWE-942 | HCL BigFix Service Management is affected by a CORS Misconfiguration vulnerability due to improperly validated origin headers, which could allow an attacker to craft a malicious we |
| CVE-2026-56597 | Analyzed | 未確認 | CWE-200 | HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow an unauthenticated attacker to extract internal IP addresses from the |
| CVE-2026-56681 | Deferred | 未確認 | CWE-807 | 9Router is an AI router & token saver. Prior to 0.5.6, 9Router deployments that allow requests to reach Next.js without the sanitizing custom-server.js wrapper trust the client-sup |
| CVE-2026-56682 | Deferred | 未確認 | CWE-307, CWE-807 | 9Router is an AI router & token saver. Prior to 0.5.6, 9Router deployments that allow requests to reach Next.js without the sanitizing custom-server.js wrapper use the client-suppl |
| CVE-2026-56711 | Deferred | 未確認 | CWE-190, CWE-787 | VLC media player versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing crafted media. Exploitation requires user interaction and may result |
| CVE-2026-56719 | Awaiting Analysis | 未確認 | CWE-125 | MikroTik RouterOS before 7.24 contains an out-of-bounds read vulnerability in the userspace SMB daemon that allows unauthenticated attackers to read beyond the end of the request b |
| CVE-2026-56723 | Deferred | 未確認 | CWE-863 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, a customer who can view a ticket cannot see internal ticket articles through the article listing |
| CVE-2026-56724 | Deferred | 未確認 | CWE-639, CWE-862 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, summary An issue with permission checks in the knowledge base management area has been identifie |
| CVE-2026-56725 | Deferred | 未確認 | CWE-306, CWE-400 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, summary An unauthenticated request to POST /api/v1/import/otrs/import_check blocks a Zammad requ |
| CVE-2026-56726 | Deferred | 未確認 | CWE-862 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, this vulnerability breaks normal ticket isolation boundaries between agents. Any authenticated a |
| CVE-2026-56727 | Deferred | 未確認 | CWE-287, CWE-347, CWE-391 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, summary In Zammad's inbound PGP email processing, the return value of the gpg verification call |
| CVE-2026-56728 | Deferred | 未確認 | CWE-200, CWE-639 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, a broken access control vulnerability exists in Zammad's GraphQL API. An authenticated user can |
| CVE-2026-56729 | Deferred | 未確認 | CWE-200, CWE-280, CWE-284 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, when multiple KB categories have different editor roles assigned, a user with knowledge_base.edi |
| CVE-2026-56730 | Deferred | 未確認 | CWE-862 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, an authorization bypass vulnerability was found that allows an authenticated agent to read knowl |
| CVE-2026-56731 | Deferred | 未確認 | CWE-79 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1, a low-privilege authenticated user may inject arbitrary HTML markup, including JavaScript event |
| CVE-2026-56732 | Deferred | 未確認 | CWE-20, CWE-352 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, vulnerability in Zammad's HTML sanitization allows injection of specific HTML elements into tick |
| CVE-2026-56733 | Deferred | 未確認 | CWE-269, CWE-863 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2 and 7.1.0, this issue concerns a lack of discursive validation within the authorization cascade. |
| CVE-2026-56734 | Deferred | 未確認 | CWE-918 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, during federated authentication (OAuth/OIDC/SAML), a profile image URL from the external identit |
| CVE-2026-56735 | Deferred | 未確認 | CWE-82 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2 and 7.1.0, zammad's HTML sanitizer (HtmlSanitizer::Strict) blocks external URLs in to prevent re |
| CVE-2026-56736 | Deferred | 未確認 | CWE-79 | phpMyFAQ is an open source FAQ web application. A stored cross-site scripting (XSS) vulnerability in versions prior to 4.2.0-alpha allows any unauthenticated user (or low-privilege |
| CVE-2026-56737 | Deferred | 未確認 | CWE-287 | phpMyFAQ is an open source FAQ web application. Versions 3.2.0 through 4.1.5 contain an authentication bypass in its public two-factor authentication verification flow: an unauthen |
| CVE-2026-56738 | Deferred | 未確認 | CWE-89 | phpMyFAQ is an open source FAQ web application. The `StopWords::add()` method inversions prior to 4.1.6 builds a SQL `INSERT` statement using `sprintf()` and inserts the user-suppl |
| CVE-2026-56739 | Deferred | 未確認 | CWE-918 | Logto is the modern, open-source auth infrastructure for SaaS and AI apps. Prior to 1.43.0, Logto fetches administrator-controlled outbound destinations without validating the addr |
| CVE-2026-56744 | Deferred | 未確認 | CWE-1288 | `@bsv/wallet-toolbox` provides BRC-100 wallet signing and storage components, while `@bsv/wallet-toolbox-client` and `@bsv/wallet-toolbox-mobile` provide client-focused distributio |
| CVE-2026-56792 | Awaiting Analysis | 未確認 | CWE-287 | Dell Rugged Control Center (RCC), versions prior to 5.2.206, contain an Improper Authorization vulnerability. A low privileged attacker with local access could potentially exploit |
| CVE-2026-56795 | Awaiting Analysis | 未確認 | CWE-427 | Dell Server Update Utility, versions prior to 26.07.01, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially ex |
| CVE-2026-56825 | Deferred | 未確認 | CWE-862 | Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, packages/admin/src/Livewire/Components/Collection/CollectionProducts.php exposes Action::make('delete') and DeleteBulk |
| CVE-2026-56827 | Deferred | 未確認 | CWE-862 | Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, groupedBulkActions in packages/admin/src/Livewire/Pages/Attribute/Browse.php, packages/admin/src/Livewire/Pages/Tag/In |
| CVE-2026-56829 | Deferred | 未確認 | CWE-862 | Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, packages/admin/src/Livewire/Components/Products/VariantStock.php exposes stockAction() without edit_product_variants a |
| CVE-2026-56830 | Deferred | 未確認 | CWE-862 | Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, an earlier product sub-form hardening change left store() in packages/admin/src/Livewire/Components/Products/Form/Medi |
| CVE-2026-56831 | Deferred | 未確認 | CWE-20 | Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.0, the /cpanel/discounts administrative interface accepts negative fixed_amount discount values, persists them in sh_disc |
| CVE-2026-56839 | Deferred | 未確認 | CWE-200, CWE-22, CWE-863 | PraisonAI is a multi-agent teams system. Prior to 4.6.59, the CODE_TOOLS wrappers keep _workspace_root as None and pass workspace=None to read_file, search_replace, and apply_diff |
| CVE-2026-56855 | Analyzed | 未確認 | CWE-770 | Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messag |
| CVE-2026-56879 | Analyzed | 未確認 | CWE-441 | In gmc_mb_msg_handler of gmc_mba.c, there is a possible memory corruption due to a confused deputy. This could lead to local escalation of privilege with System execution privilege |
| CVE-2026-56881 | Analyzed | 未確認 | CWE-693 | In enable_segment of remap.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution |
| CVE-2026-56882 | Analyzed | 未確認 | CWE-200 | In Cellular Modem, there is a possible information disclosure due to a logic error in the code. This could lead to remote code execution with no additional execution privileges nee |
| CVE-2026-56888 | Analyzed | 未確認 | CWE-203 | In multiple locations, there is a possible permission bypass due to side channel information disclosure. This could lead to local escalation of privilege with no additional executi |
| CVE-2026-56889 | Analyzed | 未確認 | CWE-190 | In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. U |
| CVE-2026-56892 | Analyzed | 未確認 | CWE-120 | In ReadDataElement of common.c, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional exec |
| CVE-2026-56907 | Analyzed | 未確認 | CWE-20 | In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User |
| CVE-2026-56914 | Analyzed | 未確認 | CWE-416, CWE-667 | In multiple locations, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. |
| CVE-2026-56915 | Analyzed | 未確認 | CWE-362 | In bigo_worker_thread of bigo.c, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege with System execution privile |
| CVE-2026-56920 | Analyzed | 未確認 | CWE-787 | In s_decode_vui_param of fw_hevc_dec_header.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no additional |
| CVE-2026-56922 | Analyzed | 未確認 | CWE-441 | In CPM, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction i |
| CVE-2026-56923 | Analyzed | 未確認 | CWE-362 | In handle_unmap_req of tipc_virtio_dev.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional executi |
| CVE-2026-56932 | Analyzed | 未確認 | CWE-20 | In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution pri |
| CVE-2026-56941 | Analyzed | 未確認 | CWE-693 | In multiple functions of fpc_tee_hal.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with no additional exe |
| CVE-2026-56942 | Analyzed | 未確認 | CWE-787 | In ReadTileInfo of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional ex |
| CVE-2026-56945 | Analyzed | 未確認 | CWE-441, CWE-787 | In VPU, there is a possible out-of-bounds write due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User inte |
| CVE-2026-5695 | Deferred | 未確認 | CWE-434 | Arbitrary file upload vulnerability due to a lack of proper validation in upload forms. This allows authenticated users to upload files to the server without restrictions. An attac |
| CVE-2026-56950 | Analyzed | 未確認 | CWE-20 | In validate_ns_buf of mbu_class.rs, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System executi |
| CVE-2026-56958 | Analyzed | 未確認 | CWE-125 | In gf_algo_get_cached_dump_data of gf_algo.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no addition |
| CVE-2026-5696 | Deferred | 未確認 | CWE-79 | Reflected Cross-Site Scripting (XSS) in Microweber. The vulnerability lies in the ‘group’ parameter of the ‘/admin/settings’ endpoint in the administration panel. A successful expl |
| CVE-2026-56960 | Analyzed | 未確認 | CWE-416 | In multiple locations, there is a possible use-after-free due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privilege |
| CVE-2026-56964 | Analyzed | 未確認 | CWE-362, CWE-416 | In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User in |
| CVE-2026-56967 | Analyzed | 未確認 | CWE-122 | In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with no additional execution |
| CVE-2026-56970 | Analyzed | 未確認 | CWE-693 | In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privil |
| CVE-2026-56972 | Analyzed | 未確認 | CWE-787 | In multiple locations, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges n |
| CVE-2026-56973 | Analyzed | 未確認 | CWE-693 | In multiple locations, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileg |
| CVE-2026-56974 | Analyzed | 未確認 | CWE-20, CWE-787 | In Start of AudioRtpPayloadEncoderNode.cpp, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional ex |
| CVE-2026-56975 | Analyzed | 未確認 | CWE-20 | In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote (proximal/adjacent) denial of service with no additional execut |
| CVE-2026-56978 | Analyzed | 未確認 | CWE-120, CWE-125 | In get_global_config_item_addr of gc.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional ex |
| CVE-2026-56979 | Analyzed | 未確認 | CWE-693 | In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges nee |
| CVE-2026-56982 | Analyzed | 未確認 | CWE-693 | In VPU, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User inte |
| CVE-2026-56985 | Analyzed | 未確認 | CWE-441 | In multiple files, there is a possible way to obtain signatures due to type confusion. This could lead to local escalation of privilege with no additional execution privileges need |
| CVE-2026-56986 | Analyzed | 未確認 | CWE-441 | In multiple files, there is a possible out-of-bounds read due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. Us |
| CVE-2026-56988 | Analyzed | 未確認 | CWE-362, CWE-416 | In multiple functions of bluetooth_cco.cc, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privil |
| CVE-2026-56989 | Analyzed | 未確認 | CWE-787 | In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges need |
| CVE-2026-56992 | Analyzed | 未確認 | CWE-441 | In multiple files, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User in |
| CVE-2026-56997 | Analyzed | 未確認 | CWE-787 | In Av1DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no addition |
| CVE-2026-57006 | Analyzed | 未確認 | CWE-693 | In acfw_ffa.c, there is a possible secret read due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User inter |
| CVE-2026-57008 | Analyzed | 未確認 | CWE-20 | In Modem, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges need |
| CVE-2026-57012 | Analyzed | 未確認 | CWE-693 | In the Setup Wizard, there is a possible remote package install due to a missing permission check. This could lead to remote escalation of privilege with no additional execution pr |
| CVE-2026-57014 | Analyzed | 未確認 | CWE-787 | In phNxpNciHal_ext_process_nfc_init_rsp of phNxpNciHal_ext.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privile |
| CVE-2026-57035 | Analyzed | 未確認 | CWE-787 | In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges need |
| CVE-2026-57042 | Analyzed | 未確認 | CWE-441 | In multiple functions of DreamPickerReceiver.kt, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execut |
| CVE-2026-57098 | Analyzed | 未確認 | CWE-347 | Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-57099 | Analyzed | 未確認 | CWE-770 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
| CVE-2026-57112 | Deferred | 未確認 | CWE-306, CWE-346, CWE-862 | PraisonAI is a multi-agent teams system. From praisonaiagents 0.6.0 until 1.6.59 and PraisonAI 3.10.0 until 4.6.59, ToolsMCPServer.run_sse() in src/praisonai-agents/praisonaiagents |
| CVE-2026-57115 | Deferred | 未確認 | CWE-918 | PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, SpiderTools.scrape_page validates only the initial URL and lets requests.Session.get follow redirects auto |
| CVE-2026-57119 | Deferred | 未確認 | CWE-22 | PraisonAI is a multi-agent teams system. Prior to 4.6.59, the unauthenticated Jobs API accepts an absolute or traversing agent_file path in POST /api/v1/runs and passes it to the j |
| CVE-2026-57120 | Deferred | 未確認 | CWE-693 | PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, execute_code sandbox mode permits runtime assembly of blocklisted dunder names and allows str.format or st |
| CVE-2026-57122 | Deferred | 未確認 | CWE-345, CWE-347 | PraisonAI is a multi-agent teams system. Prior to 4.6.59, the WhatsApp and Linear bot webhook handlers verify HMAC signatures only when WHATSAPP_APP_SECRET or LINEAR_WEBHOOK_SECRET |
| CVE-2026-57123 | Deferred | 未確認 | CWE-1327, CWE-306, CWE-350 | PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, ToolsMCPServer.run_sse and launch_tools_mcp_server bind to 0.0.0.0 and create /sse and /messages/ routes w |
| CVE-2026-57124 | Deferred | 未確認 | CWE-306, CWE-78 | PraisonAI is a multi-agent teams system. Prior to 4.6.59, the default UI host applications expose POST /api/mcp/connect without mandatory authentication and accept caller-controlle |
| CVE-2026-57125 | Deferred | 未確認 | CWE-306, CWE-863 | PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.59 and praisonaiagents 1.6.59, the unauthenticated POST /api/v1/runs Jobs API accepts attacker-controlled agent_yaml |
| CVE-2026-57126 | Deferred | 未確認 | CWE-918 | PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, SpiderTools._validate_url calls _host_is_blocked, which checks literal host encodings but does not resolve |
| CVE-2026-57127 | Deferred | 未確認 | CWE-1188, CWE-306 | PraisonAI is a multi-agent teams system. Prior to 4.6.58, recipe serve installs APIKeyAuthMiddleware or JWTAuthMiddleware when an operator selects api-key or JWT authentication, bu |
| CVE-2026-57128 | Deferred | 未確認 | CWE-306 | PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, the SSE server in src/praisonai-agents/praisonaiagents/server/server.py does not consult ServerConfig.auth |
| CVE-2026-57129 | Deferred | 未確認 | CWE-22 | PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, MentionsParser._process_file_mention accepts file-mention values and falls back from workspace-relative re |
| CVE-2026-57130 | Deferred | 未確認 | CWE-20, CWE-77 | PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, src/praisonai-agents/praisonaiagents/tools/email_tools.py interpolates LLM-controlled from_addr, subject, |
| CVE-2026-57131 | Deferred | 未確認 | CWE-306, CWE-862, CWE-94 | PraisonAI is a multi-agent teams system. Prior to 4.6.58, praisonai.jobs.server.create_app mounts praisonai.jobs.router.create_router under /api/v1/runs without authentication or p |
| CVE-2026-57132 | Deferred | 未確認 | CWE-287 | PraisonAI is a multi-agent teams system. Prior to 4.6.62, setting PRAISONAI_CALL_AUTH to disabled makes verify_token accept requests to /api/v1/agents/{id}/invoke without CALL_SERV |
| CVE-2026-57133 | Deferred | 未確認 | CWE-693, CWE-78, CWE-863 | PraisonAI is a multi-agent teams system. From 1.5.1 until 1.7.2, the shell() helper exported from src/praisonai-ts/src/tools/utility-tools.ts checks only the first whitespace-delim |
| CVE-2026-57134 | Deferred | 未確認 | CWE-287, CWE-288, CWE-863 | PraisonAI is a multi-agent teams system. From 1.5.1 until 1.7.2, MCPSecurity.evaluatePolicy() in src/praisonai-ts/src/mcp/security.ts invokes the configured credential validator on |
| CVE-2026-57135 | Deferred | 未確認 | CWE-653, CWE-693 | PraisonAI is a multi-agent teams system. From 1.2.3 until 1.7.2, SandboxExecutor network-isolated mode in src/praisonai-ts/src/cli/features/sandbox-executor.ts uses buildEnv() only |
| CVE-2026-57136 | Deferred | 未確認 | CWE-693, CWE-78, CWE-863 | PraisonAI is a multi-agent teams system. From 1.2.3 until 1.7.2, CommandValidator in src/praisonai-ts/src/cli/features/sandbox-executor.ts validates only the first whitespace-delim |
| CVE-2026-57137 | Deferred | 未確認 | CWE-693, CWE-862, CWE-863 | PraisonAI is a multi-agent teams system. From 1.4.0 until 1.7.2, createAgentLoop() in src/praisonai-ts/src/ai/agent-loop.ts passes executable tools to generateText() before invokin |
| CVE-2026-57138 | Deferred | 未確認 | CWE-184, CWE-693 | PraisonAI is a multi-agent teams system. From 1.4.0 until 1.7.2, codeMode in src/praisonai-ts/src/tools/builtins/code-mode.ts executes untrusted JavaScript with new Function() insi |
| CVE-2026-57139 | Deferred | 未確認 | CWE-1188, CWE-306, CWE-862 | PraisonAI is a multi-agent teams system. From 1.5.0 until 1.7.2, MCPServer.startHttp() in src/praisonai-ts/src/mcp/server.ts binds without a host restriction and forwards every HTT |
| CVE-2026-57140 | Deferred | 未確認 | CWE-306 | PraisonAI is a multi-agent teams system. From 1.6.0 until 1.7.2, AgentOS in src/praisonai-ts/src/os/agentos.ts uses the 0.0.0.0 default from src/praisonai-ts/src/os/config.ts and r |
| CVE-2026-57141 | Deferred | 未確認 | CWE-94 | PraisonAI is a multi-agent teams system. Prior to 1.7.2, the codeMode tool in src/praisonai-ts/src/tools/builtins/code-mode.ts executes model-generated JavaScript with new Function |
| CVE-2026-57145 | Deferred | 未確認 | CWE-22 | PraisonAI is a multi-agent teams system. Prior to 4.6.62, src/praisonai/praisonai/tools/multiedit.py passes the LLM-controlled filepath parameter directly to open for reading and w |
| CVE-2026-57147 | Deferred | 未確認 | CWE-1188, CWE-798 | PraisonAI is a multi-agent teams system. Prior to 0.1.6, praisonai_platform/services/auth_service.py assigns the public dev-secret-change-me value to JWT_SECRET when PLATFORM_JWT_S |
| CVE-2026-57148 | Deferred | 未確認 | CWE-1188, CWE-287, CWE-798 | PraisonAI is a multi-agent teams system. Prior to 0.1.6, praisonai_platform/services/auth_service.py falls back to the public dev-secret-change-me HS256 signing key when PLATFORM_J |
| CVE-2026-57149 | Awaiting Analysis | 未確認 | CWE-95 | plone.app.portlets.portlets provides a Plone-specific user interface for plone.portlets, as well as a standard set of portlets that ship with Plone. Starting in version 5.0.0 and p |
| CVE-2026-57159 | Analyzed | 未確認 | CWE-129, CWE-787 | PJSIP is a free and open source multimedia communication library written in C. Prior to commit 673b978, a remote out-of-bounds read and write can occur in the SDP negotiator when t |
| CVE-2026-57160 | Analyzed | 未確認 | CWE-193 | PJSIP is a free and open source multimedia communication library written in C. Prior to commit d6a0e7f, a buffer overflow can occur in pjsip_generic_array_hdr_print() in pjsip/src/ |
| CVE-2026-57161 | Analyzed | 未確認 | CWE-121 | PJSIP is a free and open source multimedia communication library written in C. Prior to commit acc03b5, a stack buffer overflow exists in PJSUA when processing Service-Route header |
| CVE-2026-57162 | Analyzed | 未確認 | CWE-121 | PJSIP is a free and open source multimedia communication library written in C. Prior to commit a1b707c, a stack buffer overflow exists in the SRTP/SDES media transport when process |
| CVE-2026-57163 | Analyzed | 未確認 | CWE-121 | PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer overflow exists in the GnuTLS TLS backend when parsing the Su |
| CVE-2026-57164 | Analyzed | 未確認 | CWE-122 | PJSIP is a free and open source multimedia communication library written in C. Prior to commit 8d5956a, a heap buffer overflow exists in the PJLIB-UTIL HTTP client (http_client.c) |
| CVE-2026-57165 | Analyzed | 未確認 | CWE-121 | PJSIP is a free and open source multimedia communication library written in C. Prior to commit 628b716, a stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when r |
| CVE-2026-57166 | Analyzed | 未確認 | CWE-121 | PJSIP is a free and open source multimedia communication library written in C. Prior to commit 4472a31, a stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when r |
| CVE-2026-57168 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-56120. Reason: This candidate is a duplicate of CVE-2026-56120. Notes: All CVE users should ref | |
| CVE-2026-57173 | Analyzed | 未確認 | CWE-770 | vLLM is an inference and serving engine for large language models. Prior to 0.24.0, the input_audio handling path for /v1/chat/completions calls AudioMediaIO.load_bytes or AudioMed |
| CVE-2026-57175 | Awaiting Analysis | 未確認 | CWE-287 | Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the SAML backend accepted SAML responses on the Assertion Consumer Service endpoint wi |
| CVE-2026-57176 | Awaiting Analysis | 未確認 | CWE-289 | Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the Vend OAuth2 backend used only the numeric Vend user_id as the social-auth UID. Whe |
| CVE-2026-57177 | Awaiting Analysis | 未確認 | CWE-352 | Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the LoginRadius backend did not validate OAuth state during the authentication flow. A |
| CVE-2026-57178 | Awaiting Analysis | 未確認 | CWE-287, CWE-347 | Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the `vk-app` backend accepted VK application callback data without verifying the callb |
| CVE-2026-57179 | Awaiting Analysis | 未確認 | CWE-384 | Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the partial-pipeline resume mechanism accepted `partial_token` as a bearer credential |
| CVE-2026-57222 | Analyzed | 未確認 | CWE-697 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, crafted IPv4 and IPv6 address pairs |
| CVE-2026-57223 | Analyzed | 未確認 | CWE-428 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, the Windows service installation an |
| CVE-2026-57224 | Analyzed | 未確認 | CWE-400, CWE-770 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the DHCP parser in rust/src/dhcp/dhcp. |
| CVE-2026-57225 | Analyzed | 未確認 | CWE-476 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, src/datasets-context-json.c assumes th |
| CVE-2026-57226 | Analyzed | 未確認 | CWE-122, CWE-190 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, HTTP SWF decompression with the non |
| CVE-2026-57227 | Analyzed | 未確認 | CWE-400, CWE-770 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.0 until 7.0.17 and 8.0.6, the MQTT parser in rust/src |
| CVE-2026-57228 | Analyzed | 未確認 | CWE-125 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.13 until 7.0.17, the SMTP MIME quoted-printable decod |
| CVE-2026-57229 | Analyzed | 未確認 | CWE-665 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the SMTP MIME parser in rust/src/mime/ |
| CVE-2026-5729 | Awaiting Analysis | 未確認 | CWE-416 | Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GP |
| CVE-2026-57440 | Deferred | 未確認 | CWE-79, CWE-80 | The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev and various parser tags for embedding video clips from various video sharing services. Pri |
| CVE-2026-57441 | Deferred | 未確認 | CWE-178, CWE-41 | MCPVault is a lightweight Model Context Protocol server for safe access to files in an Obsidian vault. Prior to 0.11.4, PathFilter in src/pathfilter.ts compiles restricted-director |
| CVE-2026-57442 | Deferred | 未確認 | CWE-22, CWE-538 | MCPVault is a lightweight Model Context Protocol server for safe access to files in an Obsidian vault. Prior to 0.11.5, PathFilter in src/pathfilter.ts uses root-anchored deny-list |
| CVE-2026-57443 | Deferred | 未確認 | CWE-306 | SCBE-AETHERMOORE is a geometric AI governance and evaluation framework. Starting in version 4.0.2 and prior to version 4.2.1, the AetherBrowser API server (`scripts/aetherbrowser/a |
| CVE-2026-57445 | Deferred | 未確認 | CWE-703 | Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools with customizable parameters and voting mechanisms. In dfba919e |
| CVE-2026-57449 | Deferred | 未確認 | CWE-200, CWE-284, CWE-863 | Actual is a local-first personal finance tool. Prior to 26.7.0, Actual Sync Server's CORS proxy is intended to let authenticated users fetch resources only from repositories listed |
| CVE-2026-57497 | Deferred | 未確認 | CWE-770 | webtransport-go is an implementation of the WebTransport protocol. Prior to 0.11.1, Session.parseNextCapsule() in session.go skips an unknown WebTransport capsule on the HTTP/3 req |
| CVE-2026-57570 | Deferred | 未確認 | CWE-862 | backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 |
| CVE-2026-57576 | Awaiting Analysis | 未確認 | CWE-400 | plone.app.dexterity is a content-type system for the Plone content management system, and plone.app.contenttypes provides Plone’s Dexterity-based content types. Plone.app.dexterity |
| CVE-2026-57577 | Deferred | 未確認 | CWE-1333 | DotVVM is an open source MVVM framework for web applications. Prior to 4.2.11, 4.3.15, and 5.0.0-preview09-final, a route containing multiple unconstrained parameters in one path s |
| CVE-2026-57578 | Deferred | 未確認 | CWE-862 | DotVVM is an open source MVVM framework for web applications. Prior to 4.2.11, 4.3.15, and 5.0.0-preview09-final, AuthorizeActionFilter performs no authorization because its explic |
| CVE-2026-57579 | Deferred | 未確認 | CWE-862 | Alchemy is an open source content management system engine written in Ruby on Rails. Prior to 7.4.15, 8.0.15, 8.1.14, and 8.2.6, the unauthenticated GET /api/pages/nested endpoint |
| CVE-2026-57581 | Deferred | 未確認 | CWE-434 | DotVVM is an open source MVVM framework for web applications. Prior to 4.2.11, 4.3.15, and 5.0.0-preview09-final, applications with configured file upload storage allow unauthentic |
| CVE-2026-57583 | Deferred | 未確認 | CWE-116, CWE-94 | OpenZeppelin Contracts Wizard is a web application to interactively build a contract out of components from OpenZeppelin Contracts. Prior to @openzeppelin/wizard 0.10.11, @openzepp |
| CVE-2026-57586 | Deferred | 未確認 | CWE-78 | CodeRAG is a lightweight semantic code search and distillation utility for AI coding agents. Prior to 1.3.1, the default agent-coderag sync flow in code_rag/entry/cli.py calls sync |
| CVE-2026-57590 | Awaiting Analysis | 未確認 | CWE-863 | A missing authorization vulnerability exists in the Task Group APIs of Apache DolphinScheduler. The affected APIs do not properly verify whether the authenticated user has permissi |
| CVE-2026-57777 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Automattic WooCommerce allows Blind SQL Injection. This issue affects WooComm |
| CVE-2026-57822 | Analyzed | 未確認 | CWE-502 | When the broker is processing message-based management requests, sent by an authenticated messaging client that is authorized with MANAGE permission to perform management-via-messa |
| CVE-2026-57825 | Deferred | 未確認 | CWE-61 | In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files. |
| CVE-2026-57842 | Awaiting Analysis | 未確認 | CWE-415, CWE-416 | NetBSD contains a use-after-free and double-free vulnerability in msg_recv_copyin() within the COMPAT_NETBSD32 compatibility layer due to a missing return statement before the clea |
| CVE-2026-57843 | Awaiting Analysis | 未確認 | CWE-732 | NetBSD contains an information disclosure vulnerability in mm_open() within sys/dev/mm.c that allows unprivileged local users to obtain real kernel virtual addresses by opening wor |
| CVE-2026-57844 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-57846 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-57847 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-57854 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-57861 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-57864 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-57866 | Analyzed | 未確認 | CWE-918 | Server side request forgery in Apache Impala versions 4.4.x and 4.5.x. Authenticated Impala users with permissions to execute the ai_generate_text() function can exfiltrate secret |
| CVE-2026-57967 | Modified | 未確認 | CWE-306 | An unauthenticated remote attacker can craft a CORE protocol SESSION_REATTACH packet to steal an existing session and assume ongoing execution of the previously authenticated sessi |
| CVE-2026-58004 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privilege Escalation and Overflow Buffers. This issue affects Trusted Firmware: through socfpga_v2.14.0. |
| CVE-2026-58005 | Awaiting Analysis | 未確認 | CWE-119 | Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privilege Escalation and Overflow Buffers. This issue affects Trusted Firmware: through socfpga_v2.14.0. |
| CVE-2026-58006 | Awaiting Analysis | 未確認 | CWE-822 | Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Tr |
| CVE-2026-58007 | Awaiting Analysis | 未確認 | CWE-822 | Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Tr |
| CVE-2026-58008 | Awaiting Analysis | 未確認 | CWE-121 | Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trus |
| CVE-2026-58113 | Deferred | 未確認 | CWE-79 | A vulnerability has been identified in Teamcenter V2412 (All versions < V2412.0013), Teamcenter V2506 (All versions < V2506.0010), Teamcenter V2512 (All versions < V2512.2607), Tea |
| CVE-2026-58146 | Awaiting Analysis | 未確認 | CWE-78 | WNC T-Mobile 5G Box IDU router is vulnerable to OS command injection vulnerability. The vulnerability exists within the /cgi-bin/portal.cgi endpoint, specifically through the cli_c |
| CVE-2026-58147 | Awaiting Analysis | 未確認 | CWE-78 | WNC T-Mobile 5G Box IDU router contains an OS command injection vulnerability in the portal.cgi component's password change functionality. The application improperly neutralizes sp |
| CVE-2026-58196 | Deferred | 未確認 | CWE-918 | ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol (MCP) servers. Prior to 0.31.0, remote.Handler.Authenticate in pkg/auth/remote/ha |
| CVE-2026-58197 | Deferred | 未確認 | CWE-284, CWE-306 | ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol servers. Prior to ToolHive CLI 0.30.1 and ToolHive Studio 0.38.0, locally run MCP |
| CVE-2026-58200 | Deferred | 未確認 | CWE-347 | Payload Plugins is a collection of plugins designed to enhance Payload CMS. From 0.3.0 until 0.4.0, @jhb.software/payload-cloudinary-plugin deployments with clientUploads enabled e |
| CVE-2026-58201 | Deferred | 未確認 | CWE-918 | Lokka is a Model Context Protocol server for Microsoft 365, including Microsoft Graph and other services. Prior to 2.1.2, the Lokka-Microsoft tool in src/mcp/src/main.ts uses direc |
| CVE-2026-58234 | Awaiting Analysis | 未確認 | CWE-776 | SAP Process Integration (SOAP Adapter) allows a privileged user to send specially crafted requests containing deeply nested entity definitions, which under certain conditions could |
| CVE-2026-58240 | Awaiting Analysis | 未確認 | CWE-308 | SAP NetWeaver Message Server does not sufficiently validate the authenticity of internal application server components during registration. An unauthenticated attacker with network |
| CVE-2026-58264 | Deferred | 未確認 | CWE-122 | FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 1.1.2 until 2.5.6, the FluidSynth command handler accepts a pitch_bend_range command whose channe |
| CVE-2026-58268 | Awaiting Analysis | 未確認 | CWE-789 | SIPGO is a library for writing SIP services in the GO language. Prior to 1.4.1, ParserStream.parseSingle in sip/parser_stream.go allocates a SIP body buffer from the client-control |
| CVE-2026-58269 | Deferred | 未確認 | CWE-288 | Sync-in Server is an open-source platform for file storage, sharing, collaboration, and syncing. Prior to version 2.4.0, `POST /api/auth/token` authenticates with username and pass |
| CVE-2026-58270 | Deferred | 未確認 | CWE-1333 | Sync-in Server is an open-source platform for file storage, sharing, collaboration, and syncing. Prior to version 2.4.0, the sync diff endpoint compiles a user-supplied string into |
| CVE-2026-58271 | Deferred | 未確認 | CWE-307 | Sync-in Server is an open-source platform for file storage, sharing, collaboration, and syncing. Prior to version 2.4.0, `POST /api/app/sync/register` accepts credentials and a TOT |
| CVE-2026-58272 | Deferred | 未確認 | CWE-208 | Sync-in Server is an open-source platform for file storage, sharing, collaboration, and syncing. Versions prior to 2.4.1 contain an observable timing discrepancy in the login endpo |
| CVE-2026-58400 | Deferred | 未確認 | CWE-470, CWE-94 | GeoNetwork is a catalog application to manage spatially referenced resources. Prior to versions 4.4.12 and 4.2.17, the Saxon XSLT processor used to render formatters is configured |
| CVE-2026-58463 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-58464 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-58483 | Deferred | 未確認 | CWE-400 | mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.7.1, web_url_read in src/index.ts passes |
| CVE-2026-58485 | Deferred | 未確認 | CWE-918 | mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.7.1, web_url_read receives its caller-co |
| CVE-2026-58491 | Deferred | 未確認 | CWE-79 | Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.25.5, the /@warpgate/api/sso/providers/:name/start endpoint stores an attacker-controlled next pa |
| CVE-2026-58502 | Deferred | 未確認 | CWE-78 | githubtoplanguages generates a user's top GitHub languages as an SVG. The .github/workflows/discord-issue.yml workflow runs when an issue is opened or closed and interpolates githu |
| CVE-2026-58504 | Deferred | 未確認 | CWE-116, CWE-79 | draw.io is a configurable diagramming and whiteboarding application. Prior to version 30.2.5, opening or importing a crafted .drawio file can execute attacker-controlled JavaScript |
| CVE-2026-58566 | Awaiting Analysis | 未確認 | CWE-863 | Dell PowerStore, an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privil |
| CVE-2026-58567 | Analyzed | 未確認 | CWE-78 | Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary comm |
| CVE-2026-58569 | Analyzed | 未確認 | CWE-829 | Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could potentially exploit this vul |
| CVE-2026-58571 | Analyzed | 未確認 | CWE-78 | Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary comm |
| CVE-2026-58572 | Analyzed | 未確認 | CWE-94 | Dell PowerStore contains a Code Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with r |
| CVE-2026-58575 | Analyzed | 未確認 | CWE-290 | Dell PowerStore contains an Authentication Bypass by Spoofing vulnerability. An authenticated attacker could potentially exploit this vulnerability to escalate privileges to Admini |
| CVE-2026-58599 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally. |
| CVE-2026-58600 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to elevate privileges locally. |
| CVE-2026-58611 | Analyzed | 未確認 | CWE-285 | Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally. |
| CVE-2026-58649 | Analyzed | 未確認 | CWE-346 | Origin validation error in .NET allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-58678 | Analyzed | 未確認 | CWE-693 | In Bootloader, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. Use |
| CVE-2026-58679 | Analyzed | 未確認 | CWE-122 | In gf_ta_test_set_config of gf_ta_test.c, there is a possible heap buffer overflow due to a logic error in the code. This could lead to local escalation of privilege with no additi |
| CVE-2026-58683 | Analyzed | 未確認 | CWE-20, CWE-787 | In IP Multimedia Subsystem, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileg |
| CVE-2026-58691 | Analyzed | 未確認 | CWE-20 | In FsmReleaseKey of fsm.c, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution pri |
| CVE-2026-58695 | Analyzed | 未確認 | CWE-120 | In gmc_phy_lp3_exit_restore_registers of phy_power.c, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege wi |
| CVE-2026-58698 | Analyzed | 未確認 | CWE-441 | In ap_pmic_poll_msg_handler of ap_pmic_ipc.c, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution |
| CVE-2026-58699 | Analyzed | 未確認 | CWE-125 | In Vp9DecEndOfStream of vp9hwd_output.cc, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with no addition |
| CVE-2026-58701 | Analyzed | 未確認 | CWE-362, CWE-787 | In trusty_dputc of generic-arm64-smcall.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with System execution p |
| CVE-2026-58704 | Analyzed | 掲載 | CWE-285, CWE-693 | In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of privilege with no additional |
| CVE-2026-58710 | Analyzed | 未確認 | CWE-120 | In DecodeFilmGrainParams of film_grain_dec.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional ex |
| CVE-2026-58716 | Analyzed | 未確認 | CWE-362, CWE-367 | In multiple locations, there is a possible time-of-check to time-of-use due to a race condition. This could lead to local escalation of privilege with System execution privileges n |
| CVE-2026-58718 | Analyzed | 未確認 | CWE-20 | In smmu_detach_dev_nested of arm-smmu-v3.c, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with Syst |
| CVE-2026-58721 | Analyzed | 未確認 | CWE-457 | In multiple locations, there is a possible information disclosure due to uninitialized memory use. This could lead to local information disclosure with System execution privileges |
| CVE-2026-58724 | Analyzed | 未確認 | CWE-362, CWE-416 | In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User in |
| CVE-2026-58726 | Analyzed | 未確認 | CWE-693 | In FsmReleaseKey of fsm.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privilege |
| CVE-2026-58728 | Analyzed | 未確認 | CWE-362 | In ARM64_TLBI of mmu.h, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges need |
| CVE-2026-58731 | Analyzed | 未確認 | CWE-125, CWE-457 | In multiple functions of physmem_extmem_linux.c, there is a possible out-of-bounds read due to uninitialized data. This could lead to local information disclosure with no additiona |
| CVE-2026-58734 | Analyzed | 未確認 | CWE-362, CWE-787 | In google_mba_recv_msg of google_mba_poll.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with no additional ex |
| CVE-2026-58739 | Analyzed | 未確認 | CWE-441 | In platform_msg_handler_init of default_msg_handlers.c, there is a possible confused deputy due to a confused deputy. This could lead to local escalation of privilege with System e |
| CVE-2026-58744 | Analyzed | 未確認 | CWE-20 | In multiple locations, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with no additional execution p |
| CVE-2026-58747 | Analyzed | 未確認 | CWE-693 | In smmu_detach_dev of arm-smmu-v3.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution |
| CVE-2026-58751 | Analyzed | 未確認 | CWE-416 | In multiple functions of arm-smmu-v3.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with System execution |
| CVE-2026-58755 | Analyzed | 未確認 | CWE-693 | In smmu_install_nested_ste of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with Sys |
| CVE-2026-58765 | Analyzed | 未確認 | CWE-693 | In GPU, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User inter |
| CVE-2026-58766 | Analyzed | 未確認 | CWE-693 | In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with no addit |
| CVE-2026-58767 | Analyzed | 未確認 | CWE-693 | In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System e |
| CVE-2026-58773 | Analyzed | 未確認 | CWE-787 | In link_load_gnss_image of link_device.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execut |
| CVE-2026-58820 | Analyzed | 未確認 | CWE-122 | In multiple locations, there is a possible memory safety issue due to integer overflow. This could lead to local escalation of privilege with no additional execution privileges req |
| CVE-2026-58822 | Analyzed | 未確認 | CWE-704 | In multiple functions of ftsmooth.c, there is a possible memory safety issue due to improper casting. This could lead to remote code execution with no additional execution privileg |
| CVE-2026-58823 | Analyzed | 未確認 | CWE-120 | In stpropnci_process_std of stpropnci_std.cc, there is a possible memory safety issue due to a missing bounds check. This could lead to local escalation of privilege with no additi |
| CVE-2026-58839 | Analyzed | 未確認 | CWE-120 | In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead to local escalation of privilege with no additional execution |
| CVE-2026-58846 | Analyzed | 未確認 | CWE-269 | In kvm_iommu_map_sg of iommu.c, there is a possible use after free due to a missing permission check. This could lead to local escalation of privilege with no additional execution |
| CVE-2026-58848 | Analyzed | 未確認 | CWE-362 | In multiple functions of alloc.c, there is a possible unauthorized read/write access due to a race condition. This could lead to local escalation of privilege with no additional ex |
| CVE-2026-58874 | Analyzed | 未確認 | CWE-269 | In multiple functions of SmsController.java, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no |
| CVE-2026-58941 | Analyzed | 未確認 | CWE-20 | In multiple functions of iommu.c, there is a possible out of bounds read/write due to improper input validation. This could lead to local escalation of privilege with no additional |
| CVE-2026-59156 | Analyzed | 未確認 | CWE-674 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, A |
| CVE-2026-59157 | Deferred | 未確認 | CWE-290, CWE-807 | webhookd is a minimalist webhook server that triggers shell scripts and external processes through HTTP requests. Prior to 1.22.0, webhookd deployments without htpasswd authenticat |
| CVE-2026-59160 | Deferred | 未確認 | CWE-306 | Yeger is a monorepo for npm packages maintained under the yeger scope. Prior to 2.8.9, the turbo-graph package starts its embedded Next.js server from packages/turbo-graph/src/inde |
| CVE-2026-59163 | Deferred | 未確認 | CWE-347 | Mnemosyne is a memory layer for artificial intelligence agents. Prior to v3.10.1, the auth check in mnemosyne/core/sync_server.py parsed the JWT's header and payload using base64 d |
| CVE-2026-59167 | Awaiting Analysis | 未確認 | CWE-79 | SunEditor is a lightweight and powerful WYSIWYG editor in vanilla JavaScript with no dependencies. Prior to 2.47.11, the sanitizer in src/lib/core.js does not consistently reject n |
| CVE-2026-59168 | Deferred | 未確認 | CWE-674 | Dasel is a command-line tool and library for querying, modifying, and transforming data structures. From 3.0.0 until 3.11.1, parsing/json/json_reader.go decodeValue, decodeObject, |
| CVE-2026-59178 | Awaiting Analysis | 未確認 | CWE-306 | ESPHome Device Builder Dashboard is a dashboard for the ESPHome home management software. Prior to version 1.0.12, the dashboard reads its authentication credentials from `$ESPHOME |
| CVE-2026-59181 | Analyzed | 未確認 | CWE-121, CWE-787 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, A |
| CVE-2026-5920 | Deferred | 未確認 | CWE-79 | The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'shortcode_content' parameter of the bt_bb_shortcode shortcode in all versions up to |
| CVE-2026-5924 | Deferred | 未確認 | CWE-79 | The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Google Maps block's 'customStyle' attribute in all versions up to, and inclu |
| CVE-2026-59341 | Awaiting Analysis | 未確認 | CWE-203 | A security vulnerability exists in the Sealed Secrets controller's unauthenticated POST endpoints. By submitting a modified payload containing custom Go template logic in spec.temp |
| CVE-2026-59563 | Awaiting Analysis | 未確認 | CWE-305 | Zscaler MCP Server versions 0.7.0 and 0.7.1 has an issue where HMAC confirmation tokens were not bound to the target resource identifier, allowing an MCP client or agent to replay |
| CVE-2026-59569 | Awaiting Analysis | 未確認 | CWE-20 | An improper input validation vulnerability in Zscaler Client Connector on Android and ChromeOS allows an attacker to potentially bypass Zscaler controls. |
| CVE-2026-59570 | Awaiting Analysis | 未確認 | CWE-20 | On affected versions of Zscaler client connector, a pre-installed peer app can tear down the Zscaler tunnel, force user logout, and toggle packet capture. |
| CVE-2026-59679 | Awaiting Analysis | 未確認 | CWE-787 | fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) indexes the per-character encoding[] array using num_chars from the FS_QueryXBitmaps16 reply, but that array |
| CVE-2026-59680 | Awaiting Analysis | 未確認 | CWE-1287, CWE-78 | An OS command injection vulnerability was found in yast2-users. When displaying the "Password Settings" tab of a user, get_password_term() in src/include/users/dialogs.rb read the |
| CVE-2026-59681 | Awaiting Analysis | 未確認 | CWE-78 | A OS command injection vulnerability in yast2-auth-client allows an attacker who controls Active Directory configuration values to execute arbitrary commands as root on the configu |
| CVE-2026-59696 | Deferred | 未確認 | CWE-1284 | Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP stdlib allows a remote attacker to degrade availability by supplying a URI whose port component is a |
| CVE-2026-59739 | Analyzed | 未確認 | CWE-862 | Information disclosure via SetWatches reconnect replay in Apache ZooKeeper due to missing ACL check. An attacker can discover ACL-restricted paths by registering exists-watches on |
| CVE-2026-59814 | Deferred | 未確認 | CWE-79 | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.7, Joplin Server's GET /shares/:id?resource_id= route serves |
| CVE-2026-59815 | Deferred | 未確認 | CWE-863 | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.7, Joplin Server's ItemModel.checkIfAllowed() authorizes writ |
| CVE-2026-59816 | Deferred | 未確認 | CWE-22 | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.7, the GET /api/transcribe/:id and POST /api/transcribe/:id h |
| CVE-2026-59823 | Awaiting Analysis | 未確認 | CWE-918 | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.9, an authenticated LiteLLM Proxy caller with a valid virtual key can place api_ |
| CVE-2026-59830 | Deferred | 未確認 | CWE-79 | Discourse is an open-source discussion platform. Prior to 2026.7.0, the post action component failed to escape user-controlled display names before interpolating them into an HTML |
| CVE-2026-59944 | Awaiting Analysis | 未確認 | CWE-22, CWE-59 | Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and from 2.3.0 until 2.10.3, a malicious or compromised dependency can bypass the earlier CVE-2026-5994 |
| CVE-2026-59956 | Analyzed | 未確認 | CWE-125 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, An |
| CVE-2026-59960 | Deferred | 未確認 | CWE-78 | Argos JavaScript provides official Argos SDKs for JavaScript. Prior to Argos core package version 6.2.1, attacker-controlled CI branch or ref values from GITHUB_HEAD_REF or ARGOS_B |
| CVE-2026-59965 | Deferred | 未確認 | CWE-863 | Payload Plugins is a collection of plugins designed to enhance Payload CMS. In 0.7.0, @jhb.software/payload-alt-text-plugin exposes POST /api/alt-text-plugin/generate and POST /api |
| CVE-2026-59969 | Analyzed | 未確認 | CWE-297 | Apache ZooKeeper quorum TLS fails to enforce peer hostname verification in FIPS-mode deployments. When sslQuorum=true, zookeeper.fips-mode=true, ssl.quorum.hostnameVerification=tru |
| CVE-2026-59971 | Awaiting Analysis | 未確認 | CWE-306, CWE-346 | MySQL MCP Server is a Model Context Protocol server that enables secure interaction with MySQL databases. Prior to 0.4.2, setting MCP_TRANSPORT=sse causes src/mysql_mcp_server/serv |
| CVE-2026-59973 | Deferred | 未確認 | CWE-918 | FrontMCP is a TypeScript-first framework for the Model Context Protocol (MCP). From mcp-from-openapi 2.3.0 until 2.5.0 and from frontmcp and @frontmcp/adapters 1.2.1 until 1.5.0, l |
| CVE-2026-59974 | Awaiting Analysis | 未確認 | CWE-22 | Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. Prior to 1.14.0, stanza.resources.common.unzip in stanza/ |
| CVE-2026-59980 | Deferred | 未確認 | CWE-400 | hpack is an HTTP/2 Header Encoding for Python. Prior to version 4.2.0, unbounded variable integer decoding can cause run-away computation on malformed input leading to O(n^2) runti |
| CVE-2026-59990 | Deferred | 未確認 | CWE-770 | Jawn is an open source JSON parser. Prior to 1.7.0, Jawn parse methods accept arbitrarily deep JSON array and object nesting without a depth limit, allowing a remote attacker who c |
| CVE-2026-59991 | Awaiting Analysis | 未確認 | CWE-789 | psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to 1.17.4, PSDImage.composite() and PSDImage.numpy() allocated output buffers from attacker-controll |
| CVE-2026-60096 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-60097 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-60098 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-60099 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-60100 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-60101 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-60115 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-6071 | Awaiting Analysis | 未確認 | CWE-787 | A remote code execution security issue exists in the affected products when parsing DOE files that could allow a remote attacker to write past the end of an allocated object and ex |
| CVE-2026-6082 | Deferred | 未確認 | CWE-79 | Stored Cross-Site Scripting (XSS) vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/p |
| CVE-2026-6083 | Deferred | 未確認 | CWE-79 | Stored Cross-Site Scripting (XSS) vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint ' /inventory/configuration/ |
| CVE-2026-6084 | Deferred | 未確認 | CWE-79 | Stored Cross-Site Scripting (XSS) vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/v |
| CVE-2026-6085 | Deferred | 未確認 | CWE-79 | Stored Cross-Site Scripting (XSS) vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/s |
| CVE-2026-6086 | Deferred | 未確認 | CWE-79 | Stored Cross-Site Scripting (XSS) vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/s |
| CVE-2026-6087 | Deferred | 未確認 | CWE-79 | Stored Cross-Site Scripting (XSS) vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/c |
| CVE-2026-6088 | Deferred | 未確認 | CWE-79 | Stored Cross-Site Scripting (XSS) vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/c |
| CVE-2026-6103 | Analyzed | 未確認 | CWE-190 | phar_tar_number() parses the octal size field of a TAR header into a uint32_t with no overflow check. The field is 11 octal digits wide and holds values up to 0x1FFFFFFFF, so a siz |
| CVE-2026-61396 | Rejected | 未確認 | Rejected reason: Did not need CVE ID | |
| CVE-2026-61409 | Analyzed | 未確認 | CWE-78 | Dell Secure Connect Gateway (SCG) 5.0 Application, versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injectio |
| CVE-2026-61410 | Analyzed | 未確認 | CWE-862 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authorization vulnerability. An unauthenticated at |
| CVE-2026-61413 | Analyzed | 未確認 | CWE-269 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Privilege Management vulnerability. A low privileged attacker with remote acces |
| CVE-2026-61516 | Deferred | 未確認 | CWE-522 | Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an information disclosure vulnerability that allows unauthenticated attackers to retrieve the administrator password by send |
| CVE-2026-61517 | Deferred | 未確認 | CWE-78 | Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an OS command injection vulnerability in the ping diagnostic handler that allows authenticated administrators to execute arb |
| CVE-2026-61519 | Deferred | 未確認 | CWE-863 | Liberu CRM 0.9.1 before 10.0.0 contains a broken access control vulnerability that allows any user holding a pending team invitation to invite additional attacker-controlled accoun |
| CVE-2026-61525 | Deferred | 未確認 | CWE-22 | Zammad is a web based open source helpdesk/customer support system. In 7.0.2 and 7.1.0, zammad's session management for websocket and long-polling connections is susceptible to a p |
| CVE-2026-61534 | Deferred | 未確認 | CWE-1321 | Yayson is a library for serializing and reading JSON API data in JavaScript. Prior to 4.3.0, Store and LegacyStore use attacker-controlled JSON:API type, id, and relationship names |
| CVE-2026-61541 | Deferred | 未確認 | CWE-770 | Zapros, a Python HTTP client, prior to version 0.14.0 is vulnerable to denial of service when an application requests content from an untrusted server, or follows a redirect to one |
| CVE-2026-61544 | Awaiting Analysis | 未確認 | CWE-248 | libp2p-rust is the official Rust language implementation of the libp2p networking stack. Prior to 0.13.1, libp2p-quic could panic during an inbound QUIC handshake when a remote pee |
| CVE-2026-61548 | Awaiting Analysis | 未確認 | CWE-121 | Rsyslog is a rocket-fast system for log processing. From 7.5.4 until 8.2606.0, the optional mmpstrucdata plugin's parseSD_PARAM function in plugins/mmpstrucdata/mmpstrucdata.c stor |
| CVE-2026-61549 | Awaiting Analysis | 未確認 | CWE-269, CWE-862 | Woodpecker is a CI/CD engine. From 1.0.0 until 3.16.0, pipeline/backend/kubernetes/backend_options.go defines backend_options.kubernetes.serviceAccountName, and the Kubernetes back |
| CVE-2026-61550 | Awaiting Analysis | 未確認 | CWE-862 | Icinga 2 is an open source monitoring system. From 2.8 until 2.14.9, 2.15.4, and 2.16.2, certificate update JSON-RPC message handling does not validate that the sender is a trusted |
| CVE-2026-61551 | Awaiting Analysis | 未確認 | CWE-674 | Icinga 2 is an open source monitoring system. Prior to 2.14.9, 2.15.4, and 2.16.2, parsing deeply nested JSON can exhaust the call stack because nesting depth is not bounded. The a |
| CVE-2026-61552 | Awaiting Analysis | 未確認 | CWE-94 | Icinga 2 is an open source monitoring system. From 2.4 until 2.14.9, 2.15.4, and 2.16.2, the /v1/objects API writes attacker-controlled template names into generated configuration |
| CVE-2026-61554 | Deferred | 未確認 | CWE-400 | emp3r0r is a C2 designed by Linux users for Linux environments. Prior to version 4.2.5, the `http_poll` C2 transport accepts attacker-controlled HTTP polling sessions before CBOR ` |
| CVE-2026-61559 | Deferred | 未確認 | CWE-918 | `@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Starting in version 0.0.1 and prior to version 2.1.27, when the environment variable `ENABLE_DYNAMIC_API_URL=t |
| CVE-2026-61560 | Deferred | 未確認 | CWE-22 | `@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Prior to version 2.1.27, the SSE transport mode (`SSE=true`) exposes all MCP tools without any authentication. |
| CVE-2026-61568 | Deferred | 未確認 | CWE-350 | `@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Versions prior to 2.1.30 expose the Streamable HTTP MCP endpoint without an effective Host or Origin allowlist |
| CVE-2026-61570 | Awaiting Analysis | 未確認 | CWE-611 | MPXJ is an open source library to read and write project plans from a variety of file formats and databases. From 5.5.5 until 16.4.1, MerlinReader creates a DocumentBuilder with de |
| CVE-2026-61588 | Deferred | 未確認 | CWE-200, CWE-359 | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, when a Django `Model` instance is assigned to |
| CVE-2026-61589 | Deferred | 未確認 | CWE-348, CWE-639 | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the WebSocket `handle_mount` and `ViewRuntime |
| CVE-2026-61590 | Deferred | 未確認 | CWE-306, CWE-668 | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, djust's observability endpoints expose live v |
| CVE-2026-61591 | Deferred | 未確認 | CWE-345, CWE-915 | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, for views that opt into state snapshots, the |
| CVE-2026-61592 | Deferred | 未確認 | CWE-384, CWE-639, CWE-862 | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, SSE sessions were keyed solely by a client-ch |
| CVE-2026-61593 | Deferred | 未確認 | CWE-352 | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the SSE client→server POST endpoints are `@cs |
| CVE-2026-61594 | Deferred | 未確認 | CWE-306, CWE-862 | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the live (WebSocket) transport authorizes a m |
| CVE-2026-61595 | Deferred | 未確認 | CWE-636, CWE-862 | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, `djust.tenants` isolation was enforced only o |
| CVE-2026-61596 | Deferred | 未確認 | CWE-639, CWE-862 | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, djust's per-object authorization (`get_object |
| CVE-2026-61597 | Deferred | 未確認 | CWE-79 | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, many djust built-in component template tags ( |
| CVE-2026-61598 | Deferred | 未確認 | CWE-915 | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, `djust.mixins.model_binding.ModelBindingMixin |
| CVE-2026-61599 | Deferred | 未確認 | CWE-470 | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the djust live transport resolves the LiveVie |
| CVE-2026-61604 | Deferred | 未確認 | CWE-285, CWE-862 | The ixo Blockchain is a Layer 1 blockchain that runs on both Testnet and Mainnet. Prior to version 8.0.0, the x/bonds module moved funds from an address that was resolved from a DI |
| CVE-2026-61608 | Deferred | 未確認 | CWE-613 | SolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, `UserInvitation` entities have no expiry timestamp. Invitation links mailed to users remain valid indefin |
| CVE-2026-61612 | Deferred | 未確認 | CWE-918 | CKAN MCP Server is a tool for querying CKAN open data portals. Prior to version 0.4.108, the SSRF guard `validateServerUrl` (added for CVE-2026-33060, extended for CVE-2026-53509) |
| CVE-2026-61614 | Deferred | 未確認 | CWE-598 | SolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, the REST API authenticator accepts bearer tokens via a `?token=` URL query parameter as a fallback to the |
| CVE-2026-61628 | Awaiting Analysis | 未確認 | CWE-362 | nginx ignition is a user interface for the nginx web server. Prior to version 2.41.1, `POST /api/users/onboarding/finish` is registered as anonymous (unauthenticated) and creates a |
| CVE-2026-61629 | Awaiting Analysis | 未確認 | CWE-770 | nginx ignition is a user interface for the nginx web server. In versions 2.29.0 through 2.40.0, the gin i18n middleware in nginx-ignition's API server runs in front of every HTTP r |
| CVE-2026-61630 | Deferred | 未確認 | CWE-287 | nginx ignition is a user interface for the nginx web server. In versions 2.33.0 through 2.35.0, any user that has enabled the OTP 2FA can have their TOTP reused during the standard |
| CVE-2026-61633 | Deferred | 未確認 | CWE-835 | NanoMQ is an MQTT broker. Prior to 0.24.14, the NanoMQ client function nni_mqtt_msg_decode_unsubscribe() in nng/src/supplemental/mqtt/mqtt_codec.c does not handle a failed read_uin |
| CVE-2026-61647 | Deferred | 未確認 | CWE-22, CWE-73 | NotebookLM MCP is an MCP server and HTTP service for interacting with Google NotebookLM and exporting generated content to local vault directories. Versions 1.6.0 through 2.0.2 con |
| CVE-2026-61652 | Deferred | 未確認 | CWE-770 | Zapros, a Python HTTP client, prior to version 0.14.0 is vulnerable to denial of service via memory exhaustion. The issue affects all callers who streamed compressed responses rely |
| CVE-2026-61667 | Deferred | 未確認 | CWE-89, CWE-95 | DIRAC is an interware, meaning a software framework for distributed computing. Prior to versions 8.0.79, 9.0.22, and 9.1.10, DataManagementSystem/Service/FileCatalogHandler.py chec |
| CVE-2026-61668 | Deferred | 未確認 | CWE-295 | DIRAC is an interware, meaning a software framework for distributed computing. Prior to versions 8.0.79, 9.0.22, and 9.1.10, WorkloadManagementSystem/Utilities/PilotWrapper.py pilo |
| CVE-2026-61670 | Deferred | 未確認 | CWE-214 | microsandbox is an easy, fast, local-first microVM runtime and library. Prior to 0.5.10, sdk/rust/lib/runtime/spawn.rs serializes NetworkConfig secret values into the --network-con |
| CVE-2026-61672 | Deferred | 未確認 | CWE-697, CWE-863 | Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to 0.13.7, ForbiddenListSpec.ExactMatch in pkg/api/forbidden_list.go sorts denied metadata keys case-ins |
| CVE-2026-61674 | Awaiting Analysis | 未確認 | CWE-121, CWE-787, CWE-843 | Fluent Bit is a fast and lightweight logs, metrics, and traces processor for Linux, BSD, macOS, and Windows. From 0.11.0 until 5.0.8, plugins/out_forward/forward.c secure_forward_p |
| CVE-2026-61681 | Deferred | 未確認 | CWE-918 | Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. Prior to 0.91.1, the SNS UnsubscribeConfirmation handler in internal/integratio |
| CVE-2026-61682 | Deferred | 未確認 | CWE-290, CWE-302, CWE-348 | kcp is a Kubernetes-like control plane for form-factors and use-cases beyond Kubernetes and container workloads. Prior to 0.31.4 and 0.32.2, the kcp front-proxy does not remove inb |
| CVE-2026-61685 | Awaiting Analysis | 未確認 | CWE-89 | ReactPress is a publishing system for React developers. Prior to version 3.7.0, ReactPress API list endpoints build TypeORM `QueryBuilder` conditions using unsanitized HTTP query p |
| CVE-2026-61686 | Deferred | 未確認 | CWE-502 | SolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, the `DataGrid` LiveComponent deserializes a `context` prop value using PHP's `unserialize()` after receiv |
| CVE-2026-61687 | Deferred | 未確認 | CWE-1275, CWE-287, CWE-352, CWE-384 | Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. Prior to 0.91.1, ValidateOAuthState clears the oauth_state_ session value to an |
| CVE-2026-61688 | Deferred | 未確認 | CWE-639 | SolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, an authenticated user can view the API request history of any other user's API tokens within the same com |
| CVE-2026-61695 | Awaiting Analysis | 未確認 | CWE-129 | Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.4.1 and 7.0.0-alpha04, Wire's Swift runtime ProtoReader.skipGroup(expectedEndTag:unknownFie |
| CVE-2026-61699 | Deferred | 未確認 | CWE-299, CWE-672 | nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.7.1, revocation is the only in-band mechanism that isolates a compromised/offboarded host f |
| CVE-2026-6170 | Deferred | 未確認 | CWE-79 | The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'images' parameter of the plugin's bt_bb_css_image_grid shortcode in all versions up |
| CVE-2026-61700 | Awaiting Analysis | 未確認 | CWE-284 | MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, ClientMessage.readPacket processes a |
| CVE-2026-61701 | Deferred | 未確認 | CWE-502 | Laravel MagicLink creates links for authentication without a password or for accessing private content. From 2.0.0 until 2.25.1, MagicLink stores serialized action objects in the m |
| CVE-2026-61709 | Deferred | 未確認 | CWE-281, CWE-863 | OpenFGA is an authorization and permission engine built for developers. Prior to 1.18.1, the ListUsers API could return a user that should have been excluded when an authorization |
| CVE-2026-6171 | Deferred | 未確認 | CWE-79 | The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'target' parameter of the plugin's bt_bb_icon shortcode in all versions up to, and i |
| CVE-2026-61714 | Awaiting Analysis | 未確認 | CWE-122, CWE-125, CWE-787 | FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.2.4 until 2.5.6, configuring synth.midi-channels above 16 allows the MIDI player to index _flui |
| CVE-2026-6172 | Deferred | 未確認 | CWE-79 | The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'caption' parameter of the plugin's bt_bb_image shortcode in all versions up to, and |
| CVE-2026-61720 | Deferred | 未確認 | CWE-191 | FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the SF2 parser computes the DMOD modulator count as chunk.size / SF_MOD_SIZE - |
| CVE-2026-61721 | Awaiting Analysis | 未確認 | CWE-122, CWE-125 | FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS loader assigns file-controlled wsmp.loop_start and wsmp.loop_le |
| CVE-2026-61722 | Awaiting Analysis | 未確認 | CWE-190 | FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS parser validates articulation chunks using the unsigned express |
| CVE-2026-61723 | Deferred | 未確認 | CWE-190 | FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS parser validates ptbl chunks with the unsigned expression cues |
| CVE-2026-6173 | Deferred | 未確認 | CWE-79 | The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'background_image' parameter of the plugin's bt_bb_section shortcode in all versions |
| CVE-2026-61732 | Deferred | 未確認 | CWE-74 | Decepticon is an autonomous hacking agent for red teams. Versions prior to 1.1.17 wrap web crawl results — the output of agent reconnaissance against target services — into LLM mes |
| CVE-2026-61741 | Deferred | 未確認 | CWE-611 | http4s-scala-xml provides `EntityDecoder[F, scala.xml.Elem]` instances that parse XML message bodies. Prior to versions 0.24.1 and 1.0.0-M39, these decoders used a `javax.xml.parse |
| CVE-2026-61742 | Deferred | 未確認 | CWE-306, CWE-346 | DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite. Versions prior to 0.22.5 expose an unauthenticated HTTP MCP endpoint when started with the |
| CVE-2026-61743 | Deferred | 未確認 | CWE-350 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.2, Chartbrew's server/modules/safeReques |
| CVE-2026-61744 | Deferred | 未確認 | CWE-639, CWE-863 | InvenTree is an Open Source Inventory Management System. Prior to 1.4.0, POST /api/barcode/ accepts an attacker-synthesized internal JSON barcode containing a lowercase model label |
| CVE-2026-61745 | Deferred | 未確認 | CWE-862 | InvenTree is an Open Source Inventory Management System. Prior to 1.4.0, the POST /api/machine/{pk}/restart/ endpoint in src/backend/InvenTree/machine/api.py uses IsAuthenticatedOr |
| CVE-2026-61746 | Deferred | 未確認 | CWE-200, CWE-862 | InvenTree is an Open Source Inventory Management System. Prior to 1.4.0, PluginSettingList, PluginAllSettingList, and PluginSettingDetail set GlobalSettingsPermissions without the |
| CVE-2026-61747 | Deferred | 未確認 | CWE-639 | InvenTree is an Open Source Inventory Management System. Prior to 1.4.0, the /api/importer/row/ and /api/importer/mapping/ endpoints do not scope DataImportRow and DataImportColumn |
| CVE-2026-61748 | Deferred | 未確認 | CWE-639, CWE-862 | InvenTree is an Open Source Inventory Management System. Prior to 1.4.0, ReportPrint at POST /api/report/print/ and LabelPrint at POST /api/report/label/print/ require authenticati |
| CVE-2026-61749 | Deferred | 未確認 | CWE-200, CWE-918 | InvenTree is an Open Source Inventory Management System. Prior to 1.4.0, privileged staff users who can author report or label templates can cause WeasyPrint report rendering to re |
| CVE-2026-61750 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code exe |
| CVE-2026-61751 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code exe |
| CVE-2026-61752 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code exe |
| CVE-2026-61753 | Analyzed | 未確認 | CWE-22, CWE-502 | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code exe |
| CVE-2026-61754 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code exe |
| CVE-2026-61755 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code exe |
| CVE-2026-61756 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code exe |
| CVE-2026-61757 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code exe |
| CVE-2026-61758 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code exe |
| CVE-2026-61759 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code exe |
| CVE-2026-61760 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code exe |
| CVE-2026-61761 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code exe |
| CVE-2026-61762 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code exe |
| CVE-2026-61763 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code exe |
| CVE-2026-61764 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code exe |
| CVE-2026-61765 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code exe |
| CVE-2026-61766 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code exe |
| CVE-2026-61767 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code exe |
| CVE-2026-61768 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code exe |
| CVE-2026-61769 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code exe |
| CVE-2026-61770 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code exe |
| CVE-2026-61771 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code exe |
| CVE-2026-61772 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code exe |
| CVE-2026-61773 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code exe |
| CVE-2026-61774 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code exe |
| CVE-2026-61775 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code exe |
| CVE-2026-61776 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code exe |
| CVE-2026-61777 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code exe |
| CVE-2026-61778 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code exe |
| CVE-2026-61779 | Analyzed | 未確認 | CWE-502 | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code exe |
| CVE-2026-61781 | Awaiting Analysis | 未確認 | CWE-269, CWE-89 | pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, create_partition_time() reads the writable part_config.time_encoder text value a |
| CVE-2026-61782 | Deferred | 未確認 | CWE-200 | Rsdoctor is a build analyzer tailored for projects built with Rspack. Prior to version 1.5.16, the default Rsdoctor report HTTP server started by `@rsdoctor/rspack-plugin` binds to |
| CVE-2026-61784 | Deferred | 未確認 | CWE-116, CWE-79 | xhtml-purifier is a Node.js library to take in raw/unknown/untrusted HTML and output cleaned, purified, trusted HTML. Versions prior to 0.4.3 do not HTML-entity-encode attribute va |
| CVE-2026-61788 | Deferred | 未確認 | CWE-184, CWE-636, CWE-863 | DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite. Prior to version 0.22.6, setting `readonly = true` on the `execute_sql` tool does not make |
| CVE-2026-61793 | Deferred | 未確認 | CWE-1188, CWE-20, CWE-441, CWE-749, CWE-918 | Nuxt OG Image generates OG Images with Vue templates in Nuxt. From 6.0.2 until 6.7.0, nuxt-og-image exposes the unauthenticated /_og/d/** route when the documented defaults securit |
| CVE-2026-61794 | Deferred | 未確認 | CWE-20 | Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.7, the Tenant update validation in internal/webhook/tenant/validation/forbidden_annotat |
| CVE-2026-61795 | Deferred | 未確認 | CWE-697 | Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.7, hostnameRegexHandler.OnUpdate in internal/webhook/tenant/validation/hostname_regex.g |
| CVE-2026-61811 | Awaiting Analysis | 未確認 | CWE-674 | Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. From 3.8.0 until 4.14.7, the _getattributes() function in src |
| CVE-2026-61814 | Deferred | 未確認 | CWE-400, CWE-407 | Jawn is an open source JSON parser. Prior to 1.7.0, Jawn's AsyncParser can perform quadratic work when a single JSON token is delivered across many small chunks because each absorb |
| CVE-2026-61815 | Deferred | 未確認 | CWE-93 | zbateson/mail-mime-parser is a mail mime parser alternative to PHP's imap* functions and Pear libraries for reading messages in Internet Message Format RFC 822. Prior to version 3. |
| CVE-2026-61816 | Deferred | 未確認 | CWE-400 | zbateson/mail-mime-parser is a mail mime parser alternative to PHP's imap* functions and Pear libraries for reading messages in Internet Message Format RFC 822. Starting in version |
| CVE-2026-61817 | Awaiting Analysis | 未確認 | CWE-89 | pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, run_maintenance(), show_partitions(), show_partition_info(), undo_partition(), a |
| CVE-2026-61818 | Awaiting Analysis | 未確認 | CWE-89 | pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, undo_partition() reads part_config.time_encoder as unrestricted text and interpo |
| CVE-2026-61819 | Awaiting Analysis | 未確認 | CWE-89 | pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, when pg_jobmon is installed and part_config.jobmon is true, exception handlers i |
| CVE-2026-61820 | Awaiting Analysis | 未確認 | CWE-89 | pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, inherit_template_properties() manually surrounds primary-key column names from p |
| CVE-2026-61821 | Awaiting Analysis | 未確認 | CWE-862 | pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, drop_partition_id() and drop_partition_time() use part_config.retention_schema a |
| CVE-2026-61822 | Awaiting Analysis | 未確認 | CWE-703 | pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, run_maintenance() handles exceptions outside the loop that processes rows from p |
| CVE-2026-61823 | Deferred | 未確認 | CWE-79 | code16 Sharp is a Laravel-based framework for building content-management and administrative interfaces. Versions before 9.22.5 contain a stored cross-site scripting vulnerability |
| CVE-2026-61825 | Deferred | 未確認 | CWE-79 | code16 Sharp is a Laravel-based framework for building content-management and administrative interfaces. Versions before 9.22.5 contain a stored cross-site scripting vulnerability |
| CVE-2026-61833 | Deferred | 未確認 | CWE-285 | zot is a container image and artifact registry based on the Open Container Initiative Distribution Specification. Prior to 2.1.18, the bearer authentication handler in pkg/api/auth |
| CVE-2026-61834 | Deferred | 未確認 | CWE-1321, CWE-915 | scim-patch is a library for applying SCIM patch operations. Prior to 0.9.2, navigate() reads inherited properties and assign() uses prototype-chain membership checks while resolvin |
| CVE-2026-61837 | Analyzed | 未確認 | CWE-285, CWE-862 | RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.3.3, 4.2.9, 4.1.14, and 4.0.23, AMQP 1.0 management GET /bindings exposes full binding topology to any authenticate |
| CVE-2026-61851 | Deferred | 未確認 | CWE-184 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.2, Chartbrew's runQuery() implementation |
| CVE-2026-61852 | Deferred | 未確認 | CWE-89 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.2, Chartbrew's runQuery() implementation |
| CVE-2026-61855 | Deferred | 未確認 | CWE-347 | Zammad is a web based open source helpdesk/customer support system. In 7.0.3 and 7.1.1, under certain conditions, Zammad's verification of inbound PGP-signed email can mark a messa |
| CVE-2026-61907 | Deferred | 未確認 | CWE-863 | An issue was discovered in Cyrus IMAP before 3.12.4. JMAP snooze bypasses the destination-mailbox ACL. An authenticated user with insert permissions on another user's snoozed mailb |
| CVE-2026-61908 | Analyzed | 未確認 | CWE-125 | An issue was discovered in Cyrus IMAP before 3.12.4. A JMAP email-header blob ID can reference an out-of-bounds index. An authenticated user could attempt to download a crafted JMA |
| CVE-2026-61909 | Analyzed | 未確認 | CWE-420 | An issue was discovered in Cyrus IMAP before 3.12.4. CalDAV/CardDAV multiget bypasses a per-href ACL. An authenticated DAV user with some shared access to another user's calendar o |
| CVE-2026-61910 | Analyzed | 未確認 | CWE-863 | An issue was discovered in Cyrus IMAP before 3.12.4. Mailbox/set let a sharee change a special-use role on shared mailboxes. An authenticated user with maySetKeywords on another us |
| CVE-2026-61911 | Analyzed | 未確認 | CWE-497 | An issue was discovered in Cyrus IMAP before 3.12.4. There is a Sieve mailbox existence oracle. An authenticated user could install a Sieve script that probed whether another user' |
| CVE-2026-61915 | Analyzed | 未確認 | CWE-415 | An issue was discovered in Cyrus IMAP before 3.12.4. There is a VPATCH BYPARAM double-free. An authenticated calendar user could crash a Cyrus CalDAV worker with a PATCH containing |
| CVE-2026-6205 | Awaiting Analysis | 未確認 | CWE-73 | An external control of file name or path vulnerability in Upload API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows |
| CVE-2026-62062 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Elementor Website Builder allows Cross Site Request Forgery. This issue affects Elementor Website Builder: from n/a through 4.3. |
| CVE-2026-62078 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Premium Addons for Elementor <= 4.11.105 versions. |
| CVE-2026-62079 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Qi Addons For Elementor <= 1.11 versions. |
| CVE-2026-62080 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Happy Addons for Elementor <= 3.23.1 versions. |
| CVE-2026-62081 | Deferred | 未確認 | CWE-639 | Contributor Insecure Direct Object References (IDOR) in Flexible PDF Coupons <= 1.14.11 versions. |
| CVE-2026-62083 | Deferred | 未確認 | CWE-1284 | Subscriber Other Vulnerability Type in Creator LMS <= 1.2.19 versions. |
| CVE-2026-62084 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeff Starr User Submitted Posts allows Stored XSS. This issue affects User Su |
| CVE-2026-62085 | Deferred | 未確認 | CWE-89 | Administrator SQL Injection in WP Activity Log <= 5.6.6 versions. |
| CVE-2026-62088 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in 10up ElasticPress allows Retrieve Embedded Sensitive Data. This issue affects ElasticPress: from n/a through 5.3 |
| CVE-2026-62089 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Pixar Labs Master Addons for Elementor allows Privilege Abuse. This issue affects Master Addons for Elementor: from n/a through 3.2.2. |
| CVE-2026-62097 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPTasty Business Directory business-directory-plugin allows Blind SQL Injectio |
| CVE-2026-62101 | Deferred | 未確認 | CWE-288 | Unauthenticated Broken Authentication in EduAdmin Booking <= 5.4.2 versions. |
| CVE-2026-62102 | Deferred | 未確認 | CWE-266 | Subscriber Privilege Escalation in Gato GraphQL <= 19.2.3 versions. |
| CVE-2026-62103 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Everest Forms <= 3.6.0 versions. |
| CVE-2026-62104 | Deferred | 未確認 | CWE-94 | Unauthenticated Remote Code Execution (RCE) in Migratico Lite <= 2.6.8 versions. |
| CVE-2026-62105 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in ThemeREX Addons < 2.45.0 versions. |
| CVE-2026-62106 | Deferred | 未確認 | CWE-266 | Subscriber Privilege Escalation in SMS Alert Order Notifications <= 3.9.9 versions. |
| CVE-2026-62107 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Masteriyo - LMS <= 3.4.0 versions. |
| CVE-2026-62108 | Deferred | 未確認 | CWE-290 | Unauthenticated Broken Authentication in Headless Single Sign On <= 1.7.0 versions. |
| CVE-2026-62109 | Deferred | 未確認 | CWE-89 | Editor SQL Injection in Sky Addons for Elementor <= 3.8.4 versions. |
| CVE-2026-62110 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Bold Page Builder <= 5.9.9 versions. |
| CVE-2026-62111 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Simple Payment <= 2.5.4 versions. |
| CVE-2026-62112 | Deferred | 未確認 | CWE-89 | Editor SQL Injection in Amelia <= 2.4.9 versions. |
| CVE-2026-62113 | Deferred | 未確認 | CWE-639 | Contributor Insecure Direct Object References (IDOR) in Slim SEO <= 4.10.0 versions. |
| CVE-2026-62114 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Passster <= 4.3.13 versions. |
| CVE-2026-62132 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Masteriyo - LMS <= 3.4.0 versions. |
| CVE-2026-62133 | Deferred | 未確認 | CWE-352 | Subscriber Cross Site Request Forgery (CSRF) in RTMKit <= 2.1.5 versions. |
| CVE-2026-62134 | Deferred | 未確認 | CWE-639 | Contributor Insecure Direct Object References (IDOR) in Starter Templates <= 4.7.5 versions. |
| CVE-2026-62135 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Booktics <= 1.0.24 versions. |
| CVE-2026-62136 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Flexible Quantity – Measurement Price Calculator for WooCommerce <= 2.3.21 versions. |
| CVE-2026-62137 | Deferred | 未確認 | CWE-862 | Unauthenticated Sensitive Data Exposure in bbPress <= 2.6.14 versions. |
| CVE-2026-62138 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Visual Composer Website Builder <= 45.16.1 versions. |
| CVE-2026-62139 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in Site Kit by Google <= 1.186.0 versions. |
| CVE-2026-62140 | Deferred | 未確認 | CWE-639 | Unauthenticated Insecure Direct Object References (IDOR) in Quiz And Survey Master <= 11.2.5 versions. |
| CVE-2026-62146 | Awaiting Analysis | 未確認 | CWE-501 | A trust-boundary flaw in CRI-O's sandbox state persistence allows attacker-influenced pod metadata to overwrite CRI-O's own reserved sandbox bookkeeping; once reloaded as trusted a |
| CVE-2026-6217 | Deferred | 未確認 | CWE-759 | Use of a One-Way hash without a salt vulnerability in Pik Online Software Solutions Inc. Pik Online Portal allows Cryptanalysis. This issue affects Pik Online Portal: through 3.5. |
| CVE-2026-62182 | Awaiting Analysis | 未確認 | CWE-78 | KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. From 1.21.0 until 1.21.2, 1.22.2, and 1.23.1, ConfigUp |
| CVE-2026-6223 | Deferred | 未確認 | CWE-307 | Improper restriction of excessive authentication attempts vulnerability in Bahçelievler Muncipality BiHayat App allows Authentication Bypass. This issue affects BiHayat App: from |
| CVE-2026-62247 | Deferred | 未確認 | CWE-863 | Supabase Realtime provides Broadcast, Presence, and Postgres Changes via WebSockets. Prior to 2.111.2, Realtime authorization does not correctly honor the per-extension presence.re |
| CVE-2026-62262 | Deferred | 未確認 | CWE-89 | Piwigo is a full featured open source photo gallery application for the web. In 17.0.0beta1 and earlier, when rating is enabled, an unauthenticated guest can call pwg.images.filter |
| CVE-2026-62263 | Awaiting Analysis | 未確認 | CWE-502 | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.2, WebAuthnAuthentication.deserialize applies an ObjectInputFilter that allows every serialized obje |
| CVE-2026-62278 | Deferred | 未確認 | CWE-22 | LubeLogger is a self-hosted, open-source, web-based vehicle maintenance and fuel mileage tracker. Prior to 1.6.8, authenticated non-administrative users could reach HandleTranslati |
| CVE-2026-62279 | Deferred | 未確認 | CWE-639 | LubeLogger is a self-hosted, open-source, web-based vehicle maintenance and fuel mileage tracker. Prior to 1.6.8, an authenticated user could submit caller-controlled recordIds to |
| CVE-2026-62280 | Awaiting Analysis | 未確認 | CWE-79 | Open Access Management (OpenAM) is an access management solution. From 13.0.0 until 16.1.2, the OAuth2 authorize endpoint's display=wap consent page reflects request-derived values |
| CVE-2026-62282 | Deferred | 未確認 | CWE-918 | OpenCVE is a vulnerability intelligence platform. Prior to 3.0.0, OpenCVE notification testing for Webhook and Slack integrations does not sufficiently validate user-supplied HTTP |
| CVE-2026-62286 | Deferred | 未確認 | CWE-200, CWE-285 | Dozzle is a realtime log viewer for docker containers. Prior to 10.6.7, streamEvents in internal/web/events.go applies a restricted user's label filter to container lists but not t |
| CVE-2026-62308 | Deferred | 未確認 | CWE-918 | Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.30.6, Tugtainer allows an authenticated user to make the backend server send outbound |
| CVE-2026-62364 | Awaiting Analysis | 未確認 | CWE-200, CWE-349 | wlc is a Weblate command-line client using Weblate's REST API. Prior to 2.0.1, automatically discovered configuration from .weblate, .weblate.ini, or weblate.ini can select the API |
| CVE-2026-62368 | Analyzed | 未確認 | CWE-79 | Snipe-IT is an IT asset/license management system. Prior to 8.7.0, a user with the customfields.create permission can store markup in CustomField.name, and app/Presenters/AssetPres |
| CVE-2026-62369 | Awaiting Analysis | 未確認 | CWE-22 | KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. From 1.16.0 until 1.21.2, 1.22.2, and 1.23.1, the Deco |
| CVE-2026-62370 | Awaiting Analysis | 未確認 | CWE-789 | KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. From 1.0.0 until 1.21.2, 1.22.2, and 1.23.1, Reader.Re |
| CVE-2026-62371 | Awaiting Analysis | 未確認 | CWE-78 | KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. From 1.12.0 until 1.21.2, 1.22.2, and 1.23.1, the v1al |
| CVE-2026-62379 | Awaiting Analysis | 未確認 | CWE-470, CWE-94 | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.2, the pre-authentication /authservice PLL endpoint accepts a CustomCallback XML element whose class |
| CVE-2026-62437 | Awaiting Analysis | 未確認 | CWE-362 | When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking struct |
| CVE-2026-6244 | Awaiting Analysis | 未確認 | CWE-369 | libpcap BPF interpreter for the 'div #k' and 'mod #k' ALU instructions does not check whether the immediate value is zero. In particular uncommon use cases a crafted filter progra |
| CVE-2026-62597 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management). Supported versions that are affected are 13.5 and |
| CVE-2026-62645 | Deferred | 未確認 | CWE-306 | A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Information is exposed through the web interface that can be used to calculate the current and past ses |
| CVE-2026-62646 | Deferred | 未確認 | CWE-331 | A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A session identifier is generated using an algorithm with insufficient randomness, resulting in a token |
| CVE-2026-62647 | Deferred | 未確認 | CWE-20 | A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A random number generator is used to generate security-relevant values (such as session identifiers use |
| CVE-2026-62648 | Deferred | 未確認 | CWE-787 | A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The length of the URL component contained in pre-authenticated HTTP messages is not properly validated |
| CVE-2026-62649 | Deferred | 未確認 | CWE-770 | A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The web server does not properly limit or manage system resources when processing a high volume of conc |
| CVE-2026-62650 | Deferred | 未確認 | CWE-288 | A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Server-side authorization checks in the web-based management interface are not properly enforced, allow |
| CVE-2026-62652 | Deferred | 未確認 | CWE-215 | A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The device firmware contains binaries from which debugging symbols have not been removed. This could al |
| CVE-2026-62653 | Deferred | 未確認 | CWE-787 | A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The input received over a proprietary communication protocol that is exposed when the device is placed |
| CVE-2026-62654 | Deferred | 未確認 | CWE-494 | A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A special maintenance mode can be activated via a physical key sequence during device boot, in which th |
| CVE-2026-62694 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62697 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62706 | Analyzed | 未確認 | CWE-121, CWE-125 | Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
| CVE-2026-62744 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
| CVE-2026-62759 | Analyzed | 未確認 | CWE-290 | Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an adjacent network. |
| CVE-2026-62762 | Analyzed | 未確認 | CWE-476 | Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network. |
| CVE-2026-62801 | Analyzed | 未確認 | CWE-22 | Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-62804 | Analyzed | 未確認 | CWE-73 | External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2026-62810 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62813 | Analyzed | 未確認 | CWE-416 | Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network. |
| CVE-2026-6285 | Deferred | 未確認 | CWE-640 | Weak Password Recovery Mechanism for Forgotten Password vulnerability in Ankaref Innovation and Technology Inc. LIBRID/LIBREF allows Password Recovery Exploitation. This issue aff |
| CVE-2026-62866 | Deferred | 未確認 | CWE-129 | Dasel is a command-line tool and library for querying, modifying, and transforming data structures. From 3.0.0 until 3.11.2, selector/lexer/tokenize.go parseCurRune advances the in |
| CVE-2026-62874 | Analyzed | 未確認 | CWE-345 | Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-62895 | Analyzed | 未確認 | CWE-1390, CWE-89, CWE-942 | Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-62906 | Analyzed | 未確認 | CWE-943 | Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-62916 | Analyzed | 未確認 | CWE-288 | Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-62928 | Deferred | 未確認 | CWE-78 | XING CPTrans-ME-X contains an OS Command Injection (CWE-78). Unauthenticated OS command may be injected. |
| CVE-2026-62943 | Deferred | 未確認 | CWE-78 | btrbk is a tool for creating snapshots and remote backups of Btrfs subvolumes. From 0.29.0 until 0.32.7, btrbk's ssh_filter_btrbk.sh constructs allow_stream_match with a start anch |
| CVE-2026-62949 | Awaiting Analysis | 未確認 | CWE-835 | AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.24.0, _process |
| CVE-2026-6295 | Deferred | 未確認 | CWE-89 | The WP Optimizer plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in all versions up to and including 2.5.0. This is due to an unsafe subquery-detection br |
| CVE-2026-62985 | Awaiting Analysis | 未確認 | CWE-248 | request-filtering-agent is an http(s).Agent implementation that blocks requests to Private/Reserved IP addresses. Prior to 3.2.1, RequestFilteringHttpAgent and RequestFilteringHttp |
| CVE-2026-62987 | Deferred | 未確認 | CWE-290, CWE-348 | Fabio is an HTTP(S) and TCP router for deploying applications managed by consul. From 1.6.6 until 1.7.2, the CVE-2025-48865 fix in proxy/http_headers.go uses protectHeaders for a h |
| CVE-2026-62997 | Deferred | 未確認 | CWE-502 | Kedro-Datasets provides data connectors for Kedro. From version 5.0.0 until 9.5.0, kedro_datasets_experimental.pytorch.PyTorchDataset in kedro-datasets loads .pt model files with t |
| CVE-2026-62998 | Analyzed | 未確認 | CWE-20, CWE-200 | REDAXO is a PHP-based content management system. Prior to 5.21.2, rex_list::getSortColumn() in redaxo/src/core/lib/list.php accepts the sort request parameter without checking whet |
| CVE-2026-63000 | Analyzed | 未確認 | CWE-352 | REDAXO is a PHP-based content management system. Prior to 5.21.2, rex_api_install_package_update in redaxo/src/addons/install/lib/api/api_package_update.php inherits the false defa |
| CVE-2026-63001 | Analyzed | 未確認 | CWE-79 | REDAXO is a PHP-based content management system. Prior to 5.21.2, the mediaIsInUse() handler in redaxo/src/addons/media_manager/lib/media_manager.php inserts a Media Manager type n |
| CVE-2026-63002 | Analyzed | 未確認 | CWE-79 | REDAXO is a PHP-based content management system. Prior to 5.21.2, redaxo/src/addons/mediapool/pages/sync.php inserts filenames held in $diffFiles from the media filesystem into the |
| CVE-2026-63006 | Deferred | 未確認 | CWE-22 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, attacker-controlled HTML in inbound emails or tickets could bypass the image URL sanitizer using |
| CVE-2026-63020 | Analyzed | 未確認 | CWE-451 | A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages Impact: An attacker may trick authenticated BI |
| CVE-2026-63104 | Deferred | 未確認 | CWE-862 | Kaneo versions 2.3.12 before 2.12.2 contain a missing authorization vulnerability that allows authenticated workspace members with viewer or member roles to delete and modify tasks |
| CVE-2026-63116 | Deferred | 未確認 | CWE-862 | deepstream is a server that allows clients and backend services to sync data, send messages and make rpcs at scale. From 10.1.0 until 10.1.1, src/services/permission/valve/rules-ma |
| CVE-2026-63126 | Awaiting Analysis | 未確認 | CWE-190 | Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.4.5 and 7.0.0-alpha04, Wire protobuf readers do not consistently validate attacker-controll |
| CVE-2026-63127 | Deferred | 未確認 | CWE-345 | RMCP is an official Rust SDK for the Model Context Protocol. Prior to 2.0.0, the rmcp crate's OAuth implementation in crates/rmcp/src/transport/auth.rs omits the RFC 9728 resource |
| CVE-2026-63128 | Deferred | 未確認 | CWE-400, CWE-401, CWE-772 | RMCP is an official Rust SDK for the Model Context Protocol. Prior to 2.0.0, the rmcp crate's stateful Streamable HTTP server in crates/rmcp/src/transport/streamable_http_server/to |
| CVE-2026-63131 | Deferred | 未確認 | CWE-863 | OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, OpenBao's vault/policy/acl.go could evaluate a broader wildcard ACL grant before more-specific t |
| CVE-2026-63132 | Deferred | 未確認 | CWE-208 | OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, OpenBao's handleLogicalRecovery path in http/logical.go compared the highly privileged recovery |
| CVE-2026-63137 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization (CWE-863) in Kibana can lead to privilege escalation via Exploiting Incorrectly Configured Access Control Security Levels (CAPEC-180). A user holding workfl |
| CVE-2026-63138 | Analyzed | 未確認 | CWE-943 | Improper Neutralization of Special Elements in Data Query Logic (CWE-943) in Kibana can lead to information disclosure via NoSQL Injection (CAPEC-676). An authenticated user with a |
| CVE-2026-63199 | Deferred | 未確認 | CWE-862 | Perses is an open-source dashboard and visualization project for observability data. From 0.43.0 until 0.54.0-rc.0, the datasource creation and unsaved datasource proxy paths autho |
| CVE-2026-63203 | Deferred | 未確認 | CWE-862 | Logto is the modern, open-source auth infrastructure for SaaS and AI apps. From 1.31.0 until 1.42.0, the Account API handlers in packages/core/src/routes/account/third-party-tokens |
| CVE-2026-63204 | Deferred | 未確認 | CWE-639, CWE-862 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, an authenticated user with agent permissions can supply an arbitrary AI analytics run identifier |
| CVE-2026-63205 | Deferred | 未確認 | CWE-639, CWE-862 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when creating or updating an email signature, Zammad processes inline images referenced in the s |
| CVE-2026-63206 | Deferred | 未確認 | CWE-184, CWE-20 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, zammad's HTML sanitizer, which blocks remote images in ticket articles and email views, can be b |
| CVE-2026-63207 | Deferred | 未確認 | CWE-200, CWE-312, CWE-522 | Zammad is a web based open source helpdesk/customer support system. In 7.0.3 and 7.1.1, an authenticated administrator can obtain stored integration credentials in cleartext throug |
| CVE-2026-63208 | Deferred | 未確認 | CWE-116, CWE-532 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when a Microsoft Graph request fails, Zammad logs the error including the authentication token u |
| CVE-2026-63209 | Deferred | 未確認 | CWE-190, CWE-787 | compress provides various compression algorithms. Prior to version 1.18.7, a signed integer overflow vulnerability in s2.NewDict() allows an attacker to bypass repeat index validat |
| CVE-2026-63216 | Deferred | 未確認 | CWE-80 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, unsanitized option labels are rendered in the configuration dialogs of AI Agents within Zammad's |
| CVE-2026-63219 | Deferred | 未確認 | CWE-862 | GeoNetwork is a catalog application to manage spatially referenced resources. Prior to versions 4.4.12 and 4.2.17, the API endpoint for creating a new formatter via file upload is |
| CVE-2026-63225 | Awaiting Analysis | 未確認 | CWE-22, CWE-73 | Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to @redocly/cli 2.33.2, the split command constructs output paths under --outDir from untru |
| CVE-2026-6327 | Analyzed | 未確認 | CWE-117 | IBM Concert 1.0.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files. |
| CVE-2026-63272 | Deferred | 未確認 | CWE-125, CWE-787 | LibreOffice can import WMF graphics, which may be embedded in documents. A heap buffer overflow existed when importing a text record that carries its own character advance widths. |
| CVE-2026-63273 | Deferred | 未確認 | CWE-787 | LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing an encrypted document. The length of the decryption key was taken from the document's own e |
| CVE-2026-63274 | Deferred | 未確認 | CWE-125, CWE-787 | LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing a stream object. The length of the stream was taken from the object's own dictionary and wa |
| CVE-2026-63275 | Deferred | 未確認 | CWE-787 | LibreOffice can read CFF fonts, which may be embedded in documents. A stack buffer overflow existed when reading the hints of a glyph. The number of hints was checked against the w |
| CVE-2026-63276 | Deferred | 未確認 | CWE-787 | LibreOffice converts CFF fonts to Type 1 when it subsets a font, which happens when a document is exported to PDF, and CFF fonts may be embedded in documents. A stack buffer overfl |
| CVE-2026-63278 | Deferred | 未確認 | CWE-200 | URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document |
| CVE-2026-63279 | Deferred | 未確認 | CWE-125 | LibreOffice can import PICT images, which may be embedded in documents. An out of bounds read existed when importing an image that uses a colour palette. The palette index held in |
| CVE-2026-63325 | Deferred | 未確認 | CWE-94, CWE-95 | Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to version 2.33.0 of @redocly/respect-core and @redocly/cli, the respect command dynamicall |
| CVE-2026-63329 | Deferred | 未確認 | CWE-116, CWE-290 | Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.25.6, copy_server_request in warpgate-protocol-http/src/proxy.rs forwards a client-supplied x-war |
| CVE-2026-63330 | Deferred | 未確認 | CWE-285, CWE-862 | Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.25.6, api_get_recording_stream in warpgate-admin/src/api/recordings_detail.rs protects /@warpgate |
| CVE-2026-63334 | Deferred | 未確認 | CWE-367, CWE-918 | draw.io is a configurable diagramming and whiteboarding application. Prior to version 30.2.7, deployments with ENABLE_DRAWIO_PROXY=1 are vulnerable to server-side request forgery b |
| CVE-2026-63342 | Deferred | 未確認 | CWE-863 | Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. Prior to 0.91.1, api-contracts/openapi/paths/v1/workflow-runs/workflow_run.yaml |
| CVE-2026-63349 | Awaiting Analysis | 未確認 | CWE-266, CWE-269 | AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. In 4.14.0, AnyIO accepts the POSIX extra_groups argument in any |
| CVE-2026-63373 | Deferred | 未確認 | CWE-352 | draw.io is a configurable diagramming and whiteboarding application. Prior to version 30.2.7, the OAuth callback handler in src/main/java/com/mxgraph/online/AbsAuth.java skips comp |
| CVE-2026-63374 | Awaiting Analysis | 未確認 | CWE-295, CWE-297 | AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. Prior to 4.14.2, connect_tcp() and TLSStream.wrap() can validat |
| CVE-2026-63376 | Deferred | 未確認 | CWE-1321 | toml-node is a TOML parser for Node.js and the browser. Prior to 4.1.2, toml.parse() in lib/compiler.js can be tricked by a table path such as a.b.y.__proto__.__proto__, allowing t |
| CVE-2026-63386 | Deferred | 未確認 | CWE-674 | js-toml is a TOML parser for JavaScript. Prior to 1.1.3, load() does not bound nesting or dotted-key depth in the recursive parser at src/load/parser.ts or the interpreter at src/l |
| CVE-2026-63405 | Deferred | 未確認 | CWE-345 | AnyCable is a realtime server for reliable two-way communication that supports any backend. Prior to 1.6.15, the Pusher-compatible REST API in pusher/http.go includes the caller-su |
| CVE-2026-63406 | Deferred | 未確認 | CWE-312, CWE-798 | AnyCable is a realtime server for reliable two-way communication that supports any backend. Prior to 1.6.15, the telemetry subsystem in telemetry/config.go enables tracking with a |
| CVE-2026-63416 | Deferred | 未確認 | CWE-22 | draw.io is a configurable diagramming and whiteboarding application. Prior to version 30.2.7, src/main/java/com/mxgraph/online/ExportProxyServlet.java uses request.getPathInfo() to |
| CVE-2026-63419 | Analyzed | 未確認 | CWE-787 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, A |
| CVE-2026-63420 | Analyzed | 未確認 | CWE-125, CWE-129 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, An |
| CVE-2026-63422 | Analyzed | 未確認 | CWE-122, CWE-787 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, A |
| CVE-2026-63427 | Deferred | 未確認 | CWE-290 | An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execution with elevated privilege |
| CVE-2026-63431 | Deferred | 未確認 | CWE-862 | Horilla is an HR and CRM software. In 1.5.0-85 and earlier, payroll/views/component_views.py does not consistently authorize access in allowances_deductions_tab, view_single_allowa |
| CVE-2026-63432 | Deferred | 未確認 | CWE-200, CWE-94 | Horilla is an HR and CRM software. From 1.0.0 until 1.6.0 and 2.0.0, the get_mail_preview handlers in recruitment/views/actions.py and employee/not_in_out_dashboard.py render a use |
| CVE-2026-63435 | Deferred | 未確認 | CWE-436 | Mail is an internet library for Ruby designed to handle email generation, parsing, and sending. Prior to 2.9.1, Mail::Utilities.q_value_decode and Mail::Utilities.b_value_decode us |
| CVE-2026-63443 | Awaiting Analysis | 未確認 | CWE-863, CWE-918 | Coder allows organizations to provision remote development environments via Terraform. Prior to 2.29.19, 2.32.9, 2.33.10, and 2.34.4, agentConn.apiClient() follows redirects while |
| CVE-2026-63445 | Deferred | 未確認 | CWE-22 | Perses is an open-source dashboard and visualization project for observability data. Prior to 0.54.0-rc.0, list endpoints used with the file-system database bind the request-contro |
| CVE-2026-63446 | Analyzed | 未確認 | CWE-401, CWE-407 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, AppLayerParserSetTransactionInspectId( |
| CVE-2026-63447 | Analyzed | 未確認 | CWE-407 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.5 until 8.0.6, the FTP parser in src/app-layer-ftp.c |
| CVE-2026-63448 | Analyzed | 未確認 | CWE-400, CWE-401, CWE-407 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, the SMB parser can retain force-com |
| CVE-2026-63449 | Analyzed | 未確認 | CWE-197 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the SIP parser in rust/src/sip/parser. |
| CVE-2026-63450 | Analyzed | 未確認 | CWE-755 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 8.0.6, the FTP parser in src/app-layer-ftp.c treats a |
| CVE-2026-63451 | Analyzed | 未確認 | CWE-122 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, a locally supplied detection rule that |
| CVE-2026-63452 | Analyzed | 未確認 | CWE-400, CWE-409 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the HTTP/1 parser limits decompression |
| CVE-2026-63458 | Awaiting Analysis | 未確認 | CWE-639 | Perses is an open-source dashboard and visualization project for observability data. Prior to 0.54.0-beta.3, an authenticated user with viewer access to one project can supply anot |
| CVE-2026-63459 | Deferred | 未確認 | CWE-79 | Vendure is an open-source headless commerce platform. Prior to 3.6.5, RichTextDescriptionCell in packages/dashboard/src/lib/components/shared/table-cell/order-table-cell-components |
| CVE-2026-63460 | Deferred | 未確認 | CWE-1333 | Vendure is an open-source headless commerce platform. Prior to 3.6.5, the public Shop GraphQL API allows an unauthenticated caller to supply a catastrophically backtracking pattern |
| CVE-2026-63461 | Deferred | 未確認 | CWE-200 | Vendure is an open-source headless commerce platform. Prior to 3.6.5, the public Shop API products, collections, and facets queries combine mandatory visibility guards with caller- |
| CVE-2026-63464 | Deferred | 未確認 | CWE-862, CWE-918 | nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. From version 0.6.0 to before version 0.7.2, non-admin operators (role user) can set allow_private: true on the |
| CVE-2026-63472 | Deferred | 未確認 | CWE-287 | Vendure is an open-source headless commerce platform. Prior to 3.7.0, ExternalAuthenticationService.createCustomerAndUser in packages/core/src/service/helpers/external-authenticati |
| CVE-2026-63493 | Analyzed | 未確認 | CWE-288 | Snipe-IT is an IT asset/license management system. Prior to 8.7.0, a password-authenticated session for an account with self.api permission can reach the personal-access-token API |
| CVE-2026-63498 | Analyzed | 未確認 | CWE-79 | Snipe-IT is an IT asset/license management system. Prior to 8.7.0, the uploaded-files API endpoint GET /api/v1/{object_type}/{id}/files/{file_id} allows an authenticated user with |
| CVE-2026-63506 | Deferred | 未確認 | CWE-639 | Tina is a headless content management system. Prior to @tinacms/auth 1.1.4 and next-tinacms-azure 15.0.1, isAuthorized accepts a request-controlled clientID and asks isUserAuthoriz |
| CVE-2026-63523 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-63627 | Awaiting Analysis | 未確認 | CWE-20 | mppx is a TypeScript interface for machine payments protocol. Prior to 0.8.2, FeePayerPolicy in src/tempo/internal/fee-payer.ts used decodeFunctionData to validate fee-sponsored ca |
| CVE-2026-63628 | Awaiting Analysis | 未確認 | CWE-20 | mppx is a TypeScript interface for machine payments protocol. Prior to 0.8.2, the fee-payer cosigning path in src/tempo/internal/fee-payer.ts copied a client-supplied access_list f |
| CVE-2026-63630 | Deferred | 未確認 | CWE-201, CWE-502 | BentoPDF is a client-side PDF toolkit that is self hostable. In 2.8.6 and earlier, deserializeWorkflow() accepts the Timestamp node's tsaUrl control from imported JSON without sche |
| CVE-2026-63635 | Analyzed | 未確認 | CWE-125, CWE-129 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, A |
| CVE-2026-63638 | Analyzed | 未確認 | CWE-787 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, A |
| CVE-2026-63645 | Deferred | 未確認 | CWE-200 | OpenObserve is a cloud-native observability platform. Prior to 0.90.3, OpenObserve registers the /config/runtime endpoint without authentication and serializes the complete server |
| CVE-2026-63646 | Deferred | 未確認 | CWE-200 | CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. Prior to 1.7.2, GET /mcp/form/config/{formKey} calls McpController. |
| CVE-2026-63647 | Awaiting Analysis | 未確認 | CWE-306, CWE-639 | CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. Prior to 1.7.2, SseController exposes the anonymous /sse/subscribe, |
| CVE-2026-63671 | Deferred | 未確認 | CWE-184, CWE-79 | MDC is a tool to take regular Markdown and write documents interacting deeply with a Vue component. Prior to 0.22.1, @nuxtjs/mdc uses parseMarkdown with allowDangerousHtml enabled |
| CVE-2026-63694 | Analyzed | 未確認 | CWE-77 | Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A high p |
| CVE-2026-63695 | Awaiting Analysis | 未確認 | CWE-284 | Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Session Fixation vulnerability. An unauthenticated attacker with remote access could potentially exploit this |
| CVE-2026-63696 | Awaiting Analysis | 未確認 | CWE-494 | Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Download of Code Without Integrity Check vulnerability. A high privileged attacker with remote access could p |
| CVE-2026-63713 | Awaiting Analysis | 未確認 | CWE-89 | The "search" parameter in the view audit logs feature within the utilities section is susceptible to a time-based blind SQL injection vulnerability. |
| CVE-2026-6377 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Next4Biz Information Technologies Inc. CSM (Customer Service Management) allows Path |
| CVE-2026-64195 | Analyzed | 未確認 | CWE-787 | There is an out-of-bounds write vulnerability in DASYLab due to lack of proper validation of user-supplied data. Successful exploitation requires an attacker to get a user to open |
| CVE-2026-64196 | Analyzed | 未確認 | CWE-787 | There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated heap. Successful exploi |
| CVE-2026-64197 | Analyzed | 未確認 | CWE-787 | There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated data structure. Success |
| CVE-2026-64198 | Analyzed | 未確認 | CWE-125 | There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read a few bytes past the end of an allocated heap buf |
| CVE-2026-64199 | Analyzed | 未確認 | CWE-125 | There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read outside the bounds of an allocated data structure |
| CVE-2026-64200 | Analyzed | 未確認 | CWE-125 | There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read a past the end of an allocated heap buffer during |
| CVE-2026-6431 | Deferred | 未確認 | CWE-79 | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Biographic |
| CVE-2026-64684 | Awaiting Analysis | 未確認 | CWE-200 | RMCP is an official Rust SDK for the Model Context Protocol. Prior to 2.1.0, the rmcp crate's StreamableHttpClientTransport in crates/rmcp/src/transport/common/reqwest/streamable_h |
| CVE-2026-64701 | Analyzed | 未確認 | CWE-280 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A malicious app may be able to gain root privileges. |
| CVE-2026-64712 | Analyzed | 未確認 | CWE-284 | This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges. |
| CVE-2026-64714 | Analyzed | 未確認 | CWE-119 | A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sono |
| CVE-2026-64717 | Analyzed | 未確認 | CWE-362 | A race condition was addressed with improved state handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6 |
| CVE-2026-64736 | Analyzed | 未確認 | CWE-125, CWE-787 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, vis |
| CVE-2026-64752 | Analyzed | 未確認 | CWE-787 | A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing a maliciously cr |
| CVE-2026-64753 | Analyzed | 未確認 | CWE-269 | A permissions issue was addressed by removing the vulnerable code. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. P |
| CVE-2026-64756 | Analyzed | 未確認 | CWE-22 | A path handling issue was addressed with improved validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be |
| CVE-2026-64761 | Analyzed | 未確認 | CWE-200 | A privacy issue was addressed with improved handling of user preferences. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to identify what other apps a user has ins |
| CVE-2026-64790 | Analyzed | 未確認 | CWE-22 | A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain elevated |
| CVE-2026-64836 | Deferred | 未確認 | CWE-22, CWE-697 | ICEcoder versions through 8.1 contain a path traversal vulnerability in the file-control endpoint due to a logic error in the document-root confinement check. The File::check() val |
| CVE-2026-64837 | Deferred | 未確認 | CWE-78 | ICEcoder through 8.1 passes an unescaped filesystem path into a shell command in lib/properties.php, allowing authenticated users to inject OS commands through directory names. Att |
| CVE-2026-64838 | Deferred | 未確認 | CWE-22 | ICEcoder versions through 8.1 fail to properly validate the oldFileName parameter in file move and rename operations, allowing authenticated users to relocate files from outside th |
| CVE-2026-64847 | Deferred | 未確認 | CWE-770 | AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. Prior to 4.14.2, AnyIO starts process-pool workers with standar |
| CVE-2026-6485 | Awaiting Analysis | 未確認 | CWE-489 | UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts. |
| CVE-2026-64857 | Deferred | 未確認 | CWE-384 | tirreno, a security framework, has a session fixation issue in versions prior to 0.10.0. During authentication, tirreno validates the user's credentials and establishes the authent |
| CVE-2026-64918 | Analyzed | 未確認 | CWE-522 | Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-65102 | Deferred | 未確認 | CWE-190 | NVIDIA DeepStream contains a vulnerability where an attacker could cause an integer overflow by supplying crafted tensor dimensions in a YAML configuration file. A successful expl |
| CVE-2026-65111 | Analyzed | 未確認 | CWE-77 | NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious input created by an attacker could cause a code injection. A successful exploit of this vulnerability |
| CVE-2026-65112 | Analyzed | 未確認 | CWE-400 | NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause uncontrolled resource consumption. A successful exploit of this vulnerability migh |
| CVE-2026-65113 | Analyzed | 未確認 | CWE-798 | NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of hard-coded credentials. A successful exploit of this vulnerability might le |
| CVE-2026-65114 | Analyzed | 未確認 | CWE-306 | NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause missing authentication for a critical function. A successful exploit of this vulne |
| CVE-2026-65115 | Analyzed | 未確認 | CWE-400 | NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker may cause uncontrolled resource consumption. A successful exploit of this vulnerability may le |
| CVE-2026-65117 | Undergoing Analysis | 未確認 | CWE-259 | NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of a hard-coded password. A successful exploit of this vulnerability might lea |
| CVE-2026-65118 | Analyzed | 未確認 | CWE-295 | NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper certificate validation. A successful exploit of this vulnerability might |
| CVE-2026-65121 | Analyzed | 未確認 | CWE-287 | NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause an improper authentication issue. A successful exploit of this vulnerability migh |
| CVE-2026-65124 | Analyzed | 未確認 | CWE-91 | NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause an XML injection. A successful exploit of this vulnerability might lead to data ta |
| CVE-2026-65125 | Analyzed | 未確認 | CWE-73 | NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause external control of a file name or path. A successful exploit of this vulnerabilit |
| CVE-2026-65126 | Analyzed | 未確認 | CWE-841 | NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper enforcement of a behavioral workflow. A successful exploit of this vulner |
| CVE-2026-65127 | Analyzed | 未確認 | CWE-1258 | NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause exposure of sensitive system information due to uncleared debug information. A suc |
| CVE-2026-65128 | Analyzed | 未確認 | CWE-89 | NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause SQL injection. A successful exploit of this vulnerability might lead to code execu |
| CVE-2026-65129 | Analyzed | 未確認 | CWE-295 | NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper certificate validation. A successful exploit of this vulnerability might |
| CVE-2026-65130 | Analyzed | 未確認 | CWE-78 | NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to cod |
| CVE-2026-65178 | Analyzed | 未確認 | CWE-502 | NVIDIA NeMo contains a vulnerability in its dataset-loading workflow where a maliciously crafted model_config.yaml can inject unsafe parameters. A successful exploit of this vulner |
| CVE-2026-65179 | Analyzed | 未確認 | CWE-502 | NVIDIA NeMo contains a vulnerability in the TabularTokenizer class where it deserializes an untrusted, attacker-controlled .pkl file via pickle.load() without validation. A success |
| CVE-2026-65181 | Analyzed | 未確認 | CWE-913 | Insufficient authorization of Data Source tables in Impala 2.7-4.5 allows a client with privileges to upload a file to remote storage and create a table to execute arbitrary Java c |
| CVE-2026-65323 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-65342 | Modified | 未確認 | CWE-862 | A permissions issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitiv |
| CVE-2026-65344 | Analyzed | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia |
| CVE-2026-65345 | Analyzed | 未確認 | CWE-284 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, mac |
| CVE-2026-65348 | Analyzed | 未確認 | CWE-732 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, mac |
| CVE-2026-65352 | Analyzed | 未確認 | CWE-642 | An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 26.6.1. A website ma |
| CVE-2026-65353 | Analyzed | 未確認 | CWE-285 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6. An app may be able to access sensitive user |
| CVE-2026-65354 | Analyzed | 未確認 | CWE-269 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious app may be able to break out of its s |
| CVE-2026-65355 | Analyzed | 未確認 | CWE-642 | An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6. |
| CVE-2026-65357 | Analyzed | 未確認 | CWE-120 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able |
| CVE-2026-65358 | Analyzed | 未確認 | CWE-362 | A race condition was addressed with improved state handling. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visio |
| CVE-2026-65359 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, |
| CVE-2026-65360 | Analyzed | 未確認 | CWE-362 | A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS |
| CVE-2026-65361 | Analyzed | 未確認 | CWE-284 | This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data. |
| CVE-2026-65362 | Analyzed | 未確認 | CWE-284 | This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges. |
| CVE-2026-65364 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote attacker may be able |
| CVE-2026-65365 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious SMB |
| CVE-2026-65369 | Analyzed | 未確認 | CWE-693 | A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious application may bypass Ga |
| CVE-2026-65371 | Analyzed | 未確認 | CWE-200 | This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.8, macOS Tahoe 26.6, tvOS 26.6, visionO |
| CVE-2026-65374 | Analyzed | 未確認 | CWE-787 | A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious WebDA |
| CVE-2026-65375 | Analyzed | 未確認 | CWE-287 | The issue was addressed with improved authentication. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.6. An app may be able to cause unexpected syst |
| CVE-2026-65376 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause un |
| CVE-2026-65377 | Analyzed | 未確認 | CWE-125, CWE-416 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15 |
| CVE-2026-65378 | Modified | 未確認 | CWE-863 | An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access |
| CVE-2026-65380 | Analyzed | 未確認 | CWE-284, CWE-863 | An issue existed in the handling of snapshots. The issue was resolved with improved permissions logic. This issue is fixed in macOS Golden Gate 27. An app may be able to access pro |
| CVE-2026-65381 | Modified | 未確認 | CWE-862 | A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in macOS Golden Gate 2 |
| CVE-2026-65382 | Modified | 未確認 | CWE-22 | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A |
| CVE-2026-65383 | Modified | 未確認 | CWE-284 | This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may bypass Gatekeeper checks. |
| CVE-2026-65388 | Awaiting Analysis | 未確認 | CWE-601 | A remote attacker who controls a container registry may be able to direct a client's token request to a host of the attacker's choice, and disclose the victim's registry credential |
| CVE-2026-65390 | Analyzed | 未確認 | CWE-190 | An integer overflow was addressed with improved input validation. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watc |
| CVE-2026-65391 | Analyzed | 未確認 | CWE-190 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS |
| CVE-2026-65393 | Modified | 未確認 | CWE-863 | A permissions issue was addressed with improved validation. This issue is fixed in Xcode 27, macOS Golden Gate 27. An app may be able to access user-sensitive data. |
| CVE-2026-65395 | Analyzed | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia |
| CVE-2026-65398 | Analyzed | 未確認 | CWE-120 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An a |
| CVE-2026-65399 | Analyzed | 未確認 | CWE-290 | A file quarantine bypass was addressed with additional checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macO |
| CVE-2026-65401 | Analyzed | 未確認 | CWE-362 | A race condition was addressed with improved state handling. This issue is fixed in macOS Golden Gate 27, macOS Tahoe 26.7. An app may be able to cause unexpected system terminatio |
| CVE-2026-65402 | Analyzed | 未確認 | CWE-416 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15. |
| CVE-2026-65403 | Analyzed | 未確認 | CWE-284 | This issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, vi |
| CVE-2026-65404 | Analyzed | 未確認 | CWE-863 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoi |
| CVE-2026-65405 | Analyzed | 未確認 | CWE-457 | A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoi |
| CVE-2026-65406 | Analyzed | 未確認 | CWE-693 | A logic issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 2 |
| CVE-2026-65407 | Analyzed | 未確認 | CWE-416 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden |
| CVE-2026-65408 | Analyzed | 未確認 | CWE-190 | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, m |
| CVE-2026-65409 | Analyzed | 未確認 | CWE-843 | A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, |
| CVE-2026-65410 | Analyzed | 未確認 | CWE-248, CWE-400 | The issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, w |
| CVE-2026-65411 | Analyzed | 未確認 | CWE-22 | A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to modify prote |
| CVE-2026-65412 | Analyzed | 未確認 | CWE-476 | A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia |
| CVE-2026-65413 | Analyzed | 未確認 | CWE-190 | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause a d |
| CVE-2026-65414 | Analyzed | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia |
| CVE-2026-65415 | Analyzed | 未確認 | CWE-362 | A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A local user may be |
| CVE-2026-65422 | Awaiting Analysis | 未確認 | CWE-862 | A flaw in the authorization mechanism for Media Gateway API in Genetec Security Center may allow a user with no playback privileges to generate video thumbnails. |
| CVE-2026-6544 | Analyzed | 未確認 | CWE-552 | IBM Concert 1.0.0 through 3.0.0 allows recursive copying of directories without proper controls which can lead to unintentional inclusion of sensitive or unnecessary files and incr |
| CVE-2026-6554 | Awaiting Analysis | 未確認 | CWE-835 | libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterat |
| CVE-2026-65634 | Deferred | 未確認 | CWE-407 | Inefficient algorithmic complexity in the Erlang/OTP asn1 OBJECT IDENTIFIER decoder allows a remote unauthenticated attacker to cause denial of service by sending a crafted OID dur |
| CVE-2026-65638 | Awaiting Analysis | 未確認 | CWE-78 | Improper escaping of a request URL in ConfigServer Security & Firewall allows an unauthenticated remote attacker to execute arbitrary commands as the CSF service account via shell |
| CVE-2026-65639 | Awaiting Analysis | 未確認 | CWE-78 | OS command injection in the advanced-rule parser of ConfigServer Security & Firewall allows a remote attacker who controls a configured allow/deny feed to execute arbitrary command |
| CVE-2026-65643 | Analyzed | 未確認 | CWE-95 | Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root. |
| CVE-2026-65651 | Awaiting Analysis | 未確認 | CWE-674 | temporalio/sqlparser accepts SQL containing deeply nested unary expressions and can return a correspondingly deep abstract syntax tree without enforcing an applicable nesting limit |
| CVE-2026-65652 | Awaiting Analysis | 未確認 | CWE-129 | github.com/temporalio/tchannel-go did not validate the one-byte checksum-type field in inbound TChannel call frames. A network peer that can reach a listener can complete the stand |
| CVE-2026-65653 | Awaiting Analysis | 未確認 | CWE-129 | github.com/temporalio/tchannel-go did not reject TChannel call fragments containing checksum metadata but no length-prefixed argument chunks. The fragment reader left its chunk sli |
| CVE-2026-65654 | Awaiting Analysis | 未確認 | CWE-770 | github.com/temporalio/ringpop-go enforces configured LabelOptions limits when an application changes the local node's labels, but affected versions do not apply those limits to lab |
| CVE-2026-65669 | Analyzed | 未確認 | CWE-74 | Improper neutralization of special elements in output used by a downstream component ('injection') in SQL Server allows an unauthorized attacker to elevate privileges over a networ |
| CVE-2026-65772 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network. |
| CVE-2026-65812 | Analyzed | 未確認 | CWE-201 | Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to disclose information over a network. |
| CVE-2026-65818 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Power Automate allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-65827 | Deferred | 未確認 | CWE-400, CWE-409, CWE-770 | Docmost is open-source collaborative wiki and documentation software. From 0.21.0 until 0.95.0, any authenticated workspace member with edit rights to a space can upload an archive |
| CVE-2026-65828 | Deferred | 未確認 | CWE-862 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, the legacy destroy_form action on AttachmentsController deletes UploadCache Store records based |
| CVE-2026-65829 | Awaiting Analysis | 未確認 | CWE-22 | MPXJ is an open source library to read and write project plans from a variety of file formats and databases. From 7.3.0 until 16.5.0, reading a suitably crafted Primavera P3 PRX or |
| CVE-2026-65831 | Deferred | 未確認 | CWE-269, CWE-863 | ArcadeDB is a Multi-Model DBMS. Prior to 26.7.1, a reader-role user can submit POST /api/v1/command/{database} with language: js because PolyglotQueryEngine.command, PolyglotQueryE |
| CVE-2026-65838 | Deferred | 未確認 | CWE-754 | Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.27.35, the opaAuthorizeRequestWithBody filter in filters/openpolicyagent/openpolicyagent.go can allo |
| CVE-2026-65969 | Analyzed | 未確認 | CWE-125, CWE-190 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, A |
| CVE-2026-65970 | Analyzed | 未確認 | CWE-825 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.1.16.0, a crafted ZIP-compressed TIFF p |
| CVE-2026-65980 | Deferred | 未確認 | CWE-89 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.3, Chartbrew's ClickHouse protocol in se |
| CVE-2026-66048 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-66049 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-66067 | Undergoing Analysis | 未確認 | CWE-770 | RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, The stream open handler calls only check_vhost_access; it omits the node/vhost/user connection-limi |
| CVE-2026-66068 | Analyzed | 未確認 | CWE-532 | RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, ?LOG_DEBUG("shutting down Shovel '~ts', ... Shovel state: ~tp", [Name, St |
| CVE-2026-66069 | Undergoing Analysis | 未確認 | CWE-862 | RabbitMQ is a messaging and streaming broker. Prior to versions 4.1.13, 4.2.7, and 4.3.0, is_authorized/2 uses is_authorized_monitor for all methods. DELETE resets rabbit_core_metr |
| CVE-2026-66070 | Analyzed | 未確認 | CWE-942 | RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.17, 4.0.22, 4.1.13, and 4.2.6, match_origin/1 returned the bare reflected Origin and allowed credentials even w |
| CVE-2026-66071 | Analyzed | 未確認 | CWE-400 | RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.22 and 4.1.11 and 4.2.6 and 4.3.1, Atom exhaustion: OAuth2 JWT tag: scope values. extractscopes/1 pa |
| CVE-2026-66072 | Analyzed | 未確認 | CWE-400 | RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, get_chunk_selector/1 calls binary_to_atom on the raw client-supplied <<"c |
| CVE-2026-66073 | Analyzed | 未確認 | CWE-400 | RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.20 and 4.1.11 and 4.2.6, Atom table exhaustion via management API node field. pUT /api/queues/:vhost |
| CVE-2026-66074 | Analyzed | 未確認 | CWE-1333 | RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, match_value/3 passes the user-supplied ?name= regular expression to re:ru |
| CVE-2026-66075 | Analyzed | 未確認 | CWE-862 | RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, is_authorized/2 for the /federation-links/.../restart route uses is_autho |
| CVE-2026-66076 | Analyzed | 未確認 | CWE-862 | RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, is_authorized/2 calls rabbit_mgmt_util:is_authorized/2, which checks only |
| CVE-2026-66077 | Analyzed | 未確認 | CWE-79 | RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, and 4.2.6, The management UI uses EJS 1.0 in which <%= ... %> does NOT HTML-escape. connect |
| CVE-2026-66078 | Analyzed | 未確認 | CWE-862 | RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.20 and 4.1.11 and 4.2.6, protected tag bypass via bulk-delete. dELETE /api/users/:name refuses to de |
| CVE-2026-66079 | Analyzed | 未確認 | CWE-770 | RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, and 4.2.6, parse_array_primitive/2 for constructor 0x45 (list0) returns an element with byt |
| CVE-2026-66080 | Analyzed | 未確認 | CWE-770 | RabbitMQ is a messaging and streaming broker. Prior to versions 4.1.11, 4.2.6, and 4.3.0, validate_partitions only checks that the requested partition count is at least 1, with no |
| CVE-2026-66083 | Analyzed | 未確認 | CWE-306 | The /datasources/unauth-datasource endpoint does not properly enforce data source authorization. An authenticated user can invoke this endpoint to obtain information about data sou |
| CVE-2026-66269 | Analyzed | 未確認 | CWE-470 | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability. An un |
| CVE-2026-66280 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-66302 | Analyzed | 未確認 | CWE-73 | External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network. |
| CVE-2026-66303 | Analyzed | 未確認 | CWE-476 | Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network. |
| CVE-2026-66304 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-66305 | Analyzed | 未確認 | CWE-603 | Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network. |
| CVE-2026-66306 | Analyzed | 未確認 | CWE-209 | Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-66307 | Analyzed | 未確認 | CWE-191 | Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a network. |
| CVE-2026-66308 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network. |
| CVE-2026-66357 | Deferred | 未確認 | CWE-444 | httpd has never implemented obs-fold (RFC 2616 §2.2 / RFC 7230 §3.2.4 header continuation lines). Every CRLF followed by a non-CRLF octet unconditionally starts a new header. This |
| CVE-2026-66362 | Awaiting Analysis | 未確認 | CWE-76 | Description: When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX configuration generator component of NGINX Gat |
| CVE-2026-66372 | Awaiting Analysis | 未確認 | CWE-337 | The affected products use insufficiently random values, which allows web session tokens to be predictable, bounding token entropy to the seed space. |
| CVE-2026-6640 | Deferred | 未確認 | CWE-79 | The Media Library Assistant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mla_link_attributes' parameter in all versions up to, and including, 3.35 due |
| CVE-2026-6641 | Deferred | 未確認 | CWE-79 | The Media Library Assistant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mla_gallery' shortcode in versions up to and including 3.35. This is due to i |
| CVE-2026-6642 | Deferred | 未確認 | CWE-79 | The Media Library Assistant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the bulk edit preset export/import mechanism in versions up to and including 3.35. |
| CVE-2026-66571 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in Asset CleanUp: Page Speed Booster <= 1.4.0.5 versions. |
| CVE-2026-66572 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in JetBlog <= 2.4.10 versions. |
| CVE-2026-66573 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in JetTabs <= 2.3.3.1 versions. |
| CVE-2026-66574 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Element Pack Elementor Addons <= 8.8.3 versions. |
| CVE-2026-66575 | Deferred | 未確認 | CWE-639 | Unauthenticated Insecure Direct Object References (IDOR) in King Addons for Elementor <= 51.1.81 versions. |
| CVE-2026-66576 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in JetBlocks For Elementor <= 1.5.2 versions. |
| CVE-2026-66577 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in JetSearch <= 3.6.3 versions. |
| CVE-2026-66578 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in PropertyHive <= 2.2.6 versions. |
| CVE-2026-66579 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in JetElements For Elementor <= 2.9.2.1 versions. |
| CVE-2026-66580 | Deferred | 未確認 | CWE-89 | Contributor SQL Injection in Product Feed Manager <= 7.12.0 versions. |
| CVE-2026-66608 | Deferred | 未確認 | CWE-918 | Contributor Server Side Request Forgery (SSRF) in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 2.0.19 versions. |
| CVE-2026-66617 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in PublishPress Series <= 3.1.3 versions. |
| CVE-2026-66618 | Deferred | 未確認 | CWE-89 | Administrator SQL Injection in WP Maps <= 4.9.9 versions. |
| CVE-2026-66619 | Deferred | 未確認 | CWE-89 | Administrator SQL Injection in Newsletters <= 4.18 versions. |
| CVE-2026-66624 | Deferred | 未確認 | CWE-89 | Administrator SQL Injection in WPMasterToolKit <= 2.22.0 versions. |
| CVE-2026-66625 | Deferred | 未確認 | CWE-89 | Administrator SQL Injection in WC Vendors Marketplace <= 2.7.2.1 versions. |
| CVE-2026-66626 | Deferred | 未確認 | CWE-89 | Editor SQL Injection in SKT Addons for Elementor <= 4.0 versions. |
| CVE-2026-66628 | Deferred | 未確認 | CWE-89 | Shop manager SQL Injection in WP-Lister Lite for eBay <= 3.8.11 versions. |
| CVE-2026-66630 | Deferred | 未確認 | CWE-89 | Administrator SQL Injection in PublishPress Series <= 3.1.3 versions. |
| CVE-2026-66631 | Deferred | 未確認 | CWE-89 | Administrator SQL Injection in MC Woocommerce Wishlist <= 1.9.21 versions. |
| CVE-2026-66632 | Deferred | 未確認 | CWE-94 | Unauthenticated Content Injection in Simple Cloudflare Turnstile <= 1.42.1 versions. |
| CVE-2026-66652 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Tour allows Cross Site Request Forgery. This issue affects Grand Tour: from n/a through 5.5.1. |
| CVE-2026-66674 | Deferred | 未確認 | CWE-290 | Unauthenticated Bypass Vulnerability in Simple Cloudflare Turnstile <= 1.42.1 versions. |
| CVE-2026-66676 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Easy Invoice <= 2.3.8 versions. |
| CVE-2026-6668 | Awaiting Analysis | 未確認 | CWE-190, CWE-835 | Integer overflow in the packet buffer growth logic in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to cause a denial of service. Sufficiently large input make |
| CVE-2026-6669 | Awaiting Analysis | 未確認 | CWE-400 | Missing upper bound on the key derivation iteration count accepted during SCRAM authentication to a backend server in PgBouncer through 1.25.2 allows a malicious or compromised Pos |
| CVE-2026-66767 | Awaiting Analysis | 未確認 | CWE-191 | SAP NetWeaver Application Server for ABAP and ABAP Platform allows an unauthenticated user to send a specially crafted packet that triggers reprocessing of a previously buffered us |
| CVE-2026-66768 | Awaiting Analysis | 未確認 | CWE-807 | SAP GUI for Java does not correctly enforce the trust level policy for certain functions invoked from a connected backend system. A low-privileged attacker could exploit this weakn |
| CVE-2026-66786 | Awaiting Analysis | 未確認 | CWE-94 | A flaw was found in submariner. In cert-auth mode, the connection configuration is built using free-form strings from the Custom Resource Definition (CRD) without proper validation |
| CVE-2026-66789 | Rejected | 未確認 | Rejected reason: This CVE ID was assigned in error as a duplicate of CVE-2026-70495, which describes the same vulnerability. Please use CVE-2026-70495 instead. | |
| CVE-2026-66790 | Rejected | 未確認 | Rejected reason: This CVE ID was assigned in error as a duplicate of CVE-2026-70496, which describes the same vulnerability. Please use CVE-2026-70496 instead. | |
| CVE-2026-66814 | Analyzed | 未確認 | CWE-1220 | Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-66816 | Analyzed | 未確認 | CWE-778 | Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network. |
| CVE-2026-66818 | Analyzed | 未確認 | CWE-269 | Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-66819 | Analyzed | 未確認 | CWE-89 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-66820 | Analyzed | 未確認 | CWE-89 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-66835 | Deferred | 未確認 | CWE-50 | Path Equivalence vulnerability in Erlang/OTP inets httpd allows a remote unauthenticated attacker to read files inside a mod_auth protected directory by prefixing the request path |
| CVE-2026-66840 | Deferred | 未確認 | CWE-497 | XING CPTrans-ME-X contains an Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497). Sensitive system information may be leaked. |
| CVE-2026-66842 | Undergoing Analysis | 未確認 | CWE-918 | BIG-IP has a vulnerability where an authenticated user of any role may be able to create administrative user accounts through an undisclosed request to Traffic Management User Inte |
| CVE-2026-66887 | Awaiting Analysis | 未確認 | CWE-862 | The affected products are missing authorization on state-changing CGIs and session checks are not performed. |
| CVE-2026-66890 | Awaiting Analysis | 未確認 | CWE-798 | The affected products use hard-coded credentials, which could allow remote access to files with root privileges where FTP is reachable. |
| CVE-2026-67071 | Awaiting Analysis | 未確認 | CWE-212 | HCL DevOps Deploy / HCL Launch is susceptible to an information disclosure vulnerability when processing redacted property values. If a deployment is configured with a secure prope |
| CVE-2026-67100 | Analyzed | 未確認 | CWE-200, CWE-89 | HCL BigFix Service Management is affected by SQL Injection flaw and a Cross-Tenant Data Exposure flaw vulnerabilities. which could allow an authenticated attacker to inject databas |
| CVE-2026-67101 | Analyzed | 未確認 | CWE-918 | HCL BigFix Service Management is affected by a Server-Side Request Forgery (SSRF) vulnerability in its search functionality, which could allow an attacker to force the application |
| CVE-2026-67102 | Analyzed | 未確認 | CWE-285 | HCL BigFix Service Management is affected by a high-severity Broken Access Control vulnerability, which could allow a low-privileged user to gain unauthorized access to administrat |
| CVE-2026-67103 | Analyzed | 未確認 | CWE-79 | HCL BigFix Service Management is affected by Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject unsanitized malicious scripts that execute in a victi |
| CVE-2026-6718 | Analyzed | 未確認 | CWE-276 | IBM Concert 1.0.0 through 3.0.0 is vulnerable to improper access control which allows unauthorized modification of application files. |
| CVE-2026-6721 | Analyzed | 未確認 | CWE-78 | IBM Concert 1.0.0 through 3.0.0 allows an unauthenticated remote attacker can supply specially crafted input that is incorporated into OS commands, resulting in arbitrary command e |
| CVE-2026-67211 | Analyzed | 未確認 | CWE-789 | OOM Denial of Service via Unbounded Map Pre-Sizing in Apache OpenNLP SymSpellModelSerializer Versions Affected: - 3.0.0-M4 - 3.0.0-M5 (The opennlp-spellcheck extension was intr |
| CVE-2026-67218 | Analyzed | 未確認 | CWE-862 | RabbitMQ is a messaging and streaming broker. Prior to versions 4.0.22, 4.1.11, 4.2.6, and 4.3.0, accept_content/2 at line 56 calls rabbit_stream_manager:create_super_stream/... di |
| CVE-2026-67219 | Analyzed | 未確認 | CWE-770 | RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, add_binding/3 parses the routing key as an integer weight N and computes |
| CVE-2026-67220 | Analyzed | 未確認 | CWE-400 | RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, 4.3.0, When a binding is created on an x-jms-topic exchange, add_binding/3 reads the |
| CVE-2026-67221 | Analyzed | 未確認 | CWE-312 | RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The AMQP 0-9-1 shovel calls amqp_uri:remove_credentials before storing it |
| CVE-2026-67222 | Analyzed | 未確認 | CWE-400 | RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15, 4.0.20, 4.1.11, and 4.2.6, mechanisms/1 applied list_to_atom/1 to every colon-delimited token in an attacke |
| CVE-2026-67223 | Analyzed | 未確認 | CWE-90 | RabbitMQ is a messaging and streaming broker. The advisory establishes affected 3.13, 4.0, 4.1, 4.2, and 4.3 maintenance lines but contains conflicting first-fixed versions for the |
| CVE-2026-67224 | Analyzed | 未確認 | CWE-22 | RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, The trace consumer constructs the output path as filename:join(TraceDir, |
| CVE-2026-67225 | Analyzed | 未確認 | CWE-770 | RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15, 4.0.20, 4.1.11, and 4.2.6, the stream protocol stored the FrameMax value negotiated during the Tune handsha |
| CVE-2026-67226 | Analyzed | 未確認 | CWE-400 | RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.22 and 4.1.14 and 4.2.7, Admin-only atom exhaustion: PUT /api/users tags list. settags/2 maps rabbitdatacoercion: |
| CVE-2026-67227 | Analyzed | 未確認 | CWE-400 | RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.22 and 4.1.14 and 4.2.7 and 4.3.1, Atom exhaustion: toatom on global-parameter :name. resourceexists/2 (and the P |
| CVE-2026-67228 | Undergoing Analysis | 未確認 | CWE-400 | RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, The runtime-parameters lookup path coerces the URL :component segment to an atom with rabbit_data_c |
| CVE-2026-67229 | Analyzed | 未確認 | CWE-400 | RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, add_vhost/2 calls rabbit_data_coercion:atomize_keys/1 (the unsafe variant |
| CVE-2026-67230 | Analyzed | 未確認 | CWE-770 | RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15, 4.0.20, 4.1.11, and 4.2.6, the Web STOMP WebSocket handler enforced neither max_frame_size nor login_timeou |
| CVE-2026-67231 | Analyzed | 未確認 | CWE-295 | RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verify_fun that overrides {bad_cert, un |
| CVE-2026-67232 | Analyzed | 未確認 | CWE-409 | RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The cowboy WebSocket options at line 117 set compress => true, enabling R |
| CVE-2026-67233 | Analyzed | 未確認 | CWE-862 | RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, The shovel management resource's is_authorized/2 delegates to rabbit_mgmt |
| CVE-2026-67234 | Analyzed | 未確認 | CWE-20 | RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.8 and 4.3.2, get_auth_mechanism/1 used term_to_binary/1 on the strict_auth_mechanism or preferred_auth_mechanism |
| CVE-2026-67235 | Analyzed | 未確認 | CWE-770 | RabbitMQ is a messaging and streaming broker. Prior to versions 4.3.0, 4.2.6, 4.1.11, 4.0.20, and 3.13.15, The content-header BodySize (a uint64) was stored without validation agai |
| CVE-2026-67236 | Analyzed | 未確認 | CWE-312 | RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.8 and 4.3.2, a successful POST /login caused is_authorized/2 to set an auth cookie containing base64-encoded user |
| CVE-2026-67237 | Analyzed | 未確認 | CWE-79 | RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.8 and 4.3.2, set_token_auth/2 inserted a bearer token from the Authorization header or access_token cookie into O |
| CVE-2026-67238 | Undergoing Analysis | 未確認 | CWE-400 | RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, rabbit_pid_codec:decompose_from_binary/1 parses a caller-supplied ETF-encoded binary and calls bina |
| CVE-2026-67239 | Analyzed | 未確認 | CWE-79 | RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.18 and 4.0.23 and 4.1.14 and 4.2.9 and 4.3.3, Stored XSS via TLS peer-certificate DN in stream-management UI (s |
| CVE-2026-67240 | Undergoing Analysis | 未確認 | CWE-1333 | RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, pattern_to_regex maps % -> .*? and _ -> ., then compiles ^...$ with only [unicode]; re:run is calle |
| CVE-2026-67241 | Analyzed | 未確認 | CWE-862 | RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, AMQP 1.0 management exchange.declare skips alternate-exchange permission check. pUT /exchanges/:name |
| CVE-2026-67242 | Analyzed | 未確認 | CWE-613 | RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, OAuth2 isinteger(Exp) guard skips token-expiry checks for float exp. validatetokenexpiry/1 (lines 20 |
| CVE-2026-67276 | Analyzed | 未確認 | CWE-347 | RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized user key, checking the key type and modulus but omitting the expo |
| CVE-2026-67277 | Analyzed | 掲載 | CWE-306 | RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 U |
| CVE-2026-67278 | Analyzed | 未確認 | CWE-347 | MikroTik RouterOS accepts malformed RSA/PKCS#1 v1.5 signatures across RSA-based services, including TLS/X.509 certificate validation and SSH host-key authentication. Because its tr |
| CVE-2026-67279 | Analyzed | 掲載 | CWE-841 | RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing an unauthenticated client to open a session |
| CVE-2026-67281 | Analyzed | 未確認 | CWE-22, CWE-824 | RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session retains a stale uninitialized principal pointer used for fi |
| CVE-2026-6730 | Analyzed | 未確認 | CWE-120 | IBM Concert 1.0.0 through 3.0.0 is vulnerable to a buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the sys |
| CVE-2026-67367 | Deferred | 未確認 | CWE-23 | A vulnerability has been identified in SIMOVE Fleetmanager V3.1 (All versions < V3.1.13), SIMOVE Fleetmanager V3.2 (All versions < V3.2.4), SIMOVE Fleetmanager V3.3 (All versions < |
| CVE-2026-67368 | Analyzed | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in SQL Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-67369 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-67370 | Analyzed | 未確認 | CWE-89 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-67373 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
| CVE-2026-67376 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network. |
| CVE-2026-67378 | Modified | 未確認 | CWE-822 | Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-67379 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
| CVE-2026-67380 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
| CVE-2026-67381 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-67383 | Analyzed | 未確認 | CWE-209 | Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-67384 | Analyzed | 未確認 | CWE-122, CWE-190 | Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network. |
| CVE-2026-67385 | Analyzed | 未確認 | CWE-416 | Use after free in SQL Server allows an authorized attacker to execute code over a network. |
| CVE-2026-67386 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-67388 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
| CVE-2026-67389 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-67390 | Analyzed | 未確認 | CWE-126 | Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-67393 | Analyzed | 未確認 | CWE-126 | Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-67394 | Undergoing Analysis | 未確認 | CWE-78 | A critical local privilege escalation via OS command injection vulnerability has been discovered in Plesk for Linux, affecting all versions from 18.0.34 before 18.0.79.9 and 18.0.8 |
| CVE-2026-67395 | Deferred | 未確認 | CWE-22 | A path traversal vulnerability exists in Sage Employee Self Service’s custom logo functionality due to improper validation of file path parameters. By leveraging directory traversa |
| CVE-2026-67397 | Awaiting Analysis | 未確認 | CWE-22 | Path traversal in Plesk 18.0.79.9 and earlier and 18.0.80 through 18.0.80.5 allows local users to execute arbitrary code as root. |
| CVE-2026-67398 | Deferred | 未確認 | CWE-862 | Missing authorization vulnerability has been discovered in 2Checkout payment gateway of WHMCS from 8.13.0 before 8.13.7, from 9.0.0 before 9.0.8, all other EOL versions from 4.5.0. |
| CVE-2026-67399 | Deferred | 未確認 | CWE-502 | Deserialization of untrusted data in WHMCS 9.0.0 before 9.0.8 and 8.0.0 before 8.13.7 allows remote attackers to execute arbitrary code. |
| CVE-2026-67401 | Awaiting Analysis | 未確認 | CWE-89 | A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as root through SQLi in EmailTrack component |
| CVE-2026-67402 | Deferred | 未確認 | CWE-552 | An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs through the Messenger v3 HTTPS virtual host. A remote unauthenticated attacker wh |
| CVE-2026-67403 | Deferred | 未確認 | CWE-639 | Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Insufficient tenant-level authorization checks allow authenticated users to access admi |
| CVE-2026-67404 | Analyzed | 未確認 | CWE-295 | RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, When no CA bundle is available, ssl_options/1 falls back to [{verify, ver |
| CVE-2026-67405 | Analyzed | 未確認 | CWE-1385 | RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, Neither the Web-MQTT handler (deps/rabbitmq_web_mqtt/src/rabbit_web_mqtt_ |
| CVE-2026-67406 | Analyzed | 未確認 | CWE-200 | RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.3.3, 4.2.9, 4.1.14, and 4.0.23, Shovel does not format state logged by the crash reporter and can leave unencrypted |
| CVE-2026-67407 | Analyzed | 未確認 | CWE-862 | RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.3.3 and 4.2.9 and 4.1.14 and 4.0.23, Incomplete fix for CVE-2026-44838: escaperegexchar/1 does not escape -, leavin |
| CVE-2026-67408 | Analyzed | 未確認 | CWE-400 | RabbitMQ is a messaging and streaming broker. From 4.1.0 until 4.3.3, 4.2.9, and 4.1.11, Stream Management Super-Stream Binding Keys Allocation Allows Low-Privilege Node Denial of |
| CVE-2026-67409 | Analyzed | 未確認 | CWE-252 | RabbitMQ is a messaging and streaming broker. From 3.13.0 until 4.3.3, 4.2.9, 4.1.14, 4.0.23, and 3.13.18, JWKS Fetch Ignores HTTP Response Status Code - Signing Key Destruction Ca |
| CVE-2026-67410 | Analyzed | 未確認 | CWE-200 | RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.3.3 and 4.2.9, OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint (CWE-200). when OAuth2 authenti |
| CVE-2026-67411 | Analyzed | 未確認 | CWE-863 | RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.18, 4.0.23, 4.1.14, 4.2.9, and 4.3.3, native MQTT and MQTT over WebSocket behind a trusted PROXY Protocol front |
| CVE-2026-67412 | Analyzed | 未確認 | CWE-862 | RabbitMQ is a messaging and streaming broker. From 3.13.0 until 4.3.3, 4.2.9 , 4.1.14, 4.0.24, and 3.13.18, Federation upstream in RabbitMQ skips vhost authorization allowing cross |
| CVE-2026-67413 | Analyzed | 未確認 | CWE-1333 | RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.23, 4.1.14, 4.2.9, and 4.3.3, the optional rabbitmq_jms_topic_exchange plugin's x-jms-topic exchange accepted a c |
| CVE-2026-67415 | Analyzed | 未確認 | CWE-400 | RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, the Shovel parameter parser converted attacker-controlled runtime parameter values into non-garbage- |
| CVE-2026-67419 | Analyzed | 未確認 | CWE-1333, CWE-407 | RabbitMQ is a messaging and streaming broker. Prior to 4.3.5, an authenticated user who can bind a queue to a topic exchange and publish to it can use consecutive # segments in a b |
| CVE-2026-67420 | Analyzed | 未確認 | CWE-862 | RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, RabbitMQ OAuth credential refresh retains revoked runtime tags. when an |
| CVE-2026-67421 | Analyzed | 未確認 | CWE-862 | RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, RabbitMQ Management rendered an AMQP authorization-error reason containi |
| CVE-2026-67549 | Analyzed | 未確認 | CWE-122, CWE-131, CWE-787 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.1.16.0, A crafted 1-bit contiguous cmyk |
| CVE-2026-67593 | Analyzed | 未確認 | CWE-306 | A remote attacker can craft an Openwire RemoveSubscriptionInfo command to cause the deletion of a queue on the Artemis broker before the connection authentication and authorization |
| CVE-2026-67615 | Awaiting Analysis | 未確認 | CWE-184, CWE-502 | openEQUELLA before 2026.1.0 contains an authenticated remote code execution vulnerability that allows any authenticated non-guest user to execute arbitrary code by exploiting Java |
| CVE-2026-67624 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-67629 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-67630 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-67631 | Modified | 未確認 | CWE-122 | Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-67633 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network. |
| CVE-2026-67636 | Modified | 未確認 | CWE-125 | Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-67638 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
| CVE-2026-67639 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
| CVE-2026-67641 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network. |
| CVE-2026-67642 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
| CVE-2026-67643 | Modified | 未確認 | CWE-122 | Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-67645 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-67648 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-67827 | Deferred | 未確認 | CWE-94 | Incorrect Access Control in the HTTP API module in ZLMediaKit commit 9fd5152 allows remote attackers to achieve Remote Code Execution (RCE) via unauthenticated access to the setSer |
| CVE-2026-6794 | Analyzed | 未確認 | CWE-415 | IBM Concert 1.0.0 through 3.0.0 has a double free vulnerability that exists due to incorrect memory management. A local attacker can exploit this flaw to corrupt heap memory and ex |
| CVE-2026-67987 | Deferred | 未確認 | CWE-1333 | crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains polynomial-time regular expression denial-of-service conditions in think-tag response parsing on Ruby 3.1 |
| CVE-2026-67993 | Deferred | 未確認 | CWE-352 | basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f contains a login cross-site request forgery issue in the static credentials callback. |
| CVE-2026-68006 | Awaiting Analysis | 未確認 | CWE-444 | An issue in Puma v.5.0.0 and before v.8.0.3 allows an attacker to execute arbitrary code via the ext/puma_http11/http11_parser.rl file |
| CVE-2026-6806 | Deferred | 未確認 | CWE-89 | The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'stm_lat/stm_lng' parameter in all versions up |
| CVE-2026-68068 | Awaiting Analysis | 未確認 | CWE-89 | The "screenID" parameter in the electronic transaction queue viewer feature within the manual transactions section is susceptible to a time-based blind SQL injection vulnerability. |
| CVE-2026-68070 | Awaiting Analysis | 未確認 | CWE-306 | The affected products are missing authentication for a critical function, which could allow an attacker to run as root and pass received bytes directly to a system command. |
| CVE-2026-6831 | Deferred | 未確認 | CWE-862 | The Advanced Contact form 7 DB plugin for WordPress is vulnerable to missing authorization in all versions up to, and including, 2.0.9. This is due to the plugin not properly verif |
| CVE-2026-68484 | Deferred | 未確認 | CWE-862 | Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges, allowing authenticated |
| CVE-2026-68487 | Awaiting Analysis | 未確認 | CWE-36 | Path traversal in Plesk's Backup Manager causes arbitrary file write as root by an authenticated customer. |
| CVE-2026-68488 | Awaiting Analysis | 未確認 | CWE-367 | A Time-of-check Time-of-use (TOCTOU) race condition leading to insecure symlink following in Plesk causes local privilege escalation to root via arbitrary file/directory ownership |
| CVE-2026-68489 | Awaiting Analysis | 未確認 | CWE-96 | Static Code Injection in Plesk extensions "Ruby" before 1.6.6 and "Node.js Toolkit" before 2.5.0 allows remote authenticated users to execute arbitrary code as root via custom envi |
| CVE-2026-68490 | Awaiting Analysis | 未確認 | CWE-732 | Incorrect permission assignment allows local users to obtain sensitive CalDAV/CardDAV information belonging to other accounts. |
| CVE-2026-68491 | Deferred | 未確認 | CWE-59 | An insufficient check allowed for the overwrite of arbitrary files via a symlink. |
| CVE-2026-68492 | Awaiting Analysis | 未確認 | CWE-426 | An untrusted search path vulnerability in Plesk from 18.0.34 before 18.0.80.8 and 18.0.81 before 18.0.81.1 allows remote authenticated users to execute arbitrary code as root via t |
| CVE-2026-68493 | Awaiting Analysis | 未確認 | CWE-639 | After guessing a 62^15 complex unique identifier, a malicious logged in user was able to retrieve a list of memberships for a circle they are not a member of. |
| CVE-2026-68497 | Awaiting Analysis | 未確認 | CWE-1333, CWE-400 | jackson-databind binds a JSON string to a javax.xml.datatype.Duration or javax.xml.datatype.XMLGregorianCalendar field by passing the raw string verbatim to DatatypeFactory.newDura |
| CVE-2026-68523 | Deferred | 未確認 | CWE-400, CWE-835 | `fulgur` converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.19.0, a body-direct child whose CSS-resolv |
| CVE-2026-68526 | Analyzed | 未確認 | CWE-352 | Concrete CMS before 9.5.3 did not validate an anti-CSRF token in the Calendar event duplicate dialog controller (concrete/controllers/dialog/event/duplicate.php) submit() action, w |
| CVE-2026-68527 | Deferred | 未確認 | CWE-639 | Concrete CMS versions 8.3.0 through 9.5.2 are vulnerable to an authorization bypass in the Calendar event edit dialog (concrete/controllers/dialog/event/edit.php). The dialog check |
| CVE-2026-68528 | Deferred | 未確認 | CWE-79 | Concrete CMS RSS Displayer block below version 9.5.3 rendered remote feed item titles without HTML escaping, resulting in stored cross-site scripting. An attacker able to control |
| CVE-2026-68529 | Awaiting Analysis | 未確認 | CWE-862 | Concrete CMS 9.0.0 through 9.5.2 was missing an authorization check on the Express entries advanced-search dashboard action. The advanced_search() method in DashboardSelectableExpr |
| CVE-2026-68530 | Awaiting Analysis | 未確認 | CWE-862 | Concrete CMS 9 through 9.5.2 did not perform an authorization check on several board-instance actions in the Boards area of the Dashboard. The instance details single-page controll |
| CVE-2026-68531 | Awaiting Analysis | 未確認 | CWE-405 | Concrete CMS 9 before 9.5.3 did not escape SQL LIKE wildcard characters in the keyword search filters used by the file manager, file folders, and page list, allowing an authenticat |
| CVE-2026-68532 | Awaiting Analysis | 未確認 | CWE-352 | Concrete CMS 9.0.0 to dashboard group type controller did not validate a CSRF token on its delete action, resulting in cross-site request forgery. A remote unauthenticated attacker |
| CVE-2026-68533 | Awaiting Analysis | 未確認 | CWE-862 | Concrete CMS below 9.5.3 conversation attachment uploaded endpoint imported files into the file manager before evaluating the "Add Message Attachments" permission, which was only c |
| CVE-2026-68534 | Awaiting Analysis | 未確認 | CWE-79 | Concrete CMS before 9.5.3 rendered Express entry labels as raw HTML when displaying associated entries, resulting in stored cross-site scripting. An unauthenticated attacker could |
| CVE-2026-68535 | Analyzed | 未確認 | CWE-862 | Concrete CMS Area API's block-create endpoint in versions 9.2.0 to 9.5.2 did not invoke the block type controller's validate() method on submitted data, which, for file-referencing |
| CVE-2026-68536 | Awaiting Analysis | 未確認 | CWE-918 | Server-Side Request Forgery / Local File Inclusion in Apache MyFace Core. Older unsupported versions may also be affected. Users are recommended to upgrade to versions 2.3.12, 2 |
| CVE-2026-68537 | Deferred | 未確認 | CWE-400, CWE-835 | `fulgur` converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.19.0, a body-direct child whose CSS-resolv |
| CVE-2026-68570 | Deferred | 未確認 | CWE-863 | Incorrect Authorization vulnerability in Apache Doris allows an authenticated user to bypass privilege checks and access data they are not authorized to read, resulting in unauthor |
| CVE-2026-68775 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
| CVE-2026-68776 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-68777 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-68778 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-68779 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-68780 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-68781 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-68784 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-68785 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
| CVE-2026-68786 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
| CVE-2026-68787 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally. |
| CVE-2026-68791 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Azure Machine Learning allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-68824 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an authorized attacker to ele |
| CVE-2026-68825 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-68827 | Analyzed | 未確認 | CWE-122, CWE-191 | Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-68828 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-68830 | Analyzed | 未確認 | CWE-269, CWE-59 | Improper link resolution before file access ('link following') in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclose information locally. |
| CVE-2026-68831 | Analyzed | 未確認 | CWE-552 | Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally. |
| CVE-2026-68832 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-68833 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack. |
| CVE-2026-68834 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-68835 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-68837 | Analyzed | 未確認 | CWE-416 | Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-68838 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-68839 | Analyzed | 未確認 | CWE-122, CWE-20 | Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. |
| CVE-2026-68840 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-68841 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-68842 | Analyzed | 未確認 | CWE-497 | Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally. |
| CVE-2026-68843 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Word allows an authorized attacker to disclose information locally. |
| CVE-2026-68844 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally. |
| CVE-2026-68845 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-68846 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-68847 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally. |
| CVE-2026-68848 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
| CVE-2026-68849 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Bluetooth Port Driver allows an authorized attacker to disclose information locally. |
| CVE-2026-68850 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally. |
| CVE-2026-68851 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally. |
| CVE-2026-68852 | Analyzed | 未確認 | CWE-200, CWE-908 | Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose information locally. |
| CVE-2026-68860 | Analyzed | 未確認 | CWE-188 | Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Reliance on Data/Memory Layout vulnerability. An unauthenticated remote attacker could potentially exploit th |
| CVE-2026-68873 | Analyzed | 未確認 | CWE-532, CWE-908 | Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally. |
| CVE-2026-68874 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information over a network. |
| CVE-2026-68875 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally. |
| CVE-2026-68876 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-68877 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally. |
| CVE-2026-68878 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-68880 | Analyzed | 未確認 | CWE-122, CWE-197 | Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-68881 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally. |
| CVE-2026-68884 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-68885 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-68886 | Analyzed | 未確認 | CWE-209, CWE-416 | Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally. |
| CVE-2026-68887 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network. |
| CVE-2026-68888 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-68889 | Analyzed | 未確認 | CWE-122, CWE-190 | Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-68890 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-68891 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally. |
| CVE-2026-68892 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-68893 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-68894 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-68895 | Analyzed | 未確認 | CWE-197 | Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose information locally. |
| CVE-2026-68896 | Analyzed | 未確認 | CWE-36 | Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-68897 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-68898 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows iSCSI allows an unauthorized attacker to deny service over a network. |
| CVE-2026-68904 | Awaiting Analysis | 未確認 | CWE-400 | node-opcua is an OPC UA implementation for TypeScript and Node.js. From 2.0.0 until 2.170.0, node-opcua clients using the default keepSessionAlive setting can enter a repeated reco |
| CVE-2026-68911 | Deferred | 未確認 | CWE-409 | Nicotine+ is a graphical client for the Soulseek peer-to-peer network. Prior to version 3.3.11, a modified remote client can send zlib-compressed peer messages containing a decompr |
| CVE-2026-68914 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-14803. Reason: This candidate is a duplicate of CVE-2026-14803. Notes: All CVE users should ref | |
| CVE-2026-68919 | Awaiting Analysis | 未確認 | CWE-80 | GoCD is a continuous deliver server. From 13.3.0 until 26.1.0, GoCD does not correctly encode and escape malicious material modification comments that mimic the special trackback f |
| CVE-2026-68928 | Deferred | 未確認 | CWE-749, CWE-862, CWE-926 | Acode is a powerful text and code editor for Android. From 1.11.6 until 1.12.7, com.foxdebug.acode.rk.exec.terminal.TerminalService is declared as an exported service in src/plugin |
| CVE-2026-68950 | Awaiting Analysis | 未確認 | CWE-798 | The affected products use hard-coded credentials, which could allow an attacker to run the ftpd service as root, providing remote root file access where FTP is reachable. |
| CVE-2026-68953 | Awaiting Analysis | 未確認 | CWE-306 | The affected products are vulnerable to an authentication bypass that allows unauthenticated remote attackers to disclose sensitive device information, including administrator cred |
| CVE-2026-68954 | Awaiting Analysis | 未確認 | CWE-89 | The "pattern" parameter used in search function in the home page of the TMS application is vulnerable to time-based blind SQL injection vulnerability. |
| CVE-2026-68955 | Deferred | 未確認 | CWE-427 | The installer for Rakuten Kobo Desktop Application (Windows version) insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory when invoking the affe |
| CVE-2026-68956 | Deferred | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in Erlang/OTP ssh allows an authenticated remote attacker to exhaust node memory by repeatedly opening session ch |
| CVE-2026-69147 | Analyzed | 未確認 | CWE-400, CWE-770 | vLLM is an inference and serving engine for large language models. Prior to 0.28.0, request bodies for Chat Completions and Responses can set media_io_kwargs.video.video_backend to |
| CVE-2026-69184 | Awaiting Analysis | 未確認 | CWE-407 | c-ares is an asynchronous resolver library. Prior to 1.34.7, ares_dns_name_parse() enforces backward DNS compression pointers but does not bound the total pointer hops or assembled |
| CVE-2026-69186 | Awaiting Analysis | 未確認 | CWE-400 | c-ares is an asynchronous resolver library. Prior to 1.34.7, ares_dns_parse() trusts the attacker-controlled ANCOUNT, NSCOUNT, and ARCOUNT fields before confirming that the DNS res |
| CVE-2026-69190 | Awaiting Analysis | 未確認 | CWE-639, CWE-862 | Graylog is a free and open log management platform. From 6.3.0 until 6.3.14, 7.0.9, and 7.1.4, the view update API for saved searches and dashboards permits a user with edit permis |
| CVE-2026-69197 | Deferred | 未確認 | CWE-200, CWE-862 | Umbraco is an ASP.NET CMS. Prior to 13.15.1, 17.5.3, and 18.0.2, the Content Delivery API applies member and Public Access checks to the directly requested node but not to referenc |
| CVE-2026-69200 | Awaiting Analysis | 未確認 | CWE-1321 | node-opcua is an OPC UA implementation for TypeScript and Node.js. Prior to node-opcua-client 2.145.0, the internal fieldsToJson method in packages/node-opcua-client/source/alarms_ |
| CVE-2026-69201 | Deferred | 未確認 | CWE-22 | Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, ResourceService and WebjarService decode each URL path segment but reject only segments exactly equal |
| CVE-2026-69202 | Deferred | 未確認 | CWE-400, CWE-770 | Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember’s HTTP/2 flow-control window is replenished according to bytes received from the network rather |
| CVE-2026-69203 | Deferred | 未確認 | CWE-400, CWE-770 | Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, An Ember server with HTTP/2 enabled through withHttp2 does not enforce SETTINGS_MAX_CONCURRENT_STREAM |
| CVE-2026-69204 | Deferred | 未確認 | CWE-444 | Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember HTTP/1.1 does not reject messages containing both Transfer-Encoding and Content-Length, so an i |
| CVE-2026-69205 | Deferred | 未確認 | CWE-444 | Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember’s HeaderP.parse uses a case-sensitive substring test for the Transfer-Encoding value and decode |
| CVE-2026-69206 | Deferred | 未確認 | CWE-294 | Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, DigestAuth replay protection records lastNc plus one instead of the highest nonce-count value it has |
| CVE-2026-69208 | Deferred | 未確認 | CWE-400, CWE-401 | Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, the DigestAuth server middleware removes fresh nonces and stops eviction at the first stale nonce bec |
| CVE-2026-69209 | Deferred | 未確認 | CWE-400, CWE-770 | Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The shared WebSocket decoder permits unbounded message buffering because defragmentation accumulates |
| CVE-2026-69210 | Deferred | 未確認 | CWE-1284, CWE-835 | Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, WebSocket FrameTranscoder.bodyLength rejects extended payload lengths above Integer.MAX_VALUE but per |
| CVE-2026-69211 | Deferred | 未確認 | CWE-113, CWE-1286 | Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, ResponseCookie.render writes attacker-influenced name, content, domain, path, and extension values wi |
| CVE-2026-69212 | Deferred | 未確認 | CWE-200, CWE-319 | Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The FollowRedirect client middleware strips Authorization and Cookie headers only when a redirect cha |
| CVE-2026-69213 | Deferred | 未確認 | CWE-400, CWE-770 | Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember HTTP/2 serializes outbound frames through one unbounded queue consumed by writeLoop. When the p |
| CVE-2026-69214 | Deferred | 未確認 | CWE-384, CWE-565 | Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The CookieJar client middleware stores a response cookie’s Domain attribute without checking that it |
| CVE-2026-69215 | Deferred | 未確認 | CWE-1275, CWE-565 | Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The CookieJar client middleware uses unanchored substring checks instead of RFC 6265 domain and path |
| CVE-2026-69216 | Deferred | 未確認 | CWE-444 | Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember’s chunk decoder trims the chunk-size token and accepts leading plus or minus signs instead of r |
| CVE-2026-69217 | Deferred | 未確認 | CWE-444 | Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember’s HTTP/1.1 parser accepts differing duplicate Content-Length headers and uses the last value in |
| CVE-2026-69218 | Deferred | 未確認 | CWE-770 | Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, When Ember receives an HTTP/2 HEADERS or PUSH_PROMISE frame without END_HEADERS, H2Connection buffers |
| CVE-2026-6922 | Deferred | 未確認 | CWE-863 | The WP Table Builder – Drag & Drop Table Builder plugin for WordPress is vulnerable to Incorrect Authorization in all versions up to, and including, 2.2.1. This is due to an operat |
| CVE-2026-6925 | Analyzed | 未確認 | CWE-22 | IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot " se |
| CVE-2026-69265 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69266 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69267 | Analyzed | 未確認 | CWE-1220 | Insufficient granularity of access control in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information locally. |
| CVE-2026-69268 | Analyzed | 未確認 | CWE-284 | Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-69269 | Analyzed | 未確認 | CWE-191 | Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69270 | Analyzed | 未確認 | CWE-122, CWE-20 | Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69271 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69272 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69273 | Analyzed | 未確認 | CWE-284 | Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-69274 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69275 | Analyzed | 未確認 | CWE-416 | Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69276 | Analyzed | 未確認 | CWE-122, CWE-191 | Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69277 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69279 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-6928 | Analyzed | 未確認 | CWE-416 | IBM Concert 1.0.0 through 3.0.0 references or accesses memory after it has been freed. This allows an attacker who can influence program execution or input may exploit this conditi |
| CVE-2026-69280 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69281 | Analyzed | 未確認 | CWE-416 | Use after free in Windows License Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69282 | Analyzed | 未確認 | CWE-284 | Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-69283 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69284 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69285 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69286 | Analyzed | 未確認 | CWE-125, CWE-20 | Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to disclose information locally. |
| CVE-2026-69287 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69288 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally. |
| CVE-2026-69289 | Analyzed | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69290 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69291 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69292 | Analyzed | 未確認 | CWE-415 | Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69293 | Analyzed | 未確認 | CWE-122, CWE-20 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69294 | Analyzed | 未確認 | CWE-209 | Generation of error message containing sensitive information in Microsoft COM for Windows allows an authorized attacker to disclose information locally. |
| CVE-2026-69295 | Analyzed | 未確認 | CWE-125, CWE-20 | Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69296 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69297 | Analyzed | 未確認 | CWE-257 | Storing passwords in a recoverable format in Windows DHCP Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-69298 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69299 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69300 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69301 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69303 | Analyzed | 未確認 | CWE-125, CWE-191 | Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally. |
| CVE-2026-69304 | Analyzed | 未確認 | CWE-409 | Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
| CVE-2026-69305 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69307 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69308 | Analyzed | 未確認 | CWE-125, CWE-843 | Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally. |
| CVE-2026-69309 | Analyzed | 未確認 | CWE-415 | Double free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69310 | Analyzed | 未確認 | CWE-416 | Use after free in Windows DNS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69311 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69312 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69313 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69314 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69315 | Analyzed | 未確認 | CWE-497 | Exposure of sensitive system information to an unauthorized control sphere in Windows License Manager allows an authorized attacker to disclose information locally. |
| CVE-2026-69316 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally. |
| CVE-2026-69317 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information over a network. |
| CVE-2026-69318 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally. |
| CVE-2026-69319 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69321 | Analyzed | 未確認 | CWE-306 | Missing authentication for critical function in Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally. |
| CVE-2026-69322 | Analyzed | 未確認 | CWE-415 | Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69323 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69324 | Analyzed | 未確認 | CWE-125, CWE-843 | Access of resource using incompatible type ('type confusion') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69325 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft JScript allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69328 | Analyzed | 未確認 | CWE-426 | Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69329 | Analyzed | 未確認 | CWE-125, CWE-190 | Out-of-bounds read in BranchCache allows an unauthorized attacker to deny service over a network. |
| CVE-2026-69331 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69332 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69333 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69334 | Analyzed | 未確認 | CWE-122, CWE-125 | Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69335 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69336 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69337 | Analyzed | 未確認 | CWE-415 | Double free in Windows Registry allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69338 | Analyzed | 未確認 | CWE-416 | Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69339 | Analyzed | 未確認 | CWE-497 | Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally. |
| CVE-2026-69340 | Analyzed | 未確認 | CWE-122, CWE-125 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69341 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69342 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
| CVE-2026-69343 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally. |
| CVE-2026-69344 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally. |
| CVE-2026-69345 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally. |
| CVE-2026-69346 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69347 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally. |
| CVE-2026-69348 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69349 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to disclose information over a network. |
| CVE-2026-6935 | Analyzed | 未確認 | CWE-427 | IBM Concert 1.0.0 through 3.0.0 invokes operating system commands without fully qualifying executable paths or adequately restricting search path resolution. As a result, an attack |
| CVE-2026-69350 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69351 | Analyzed | 未確認 | CWE-359 | Exposure of private personal information to an unauthorized actor in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclose information locall |
| CVE-2026-69352 | Analyzed | 未確認 | CWE-122, CWE-20 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69353 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Text Shaping allows an authorized attacker to disclose information locally. |
| CVE-2026-69355 | Analyzed | 未確認 | CWE-73 | External control of file name or path in Microsoft Exchange Server allows an authorized attacker to execute code over a network. |
| CVE-2026-69356 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network |
| CVE-2026-69357 | Analyzed | 未確認 | CWE-416 | Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69358 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network. |
| CVE-2026-69359 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69360 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69361 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network. |
| CVE-2026-69362 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69364 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to elevate privileges |
| CVE-2026-69365 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69366 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69367 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally. |
| CVE-2026-69368 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69369 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally. |
| CVE-2026-69371 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69372 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network. |
| CVE-2026-69373 | Analyzed | 未確認 | CWE-125, CWE-190 | Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69374 | Analyzed | 未確認 | CWE-770 | Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network. |
| CVE-2026-69375 | Analyzed | 未確認 | CWE-639 | Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network. |
| CVE-2026-69376 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally. |
| CVE-2026-69377 | Analyzed | 未確認 | CWE-862 | Missing authorization in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69378 | Analyzed | 未確認 | CWE-674 | Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network. |
| CVE-2026-69379 | Analyzed | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69380 | Analyzed | 未確認 | CWE-862 | Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69381 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack. |
| CVE-2026-69382 | Analyzed | 未確認 | CWE-327 | Use of a broken or risky cryptographic algorithm in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-69383 | Analyzed | 未確認 | CWE-73 | External control of file name or path in Windows Shell allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69384 | Analyzed | 未確認 | CWE-476 | Null pointer dereference in Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized attacker to deny service locally. |
| CVE-2026-69385 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69386 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69388 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69389 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69390 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally. |
| CVE-2026-69391 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69392 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Shell allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69393 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information over a network. |
| CVE-2026-69394 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69395 | Analyzed | 未確認 | CWE-134 | Use of externally-controlled format string in Active Directory Certificate Services (AD CS) allows an authorized attacker to disclose information over a network. |
| CVE-2026-69396 | Analyzed | 未確認 | CWE-416 | Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69397 | Analyzed | 未確認 | CWE-416 | Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69398 | Analyzed | 未確認 | CWE-362, CWE-415 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally |
| CVE-2026-69399 | Analyzed | 未確認 | CWE-441 | Azure Arc Elevation of Privilege Vulnerability |
| CVE-2026-69401 | Analyzed | 未確認 | CWE-416 | Use after free in Audio Video Control Transport Protocol allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69402 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network |
| CVE-2026-69403 | Analyzed | 未確認 | CWE-862 | Missing authorization in Windows SMB Server allows an authorized attacker to disclose information locally. |
| CVE-2026-69404 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69405 | Analyzed | 未確認 | CWE-401 | Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network. |
| CVE-2026-69406 | Analyzed | 未確認 | CWE-497 | Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally. |
| CVE-2026-69407 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69408 | Analyzed | 未確認 | CWE-122, CWE-190 | Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69409 | Analyzed | 未確認 | CWE-250 | Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. |
| CVE-2026-69410 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69412 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network. |
| CVE-2026-69413 | Analyzed | 未確認 | CWE-416 | Use after free in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69415 | Analyzed | 未確認 | CWE-306 | Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69416 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network. |
| CVE-2026-69417 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network |
| CVE-2026-69418 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69420 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69421 | Analyzed | 未確認 | CWE-122, CWE-191 | Integer underflow (wrap or wraparound) in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69422 | Analyzed | 未確認 | CWE-416 | Use after free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69423 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69424 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69425 | Analyzed | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker to perform tampering locally. |
| CVE-2026-69426 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code locally. |
| CVE-2026-69427 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69428 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network. |
| CVE-2026-69429 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows IKE Extension allows an authorized attacker to execute code over a network. |
| CVE-2026-69430 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69431 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Telnet Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69432 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69433 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69434 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69436 | Modified | 未確認 | CWE-122 | Heap-based buffer overflow in Windows State Repository Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69438 | Analyzed | 未確認 | CWE-681 | Incorrect conversion between numeric types in Microsoft JScript allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69439 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-69440 | Analyzed | 未確認 | CWE-367 | Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69441 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69442 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69443 | Modified | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-69444 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69445 | Analyzed | 未確認 | CWE-22 | Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Compressed Folder allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69447 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69448 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally |
| CVE-2026-69449 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally. |
| CVE-2026-69450 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69451 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69453 | Analyzed | 未確認 | CWE-862 | Missing authorization in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally. |
| CVE-2026-69455 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69456 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69457 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows USB Driver allows an authorized attacker to disclose information locally. |
| CVE-2026-69458 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69459 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Power Dependency Coordinator allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69460 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69461 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69462 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69463 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69464 | Analyzed | 未確認 | CWE-250 | Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69465 | Analyzed | 未確認 | CWE-862 | Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-69466 | Analyzed | 未確認 | CWE-367 | Time-of-check time-of-use (toctou) race condition in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69467 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69468 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69469 | Analyzed | 未確認 | CWE-122, CWE-190 | Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to elevate privileges with a physical attack. |
| CVE-2026-69470 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69472 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Devices Human Interface allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69473 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69474 | Analyzed | 未確認 | CWE-126, CWE-416 | Use after free in Windows Overlay Filter allows an authorized attacker to disclose information over a network. |
| CVE-2026-69475 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69476 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69477 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally. |
| CVE-2026-69478 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69479 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
| CVE-2026-69480 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69481 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69482 | Analyzed | 未確認 | CWE-379 | Creation of temporary file in directory with insecure permissions in Windows Error Reporting allows an authorized attacker to perform tampering locally. |
| CVE-2026-69483 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Image Acquisition allows an authorized attacker to disclose information locally. |
| CVE-2026-69485 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network. |
| CVE-2026-69486 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69488 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69489 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69490 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
| CVE-2026-69491 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69492 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69493 | Analyzed | 未確認 | CWE-122, CWE-125 | Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69494 | Analyzed | 未確認 | CWE-122, CWE-125 | Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69495 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69496 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69497 | Analyzed | 未確認 | CWE-401 | Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over a network. |
| CVE-2026-69498 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69499 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69500 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69501 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69503 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69504 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. |
| CVE-2026-69505 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69507 | Analyzed | 未確認 | CWE-538 | Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose information over a n |
| CVE-2026-69508 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69509 | Analyzed | 未確認 | CWE-122, CWE-125 | Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69510 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69511 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69512 | Analyzed | 未確認 | CWE-122, CWE-197 | Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69513 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69514 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network. |
| CVE-2026-69516 | Analyzed | 未確認 | CWE-416 | Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69517 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Wireless Networking allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69518 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69522 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69524 | Analyzed | 未確認 | CWE-416 | Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69525 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69527 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information locally. |
| CVE-2026-69528 | Analyzed | 未確認 | CWE-306 | Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69529 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69530 | Analyzed | 未確認 | CWE-416 | Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69531 | Analyzed | 未確認 | CWE-441 | Unintended proxy or intermediary ('confused deputy') in Microsoft Windows Speech allows an authorized attacker to perform tampering locally. |
| CVE-2026-69532 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69534 | Analyzed | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate priv |
| CVE-2026-69535 | Analyzed | 未確認 | CWE-122, CWE-197 | Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69536 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network. |
| CVE-2026-69538 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally. |
| CVE-2026-69539 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network. |
| CVE-2026-69540 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69541 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69542 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69544 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69546 | Analyzed | 未確認 | CWE-416 | Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69547 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network. |
| CVE-2026-69548 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack. |
| CVE-2026-69549 | Analyzed | 未確認 | CWE-125, CWE-200 | Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69551 | Analyzed | 未確認 | CWE-416 | Use after free in Windows DNS allows an authorized attacker to execute code over a network. |
| CVE-2026-69552 | Analyzed | 未確認 | CWE-209 | Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose information over a network. |
| CVE-2026-69553 | Analyzed | 未確認 | CWE-862 | Missing authorization in Windows Hyper-V allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69554 | Analyzed | 未確認 | CWE-306 | Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally. |
| CVE-2026-69556 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69559 | Analyzed | 未確認 | CWE-346 | Origin validation error in Microsoft Teams for Android allows an authorized attacker to disclose information over a network. |
| CVE-2026-69560 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69561 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69562 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-69563 | Analyzed | 未確認 | CWE-122, CWE-367 | Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69564 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Online Certificate Status Protocol (OCSP) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69566 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack. |
| CVE-2026-69567 | Analyzed | 未確認 | CWE-416 | Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69568 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to disclose information locally. |
| CVE-2026-69569 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to deny service over a network. |
| CVE-2026-69571 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69572 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information over a network. |
| CVE-2026-69573 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69574 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69575 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69576 | Analyzed | 未確認 | CWE-416 | Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69578 | Analyzed | 未確認 | CWE-122, CWE-197 | Numeric truncation error in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69579 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. |
| CVE-2026-6958 | Deferred | 未確認 | CWE-427 | Acunetix 25.11.251107123 for Windows contains a local privilege escalation vulnerability in the Web Vulnerability Scanning Engine (wvsc.exe) that allows low-privileged local attack |
| CVE-2026-69580 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69581 | Analyzed | 未確認 | CWE-362, CWE-416 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69582 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69583 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69584 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69585 | Analyzed | 未確認 | CWE-704 | Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69586 | Analyzed | 未確認 | CWE-122, CWE-190 | Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69587 | Analyzed | 未確認 | CWE-476 | Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network. |
| CVE-2026-69588 | Analyzed | 未確認 | CWE-401 | Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service over a network. |
| CVE-2026-69589 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69590 | Analyzed | 未確認 | CWE-122 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine |
| CVE-2026-69591 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information over a network. |
| CVE-2026-69592 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69593 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69594 | Analyzed | 未確認 | CWE-122, CWE-190 | Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69595 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69597 | Analyzed | 未確認 | CWE-416 | Use after free in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69598 | Analyzed | 未確認 | CWE-131 | Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69599 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network. |
| CVE-2026-69600 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69601 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69602 | Analyzed | 未確認 | CWE-416 | Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69603 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally. |
| CVE-2026-69604 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69605 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69606 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Shell allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69607 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69608 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69609 | Analyzed | 未確認 | CWE-125, CWE-193 | Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally. |
| CVE-2026-69610 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69611 | Analyzed | 未確認 | CWE-416 | Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69612 | Analyzed | 未確認 | CWE-36 | Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69613 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69614 | Analyzed | 未確認 | CWE-121, CWE-20 | Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69615 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network |
| CVE-2026-69616 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to disclose information locally. |
| CVE-2026-69617 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69618 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information locally. |
| CVE-2026-69619 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows exFAT File System allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69620 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69621 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69623 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a network. |
| CVE-2026-69624 | Analyzed | 未確認 | CWE-184 | Incomplete list of disallowed inputs in Active Directory Certificate Services (AD CS) allows an authorized attacker to perform tampering over a network. |
| CVE-2026-69625 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69626 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-69627 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Remote Desktop Licensing Service allows an authorized attacker to disclose information locally. |
| CVE-2026-69628 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network. |
| CVE-2026-69629 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69630 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69631 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to deny service over a network. |
| CVE-2026-69632 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69636 | Analyzed | 未確認 | CWE-89 | Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a net |
| CVE-2026-69637 | Analyzed | 未確認 | CWE-125, CWE-843 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network. |
| CVE-2026-69638 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
| CVE-2026-69641 | Analyzed | 未確認 | CWE-862 | Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69642 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-69643 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69645 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69646 | Analyzed | 未確認 | CWE-347 | Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network. |
| CVE-2026-69648 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Notification allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69649 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69652 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69654 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69657 | Deferred | 未確認 | CWE-1393 | XING CPTrans-ME-X contains a Use of Default Password (CWE-1393). Anyone with the knowledge of the credential may log in to the affected device. |
| CVE-2026-69662 | Awaiting Analysis | 未確認 | CWE-95 | The application uses unsafe functions that allow execution of inline scripts and string evaluation functions. |
| CVE-2026-69664 | Deferred | 未確認 | CWE-772 | Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by sending a reque |
| CVE-2026-69669 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69671 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69672 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose information locally. |
| CVE-2026-69674 | Analyzed | 未確認 | CWE-306 | Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-69676 | Analyzed | 未確認 | CWE-294 | Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network. |
| CVE-2026-69678 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69679 | Analyzed | 未確認 | CWE-125, CWE-843 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network. |
| CVE-2026-69680 | Analyzed | 未確認 | CWE-346 | Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-69681 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69682 | Analyzed | 未確認 | CWE-362, CWE-416 | Use after free in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69683 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. |
| CVE-2026-69684 | Analyzed | 未確認 | CWE-209 | Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally. |
| CVE-2026-69685 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69686 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69687 | Analyzed | 未確認 | CWE-191 | Integer underflow (wrap or wraparound) in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69688 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69689 | Analyzed | 未確認 | CWE-121, CWE-125 | Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69690 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network |
| CVE-2026-69691 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69692 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69693 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69694 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Windows IP Address Management (IPAM) Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69706 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69707 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69708 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69709 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. |
| CVE-2026-69710 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69711 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69712 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Key Distribution Center allows an authorized attacker to execute code over a network. |
| CVE-2026-69713 | Analyzed | 未確認 | Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. | |
| CVE-2026-69714 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69715 | Analyzed | 未確認 | CWE-122, CWE-125 | Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69716 | Analyzed | 未確認 | CWE-89 | Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a netwo |
| CVE-2026-69717 | Analyzed | 未確認 | CWE-125, CWE-822, CWE-843 | Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69719 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-69720 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69722 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69723 | Analyzed | 未確認 | CWE-497 | Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information over a network. |
| CVE-2026-69724 | Analyzed | 未確認 | CWE-862 | Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-69725 | Analyzed | 未確認 | CWE-415 | Double free in Windows Hello allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69727 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69729 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network. |
| CVE-2026-69730 | Analyzed | 未確認 | CWE-416 | Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69731 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69732 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69734 | Analyzed | 未確認 | CWE-125, CWE-190 | Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-69735 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69738 | Analyzed | 未確認 | CWE-122, CWE-190 | Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69739 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-69740 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69741 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally. |
| CVE-2026-69742 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69744 | Analyzed | 未確認 | CWE-476 | Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network. |
| CVE-2026-69757 | Analyzed | 未確認 | CWE-416 | Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69758 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69759 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69760 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network. |
| CVE-2026-69761 | Analyzed | 未確認 | CWE-416 | Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69762 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69764 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69767 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69768 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69769 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69770 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Windows Spaceport.sys allows an authorized attacker to disclose information locally. |
| CVE-2026-69771 | Analyzed | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Windows Container Manager Service allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-69772 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69773 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69775 | Analyzed | 未確認 | CWE-416 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69777 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network. |
| CVE-2026-69778 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69779 | Analyzed | 未確認 | CWE-367 | Time-of-check time-of-use (toctou) race condition in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69781 | Analyzed | 未確認 | CWE-401 | Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network. |
| CVE-2026-69782 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69784 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69785 | Analyzed | 未確認 | CWE-426 | Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69786 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69787 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69790 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69791 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69792 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-69793 | Analyzed | 未確認 | CWE-1288 | Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-69794 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally. |
| CVE-2026-69797 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69799 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69801 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69803 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-69804 | Analyzed | 未確認 | CWE-367 | Time-of-check time-of-use (toctou) race condition in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-69805 | Analyzed | 未確認 | CWE-200, CWE-522, CWE-73 | External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-69806 | Analyzed | 未確認 | CWE-200, CWE-94 | Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69807 | Analyzed | 未確認 | CWE-22 | Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69808 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally. |
| CVE-2026-69809 | Analyzed | 未確認 | CWE-401 | Missing release of memory after effective lifetime in Active Directory Domain Services allows an unauthorized attacker to deny service over a network. |
| CVE-2026-69813 | Analyzed | 未確認 | CWE-416 | Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69814 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69816 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69817 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69818 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69819 | Analyzed | 未確認 | CWE-787 | Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69820 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69821 | Analyzed | 未確認 | CWE-116 | Improper encoding or escaping of output in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69822 | Analyzed | 未確認 | CWE-122, CWE-197 | Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69824 | Analyzed | 未確認 | CWE-122, CWE-191 | Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69826 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69827 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69829 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69832 | Analyzed | 未確認 | CWE-497 | Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally. |
| CVE-2026-69834 | Analyzed | 未確認 | CWE-416 | Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69838 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69839 | Analyzed | 未確認 | CWE-248 | Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network. |
| CVE-2026-69841 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69843 | Analyzed | 未確認 | CWE-290 | Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-69844 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69845 | Analyzed | 未確認 | CWE-122, CWE-20 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69846 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69847 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network. |
| CVE-2026-69852 | Analyzed | 未確認 | CWE-122 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine |
| CVE-2026-69853 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally. |
| CVE-2026-69854 | Analyzed | 未確認 | CWE-287 | Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-69857 | Analyzed | 未確認 | CWE-639 | Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing over a network. |
| CVE-2026-69858 | Analyzed | 未確認 | CWE-416 | Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69859 | Analyzed | 未確認 | CWE-191, CWE-367 | Time-of-check time-of-use (toctou) race condition in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69860 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69862 | Analyzed | 未確認 | CWE-125, CWE-200 | Out-of-bounds read in Windows Wireless Wide Area Network Service allows an authorized attacker to disclose information locally. |
| CVE-2026-69864 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69865 | Analyzed | 未確認 | CWE-639 | Authorization bypass through user-controlled key in Microsoft Container Registry allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-69866 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69874 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69875 | Analyzed | 未確認 | CWE-122, CWE-125 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69876 | Analyzed | 未確認 | CWE-415, CWE-416 | Use after free in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network. |
| CVE-2026-69878 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code locally. |
| CVE-2026-69881 | Analyzed | 未確認 | CWE-476 | Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network. |
| CVE-2026-69889 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69890 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Virtual Trusted Platform Module allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69891 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Media allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69895 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally. |
| CVE-2026-69896 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69900 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69904 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. |
| CVE-2026-69906 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69907 | Analyzed | 未確認 | CWE-280 | Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69910 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69911 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69921 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69929 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-69930 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-69989 | Analyzed | 未確認 | CWE-416 | Use after free in DNS Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70009 | Analyzed | 未確認 | CWE-22 | Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Arc allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-70019 | Analyzed | 未確認 | CWE-65 | Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-7006 | Awaiting Analysis | 未確認 | CWE-494 | Sublime Text for Windows through Build 4192 (Sublime Text 4) and Build 3207 (Sublime Text 3) contains a local privilege escalation vulnerability that allows unprivileged local atta |
| CVE-2026-70065 | Analyzed | 未確認 | CWE-401 | Missing release of memory after effective lifetime in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
| CVE-2026-70091 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to deny service over a network. |
| CVE-2026-70124 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-70125 | Analyzed | 未確認 | CWE-122 | Microsoft Office Outlook Remote Code Execution Vulnerability |
| CVE-2026-70145 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. |
| CVE-2026-70178 | Analyzed | 未確認 | CWE-862 | Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-70200 | Analyzed | 未確認 | CWE-22, CWE-285 | Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-70203 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70283 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70289 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70290 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
| CVE-2026-70296 | Analyzed | 未確認 | CWE-787 | Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70334 | Analyzed | 未確認 | CWE-184 | Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. |
| CVE-2026-70341 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network. |
| CVE-2026-70342 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Ancillary Function Driver for WinSock allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-70351 | Analyzed | 未確認 | CWE-122, CWE-190 | Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70352 | Analyzed | 未確認 | CWE-306 | Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-70356 | Awaiting Analysis | 未確認 | CWE-434 | The TMS file upload endpoint fails to enforce server-side file type restrictions, allowing an attacker to upload and execute arbitrary PHP files on the web server. |
| CVE-2026-70399 | Deferred | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by opening and hol |
| CVE-2026-70403 | Deferred | 未確認 | CWE-259 | XING CPTrans-ME-X contains a Use of Hard-coded Password (CWE-259). Anyone with the knowledge of the credential may log in to the affected device. |
| CVE-2026-70405 | Deferred | 未確認 | CWE-1284 | Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP snmp allows a remote attacker to degrade availability by sending an SNMP message containing a BER INT |
| CVE-2026-70409 | Deferred | 未確認 | CWE-1284 | Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP eldap allows a malicious or compromised LDAP server to degrade availability by returning a referral U |
| CVE-2026-70410 | Awaiting Analysis | 未確認 | CWE-470 | Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Calcite Avatica. Plugin instantiation (via AvaticaUtils#instantiatePlugin |
| CVE-2026-70413 | Awaiting Analysis | 未確認 | CWE-259 | Dell Live Optics Collector, versions prior to 27.2.13.310, contain(s) a Use of Hard-coded Password vulnerability. A low privileged attacker with local access could potentially expl |
| CVE-2026-70416 | Analyzed | 未確認 | CWE-502 | Dell ObjectScale, versions prior to 4.4.0.0, contains a Deserialization of Untrusted Data vulnerability. An unauthenticated attacker with remote access could potentially exploit th |
| CVE-2026-70425 | Analyzed | 未確認 | CWE-78 | Dell PowerScale OneFS, Versions 9.5.0.0 through 9.7.1.0, Versions 9.8.0.0 through 9.10.1.0, and Versions 9.11.0.0 through 9.14.0.1, contain a command injection vulnerability. An ad |
| CVE-2026-70469 | Analyzed | 未確認 | CWE-409 | Apache NiFi 2.11.0 disabled support for gzip-encoded HTTP requests for the application REST API and rejected requests that included the standard Content-Encoding header indicating |
| CVE-2026-70562 | Analyzed | 未確認 | CWE-415 | Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70563 | Analyzed | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Windows Shell allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-70564 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70565 | Analyzed | 未確認 | CWE-416 | Use after free in Windows AF_UNIX Socket Provider allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70567 | Analyzed | 未確認 | CWE-415 | Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70568 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70569 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70570 | Analyzed | 未確認 | CWE-416 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine |
| CVE-2026-70572 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70573 | Analyzed | 未確認 | CWE-122, CWE-20 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70574 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70575 | Analyzed | 未確認 | CWE-476 | Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network. |
| CVE-2026-70577 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70578 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70579 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-70581 | Analyzed | 未確認 | CWE-190, CWE-20 | Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70582 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Instrumentation allows an authorized attacker to elevate privilege |
| CVE-2026-70583 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70584 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Windows Core Messaging allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70585 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to execute code locally. |
| CVE-2026-70586 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70587 | Analyzed | 未確認 | CWE-170 | Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-70613 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-70614 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-70658 | Awaiting Analysis | 未確認 | CWE-208 | Pay is a payments engine for Ruby on Rails 6.0 and higher. Prior to 11.6.2, Pay::Webhooks::PaddleBillingController#valid_signature? in app/controllers/pay/webhooks/paddle_billing_c |
| CVE-2026-70748 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and |
| CVE-2026-70755 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: File download). Supported versions that are affected are 12.2.3-12.2 |
| CVE-2026-70756 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and |
| CVE-2026-70757 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and |
| CVE-2026-70913 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exp |
| CVE-2026-70915 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exp |
| CVE-2026-71047 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exp |
| CVE-2026-71133 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-71163 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-71177 | Analyzed | 未確認 | CWE-1021 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Rendered UI Layers or Frames vulnerability. A low privileged att |
| CVE-2026-71178 | Analyzed | 未確認 | CWE-647 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Use of Non-Canonical URL Paths for Authorization Decisions vulnerability. An unauthentic |
| CVE-2026-71179 | Analyzed | 未確認 | CWE-78 | Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A l |
| CVE-2026-71180 | Analyzed | 未確認 | CWE-252 | Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value vulnerability. A low privileged attacker with local access could potentially exploit t |
| CVE-2026-71181 | Analyzed | 未確認 | CWE-59 | Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A high privileged attacker with |
| CVE-2026-71182 | Analyzed | 未確認 | CWE-59 | Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A high privileged attacker with |
| CVE-2026-71189 | Awaiting Analysis | 未確認 | CWE-79 | An attacker can construct a request that, if issued by another application user, will cause JavaScript code supplied by the attacker to execute within the user's browser in the con |
| CVE-2026-71198 | Awaiting Analysis | 未確認 | CWE-918 | In OpenStack Glance before 32.0.1, the location API does not validate destination hosts when adding an HTTP location to an image. Unlike the web-download import path, the location |
| CVE-2026-71216 | Deferred | 未確認 | CWE-319 | PagerDuty alarm hook transmits the integration routing key over cleartext HTTP. PagerDuty serves this endpoint over HTTPS and will normally answer plain HTTP with a redirect. Th |
| CVE-2026-71219 | Analyzed | 未確認 | CWE-770 | A stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in metawalk.c uses alloca() with an exponentially-derived size from the untrusted on-disk di_d |
| CVE-2026-71220 | Analyzed | 未確認 | CWE-787 | A stack out-of-bounds write vulnerability was found in gfs2-utils. In gfs2_edit, the di_height field from on-disk inode metadata is used as an array index without bounds checking, |
| CVE-2026-71221 | Analyzed | 未確認 | CWE-787 | A stack out-of-bounds write vulnerability was found in gfs2-utils. In savemeta, the height value from on-disk inode metadata is used as a loop bound without bounds checking, causin |
| CVE-2026-71222 | Analyzed | 未確認 | CWE-125 | A heap out-of-bounds read vulnerability was found in gfs2-utils. The ea_num_ptrs field from on-disk extended attribute metadata is consumed without bounds validation, causing a hea |
| CVE-2026-71224 | Analyzed | 未確認 | CWE-770 | A stack overflow vulnerability was found in gfs2-utils. The metadata walk code in metawalk.c uses alloca() with an untrusted inode height value from on-disk metadata without bounds |
| CVE-2026-71302 | Awaiting Analysis | 未確認 | CWE-384 | The application accepts user-supplied session identifiers and does not regenerate the session ID after authentication. This allows an attacker to predefine a session ID and reuse i |
| CVE-2026-71328 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. |
| CVE-2026-71329 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack. |
| CVE-2026-71330 | Analyzed | 未確認 | CWE-497 | Exposure of sensitive system information to an unauthorized control sphere in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to disclose information ove |
| CVE-2026-71332 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-71333 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-71334 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally. |
| CVE-2026-71336 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network. |
| CVE-2026-71337 | Analyzed | 未確認 | CWE-121, CWE-130 | Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally. |
| CVE-2026-71338 | Analyzed | 未確認 | CWE-415 | Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally. |
| CVE-2026-71339 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-71340 | Analyzed | 未確認 | CWE-416 | Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-71341 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to disclose information locally. |
| CVE-2026-71342 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-71343 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally. |
| CVE-2026-71345 | Analyzed | 未確認 | CWE-787 | Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally. |
| CVE-2026-71348 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack. |
| CVE-2026-71349 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack. |
| CVE-2026-71350 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack. |
| CVE-2026-71351 | Analyzed | 未確認 | CWE-415 | Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-71352 | Analyzed | 未確認 | CWE-191 | Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network. |
| CVE-2026-71353 | Analyzed | 未確認 | CWE-415 | Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-71356 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-71357 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-71374 | Deferred | 未確認 | CWE-502 | Deserialization of untrusted data vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 bef |
| CVE-2026-71375 | Deferred | 未確認 | CWE-611 | Improper restriction of XML external entity reference vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-7 |
| CVE-2026-71376 | Deferred | 未確認 | CWE-78 | OS command injection vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11-60-03, |
| CVE-2026-71377 | Deferred | 未確認 | CWE-88 | Command Argument Injection Vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11- |
| CVE-2026-71379 | Awaiting Analysis | 未確認 | CWE-552 | The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST request. |
| CVE-2026-71380 | Deferred | 未確認 | CWE-772 | Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by sending valid r |
| CVE-2026-71388 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-71403 | Analyzed | 未確認 | CWE-639 | A flaw was found in Rancher Manager. The /v3/users update path did not enforce immutability of a User resource's `username` and `principalIds` fields. A user holding the `update` v |
| CVE-2026-71404 | Analyzed | 未確認 | CWE-639 | A flaw was found in Rancher Manager. The GlobalRole controller derived the target ClusterRole name from the user-settable `authz.management.cattle.io/cr-name` annotation and overwr |
| CVE-2026-71416 | Deferred | 未確認 | CWE-1385, CWE-287 | Headroom compresses data before the data reaches a large language model. Prior to version 0.35.0, the Headroom WebSocket server does not validate the `Origin` header of incoming cl |
| CVE-2026-71418 | Analyzed | 未確認 | CWE-407 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, DNS-over-HTTP/2 processing in rust/src |
| CVE-2026-71429 | Deferred | 未確認 | CWE-407 | stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior to 3.5.0, the path filters pick, ignore, filter, and replac |
| CVE-2026-71440 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2026-71458 | Awaiting Analysis | 未確認 | CWE-204 | URLModificationMiddleware resolves named-URL lookups against unfiltered Model.objects before RBAC. The 403→404 shim only rewrites 403 responses, leaving |
| CVE-2026-71459 | Awaiting Analysis | 未確認 | CWE-862 | JobJobEventsChildrenSummary view has no model/parent_model. ModelAccessPermission.check_get_permissions() falls through (returns True) for any authentic |
| CVE-2026-71460 | Awaiting Analysis | 未確認 | CWE-862 | /api/v2/config/ is protected only by IsAuthenticated. license_info (account_number, subscription_id, pool_id, sku, support_level, instance counts) retur |
| CVE-2026-71461 | Awaiting Analysis | 未確認 | CWE-209 | HostList.list() catches bare Exception and returns str(e) verbatim. Via host_filter, any authenticated user triggers Django FieldError (leaking complete |
| CVE-2026-71462 | Awaiting Analysis | 未確認 | CWE-204 | StringListPathField.to_internal_value() calls os.path.exists() on unbounded user-supplied paths. 200 vs 400 response reveals existence of arbitrary |
| CVE-2026-71463 | Awaiting Analysis | 未確認 | CWE-209 | Notification template Jinja AST whitelist only inspects static Getattr nodes. Dynamic subscripts (job['job'+'_env']) and {% if job.id > 100 %} condition |
| CVE-2026-71464 | Awaiting Analysis | 未確認 | CWE-88 | LaunchConfigurationBaseSerializer.scm_branch has no validate_scm_branch() leading-dash check, unlike Project/JobTemplate/JobLaunch serializers. Schedule |
| CVE-2026-71465 | Awaiting Analysis | 未確認 | CWE-88 | RunAdHocCommand.build_args() appends limit as bare positional (args.append(limit)) instead of using args.extend(['-l', limit]) like RunJob. A limit begi |
| CVE-2026-71483 | Deferred | 未確認 | CWE-79 | Horilla is an HR and CRM software. Prior to 1.6.0, the search parameter at /employee/employee-filter-view is reflected by jQuery .html() in employee/templates/employee_nav.html wit |
| CVE-2026-71537 | Deferred | 未確認 | CWE-362 | Paymenter is a free and open-source webshop solution for management of hosting services. Prior to 1.5.7, app/Livewire/Services/Upgrade.php::doUpgrade() relies on Service::upgradabl |
| CVE-2026-71538 | Awaiting Analysis | 未確認 | CWE-78 | @cyclonedx/cyclonedx-npm creates CycloneDX Software Bill of Materials from npm projects. Prior to version 6.0.0, the Windows fallback path in src/npmRunner.ts, used when npm_execpa |
| CVE-2026-71540 | Awaiting Analysis | 未確認 | CWE-770 | Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. From 3.9.0 until 4.14.7, wazuh-clusterd in framework/wazuh/co |
| CVE-2026-71543 | Awaiting Analysis | 未確認 | CWE-863 | OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, templated ACL, PKI, and SSH policies could substitute attacker-controlled identity data without |
| CVE-2026-71562 | Deferred | 未確認 | CWE-1284 | Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP inets httpc allows a malicious or compromised HTTP server to degrade availability by returning a nume |
| CVE-2026-71565 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-71568 | Awaiting Analysis | 未確認 | CWE-306 | In BMCtest, Ironic is started without authentication and TLS for the duration of the test. Exploiting the problem requires winning the race with bmctest itself, which reduces the a |
| CVE-2026-71612 | Awaiting Analysis | 未確認 | CWE-120 | Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the nhntdmx_process() function. Fixed in fac50e6a12a |
| CVE-2026-71613 | Awaiting Analysis | 未確認 | CWE-120 | Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the j2kdec_process() function. Fixed in 9a253a07fd3f |
| CVE-2026-71614 | Awaiting Analysis | 未確認 | CWE-94 | An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the src/media_tools/dvb_mpe.c, descriptorTime_slice_fec_identifier() and |
| CVE-2026-71616 | Awaiting Analysis | 未確認 | CWE-400 | An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to cause a denial of service via the function gf_route_media_complete_object(). Fixed in 3c4e6c5b3e0c6f |
| CVE-2026-71620 | Deferred | 未確認 | CWE-434 | File Upload vulnerability in Zhao-github ApiAdmin v.5.0.1 allows a remote attacker to execute arbitrary code via a crafted .php file |
| CVE-2026-71622 | Deferred | 未確認 | CWE-89 | SQL injection vulnerability in Zhao-github APiAdmin v.5.0.1 allows a remote attacker to obtain sensitive information via the User.php component |
| CVE-2026-71624 | Deferred | 未確認 | CWE-94 | An issue in esoTalk v.1.0.0g4 allows a remote attacker to execute arbitrary code via the core/models/ETMemberModel.class.php, core/controllers/ETMemberController.class.php, and cor |
| CVE-2026-71625 | Deferred | 未確認 | CWE-269, CWE-640 | An issue in slimkit plus ThinkSNS+ v.2.4 allows a remote attacker to escalate privileges via the ResetPasswordController.php component |
| CVE-2026-71626 | Deferred | 未確認 | CWE-200 | An issue in Invoice Ninja v5.13.24 allows a remote attacker to obtain sensitive information via the StoreWebhookRequest.php, UpdateWebhookRequest.php, and WebhookSingle.php compone |
| CVE-2026-71640 | Deferred | 未確認 | CWE-703 | An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows unsafe vehicle motion via improper handling of expired trajectory |
| CVE-2026-71641 | Deferred | 未確認 | CWE-400 | An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via thenteraction between |
| CVE-2026-71642 | Deferred | 未確認 | CWE-400 | An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via the EGOReplanFSM::che |
| CVE-2026-71643 | Deferred | 未確認 | CWE-400 | An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via the EGOReplanFSM comp |
| CVE-2026-71644 | Deferred | 未確認 | CWE-843 | An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause unsafe trajectory planning and potential UAV coll |
| CVE-2026-71645 | Deferred | 未確認 | CWE-703 | An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial of service via the exploration state mac |
| CVE-2026-71646 | Deferred | 未確認 | CWE-400 | An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial of service via the FastExplorationFSM::o |
| CVE-2026-71647 | Deferred | 未確認 | CWE-400 | An issue in EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via the checkCollisionCallback, execFS |
| CVE-2026-7169 | Deferred | 未確認 | a vulnerability involving an unchecked search path element in Evope Collector, versions prior to 1.1.7.13, allows a local attacker without privileges to load a malicious DLL by pla | |
| CVE-2026-7170 | Deferred | 未確認 | CWE-79 | Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the following endpoint and parameter: * CVE-2026-7170: parameter 'vendor_store_name' in the endpoint '/administrator |
| CVE-2026-7171 | Deferred | 未確認 | CWE-79 | Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the following endpoint and parameter: * CVE-2026-7171: parameter 'Apellido 1' in the endpoint '/administrator/index. |
| CVE-2026-7172 | Deferred | 未確認 | CWE-79 | Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the following endpoint and parameter: * CVE-2026-7172: parameter 'Nombre Completo' in the endpoint '/administrator/i |
| CVE-2026-71801 | Deferred | 未確認 | CWE-798 | An issue was discovered in s-pms SPMS-Server through v1.0. The application contains a hardcoded default access token secret within its core configuration file, which is not overrid |
| CVE-2026-71802 | Deferred | 未確認 | CWE-79 | A stored Cross-Site Scripting (XSS) vulnerability exists in the announcement preview component of REBUILD 4.4.3. Although the announcement content undergoes HTML escaping on the se |
| CVE-2026-71803 | Deferred | 未確認 | CWE-79 | money-pos 1.0 contains a stored Cross-Site Scripting (XSS) vulnerability. When processing returns, the backend fails to filter or escape the goodsName parameter, directly concatena |
| CVE-2026-71805 | Deferred | 未確認 | CWE-434 | An arbitrary file upload and path traversal vulnerability exists in LZ-litchi 1.0.0. Unauthenticated remote attackers can upload arbitrary files and write them outside the intended |
| CVE-2026-71807 | Deferred | 未確認 | CWE-284 | In RuoYi-Cloud-Plus <= 2.6.2 in the ruoyi-workflow module, multiple core task APIs in FlwTaskController lack permission annotations, and the Service layer does not verify whether t |
| CVE-2026-71808 | Deferred | 未確認 | CWE-89 | A SQL Injection vulnerability in Siam Ordering (siam-server) 1.0.0 allows remote authenticated attackers to execute arbitrary SQL commands via the ${} string concatenation in Admin |
| CVE-2026-71809 | Awaiting Analysis | 未確認 | CWE-259 | Authentication Bypass via Hardcoded Master Verification Code vulnerability in Siam Ordering (siam-server) 1.0.0 allows remote unauthenticated attackers to log in as any user, merch |
| CVE-2026-71855 | Analyzed | 未確認 | CWE-697 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, src/flow-hash.c can treat an IPv4 a |
| CVE-2026-7188 | Deferred | 未確認 | CWE-89 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Armiya Information Technologies Ltd. Co. Access Control System allows SQL Inje |
| CVE-2026-71897 | Deferred | 未確認 | CWE-863 | An improper authorization check in Apache DolphinScheduler allows an authenticated user to use the batch-copy and batch-move endpoints to operate on workflows in projects for which |
| CVE-2026-71898 | Deferred | 未確認 | CWE-863 | An incorrect authorization check in Apache DolphinScheduler allows an authenticated user with only read permission for a project to modify a workflow instance in that project throu |
| CVE-2026-71899 | Deferred | 未確認 | CWE-862, CWE-863 | A missing authorization vulnerability exists in the `query-dynamic-sub-workflows` API of Apache DolphinScheduler. The API does not properly verify whether the authenticated user ha |
| CVE-2026-7192 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability in the Dbit T-CPE301K 4G WiFi minirouter allows an authenticated attacker to cause a denial of service (DoS) and a system reboot via a m |
| CVE-2026-7193 | Deferred | 未確認 | CWE-798 | A vulnerability relating to the use of predefined credentials in the Dbit T-CPE301K 4G WiFi mini-router allows an attacker connected to the same network to gain full root access to |
| CVE-2026-71963 | Deferred | 未確認 | CWE-78 | Hermes Agent 0.18.2 through 0.21.0, fixed in commit f6234d0, contains a remote code execution vulnerability that allows attackers to execute arbitrary OS commands by supplying a ma |
| CVE-2026-71971 | Awaiting Analysis | 未確認 | CWE-787 | U-Boot before 2026.10-rc3 with CONFIG_IP_DEFRAG enabled contains an out-of-bounds write vulnerability in the __net_defragment() function in net/net.c. Remote attackers can send a c |
| CVE-2026-71972 | Awaiting Analysis | 未確認 | CWE-787 | U-Boot through 2026.10-rc5 contains an out-of-bounds write vulnerability in the video_display_rle8_bitmap function in drivers/video/video_bmp.c. Attackers can supply a crafted RLE8 |
| CVE-2026-71973 | Awaiting Analysis | 未確認 | CWE-190 | U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfs_read_directory_table() function when allocating the directory table buffer. Attackers can supply a craf |
| CVE-2026-71974 | Awaiting Analysis | 未確認 | CWE-787 | U-Boot before 2026.10-rc3 contains an out-of-bounds write vulnerability in read_slotted_partition() that fails to validate image size against partition bounds. Attackers with physi |
| CVE-2026-71981 | Deferred | 未確認 | CWE-502 | Cypht before 2.12.2 contains a PHP object injection vulnerability that allows authenticated attackers to execute arbitrary operating system commands by supplying a crafted PHP obje |
| CVE-2026-7208 | Awaiting Analysis | 未確認 | CWE-362 | Yealink SIP-T33G firmware versions 124.86.x.x prior to 124.87.0.0 contain a race condition vulnerability that allows authenticated attackers to interrupt active diagnostic processe |
| CVE-2026-72507 | Awaiting Analysis | 未確認 | CWE-89 | The "reportType" parameter in the product summary report feature within the balancing reports section is susceptible to a time-based blind SQL injection vulnerability. |
| CVE-2026-72510 | Awaiting Analysis | 未確認 | CWE-89 | The "supplier_no" parameter used in the business allocation search feature is vulnerable to time-based blind SQL injection. |
| CVE-2026-72524 | Deferred | 未確認 | CWE-863 | Incorrect Authorization vulnerability in Apache Doris allows an authenticated user to bypass privilege checks and access or modify data they are not authorized to. This issue af |
| CVE-2026-72626 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-72627 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-72628 | Analyzed | 未確認 | CWE-409 | Improper Handling of Highly Compressed Data (CWE-409) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user holding Streams manageme |
| CVE-2026-72633 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization (CWE-863) in Kibana Entity Analytics can lead to a loss of security monitoring via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An au |
| CVE-2026-72641 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized modification of data via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An authenticated u |
| CVE-2026-72644 | Analyzed | 未確認 | CWE-248 | Uncaught Exception (CWE-248) in Kibana can lead to a denial of service via Input Data Manipulation (CAPEC-153). An authenticated user holding only the low-privileged feature access |
| CVE-2026-72649 | Analyzed | 未確認 | CWE-502 | Deserialization of Untrusted Data (CWE-502) in the Elasticsearch machine learning component can lead to remote code execution via Object Injection (CAPEC-586). A specially crafted |
| CVE-2026-72652 | Analyzed | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user can submit a sp |
| CVE-2026-72654 | Analyzed | 未確認 | CWE-250 | Execution with Unnecessary Privileges (CWE-250) in the Kibana machine learning feature can lead to information disclosure via Privilege Abuse (CAPEC-122). An operation available to |
| CVE-2026-72662 | Awaiting Analysis | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized disclosure, modification, and deletion of data via Accessing Functionality Not Properl |
| CVE-2026-72668 | Awaiting Analysis | 未確認 | CWE-441 | Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441) in Kibana Agent Builder can lead to privilege escalation. A non-administrative user able to edit a shared agent could |
| CVE-2026-72682 | Analyzed | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user holding only lo |
| CVE-2026-72708 | Deferred | 未確認 | CWE-89 | SPIP before 4.4.18 contains an unauthenticated blind SQL injection vulnerability in the SQL escaping layer that allows unauthenticated attackers to inject arbitrary SQL by supplyin |
| CVE-2026-72709 | Deferred | 未確認 | CWE-862 | SPIP before version 4.4.18 contains a missing authorization vulnerability in sensitive actions under ecrire/action/ that allows unauthenticated attackers to invoke privileged actio |
| CVE-2026-72710 | Deferred | 未確認 | CWE-915 | SPIP before 4.4.18 contains a mass assignment vulnerability in the editer_objet action that allows unauthenticated attackers to write arbitrary rows to any SQL table lacking a cham |
| CVE-2026-72897 | Analyzed | 未確認 | CWE-787 | Issue summary: A TLS server that calls SSL_set_SSL_CTX() to switch a connection to a different SSL_CTX part way through a handshake may access memory beyond the end of an internal |
| CVE-2026-72923 | Deferred | 未確認 | CWE-400 | The OpenAPI.NET SDK contains a useful object model for OpenAPI documents in .NET along with common serializers to extract raw OpenAPI JSON and YAML documents from the model. In Mic |
| CVE-2026-72926 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-72927 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally. |
| CVE-2026-72928 | Analyzed | 未確認 | CWE-416 | Use after free in Windows DNS allows an authorized attacker to execute code over a network. |
| CVE-2026-72929 | Analyzed | 未確認 | CWE-354 | Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-72930 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to execute code locally. |
| CVE-2026-72931 | Analyzed | 未確認 | CWE-772 | Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to deny service locally. |
| CVE-2026-72932 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-72933 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network. |
| CVE-2026-72935 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-72936 | Analyzed | 未確認 | CWE-416 | Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-72937 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally. |
| CVE-2026-72938 | Analyzed | 未確認 | CWE-822, CWE-843 | Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-72939 | Analyzed | 未確認 | CWE-476 | Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny service over a network. |
| CVE-2026-72940 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-72941 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-72942 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Spaceport.sys allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-72943 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network. |
| CVE-2026-72944 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-72945 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally. |
| CVE-2026-72946 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-72947 | Analyzed | 未確認 | CWE-191 | Integer underflow (wrap or wraparound) in Windows File History Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-72948 | Analyzed | 未確認 | CWE-23 | Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-72949 | Analyzed | 未確認 | CWE-476 | Null pointer dereference in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to deny service over a network. |
| CVE-2026-72950 | Analyzed | 未確認 | CWE-122 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine |
| CVE-2026-72952 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally. |
| CVE-2026-72953 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-72954 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network. |
| CVE-2026-72956 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-72957 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally. |
| CVE-2026-72958 | Analyzed | 未確認 | CWE-415 | Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally. |
| CVE-2026-72959 | Analyzed | 未確認 | CWE-122 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine |
| CVE-2026-72960 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network. |
| CVE-2026-72961 | Analyzed | 未確認 | CWE-122 | Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
| CVE-2026-72962 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-72963 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-72964 | Analyzed | 未確認 | CWE-306 | Missing authentication for critical function in Windows Internet Connection Sharing (ICS) allows an authorized attacker to perform tampering locally. |
| CVE-2026-72965 | Analyzed | 未確認 | CWE-416 | Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-72966 | Analyzed | 未確認 | CWE-862 | Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally. |
| CVE-2026-72967 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally. |
| CVE-2026-72972 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-72973 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-72974 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-72975 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-72976 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally. |
| CVE-2026-72977 | Analyzed | 未確認 | CWE-125, CWE-20 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-72978 | Analyzed | 未確認 | CWE-770 | Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. |
| CVE-2026-72979 | Analyzed | 未確認 | CWE-416 | Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-7298 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in IdeaSoft Software Industry and Trade Inc. Smart E-Commerce allows Reflected XS |
| CVE-2026-72980 | Analyzed | 未確認 | CWE-427 | Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-72981 | Analyzed | 未確認 | CWE-416 | Use after free in IP Helper allows an unauthorized attacker to execute code over a network. |
| CVE-2026-72982 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network. |
| CVE-2026-72983 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-72985 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack. |
| CVE-2026-72986 | Analyzed | 未確認 | CWE-122, CWE-190 | Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network. |
| CVE-2026-72987 | Analyzed | 未確認 | CWE-416 | Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. |
| CVE-2026-72988 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-72989 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Windows Failover Cluster allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-72990 | Analyzed | 未確認 | CWE-122, CWE-190 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-72991 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-72992 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-72993 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-72994 | Analyzed | 未確認 | CWE-122, CWE-20 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-72995 | Analyzed | 未確認 | CWE-122, CWE-190 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-72996 | Analyzed | 未確認 | CWE-122, CWE-20 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-72997 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-72999 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
| CVE-2026-73000 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-73001 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-73002 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-73003 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-73004 | Analyzed | 未確認 | CWE-306 | Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally. |
| CVE-2026-73005 | Analyzed | 未確認 | CWE-362, CWE-416 | Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally. |
| CVE-2026-73006 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. |
| CVE-2026-73007 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-73008 | Analyzed | 未確認 | CWE-359 | Exposure of private personal information to an unauthorized actor in Windows Biometric Service allows an authorized attacker to disclose information locally. |
| CVE-2026-73009 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-73010 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network. |
| CVE-2026-73011 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-73012 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-73013 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. |
| CVE-2026-73014 | Analyzed | 未確認 | CWE-862 | Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally. |
| CVE-2026-73015 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-73016 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. |
| CVE-2026-73017 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally. |
| CVE-2026-73018 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network. |
| CVE-2026-73019 | Analyzed | 未確認 | CWE-41 | Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-73020 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-73021 | Analyzed | 未確認 | CWE-122, CWE-20 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-73022 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-73023 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. |
| CVE-2026-73024 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-73025 | Analyzed | 未確認 | CWE-1390 | Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-73026 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-73028 | Analyzed | 未確認 | CWE-284 | Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-73029 | Analyzed | 未確認 | CWE-126 | Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-73064 | Awaiting Analysis | 未確認 | CWE-394 | In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only a |
| CVE-2026-73163 | Awaiting Analysis | 未確認 | CWE-78 | Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface o |
| CVE-2026-73164 | Awaiting Analysis | 未確認 | CWE-78 | Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface o |
| CVE-2026-73165 | Awaiting Analysis | 未確認 | CWE-78 | Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface o |
| CVE-2026-73166 | Awaiting Analysis | 未確認 | CWE-94 | Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firm |
| CVE-2026-73167 | Awaiting Analysis | 未確認 | CWE-78 | Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface o |
| CVE-2026-73169 | Awaiting Analysis | 未確認 | CWE-79 | Nozomi Networks Labs identified a CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Modbus transaction management in |
| CVE-2026-73170 | Awaiting Analysis | 未確認 | CWE-94 | Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the Modbus CSV import workflow of Advantech EKI-1242EIMS in fir |
| CVE-2026-73171 | Awaiting Analysis | 未確認 | CWE-73 | Nozomi Networks Labs identified a CWE-73: External Control of File Name or Path vulnerability in the backup-restore workflow of Advantech EKI-1242EIMS in firmware version V1.06.01 |
| CVE-2026-73172 | Awaiting Analysis | 未確認 | CWE-78 | Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the edgserver management servi |
| CVE-2026-73173 | Awaiting Analysis | 未確認 | CWE-306 | Nozomi Networks Labs identified a CWE-306: Missing Authentication for Critical Function vulnerability in the edgserver management protocol of Advantech EKI-1242EIMS in firmware ver |
| CVE-2026-73174 | Awaiting Analysis | 未確認 | CWE-319 | Nozomi Networks Labs identified a CWE-319: Cleartext Transmission of Sensitive Information vulnerability in the edgserver management protocol of Advantech EKI-1242EIMS in firmware |
| CVE-2026-73175 | Awaiting Analysis | 未確認 | CWE-400 | Nozomi Networks Labs identified a CWE-400: Uncontrolled Resource Consumption vulnerability in the OPC UA gateway component of Advantech EKI-1242EIMS in firmware version V1.06.01 th |
| CVE-2026-73176 | Awaiting Analysis | 未確認 | CWE-78 | Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface o |
| CVE-2026-73177 | Awaiting Analysis | 未確認 | CWE-345 | Nozomi Networks Labs identified a CWE-345: Insufficient Verification of Data Authenticity vulnerability in the firmware upgrade mechanism of the Advantech EKI-1242EIMS in firmware |
| CVE-2026-73178 | Deferred | 未確認 | CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Syncope. An administrator with adequate entitlements can get access via REST to the list of exis |
| CVE-2026-73191 | Deferred | 未確認 | CWE-601 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache Syncope. When the Syncope SRA is configured for CAS authentication, the target Apereo CAS instance' |
| CVE-2026-73192 | Analyzed | 未確認 | CWE-79 | An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability when using the XSSAPI.getValidHref() in Apache Sling XSS version 2.4. |
| CVE-2026-73195 | Deferred | 未確認 | CWE-116 | Improper Encoding or Escaping of Output vulnerability in Apache Syncope. Authenticated users can store a spreadsheet formula payload in one of their own plain attributes. When s |
| CVE-2026-73236 | Deferred | 未確認 | CWE-863 | Incorrect Authorization vulnerability in Apache Syncope. Delegated administration security checks are based on Realm hierarchy and enforced via prefix matches. Due to incorrect |
| CVE-2026-73270 | Deferred | 未確認 | CWE-178 | Improper Handling of Case Sensitivity vulnerability in Erlang/OTP inets httpd allows a remote unauthenticated attacker to read files inside a mod_auth protected directory by reques |
| CVE-2026-73276 | Deferred | 未確認 | CWE-444 | Gracefulness code ignored cases that should be rejected, resulting in possible HTTP Request Smuggling opportunities. This issue affects OTP from OTP 22.2 before OTP 27.3.4.17, fro |
| CVE-2026-73309 | Analyzed | 未確認 | CWE-697 | XenForo before 2.3.13 contains an authentication bypass vulnerability in the OAuth2 token endpoint that allows unauthenticated attackers to obtain valid token pairs by submitting e |
| CVE-2026-73310 | Analyzed | 未確認 | CWE-863 | XenForo before 2.3.13 contains an authorization flaw in the OAuth2 token endpoint that allows attackers controlling any allowlisted redirect URI to bypass redirect URI binding by s |
| CVE-2026-73311 | Analyzed | 未確認 | CWE-294 | XenForo before 2.3.13 contains an OAuth2 authorization code reuse vulnerability that allows attackers to obtain unauthorized token pairs by submitting a previously used authorizati |
| CVE-2026-73312 | Analyzed | 未確認 | CWE-294 | XenForo before 2.3.13 contains a refresh token replay vulnerability that allows attackers to reuse a refresh token multiple times by exploiting the failure to mark tokens as consum |
| CVE-2026-73313 | Analyzed | 未確認 | CWE-863 | XenForo before 2.3.13 contains a multi-factor authentication bypass vulnerability in the passkey TFA provider that allows an authenticated attacker to complete login as another use |
| CVE-2026-73314 | Analyzed | 未確認 | CWE-754 | XenForo before 2.3.13 contains a signature verification logic error in the PayPal REST webhook handler that allows unauthenticated attackers to bypass payment signature validation |
| CVE-2026-73315 | Analyzed | 未確認 | CWE-918 | XenForo before 2.3.13 contains a server-side request forgery vulnerability in the PayPal REST webhook handler that allows unauthenticated attackers to cause the server to make outb |
| CVE-2026-73316 | Analyzed | 未確認 | CWE-345 | XenForo before 2.3.13 contains a payment replay vulnerability in the PayPal REST payment provider that allows attackers to process the same webhook payload multiple times by exploi |
| CVE-2026-73317 | Analyzed | 未確認 | CWE-863 | XenForo before 2.3.13 contains a missing authorization vulnerability in the ACP cache-rebuild dispatcher that allows limited administrators with only the rebuildCache permission to |
| CVE-2026-73318 | Analyzed | 未確認 | CWE-863 | XenForo before 2.3.13 contains a missing authorization vulnerability in the force-agreement controller that allows any ACP administrator to access and submit force-agreement forms |
| CVE-2026-73319 | Analyzed | 未確認 | CWE-79 | XenForo before 2.3.13 contains a cross-site scripting vulnerability in the dynamic redirect handler that allows unauthenticated attackers to execute arbitrary JavaScript in the boa |
| CVE-2026-73320 | Analyzed | 未確認 | CWE-639 | XenForo before 2.3.13 contains an unauthenticated information disclosure vulnerability that allows unauthenticated attackers to retrieve private unfurl records by supplying predict |
| CVE-2026-73321 | Analyzed | 未確認 | CWE-674 | XenForo before 2.3.13 contains an uncontrolled recursion vulnerability in the BBCode parser that allows authenticated attackers to cause persistent denial of service by submitting |
| CVE-2026-73324 | Deferred | 未確認 | CWE-125, CWE-170 | Certain VLC media player builds in versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing media from an attacker-controlled network source. E |
| CVE-2026-73334 | Analyzed | 未確認 | CWE-20 | Potential problem for users of the org.apache.parquet.crypto.keytools package in Apache Parquet, versions 1.12 to 1.18. This package enables users to encrypt Parquet files via an |
| CVE-2026-73369 | Analyzed | 未確認 | CWE-94 | Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context |
| CVE-2026-73370 | Deferred | 未確認 | CWE-863 | Incorrect Authorization vulnerability in Apache Syncope. Delegated administration security checks performed by Reconciliation service's pull and push, being incomplete, could ac |
| CVE-2026-73435 | Awaiting Analysis | 未確認 | CWE-345 | On affected platforms running Arista EOS with Open Shortest Path First version 2 (OSPFv2) configured, a specially crafted OSPFv2 packet from an unauthenticated attacker on the same |
| CVE-2026-73436 | Awaiting Analysis | 未確認 | CWE-125, CWE-1284 | On affected platforms running Arista EOS with OSPFv2 and OSPFv2 segment routing configured, a specially crafted OSPFv2 packet from an adjacent OSPF neighbor may cause OSPF to resta |
| CVE-2026-73437 | Awaiting Analysis | 未確認 | CWE-345 | On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay configured, an unauthenticated attacker with network access could send a crafted DHCP |
| CVE-2026-73438 | Awaiting Analysis | 未確認 | CWE-617 | On affected platforms running Arista EOS with Open Shortest Path First version 3 (OSPFv3) configured, an unauthenticated attacker on the same OSPFv3 broadcast domain can send a spe |
| CVE-2026-73439 | Awaiting Analysis | 未確認 | CWE-842 | On affected platforms running Arista EOS, if OpenConfig is configured and running a gNMI server on the system, and if gNSI Pathz is configured and a gNSI Pathz policy is present on |
| CVE-2026-73440 | Awaiting Analysis | 未確認 | CWE-212 | On affected platforms running Arista EOS with Simple Network Management Protocol (SNMP) configured, SNMPv3 local or remote user credentials may be exposed as a one-way hashed, loca |
| CVE-2026-73442 | Awaiting Analysis | 未確認 | CWE-532 | On affected platforms running Arista EOS with VRRP enabled, the peer device VRRP authentication credentials are logged in cleartext on the switch, allowing an authenticated user wi |
| CVE-2026-73443 | Awaiting Analysis | 未確認 | CWE-294 | On affected platforms running Arista EOS with VRRPv2 IP-AH authentication configured, an unauthenticated attacker within the same layer 2 network segment on which VRRP is running c |
| CVE-2026-73444 | Awaiting Analysis | 未確認 | CWE-303 | On affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH) authentication configured, an unauthenticated attacker with access to the layer 2 network segm |
| CVE-2026-73445 | Awaiting Analysis | 未確認 | CWE-20 | On affected platforms running Arista EOS, an issue with the gRPC Network Security Interface (gNSI) Authz Rotate RPC may cause an incorrect Authz policy which was uploaded in the on |
| CVE-2026-73446 | Awaiting Analysis | 未確認 | CWE-696 | On affected platforms running Arista EOS with IS-IS configured on a broadcast interface, an unauthenticated attacker can send a crafted IS-IS Hello Protocol Data Unit (PDU) that ca |
| CVE-2026-73447 | Awaiting Analysis | 未確認 | CWE-78 | A privileged attacker can exploit certain operation to execute arbitrary commands with root privileges, leading to full device compromise. An authenticated user can exploit gRPC Ne |
| CVE-2026-73449 | Awaiting Analysis | 未確認 | CWE-290 | On affected platforms running Arista EOS with both 802.1X port authentication and the RADIUS proxy feature configured with dynamic authorization, a low-privileged attacker on an ad |
| CVE-2026-73450 | Awaiting Analysis | 未確認 | CWE-345 | On affected platforms running Arista EOS with MLAG Dual Primary Detection configured, an unauthenticated attacker with access to the Dual Primary Detection network segment can send |
| CVE-2026-73451 | Awaiting Analysis | 未確認 | On affected platforms running Arista EOS with dual switch cards and with ingress Security ACLs configured on Switched Virtual Interfaces (SVI) in shared mode, restarting of the sec | |
| CVE-2026-73453 | Awaiting Analysis | 未確認 | CWE-94 | An unauthenticated P4Runtime (Programming Protocol-Independent Packet Processors Runtime) client can achieve arbitrary code execution under certain conditions on affected platforms |
| CVE-2026-73454 | Awaiting Analysis | 未確認 | CWE-77 | On affected platforms running Arista EOS with gRPC Network Security Interface (gNSI) Credentialz configured, a specially crafted request can cause unintended modifications to the t |
| CVE-2026-73455 | Awaiting Analysis | 未確認 | CWE-130 | On affected platforms running Arista EOS with Open Shortest Path First version 3 (OSPFv3) configured, a specially crafted packet can cause the OSPFv3 agent to restart unexpectedly. |
| CVE-2026-73456 | Awaiting Analysis | 未確認 | CWE-94 | Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface (gNPSI) enabled, an unauthenticated gNPSI client can craft a malici |
| CVE-2026-73457 | Awaiting Analysis | 未確認 | CWE-532 | Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface (gNPSI) enabled, the gNPSI client credentials might be logged in cl |
| CVE-2026-73458 | Awaiting Analysis | 未確認 | CWE-303 | On affected platforms running Arista EOS with authenticated Bidirectional Forwarding Detection (BFD) sessions configured, a specially crafted packet can cause the BFD session(s) to |
| CVE-2026-73459 | Awaiting Analysis | 未確認 | CWE-354 | On affected platforms running Arista EOS with IS-IS configured, an unauthenticated attacker who can inject a specially crafted IS-IS LSP PDU can cause the legitimate LSP to be unex |
| CVE-2026-73460 | Awaiting Analysis | 未確認 | CWE-863 | On affected platforms running Arista EOS with IS-IS graceful restart enabled, an unauthenticated attacker who can inject a malformed IS-IS LSP PDU packet can cause the IS-IS gracef |
| CVE-2026-73461 | Awaiting Analysis | 未確認 | CWE-266 | On affected EOS platforms with AAA-based gRPC authorization enabled for OpenConfig, gRPC requests of an authenticated user to OpenConfig may use the wrong privilege level, resultin |
| CVE-2026-73462 | Awaiting Analysis | 未確認 | CWE-125 | On affected platforms running Arista EOS with IGMP (Internet Group Management Protocol) snooping configured (enabled by default on all VLANs), a network-adjacent unauthenticated at |
| CVE-2026-73463 | Awaiting Analysis | 未確認 | CWE-362 | On affected platforms running Arista EOS, when multiple gRPC Network Security Interface (gNSI) transports are configured, a race condition in the gNSI Authz service may cause a pol |
| CVE-2026-73464 | Awaiting Analysis | 未確認 | CWE-94 | On affected platforms running Arista EOS with gRPC Network Management Interface (gNMI) enabled, a specially crafted request could allow a malicious authenticated client with gRPC N |
| CVE-2026-73465 | Awaiting Analysis | 未確認 | CWE-532 | On affected platforms running Arista EOS, under certain circumstances plaintext private keys may be written in clear text to log files during operations when specialized non-standa |
| CVE-2026-73466 | Awaiting Analysis | 未確認 | CWE-532 | On affected platforms running Arista EOS, under certain circumstances user passwordss may be written in clear text to log files during operations when specialized non-standard debu |
| CVE-2026-73467 | Awaiting Analysis | 未確認 | CWE-532 | On affected platforms running Arista EOS, under certain circumstances plaintext shared secrets for configured Terminal Access Controller Access-Control System Plus (TACACS+) server |
| CVE-2026-73468 | Awaiting Analysis | 未確認 | CWE-670 | A specially crafted packet can cause the premature expiry of multicast forwarding state on affected interfaces, potentially resulting in temporary multicast traffic loss during the |
| CVE-2026-73469 | Awaiting Analysis | 未確認 | CWE-863 | When specific platforms are using Arista EOS with a loose Unicast Reverse Path Forwarding (uRPF) configuration, certain traffic may not be subjected to the intended verification dr |
| CVE-2026-73470 | Deferred | 未確認 | CWE-269 | Improper Privilege Management vulnerability in Apache Syncope. Delegations can be created or updated with Roles not owned by the delegating User, or not for the same Realm sub |
| CVE-2026-73474 | Analyzed | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in Drupal Entity Share Websub allows Server Side Request Forgery. This issue affects Entity Share Websub versions: from 0.0.0 to 1. |
| CVE-2026-73475 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization vulnerability in Drupal Commerce PayPal allows Forceful Browsing. This issue affects Commerce PayPal versions: from 0.0.0 to 1.12.0, from 2.0.0 to 2.1.3. |
| CVE-2026-73476 | Analyzed | 未確認 | CWE-178 | Improper Handling of Case Sensitivity vulnerability in Drupal External Authentication allows Privilege Escalation. This issue affects External Authentication versions: from 0.0.0 t |
| CVE-2026-73477 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization vulnerability in Drupal Quick Tabs allows Forceful Browsing. This issue affects Quick Tabs versions: from 0.0.0 to 4.3.1. |
| CVE-2026-73478 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization vulnerability in Drupal Diff allows Forceful Browsing. This issue affects Diff versions: from 0.0.0 to 2.0.1, from 2.1.0 to 2.1.1. |
| CVE-2026-73494 | Deferred | 未確認 | CWE-444 | blaze is a Scala library for building asynchronous pipelines, with a focus on network IO. Prior to 0.23.18 and from 1.0.0-M1 until 1.0.0-M42, five HTTP/1.1 conformance laxities in |
| CVE-2026-73496 | Deferred | 未確認 | CWE-22, CWE-73 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the confluence_upload_attachment and confluence_upload_attachm |
| CVE-2026-73497 | Deferred | 未確認 | CWE-918 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). From 0.17.0 until 0.22.0, validate_url_for_ssrf resolves the attacker-controlle |
| CVE-2026-73511 | Analyzed | 未確認 | CWE-289, CWE-436 | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy normally matches the raw request path, wh |
| CVE-2026-73512 | Analyzed | 未確認 | CWE-416 | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's HttpDatagramHandler caches the current |
| CVE-2026-73513 | Analyzed | 未確認 | CWE-20, CWE-416 | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's optional oghttp2 upstream HTTP/2 codec |
| CVE-2026-73524 | Deferred | 未確認 | CWE-79 | Cypht before 2.12.2 contains a cross-site scripting vulnerability in the contacts module that allows remote attackers to execute arbitrary script content by embedding malicious pay |
| CVE-2026-73546 | Analyzed | 未確認 | CWE-79 | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's /stats?format=html admin endpoint uses |
| CVE-2026-73547 | Analyzed | 未確認 | CWE-20, CWE-476 | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's ext_authz filter assumes that a request |
| CVE-2026-73548 | Analyzed | 未確認 | CWE-444 | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy forwards data for a configured non-WebSoc |
| CVE-2026-73549 | Analyzed | 未確認 | CWE-754 | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's Utility::copyInternetAddressAndPort and |
| CVE-2026-73550 | Analyzed | 未確認 | CWE-401 | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy copies every decoded HTTP/2 Host header v |
| CVE-2026-73551 | Analyzed | 未確認 | CWE-647 | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's URL normalization does not recognize do |
| CVE-2026-73552 | Analyzed | 未確認 | CWE-20 | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy HTTP RBAC accepts RFC-valid opaque header |
| CVE-2026-73553 | Analyzed | 未確認 | CWE-436 | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, When ignore_path_parameters_in_path_matching is |
| CVE-2026-73579 | Deferred | 未確認 | CWE-863 | Incorrect Authorization vulnerability in Apache Syncope. Any search requests are transformed into SQL, Neo4J or Elasticsearch / Opensearch queries, depending on the actual deplo |
| CVE-2026-73581 | Awaiting Analysis | 未確認 | CWE-299 | Improper Check for Certificate Revocation vulnerability in Apache Tomcat. Both the OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore. This |
| CVE-2026-73586 | Analyzed | 未確認 | CWE-613 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Insufficient Session Expiration vulnerability. A low privileged attacker with adjacent n |
| CVE-2026-73587 | Analyzed | 未確認 | CWE-295 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent |
| CVE-2026-73588 | Analyzed | 未確認 | CWE-306 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker w |
| CVE-2026-73589 | Analyzed | 未確認 | CWE-261 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Weak Encoding for Password vulnerability. A low privileged attack |
| CVE-2026-73591 | Analyzed | 未確認 | CWE-540 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Sensitive Information in Source Code vulnerability. An unauthenticated atta |
| CVE-2026-73593 | Analyzed | 未確認 | CWE-489 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Active Debug Code vulnerability. A high privileged attacker with local access could pote |
| CVE-2026-73594 | Analyzed | 未確認 | CWE-295 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Improper Certificate Validation vulnerability. An unauthenticate |
| CVE-2026-73595 | Analyzed | 未確認 | CWE-494 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Download of Code Without Integrity Check vulnerability. An unauth |
| CVE-2026-73596 | Analyzed | 未確認 | CWE-1188 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A high privileged a |
| CVE-2026-73597 | Analyzed | 未確認 | CWE-352 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cross-Site Request Forgery (CSRF) vulnerability. An unauthenticated attacker with remote |
| CVE-2026-73598 | Analyzed | 未確認 | CWE-732 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged at |
| CVE-2026-73599 | Analyzed | 未確認 | CWE-601 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an URL Redirection to Untrusted Site ('Open Redirect') vulnerability. An unauthenticated at |
| CVE-2026-73600 | Analyzed | 未確認 | CWE-121 | Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buffer overflow vulnerability in file-level restore agent. A high privileged remote attacker could pote |
| CVE-2026-73638 | Deferred | 未確認 | CWE-125 | Imager versions from 0.45_02 before 1.035 for Perl read outside the EXIF block via unchecked start offsets in tiff_load_ifd. tiff_load_ifd() validates an IFD entry's data by check |
| CVE-2026-73639 | Deferred | 未確認 | CWE-787 | Imager::File::PNG versions from 1.003 before 1.004 for Perl write past the end of the row buffer reading a PNG with a tRNS transparency chunk in read_direct8. With a tRNS chunk, r |
| CVE-2026-73640 | Deferred | 未確認 | CWE-89 | Dayforce ESS Excelity is vulnerable to Time Based-Blind SQL Injection in password recovery functionality. The unauthenticated attacker can prepare GET request with one of the param |
| CVE-2026-73641 | Deferred | 未確認 | CWE-79 | Dayforce ESS Excelity is vulnerable to Reflected XSS in multiple endpoints. An attacker can prepare a specially crafted URL that, when opened, results in arbitrary JavaScript execu |
| CVE-2026-73642 | Deferred | 未確認 | CWE-22 | Dayforce ESS Excelity is vulnerable to Path Traversal in file download functionality. An unauthenticated attacker can sent GET request with file path parameter set to any path inc |
| CVE-2026-73668 | Deferred | 未確認 | CWE-863 | Incorrect Authorization vulnerability in Apache Syncope. An administrator with adequate entitlements in a given Realm may be able to read via REST the full Connector configura |
| CVE-2026-73693 | Deferred | 未確認 | CWE-78 | FileRun before 2026.3.0 contains an OS command injection vulnerability in the PhotoProofSheet handler that allows authenticated users with upload permission to execute arbitrary co |
| CVE-2026-73694 | Deferred | 未確認 | CWE-78 | FileRun before 2026.3.0 contains an OS command injection vulnerability caused by a no-op redefinition of escapeshellcmd() in CLI.php that strips shell-metacharacter escaping, allow |
| CVE-2026-73698 | Deferred | 未確認 | CWE-89 | FileRun before 2026.3.0 contains a SQL injection vulnerability that allows delegated or simple administrators to execute arbitrary SQL by submitting the description parameter as an |
| CVE-2026-73699 | Deferred | 未確認 | CWE-502 | FileRun before 2026.3.0 contains a PHP object injection vulnerability that allows authenticated attackers to execute arbitrary code by exploiting incorrect options passed to unseri |
| CVE-2026-73700 | Analyzed | 未確認 | CWE-79 | A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to conduct a stored cross-site scri |
| CVE-2026-73701 | Analyzed | 未確認 | CWE-94 | An unauthenticated remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer and could be exploited if certain preconditions o |
| CVE-2026-73702 | Modified | 未確認 | CWE-863 | A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to escala |
| CVE-2026-73703 | Modified | 未確認 | CWE-79 | A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to conduct a stored cross-site scripting (X |
| CVE-2026-73704 | Modified | 未確認 | CWE-77 | A command sanitization bypass exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to escalate thei |
| CVE-2026-73705 | Modified | 未確認 | CWE-552 | An arbitrary file write vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to escalate privileges. Successful explo |
| CVE-2026-73706 | Modified | 未確認 | CWE-306 | A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to obtain limited system information and to change the state of certain |
| CVE-2026-73707 | Modified | 未確認 | CWE-863 | Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to complet |
| CVE-2026-73708 | Modified | 未確認 | CWE-863 | A business logic vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to obtain eleva |
| CVE-2026-73709 | Modified | 未確認 | CWE-77, CWE-78 | A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to run arbitrary commands on the underlying ho |
| CVE-2026-73710 | Analyzed | 未確認 | CWE-306 | Vulnerabilities in an API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation c |
| CVE-2026-73711 | Analyzed | 未確認 | CWE-269 | A privilege escalation vulnerability exists in the API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to gain ad |
| CVE-2026-73712 | Modified | 未確認 | CWE-77, CWE-78 | A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain precondition |
| CVE-2026-73713 | Analyzed | 未確認 | CWE-269 | Local privilege-escalation vulnerabilities have been discovered in HPE Networking Fabric Composer. Successful exploitation of these vulnerabilities could allow a local attacker to |
| CVE-2026-73714 | Analyzed | 未確認 | CWE-269 | A sensitive information disclosure vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator us |
| CVE-2026-73715 | Analyzed | 未確認 | CWE-400 | A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could all |
| CVE-2026-73716 | Modified | 未確認 | CWE-78 | A remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to run arbitra |
| CVE-2026-73717 | Modified | 未確認 | CWE-77, CWE-78 | A command injection vulnerability exists in the web-based management interface of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to run arbitrar |
| CVE-2026-73718 | Modified | 未確認 | CWE-352 | A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to access sensitive information if the attack |
| CVE-2026-73719 | Modified | 未確認 | CWE-73 | An arbitrary file write vulnerability exists in the API of HPE Networking Fabric Composer and could allow an authenticated administrative user to escalate privileges. Successful ex |
| CVE-2026-73720 | Modified | 未確認 | CWE-73, CWE-78 | Insecure file operations in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to achieve remote code execution. Successful exploitation could a |
| CVE-2026-73721 | Modified | 未確認 | CWE-89 | Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to conduct SQL injection attacks against the HPE Networking Fabric Compose |
| CVE-2026-73722 | Modified | 未確認 | CWE-77, CWE-78 | Command injection vulnerabilities in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated remote attacker to perform command injection |
| CVE-2026-73723 | Modified | 未確認 | CWE-269, CWE-863 | A privilege escalation vulnerability exists in the web-based management interface of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privil |
| CVE-2026-73724 | Modified | 未確認 | CWE-269, CWE-863 | Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to change |
| CVE-2026-73725 | Modified | 未確認 | CWE-269 | A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitation of this vulnerability could allow a local attacker to achi |
| CVE-2026-73726 | Modified | 未確認 | CWE-287, CWE-306 | A vulnerability has been identified in the underlying operating system of HPE Networking Fabric Composer that could potentially allow an unauthenticated adjacent actor to circumven |
| CVE-2026-73727 | Modified | 未確認 | CWE-284, CWE-863 | Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to access sensitive information. A successful exploit allows a |
| CVE-2026-73728 | Analyzed | 未確認 | CWE-400 | Denial-of-service vulnerabilities exist in the API of HPE Networking Fabric Composer that could allow an authenticated low privilege operator user to cause a denial of service. Suc |
| CVE-2026-73729 | Analyzed | 未確認 | CWE-269 | A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator user with local access to upstream AFC depe |
| CVE-2026-73730 | Analyzed | 未確認 | CWE-269 | A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to change |
| CVE-2026-73731 | Analyzed | 未確認 | CWE-79 | A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a reflected cross-site scripting ( |
| CVE-2026-73732 | Analyzed | 未確認 | CWE-200 | A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator user with local access to obtain sensitive |
| CVE-2026-73733 | Analyzed | 未確認 | CWE-287 | Authentication bypasses in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to circumvent existing authentication controls. Succes |
| CVE-2026-73734 | Analyzed | 未確認 | CWE-601 | A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to redirect users to an arbitrary URL. |
| CVE-2026-73735 | Analyzed | 未確認 | CWE-552 | Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to access some information beyond their privilege level. Succe |
| CVE-2026-73736 | Analyzed | 未確認 | CWE-552 | A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to view some system files. Successful exploit |
| CVE-2026-73737 | Analyzed | 未確認 | CWE-22 | An unauthenticated path traversal vulnerability exists in the API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attack |
| CVE-2026-73738 | Analyzed | 未確認 | CWE-200 | A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator user with local access to view sensitive in |
| CVE-2026-73739 | Analyzed | 未確認 | CWE-200 | A vulnerability exists in the API of HPE Networking Fabric Composer that allows for an attacker with administrative privileges to access sensitive information in a cleartext format |
| CVE-2026-73740 | Analyzed | 未確認 | CWE-269 | A local privilege escalation vulnerability in HPE Networking Fabric Composer could allow an authenticated privileged user on the underlying host to elevate their user privileges to |
| CVE-2026-73741 | Analyzed | 未確認 | CWE-284 | A vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to view some system files. Successful exploitation could allow |
| CVE-2026-73742 | Analyzed | 未確認 | CWE-290 | A vulnerability in an API endpoint of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to spoof the source address attributed to their reques |
| CVE-2026-73743 | Analyzed | 未確認 | CWE-319 | A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to gain insight into some data handled by the |
| CVE-2026-73744 | Analyzed | 未確認 | CWE-400 | A denial-of-service vulnerability exists in the web-based management interface of HPE Networking Fabric Composer that could allow an authenticated low privilege operator user to ca |
| CVE-2026-73745 | Modified | 未確認 | CWE-200 | A vulnerability in the API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to view some information handled by the affected system. Succes |
| CVE-2026-73746 | Analyzed | 未確認 | CWE-400 | A denial-of-service vulnerability exists in the API of HPE Networking Fabric Composer that could allow an authenticated low privilege operator user to cause a denial of service. Su |
| CVE-2026-73747 | Analyzed | 未確認 | CWE-269 | A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user w |
| CVE-2026-73748 | Analyzed | 未確認 | CWE-312 | A vulnerability in the affected interface of HPE Networking Fabric Composer allows an attacker with administrative privileges to access sensitive information in a cleartext format. |
| CVE-2026-73749 | Analyzed | 未確認 | CWE-284 | Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input. An unauthenticated remote attacker could exploit these vulnerabiliti |
| CVE-2026-73750 | Analyzed | 未確認 | CWE-284 | Vulnerabilities exist in the authentication module that may improperly process malformed or truncated input. An authenticated remote attacker could exploit these vulnerabilities by |
| CVE-2026-73751 | Analyzed | 未確認 | CWE-77 | An authenticated user with low-privileged access could submit crafted input through the web-based management interface to execute arbitrary commands on the underlying operating sys |
| CVE-2026-73752 | Analyzed | 未確認 | CWE-22 | An unauthenticated arbitrary file write vulnerability exists in an API endpoint of AOS-CX. Successful exploitation of this vulnerability allows an attacker to write arbitrary files |
| CVE-2026-73753 | Analyzed | 未確認 | CWE-78 | Exploitation through affected command-line operations could allow an authenticated low-privileged user to execute arbitrary commands as a privileged user on the underlying operatin |
| CVE-2026-73754 | Analyzed | 未確認 | CWE-400 | Denial-of-service vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation could allow an authenticated user to disrupt the normal operation of a vuln |
| CVE-2026-73755 | Analyzed | 未確認 | CWE-269 | A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authenticated low-privilege operator user, after a required user a |
| CVE-2026-73756 | Analyzed | 未確認 | CWE-319 | A vulnerability in an API endpoint of AOS-CX could allow a remote unauthenticated attacker to obtain sensitive information via a man-in-the-middle attack. Successful exploitation a |
| CVE-2026-73757 | Analyzed | 未確認 | CWE-918 | A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a server-side request forgery (SSRF) attack. A successful ex |
| CVE-2026-73758 | Analyzed | 未確認 | CWE-269 | A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authenticated low privilege operator user to change the state of c |
| CVE-2026-73759 | Analyzed | 未確認 | CWE-400 | Vulnerabilities in AOS-CX could allow an unauthenticated remote malicious actor to trigger a denial-of-service condition by sending specially crafted packets. Successful exploitati |
| CVE-2026-73760 | Analyzed | 未確認 | CWE-22 | An authenticated Path Traversal vulnerability exists in AOS-CX. Successful exploitation of this vulnerability allows an attacker to read arbitrary files from the web-based manageme |
| CVE-2026-73761 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated information disclosure by sending a specially crafted pac |
| CVE-2026-73762 | Analyzed | 未確認 | CWE-284 | A vulnerability has been identified in the API endpoint of AOS-CX that could allow a remote actor to circumvent existing access controls. In some cases this could enable unauthoriz |
| CVE-2026-73763 | Analyzed | 未確認 | CWE-77 | A vulnerability exists in a management component that could allow an unauthenticated adjacent attacker to execute arbitrary commands. Successful exploitation could result in remote |
| CVE-2026-73764 | Analyzed | 未確認 | CWE-287 | Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication c |
| CVE-2026-73765 | Analyzed | 未確認 | CWE-22 | Authenticated path traversal vulnerabilities exist in API endpoints of AOS-CX. Successful exploitation of these vulnerabilities allows an attacker to write arbitrary files to the u |
| CVE-2026-73766 | Analyzed | 未確認 | CWE-77 | Command injection vulnerabilities in the API endpoint of AOS-CX could allow an authenticated remote attacker with administrative privileges to inject arbitrary commands. Successful |
| CVE-2026-73767 | Analyzed | 未確認 | CWE-78 | Authenticated command injection vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation of these vulnerabilities results in the ability to execute ar |
| CVE-2026-73768 | Analyzed | 未確認 | CWE-20 | A vulnerability exists in the command line interface of AOS-CX that may allow for improper processing of malformed input. Successful exploitation could result in the execution of a |
| CVE-2026-73769 | Awaiting Analysis | 未確認 | CWE-78 | A vulnerability in the web-based management interface of vulnerable CPPM systems could allow an authenticated remote attacker to achieve remote code execution. Successful exploitat |
| CVE-2026-73770 | Analyzed | 未確認 | CWE-73 | An authenticated arbitrary file write vulnerability exists in AOS-CX. Successful exploitation could allow an authenticated malicious actor, under specific conditions outside the at |
| CVE-2026-73771 | Analyzed | 未確認 | CWE-287 | An authentication vulnerability exists in the AOS-CX management interface and API that may allow improper authentication processing. An unauthenticated remote attacker could exploi |
| CVE-2026-73772 | Analyzed | 未確認 | CWE-120 | Buffer overflow vulnerabilities exist in an underlying service of AOS-CX that could lead to an unauthenticated denial-of-service condition by sending specially crafted packets to t |
| CVE-2026-73773 | Analyzed | 未確認 | CWE-400 | An unauthenticated Denial-of-Service (DoS) vulnerability exists in the API endpoint of AOS-CX. Successful exploitation of this vulnerability results in the ability to interrupt the |
| CVE-2026-73774 | Analyzed | 未確認 | CWE-120 | A buffer overflow vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated disclosure of sensitive information by sending specially craf |
| CVE-2026-73775 | Analyzed | 未確認 | CWE-200 | Vulnerabilities in the API endpoint of AOS-CX could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attack |
| CVE-2026-73776 | Analyzed | 未確認 | CWE-347 | A signature verification bypass vulnerability exists in the command line interface of AOS-CX. Successful exploitation could allow an authenticated malicious actor with administrati |
| CVE-2026-73777 | Analyzed | 未確認 | CWE-287 | Vulnerabilities have been identified in the API endpoint of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication contr |
| CVE-2026-73778 | Analyzed | 未確認 | CWE-521 | A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access. An unauthenticated remote attacker could exploit this vulnerabilit |
| CVE-2026-73779 | Analyzed | 未確認 | CWE-269 | Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication c |
| CVE-2026-73780 | Analyzed | 未確認 | CWE-352 | A vulnerability in the web-based management interface of AOS-CX switches exposes some sessions to a lack of Cross-Site Request Forgery (CSRF) protection. This could allow a remote |
| CVE-2026-73781 | Analyzed | 未確認 | CWE-79 | A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an admini |
| CVE-2026-73782 | Analyzed | 未確認 | CWE-134 | A format string vulnerability exists in the command line interface of AOS-CX that could lead to unauthenticated remote code execution. Successful exploitation of this vulnerability |
| CVE-2026-73783 | Analyzed | 未確認 | CWE-121 | Stack overflow vulnerabilities exist in an API endpoint of AOS-CX. Successful exploitation could allow an authenticated malicious actor to cause a denial-of-service condition on th |
| CVE-2026-73784 | Awaiting Analysis | 未確認 | CWE-347 | A potential security vulnerability in HPE IceWall products could be exploited to tamper SAML response, allowing an attacker to impersonate another user. |
| CVE-2026-73785 | Awaiting Analysis | 未確認 | CWE-241 | A potential security vulnerability in HPE IceWall Federation Agent and Proxy could allow a remote unauthenticated attacker to cause a denial of service (DoS). |
| CVE-2026-73786 | Awaiting Analysis | 未確認 | CWE-400 | A vulnerability in the web-based management interface of CPPM could allow an unauthenticated remote attacker to conduct a Denial-of-Service (DoS) attack. Successful exploitation co |
| CVE-2026-73787 | Awaiting Analysis | 未確認 | CWE-78 | A vulnerability in the CPPM web interface could allow an authenticated remote attacker to access directory information on a vulnerable system. Successful exploitation could allow a |
| CVE-2026-73788 | Awaiting Analysis | 未確認 | CWE-269 | A vulnerability in the ClearPass OnGuard agent could allow an authenticated remote attacker to elevate their own privileges on a vulnerable ClearPass OnGuard deployment. Successful |
| CVE-2026-73789 | Awaiting Analysis | 未確認 | CWE-284 | A vulnerability in the web-based management interface of CPPM guest account management services could allow an unauthenticated remote attacker to manipulate account settings. Succe |
| CVE-2026-73807 | Deferred | 未確認 | CWE-862 | The mySCADA myPRO Manager command API does not properly enforce authentication for privileged functions. An unauthenticated attacker with network access to the affected API could e |
| CVE-2026-73812 | Deferred | 未確認 | CWE-444 | httpd function check_header/3 rejects duplicate Content-Length (per CVE-2026-23941) but never checks for the TE+CL co-presence that RFC 9112 §6.3 identifies as a probable smuggling |
| CVE-2026-73848 | Deferred | 未確認 | CWE-79 | Emlog is an open source website building system. In versions 2.6.29 and prior, tag names in emlog are not HTML-encoded when rendered in the article editor. An attacker can create a |
| CVE-2026-73858 | Awaiting Analysis | 未確認 | CWE-1336 | Solspace Freeform plugin for Craft CMS 5.x is a super flexible form-building tool. From 5.0.0 through 5.10.13, submitted values from public Freeform forms can be evaluated by the i |
| CVE-2026-73863 | Deferred | 未確認 | CWE-125 | NanoMQ is an MQTT broker. Prior to 0.24.14, NanoMQ's broker-side MQTT v5 nmq_subinfo_decode() function in nng/src/sp/protocol/mqtt/mqtt_parser.c reuses len_of_varint from the outer |
| CVE-2026-73926 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-73940 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-73941 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-73942 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. E |
| CVE-2026-73943 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. E |
| CVE-2026-73944 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-73945 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-73946 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-73947 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-73948 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily |
| CVE-2026-73949 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0 |
| CVE-2026-7395 | Awaiting Analysis | 未確認 | CWE-306 | Asset Suite allows unauthenticated users to access HTTPPublishAdapterTestServlet that can be used for configuration file upload, leading to information disclosure and integrity com |
| CVE-2026-73950 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-73951 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0 |
| CVE-2026-73952 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0 |
| CVE-2026-73953 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0 |
| CVE-2026-73954 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.61-8.63. Difficult |
| CVE-2026-73955 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Charting). Supported versions that are affected are 8.61-8.63. Easily exploitable v |
| CVE-2026-73956 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily |
| CVE-2026-73957 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0 |
| CVE-2026-73958 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-73959 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily |
| CVE-2026-73960 | Awaiting Analysis | 未確認 | CWE-400 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Ren Server). Supported versions that are affected are 8.61-8.63. Easily exploitable |
| CVE-2026-73961 | Awaiting Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily expl |
| CVE-2026-73962 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-73963 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0 |
| CVE-2026-73965 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Cloud Gateway). Supported versions that are affected are 17.0-26.7. Difficult to exploit vulner |
| CVE-2026-73966 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerabil |
| CVE-2026-73999 | Deferred | 未確認 | CWE-639 | Contributor Insecure Direct Object References (IDOR) in Cooked <= 1.16.0 versions. |
| CVE-2026-74000 | Deferred | 未確認 | CWE-862 | Contributor Broken Access Control in Simple Membership <= 4.8.2 versions. |
| CVE-2026-74002 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Booking Calendar <= 11.7 versions. |
| CVE-2026-74005 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in PublishPress Series <= 3.1.3 versions. |
| CVE-2026-74017 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in User Registration <= 5.2.7 versions. |
| CVE-2026-74220 | Awaiting Analysis | 未確認 | CWE-195 | U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_read_reply() function in net/nfs-common.c that allows attackers to corrupt memory by supplying crafted NFS READ reply le |
| CVE-2026-74221 | Awaiting Analysis | 未確認 | CWE-195 | U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_readlink_reply() function in net/nfs-common.c when processing NFS server responses. A malicious NFS server can send craf |
| CVE-2026-74222 | Awaiting Analysis | 未確認 | CWE-416 | U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpc_recv_cb() function within the lwIP wget implementation. When HTTP data storage fails, the callback fr |
| CVE-2026-74225 | Awaiting Analysis | 未確認 | CWE-787 | U-Boot before 2026.10-rc5 contains out-of-bounds memory access in dhcp6_parse_options() that fails to validate SERVERID and CLIENTID option lengths from DHCPv6 packets. Attackers o |
| CVE-2026-74235 | Awaiting Analysis | 未確認 | CWE-22 | GFI Exinda AI and ClearView before 7.6.5 contains a path traversal vulnerability in the system maintenance configuration download handler. The wcf_handle_download() function accept |
| CVE-2026-74236 | Awaiting Analysis | 未確認 | CWE-22 | GFI Exinda AI and ClearView before 7.6.5 contains a path traversal vulnerability in the diagnostic file deletion handler. The unlink_or_email_file() function accepts parameters pre |
| CVE-2026-74237 | Awaiting Analysis | 未確認 | CWE-88 | GFI Exinda AI and ClearView before 7.6.5 contains an argument injection vulnerability in the Tools Iperf Client functionality. The web_tools_cmd() function constructs an iperf comm |
| CVE-2026-74239 | Analyzed | 未確認 | CWE-22 | XenForo before 2.3.13 contains a path traversal vulnerability in the style archive importer on Windows deployments that allows authenticated non-super administrators with style per |
| CVE-2026-7438 | Deferred | 未確認 | CWE-79 | The Bold Timeline Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `supertitle` and `subtitle` attributes of the `bold_timeline_item` shortcode in all |
| CVE-2026-7476 | Awaiting Analysis | 未確認 | CWE-416 | Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileg |
| CVE-2026-74761 | Analyzed | 未確認 | CWE-20 | Improper input validation in TopicRegion in Apache ActiveMQ, Apache ActiveMQ Broker, and Apache ActiveMQ All on all platforms. An authenticated client can spoof clientId when r |
| CVE-2026-74765 | Deferred | 未確認 | CWE-125, CWE-190 | Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumulator in encode_punycode. The XS backend keeps the punycode d |
| CVE-2026-74766 | Deferred | 未確認 | CWE-416 | Net::IDN::Punycode versions from 2.301 before 2.590 for Perl allow a heap use-after-free via a decoded code point that reallocates the output buffer in decode_punycode. The XS bac |
| CVE-2026-74768 | Analyzed | 未確認 | CWE-918 | Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Server-Side Request Forgery (SSRF) vulnerability in the REST API. A high privileged remote attacker could pot |
| CVE-2026-74769 | Analyzed | 未確認 | CWE-863 | Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain an Incorrect Authorization vulnerability in the REST API. A low privileged remote attacker could potentially ex |
| CVE-2026-7477 | Awaiting Analysis | 未確認 | CWE-416 | Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileg |
| CVE-2026-74835 | Deferred | 未確認 | CWE-770 | The inets application HTTP server httpd fails to enforce a configured body-size limit on chunked request. This issue affects OTP from OTP 17.0 before OTP 27.3.4.17, from OTP 28.0 |
| CVE-2026-74837 | Deferred | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_typescript allows an unauthenticated attacker to exhaust the BEAM atom table and abort the nod |
| CVE-2026-74849 | Awaiting Analysis | 未確認 | CWE-78 | Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to a remote code execution vulnerability in the GINA client. |
| CVE-2026-74853 | Deferred | 未確認 | CWE-552 | The Pods WordPress plugin before 3.3.9.2 does not restrict which functions a display callback may resolve to, allowing users with the author role and above to read arbitrary files |
| CVE-2026-74859 | Awaiting Analysis | 未確認 | CWE-22 | The shell theme installer in gnome-tweaks extracts user-supplied ZIP archives without validating archive member paths. As a result, a crafted theme archive can write files outside |
| CVE-2026-74860 | Awaiting Analysis | 未確認 | CWE-763 | A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Typ |
| CVE-2026-74864 | Deferred | 未確認 | CWE-639 | sogo_yhn configures SOGo with a parameter that forces the request with HTTP header "x-webobjects-remote-user" to be treated as sent by a verified user without performing password v |
| CVE-2026-74865 | Deferred | 未確認 | CWE-639 | sogo_yhn configures SOGo with a parameter "SOGoTrustProxyAuthentication=YES". This causes the password to be bypassed during HTTP Basic authentication. An unauthenticated attacker |
| CVE-2026-74909 | Awaiting Analysis | 未確認 | CWE-862 | Keycloak provides a policy enforcer to protect applications by matching incoming web requests against defined security policies. A flaw was found where the enforcer fails to correc |
| CVE-2026-74916 | Deferred | 未確認 | CWE-349 | The WP Fastest Cache WordPress plugin before 1.5.1 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, |
| CVE-2026-74925 | Deferred | 未確認 | CWE-269 | The MultiVendorX WordPress plugin before 5.0.16 does not restrict who can update its role and capability settings, allowing users holding its vendor role to grant that role admini |
| CVE-2026-74926 | Deferred | 未確認 | CWE-862 | The MultiVendorX WordPress plugin before 5.0.16 does not verify that a user owns the store they are acting on in one of its REST API routes, allowing any authenticated user, such |
| CVE-2026-74927 | Deferred | 未確認 | CWE-862 | The MultiVendorX WordPress plugin before 5.0.15 does not have proper authorisation controls on one of its REST API listing routes, allowing unauthenticated users to retrieve vendo |
| CVE-2026-74933 | Deferred | 未確認 | CWE-862 | The GenieWords WordPress plugin from 1.5.27 to 1.5.34 does not have authorisation checks on some of its REST API and AJAX actions, and decodes stored values before printing them, a |
| CVE-2026-74991 | Deferred | 未確認 | CWE-284 | The WPForms WordPress plugin before 2.0.2 does not verify that a Stripe payment object supplied during a public form submission belongs to it before acting on it, allowing unauthe |
| CVE-2026-74994 | Deferred | 未確認 | CWE-1289, CWE-863 | The mod_auth module in OTP's inets httpd server, when configured with dets or mnesia authentication backends and multiple directory configuration blocks, collapses all directory bl |
| CVE-2026-75015 | Deferred | 未確認 | CWE-522 | Insufficiently Protected Credentials vulnerability in Apache Syncope. Audit events, when sent to the configured store, are not sufficiently masked for the sensitive values they mi |
| CVE-2026-75016 | Deferred | 未確認 | CWE-79 | The Magazine Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the News Ticker block's clientId attribute in versions up to, and including, 1.8.6. This i |
| CVE-2026-75017 | Deferred | 未確認 | CWE-862 | The Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid plugin for WordPress is vulnerable to authorization bypass in a |
| CVE-2026-75018 | Deferred | 未確認 | CWE-862 | The Custom Contact Forms plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.16. This is due to the plugin not properly verifying tha |
| CVE-2026-75021 | Awaiting Analysis | 未確認 | CWE-1327 | fastify-cli starts the Node.js Inspector when a debug flag is used, but it ignores the explicit bind address the user supplies and binds the Inspector to a broadly reachable addres |
| CVE-2026-75025 | Analyzed | 未確認 | CWE-346 | Mattermost Desktop App versions <=6.2 6.2.2.0 Fixed an issue where Mattermost Desktop did not sufficiently restrict server-rendered content from accessing local or private network |
| CVE-2026-75029 | Awaiting Analysis | 未確認 | CWE-405 | In a query response, an attacker may send `named` multiple copies of a record that should only exist once (such as an SOA record). If the RDATA is the same on all the copies, the r |
| CVE-2026-75030 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Apache Syncope. An administrator with task execution entitlements might be able to mass (de)provision group members, regardless of their g |
| CVE-2026-75031 | Awaiting Analysis | 未確認 | CWE-94 | In the interchange/interchange project, a critical remote code execution (RCE) vulnerability was found in the “quick question” admin feature. In default installations arbitrary Pe |
| CVE-2026-75033 | Analyzed | 未確認 | CWE-639 | A flaw was found in Rancher Manager. Project Secrets were propagated into a namespace based only on its `field.cattle.io/projectId` annotation, without verifying that the reference |
| CVE-2026-75034 | Analyzed | 未確認 | CWE-294 | A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by the fix for CVE-2026-44946 recorded consumed assertion IDs in a per-process cache, so each r |
| CVE-2026-75035 | Analyzed | 未確認 | CWE-639 | A flaw was found in Rancher Manager. When a non-administrative caller supplied a label selector naming a different user, the ext.cattle.io/v1 Token store dropped its internal owner |
| CVE-2026-75036 | Analyzed | 未確認 | CWE-1336, CWE-918 | A security vulnerability was discovered in Fleet's Helm template preprocessing where templates evaluated by the Fleet controller could reach network resources outside the managemen |
| CVE-2026-75092 | Awaiting Analysis | 未確認 | CWE-250 | A privilege escalation flaw was found in the scan_mysql actor of leapp-upgrade-el9toel10 (provided by leapp-repository). During RHEL 9 to RHEL 10 upgrades, the actor runs: mysqld - |
| CVE-2026-75098 | Deferred | 未確認 | CWE-22 | The Product Designer App plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.3 via the 'svg' parameter parameter. This makes it poss |
| CVE-2026-75101 | Analyzed | 未確認 | CWE-639 | An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed any authenticated user of the instance to read the raw diff or patch of pull requests |
| CVE-2026-75131 | Awaiting Analysis | 未確認 | CWE-88 | NetworkManager-l2tp through 1.52.4, fixed in 1.52.6, contains a privilege escalation vulnerability that allows local users with permission to create VPN connections to execute arbi |
| CVE-2026-75134 | Deferred | 未確認 | CWE-79 | SEOWriting plugin for WordPress through 1.12.5 contains a stored cross-site scripting vulnerability that allows authenticated contributors to inject malicious JavaScript by exploit |
| CVE-2026-75135 | Deferred | 未確認 | CWE-316 | UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows local attackers to recover the master password and decrypt vault contents by reading |
| CVE-2026-75136 | Deferred | 未確認 | CWE-522 | UpSignOn for Windows before 7.19.0 contains an insecure credential storage vulnerability that allows local attackers to retrieve the biometric unlock key stored in the Windows Pass |
| CVE-2026-75137 | Deferred | 未確認 | CWE-316 | UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows local attackers to recover cleartext vault data from process memory even after the a |
| CVE-2026-7514 | Analyzed | 未確認 | CWE-862 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.9 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that an authenticated user with developer- |
| CVE-2026-75156 | Analyzed | 未確認 | CWE-346 | Apache Airflow FAB provider versions 3.7.3 through 3.8.0 do not validate the issuer or audience of Azure AD `id_token`s during OAuth login. Deployments are affected only when the F |
| CVE-2026-75157 | Awaiting Analysis | 未確認 | CWE-863 | Apache Airflow's asset queued-events DELETE endpoints checked the caller's Dag-axis permission with `READ` instead of `EDIT`. Any authenticated user who could read a Dag could ther |
| CVE-2026-75158 | Analyzed | 未確認 | CWE-200 | Apache Airflow's `/assets/events` API returned asset events for every Dag in the deployment, with no filter restricting them to the Dags the caller is authorized to read. Any authe |
| CVE-2026-75160 | Deferred | 未確認 | CWE-269 | An issue in X-Serie Gateway Firmware V6_00_05 allows a remote attacker to escalate privileges via the endpoints /cgi-bin/wwwugw.cgi and /cgi-bin/ugwdownload.cgi. |
| CVE-2026-75161 | Deferred | 未確認 | CWE-77 | An issue in the ugw-restart method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated user with the low-privileged Standard rol |
| CVE-2026-75162 | Deferred | 未確認 | CWE-200 | An information disclosure vulnerability in the opcua-configuration method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows any remote authenticated |
| CVE-2026-75163 | Deferred | 未確認 | CWE-200 | An information disclosure vulnerability in the ugw-deviceinfo method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V6_00_05 returns detailed system version field |
| CVE-2026-75164 | Deferred | 未確認 | CWE-552 | An arbitrary file read vulnerability in /cgi-bin/ugwdownload.cgi of MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated user with the low-privileged Stand |
| CVE-2026-75165 | Deferred | 未確認 | CWE-285 | An issue in /cgi-bin/wwwugw.cgi of MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated user with the low-privileged Standard role to invoke hidden network |
| CVE-2026-75166 | Deferred | 未確認 | CWE-269, CWE-276 | Insecure Permission vulnerability in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows the low-privileged service user to execute /usr/bin/tcpdump as root without a password. |
| CVE-2026-75167 | Deferred | 未確認 | CWE-284 | A broken access control vulnerability in the ugw-usr-edit method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated user with t |
| CVE-2026-75168 | Deferred | 未確認 | CWE-284 | An issue in the ugw-editfile method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated user with the low-privileged Standard ro |
| CVE-2026-75169 | Deferred | 未確認 | CWE-434 | An arbitrary file upload vulnerability in /cgi-bin/ugwupload.cgi of MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated user with Admin role to upload fil |
| CVE-2026-75170 | Deferred | 未確認 | CWE-79 | Cross-site scripting (XSS) vulnerability in the /loginController/doLogin endpoint of the HubCore platform (version 14.1.1) allows a remote unauthenticated attacker to inject arbitr |
| CVE-2026-75171 | Deferred | 未確認 | CWE-384 | An issue in HubCore v.14.1.1 allows a remote attacker to escalate privileges via the HUBCOREID session cookie handling component. |
| CVE-2026-7527 | Deferred | 未確認 | CWE-601 | The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 7.0.02. This is due to the plugin no |
| CVE-2026-75307 | Deferred | 未確認 | CWE-79 | zhitan-ems 1.0.0 is vulnerable to Cross Site Scripting (XSS) via SVG file upload through the /equipmentFile/upload endpoint. |
| CVE-2026-75308 | Deferred | 未確認 | CWE-79 | yshopmall <=3.3 is vulnerable to Cross Site Scripting (XSS). The file upload endpoint /api/upload of the system lacks file type validation. Attackers can upload files of any type, |
| CVE-2026-75429 | Deferred | 未確認 | CWE-287 | PowerJob versions 4.x through 5.1.2 contain an unauthenticated remote code execution vulnerability in the /friend/process endpoint of the Server-Worker transport layer |
| CVE-2026-75430 | Deferred | 未確認 | CWE-306 | PowerJob Worker version 5.1.2 (and likely earlier versions) exposes the /worker/deployContainer HTTP endpoint without authentication on the default transport port. This allows a re |
| CVE-2026-75431 | Deferred | 未確認 | CWE-321 | PowerJob Server version 5.1.2 (and likely earlier) uses a predictable JWT signing key for HS256-based authentication. This allows a remote attacker to execute arbitrary code. |
| CVE-2026-75432 | Awaiting Analysis | 未確認 | CWE-822 | An issue in yaml-cpp 0.9.0 allows a remote attacker to obtain sensitive information via the src/scanner.cpp, Scanner::PopIndent(), and Scanner::PushIndentTo() components |
| CVE-2026-75438 | Deferred | 未確認 | CWE-120 | Buffer Overflow vulnerability in Open5GS v2.7.7 allows a remote attacker to cause a denial of service via the ogs_sbi_time_parse() function |
| CVE-2026-75439 | Deferred | 未確認 | CWE-476 | An issue in Free5GC v.4.2.2 allows a remote attacker to cause a denial of service via the UPF component |
| CVE-2026-75510 | Deferred | 未確認 | CWE-79 | Novu provides an API for sending notifications through multiple channels. Prior to 3.18.0, Novu's @novu/js In-App Inbox and the @novu/react Inbox component accept a notification ca |
| CVE-2026-75511 | Deferred | 未確認 | CWE-918 | Novu provides an API for sending notifications through multiple channels. Prior to 3.18.0, Novu accepts chat webhook URLs from subscriber credentials.webhookUrl, channel endpoint e |
| CVE-2026-75513 | Deferred | 未確認 | CWE-89 | Marten is a .NET Transactional Document DB and Event Store on PostgreSQL. From version 7.0.0 until 9.13.0, several Marten LINQ and tenant-management paths interpolate runtime, pote |
| CVE-2026-75516 | Awaiting Analysis | 未確認 | CWE-770 | The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.34.0, AMQConnection.start() applies Math.min(maxI |
| CVE-2026-75517 | Deferred | 未確認 | CWE-639 | Novu provides an API for sending notifications through multiple channels. Prior to 3.18.0, Novu integration mutation use cases including remove-integration, update-integration, aut |
| CVE-2026-75523 | Awaiting Analysis | 未確認 | CWE-200 | Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. Prior to 4.3.0, the Steeltoe.Management.Endpoint /actua |
| CVE-2026-75528 | Deferred | 未確認 | CWE-79 | The Broken Link Checker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author URL / Link Log in all versions up to, and including, 2.4.13 due to insu |
| CVE-2026-75538 | Deferred | 未確認 | CWE-122, CWE-190 | An attacker that connects to an open Erlang TCP port that uses the inet driver with {packet,4} mode can use a signed overflow in an incorrect packet length calculation to overflow |
| CVE-2026-75553 | Awaiting Analysis | 未確認 | CWE-321 | Smartphone application Tohoku Electric Power "Yorisou e Net" uses a hard-coded cryptographic key, which may allow an attacker to retrieve a hard-coded cryptographic key from the af |
| CVE-2026-75558 | Deferred | 未確認 | CWE-321 | The Botslab G980H dash camera firmware uses a hard-coded cryptographic key and initialization vector to protect WiFi credentials communicated by the device. An attacker who obtains |
| CVE-2026-75584 | Deferred | 未確認 | CWE-617 | ION-DTN before 4.2.1-a.1 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash the ION process by sending a BPv7 bundle with a zero-lengt |
| CVE-2026-75586 | Deferred | 未確認 | CWE-79 | The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'formData[id]' Parameter in all versions up to, and including, 2.0.17 |
| CVE-2026-75588 | Analyzed | 未確認 | CWE-1287 | Mattermost Desktop App versions <=6.2 6.2.2.0 fail to validate the URL scheme when checking whether a target URL is internal to the connected server, which allows a network-positio |
| CVE-2026-75600 | Analyzed | 未確認 | CWE-78 | FreePBX is an open source IP PBX. Prior to version 17.0.9, authenticated users who are authorized to access the GraphQL api module interface of FreePBX are able to execute arbitrar |
| CVE-2026-75602 | Deferred | 未確認 | CWE-22, CWE-73 | OpenList a file list program that supports multiple storage. Prior to 4.2.3, OpenList's offline-download feature at POST /api/fs/add_offline_download with tool: "SimpleHttp" accept |
| CVE-2026-75604 | Deferred | 未確認 | CWE-22 | Next.js is a React framework for building full-stack web applications. From 13.4.0 until 15.5.24 and 16.3.3, Next.js applications using Pages Router or App Router without Cache Com |
| CVE-2026-75607 | Deferred | 未確認 | CWE-862 | Frigate is an open source network video recorder. Prior to 0.17.2, the WebSocket handler in frigate/comms/ws.py forwards attacker-selected message topics to the dispatcher without |
| CVE-2026-75608 | Deferred | 未確認 | CWE-863 | Frigate is an open source network video recorder. Prior to 0.18.0, the prefix-matched location /api/go2rtc/api in docker/main/rootfs/usr/local/nginx/conf/nginx.conf requires authen |
| CVE-2026-75624 | Analyzed | 未確認 | CWE-863 | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.27 could allow a remote authenticated attacker to bypass security restrictions due to incorrect a |
| CVE-2026-75629 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75631 | Analyzed | 未確認 | CWE-787 | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r |
| CVE-2026-75632 | Analyzed | 未確認 | CWE-400 | CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerabi |
| CVE-2026-75633 | Analyzed | 未確認 | CWE-20 | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerabilit |
| CVE-2026-75634 | Analyzed | 未確認 | CWE-20 | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to b |
| CVE-2026-75635 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75636 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75637 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75638 | Analyzed | 未確認 | CWE-20 | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to b |
| CVE-2026-75639 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75640 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75642 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2026-75643 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2026-75644 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2026-75646 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75647 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75649 | Analyzed | 未確認 | CWE-122 | Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requir |
| CVE-2026-75650 | Analyzed | 掲載 | CWE-1336 | Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of |
| CVE-2026-75651 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75652 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75655 | Analyzed | 未確認 | CWE-674 | Bridge is affected by an Uncontrolled Recursion vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulne |
| CVE-2026-75656 | Analyzed | 未確認 | CWE-125 | Bridge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive inf |
| CVE-2026-75657 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75658 | Analyzed | 未確認 | CWE-787 | Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires use |
| CVE-2026-75659 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75660 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75661 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75663 | Undergoing Analysis | 未確認 | CWE-787 | Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires use |
| CVE-2026-75665 | Analyzed | 未確認 | CWE-122 | Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requir |
| CVE-2026-75666 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75667 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75668 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75669 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75670 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75671 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75672 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75674 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75675 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75676 | Analyzed | 未確認 | CWE-121 | Bridge is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requi |
| CVE-2026-75677 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75678 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75679 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75680 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75681 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75682 | Analyzed | 未確認 | CWE-89 | Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in |
| CVE-2026-75683 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75684 | Analyzed | 未確認 | CWE-79 | Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Maliciou |
| CVE-2026-75685 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75686 | Analyzed | 未確認 | CWE-20 | Adobe Connect is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit |
| CVE-2026-75687 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75689 | Analyzed | 未確認 | CWE-79 | Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Maliciou |
| CVE-2026-75690 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75691 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75692 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75693 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75694 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75695 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75696 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75697 | Analyzed | 未確認 | CWE-79 | Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Maliciou |
| CVE-2026-75698 | Analyzed | 未確認 | CWE-79 | Adobe Connect is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potenti |
| CVE-2026-75699 | Analyzed | 未確認 | CWE-94 | Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context |
| CVE-2026-75700 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75701 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75702 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75703 | Analyzed | 未確認 | CWE-94 | Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context |
| CVE-2026-75704 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75705 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75706 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75707 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75708 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75709 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75710 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75711 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75712 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75713 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75714 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75715 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75716 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75717 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75718 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75719 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75720 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75721 | Analyzed | 未確認 | CWE-94 | Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context |
| CVE-2026-75722 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75723 | Analyzed | 未確認 | CWE-863 | Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker c |
| CVE-2026-75724 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75725 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-75726 | Analyzed | 未確認 | CWE-20 | Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vul |
| CVE-2026-75727 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2026-75728 | Analyzed | 未確認 | CWE-863 | Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker c |
| CVE-2026-75729 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2026-75730 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2026-75731 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2026-75733 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2026-75734 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2026-75735 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2026-75736 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2026-75737 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2026-75738 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2026-75739 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2026-75740 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2026-75741 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2026-75742 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2026-75743 | Awaiting Analysis | 未確認 | CWE-352 | Adobe Experience Manager Forms JEE is affected by a Cross-Site Request Forgery (CSRF) vulnerability that could result in a Security feature bypass. An attacker could leverage this |
| CVE-2026-75744 | Awaiting Analysis | 未確認 | CWE-79 | Adobe Experience Manager Forms JEE is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts i |
| CVE-2026-75745 | Awaiting Analysis | 未確認 | CWE-863 | Adobe Experience Manager Forms JEE is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An atta |
| CVE-2026-75746 | Analyzed | 未確認 | CWE-89 | ColdFusion is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the |
| CVE-2026-75754 | Deferred | 未確認 | CWE-306, CWE-798, CWE-918 | Missing Authentication for Critical Function, Server-Side Request Forgery (SSRF), and Use of Hard-coded Credentials in ASUS Control Center allow an unauthorized user to obtain the |
| CVE-2026-75771 | Analyzed | 未確認 | CWE-190 | Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of t |
| CVE-2026-75777 | Undergoing Analysis | 未確認 | CWE-269 | IBM Aspera Enterprise WebApps 1.0.0 through 1.0.5 could allow a local attacker to escape container protections due to unrestricted system calls being permitted within the container |
| CVE-2026-75791 | Awaiting Analysis | 未確認 | CWE-306 | Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to an authentication bypass vulnerability in the REST API. |
| CVE-2026-75792 | Awaiting Analysis | 未確認 | CWE-285 | IBM Sterling Secure Proxy 6.2.0.0 through 6.2.1.2 could allow a remote authenticated attacker to view administrative user interface components due to client-side authorization bypa |
| CVE-2026-75793 | Deferred | 未確認 | CWE-284 | The SureCart WordPress plugin before 4.7.0 does not consult the site's user registration setting before creating WordPress accounts, allowing unauthenticated users to create an ac |
| CVE-2026-75799 | Deferred | 未確認 | CWE-94 | The YAHMAN Add-ons WordPress plugin before 0.9.31 does not validate the type of the remote files it caches in a publicly accessible directory, allowing unauthenticated attackers to |
| CVE-2026-75800 | Deferred | 未確認 | CWE-287 | The Frontegg SAML SSO WordPress plugin through 1.0.1 does not verify the signature or issuer of SAML authentication responses before establishing a session, allowing unauthenticate |
| CVE-2026-75804 | Analyzed | 未確認 | CWE-770 | Issue summary: OpenSSL QUIC stack does not enforce connection level flow control for streams. Remote peers may send more bytes as long as they fit within the stream flow control li |
| CVE-2026-75805 | Analyzed | 未確認 | CWE-476 | Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS#10 CSR may dereference a NULL pointer and terminate abnormally when processing a crafted rev |
| CVE-2026-75806 | Analyzed | 未確認 | CWE-1284 | Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is shorter than the ma |
| CVE-2026-75808 | Deferred | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling in ASUS Armoury Crate allows a local user to cause a denial-of-service condition through system memory exhaustion by bypassing |
| CVE-2026-75809 | Deferred | 未確認 | CWE-782 | Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclosure information and disabling device functionality by bypassing driver authentica |
| CVE-2026-75810 | Deferred | 未確認 | CWE-749 | Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user to cause a brief system stall by bypassing driver authentication and sending requests to trigger syste |
| CVE-2026-75811 | Deferred | 未確認 | CWE-1256 | Improper Restriction of Software Interfaces to Hardware Features in ASUS Armoury Crate allows a local user to modify hardware configuration settings and potentially cause hardware |
| CVE-2026-75816 | Deferred | 未確認 | CWE-287 | The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Authentication Bypass to Account Takeover in all versions up to, and including, 3.29.12. This is due to the p |
| CVE-2026-75823 | Deferred | 未確認 | CWE-269 | The User Frontend WordPress plugin before 4.3.12 does not prevent tampering with the role assigned by its registration form, allowing unauthenticated users to register with a high |
| CVE-2026-75824 | Deferred | 未確認 | CWE-284 | The User Frontend WordPress plugin before 4.3.12 does not check whether the site allows user registration before creating an account, allowing unauthenticated users to create acco |
| CVE-2026-75825 | Awaiting Analysis | 未確認 | CWE-306 | ZohoCorp ManageEngine OpManager versions 12.8.710 and below with the Application Manager Plugin enabled were vulnerable to an Authentication Bypass vulnerability. |
| CVE-2026-75861 | Deferred | 未確認 | CWE-862 | The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not verify that the user redeeming a gift card is its intended recipient, allowing any authenticated use |
| CVE-2026-75862 | Analyzed | 未確認 | CWE-190 | Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of t |
| CVE-2026-75863 | Analyzed | 未確認 | CWE-190 | Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of t |
| CVE-2026-75865 | Deferred | 未確認 | CWE-434 | The WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode plugin for WordPress is vulnerable to arbitrary file upload due to missing file ty |
| CVE-2026-75873 | Deferred | 未確認 | CWE-434 | The Zella Theme WordPress theme before 2.6.3 does not perform any capability or nonce check on one of its font upload actions, which is available to unauthenticated users, allowing |
| CVE-2026-75878 | Awaiting Analysis | 未確認 | CWE-287 | IBM Sterling File Gateway could allow a remote attacker to bypass authentication and obtain a fully authenticated session due to improper authentication via an unvalidated SSO head |
| CVE-2026-75880 | Analyzed | 未確認 | CWE-1333 | An authenticated client could attach a consumer with a selector containing crafted wildcard usage that results in excessive evaluation during message delivery attempts, occupying a |
| CVE-2026-75883 | Awaiting Analysis | 未確認 | CWE-122 | The code in pppd that formats a response to a PEAP Request packet in peap_response() copies an entire TLS record of up to 16384 bytes into the fixed global buffer outpacket_buf wi |
| CVE-2026-75884 | Awaiting Analysis | 未確認 | CWE-184 | A flaw was found in AWX. The container group pod_spec_override field uses an incomplete blocklist that only restricts automountServiceAccountToken, allowing injection of initContai |
| CVE-2026-75885 | Awaiting Analysis | 未確認 | CWE-918 | A flaw was found in the OpenShift console. Unauthenticated access to the `/api/devfile/` and `/api/devfile/samples/` endpoints allows a remote attacker to send crafted devfile payl |
| CVE-2026-75886 | Awaiting Analysis | 未確認 | CWE-441 | A flaw was found in openshift/console. An unauthenticated remote attacker can exploit a misconfiguration in the CatalogdHandler, which lacks proper authentication, and the forwardi |
| CVE-2026-75887 | Awaiting Analysis | 未確認 | CWE-22 | A flaw was found in the OpenShift console. An unauthenticated attacker can exploit a path traversal vulnerability by manipulating the `lng` and `ns` query parameters in the `/local |
| CVE-2026-75892 | Deferred | 未確認 | CWE-787 | In osmo-ggsn 1.14.0 an out of bounds write issue was found in the gtp_decode_pdp_ctx() function through the PDP context GSN-Address sub-field, leading to memory corruption. |
| CVE-2026-75893 | Deferred | 未確認 | CWE-122 | In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccess_proxy_read_msg() function via IPA frame lengths. |
| CVE-2026-75894 | Deferred | 未確認 | CWE-617 | In osmo-iuh from 0.1.0 through 1.8.0 a reachable assertion was found in the ranap_handle_co_dt() function via a arbitrarily sized NAS-PDU that leads to process crash and remote den |
| CVE-2026-75895 | Awaiting Analysis | 未確認 | CWE-125 | In libsmpp35 from 0.1.0 through 1.8.0 out of bound read issue was found in the at smpp34_unpack() function via attacker controlled SMPP PDUs, leading to memory corruption. |
| CVE-2026-75905 | Deferred | 未確認 | CWE-862 | The WP Recipe Maker plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 10.8.0. This is due to the plugin not properly verifying that a |
| CVE-2026-75907 | Deferred | 未確認 | CWE-287, CWE-294, CWE-613 | The door access control on a Norwegian Cruise Line asset grants entry based only on the credential's static 7-byte UID stored on an NTAG212 NFC chip. A UID is a manufacturer serial |
| CVE-2026-75921 | Deferred | 未確認 | CWE-863 | The Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits plugin for WordPress is vulnerable to Arbitrary File U |
| CVE-2026-75925 | Awaiting Analysis | 未確認 | CWE-93 | Improper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an attacker to execute commands as root or SYSTEM. Configuration values accepted by the loc |
| CVE-2026-75927 | Deferred | 未確認 | CWE-269 | The PublishPress Capabilities – User Role Editor, Access Permissions, User Capabilities, Admin Menus plugin for WordPress is vulnerable to Privilege Escalation in all versions up t |
| CVE-2026-75939 | Awaiting Analysis | 未確認 | CWE-347 | A flaw was found in openshift/oc-mirror. The tool incorrectly verifies PGP (Pretty Good Privacy) release image signatures by checking for signature errors before the entire signed |
| CVE-2026-75940 | Deferred | 未確認 | CWE-798 | A vulnerability was reported in Lenovo Health Android Application, distributed exclusively in the Chinese market, that could allow an attacker to access sensitive health-related in |
| CVE-2026-75943 | Awaiting Analysis | 未確認 | CWE-459 | A brief (milliseconds to seconds) traffic leak may occur when an authenticated supplicant is removed, either via the clear dot1x host all CLI command or due to a supplicant timeout |
| CVE-2026-75944 | Awaiting Analysis | 未確認 | CWE-459 | A race condition during supplicant re-authentication may leave a stale ACL entry that persists in the system. If the AclAgent subsequently restarts, this stale entry may be applied |
| CVE-2026-75945 | Awaiting Analysis | 未確認 | CWE-459 | A race condition may cause a supplicant to remain in an authorized state after a clear dot1x host all command is issued. |
| CVE-2026-75959 | Deferred | 未確認 | CWE-89 | The GoPay for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'log_table_filter' parameter in all versions up to, and including, 1.0.36 due to insuf |
| CVE-2026-75961 | Deferred | 未確認 | CWE-89 | The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to generic SQL Injection via the 'additional_params' parameter in all versions up to, and inc |
| CVE-2026-75964 | Deferred | 未確認 | CWE-79 | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' par |
| CVE-2026-75965 | Deferred | 未確認 | CWE-79 | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'date' Shortcod |
| CVE-2026-75966 | Deferred | 未確認 | CWE-79 | The Podlove Podcast Publisher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'episode_contributor[..][..][comment]' Parameter in all versions up to, and incl |
| CVE-2026-75969 | Deferred | 未確認 | CWE-306 | Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. A missing authentication vulnerability |
| CVE-2026-75973 | Awaiting Analysis | 未確認 | CWE-287 | Improper Authentication vulnerability in Apache Tomcat. When Jakarta Authentication was configured with SimpleAuthConfigProvider as the default provider and multiple web applicatio |
| CVE-2026-75980 | Deferred | 未確認 | CWE-79 | The BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Heading 'id' Attribute in Pos |
| CVE-2026-75983 | Deferred | 未確認 | CWE-269 | The Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.1.23. |
| CVE-2026-75990 | Analyzed | 未確認 | CWE-863 | Illustrator is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this |
| CVE-2026-75991 | Analyzed | 未確認 | CWE-20 | Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit th |
| CVE-2026-75992 | Analyzed | 未確認 | CWE-787 | Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue require |
| CVE-2026-75993 | Analyzed | 未確認 | CWE-79 | ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentiall |
| CVE-2026-75998 | Analyzed | 未確認 | CWE-284 | ColdFusion is affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive f |
| CVE-2026-75999 | Analyzed | 未確認 | CWE-20 | ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker cou |
| CVE-2026-76000 | Analyzed | 未確認 | CWE-400 | ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhau |
| CVE-2026-76002 | Analyzed | 未確認 | CWE-79 | ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious |
| CVE-2026-76006 | Deferred | 未確認 | CWE-89 | The Photo Gallery by Ays – Responsive Image Gallery plugin for WordPress is vulnerable to generic SQL Injection via the 's' parameter in all versions up to, and including, 6.8.2 du |
| CVE-2026-76009 | Deferred | 未確認 | CWE-287 | The Next-Cart Store to WooCommerce Migration plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.9.8 via the `NCWM_Kitconnect::run() |
| CVE-2026-76059 | Analyzed | 未確認 | CWE-693 | IBM Langflow OSS 1.0.0 through 1.11.5 An attacker who could submit custom component source code could bypass the static security scanner by crafting an annotated class-body assignm |
| CVE-2026-76081 | Deferred | 未確認 | CWE-193 | ZITADEL is an open source identity management platform. Prior to version 4.16.0, a bug in how ZITADEL updates permissions when multiple project roles are deleted at the same time c |
| CVE-2026-76086 | Deferred | 未確認 | CWE-862, CWE-915, CWE-918 | Formie is a Craft CMS plugin for creating forms. Prior to 2.2.23 and 3.1.31, Formie's formie/integrations/form-settings control panel action in IntegrationsController::actionFormSe |
| CVE-2026-76087 | Deferred | 未確認 | CWE-639, CWE-862 | Formie is a Craft CMS plugin for creating forms. Prior to 2.2.23 and 3.1.31, Formie's anonymous formie/submissions/submit action in SubmissionsController::actionSubmit trusts a cli |
| CVE-2026-76089 | Deferred | 未確認 | CWE-200, CWE-639, CWE-862 | Formie is a Craft CMS plugin for creating forms. Prior to 2.2.23 and 3.1.31, Formie's formie/sent-notifications/get-resend-modal-content control panel action in SentNotificationsCo |
| CVE-2026-76104 | Analyzed | 未確認 | CWE-732 | Dell ObjectScale, versions prior to 4.4.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability in the OS. A high privileged attacker with remote acces |
| CVE-2026-76111 | Analyzed | 未確認 | CWE-863 | Dell PowerStore contains an Incorrect Authorization vulnerability. An authenticated attacker with low privileges could potentially exploit this vulnerability to invoke administrato |
| CVE-2026-76114 | Analyzed | 未確認 | CWE-319 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cleartext Transmission of Sensitive Information vulnerability. An unauthenticated attacke |
| CVE-2026-76151 | Awaiting Analysis | 未確認 | CWE-125, CWE-197 | Out-of-bounds read (buffer over-read) in the HTTP Cache-Control response header parsing in the QtNetwork module in Qt Group Qt 6.0.0 through 6.8.8, and 6.9.0 through 6.11.1, allows |
| CVE-2026-76154 | Awaiting Analysis | 未確認 | CWE-79 | A stored cross-site scripting vulnerability in the Geomap panel's MapLibre base layer allows a user with the Editor role to execute arbitrary JavaScript in another user's session b |
| CVE-2026-76159 | Deferred | 未確認 | CWE-732 | Incorrect Permission Assignment for Critical Resource in the configuration loader of Duplicati for Windows versions before v2.4.0.0 allows a local low-privileged attacker to escal |
| CVE-2026-76160 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-76161 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-76163 | Awaiting Analysis | 未確認 | CWE-617 | If BIND is loaded with a "`named.conf`" file that contains no global "`options`" block, an attacker can send a query of QTYPE TKEY which may cause an assertion failure and subseque |
| CVE-2026-76169 | Analyzed | 未確認 | CWE-288 | fastify versions >= 4.0.0 and before 5.12.2 can route a malformed URL sent under one plugin prefix to the custom not-found handler of a different sibling plugin, and invoke it with |
| CVE-2026-76174 | Deferred | 未確認 | CWE-434 | Unrestricted file upload vulnerability in the CSV file upload functionality of the Ocsreports admin_info endpoint. The application validates files solely based on the name provided |
| CVE-2026-76175 | Deferred | 未確認 | CWE-89 | SQL injection vulnerability in the del_check parameter of the /ocsreports/?function=save_query_list endpoint. Input provided by an authenticated user with operator privileges is in |
| CVE-2026-76176 | Deferred | 未確認 | CWE-89 | SQL injection vulnerability in the endpoint /ocsreports/index.php?function=admin_double due to improper processing of the values in the ID field included in the selected_grp_dupli[ |
| CVE-2026-76177 | Deferred | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in the /ocsreports/?function=tele_activate endpoint due to insufficient validation of the HTTPS_SERV and FILE_SERV parameters. An a |
| CVE-2026-76178 | Deferred | 未確認 | CWE-79 | A stored Cross-Site Scripting (XSS) vulnerability in the notification template functionality of the endpoint /ocsreports/?function=notification. A user with administrator privilege |
| CVE-2026-76183 | Awaiting Analysis | 未確認 | CWE-289 | Authentication Bypass by Alternate Name vulnerability in Apache Tomcat allowed the security constraints for any WebSocket endpoint to be bypassed. This issue affects Apache Tomc |
| CVE-2026-76186 | Analyzed | 未確認 | CWE-565 | Apache Airflow Keycloak provider: from Airflow 3.3 the Keycloak auth manager takes a user's identity from the signed Airflow session token but takes the Keycloak access and refresh |
| CVE-2026-76187 | Analyzed | 未確認 | CWE-287 | Apache Airflow Keycloak provider: the unauthenticated token endpoint accepts a client-credentials grant for any confidential client registered in the Keycloak realm, not only the c |
| CVE-2026-76190 | Analyzed | 未確認 | CWE-95 | ColdFusion is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability that could result in arbitrary code execution in t |
| CVE-2026-76191 | Analyzed | 未確認 | CWE-94 | Animate is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. |
| CVE-2026-76192 | Awaiting Analysis | 未確認 | CWE-476 | InDesign Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to cras |
| CVE-2026-76194 | Analyzed | 未確認 | CWE-20 | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to b |
| CVE-2026-76196 | Analyzed | 未確認 | CWE-384 | Photoshop Mobile is affected by a Session Fixation vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain access to sensitiv |
| CVE-2026-76199 | Analyzed | 未確認 | CWE-427 | Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. An attacker cou |
| CVE-2026-76200 | Analyzed | 未確認 | CWE-79 | Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicio |
| CVE-2026-76201 | Analyzed | 未確認 | CWE-79 | Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicio |
| CVE-2026-76202 | Analyzed | 未確認 | CWE-863 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated acc |
| CVE-2026-7622 | Deferred | 未確認 | CWE-862 | The ThumbPress plugin for WordPress is vulnerable to unauthorized access in versions up to and including 6.2.1. This is due to missing capability checks and nonce verification in t |
| CVE-2026-76409 | Awaiting Analysis | 未確認 | CWE-22 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. |
| CVE-2026-76412 | Awaiting Analysis | 未確認 | CWE-264 | A vulnerability in the remote diagnostics debugger of Cisco Secure FMC Software could allow an authenticated, remote attacker to enable the remote diagnostics debugger service. |
| CVE-2026-76413 | Awaiting Analysis | 未確認 | CWE-1259 | A vulnerability in Cisco Adaptive Security Device Manager (ASDM) single sign-on (SSO) handler for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to log i |
| CVE-2026-76420 | Awaiting Analysis | 未確認 | CWE-285 | A vulnerability in the internal configuration of the Apache JServ Protocol (AJP) connector for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to imp |
| CVE-2026-76423 | Awaiting Analysis | 未確認 | CWE-290 | A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to gain administrative access to an affected device. This vulnerab |
| CVE-2026-76424 | Analyzed | 未確認 | CWE-23 | A vulnerability in the REST API of Cisco ISE could allow an authenticated, remote attacker to upload or copy arbitrary files on an affected device. This vulnerability is due to |
| CVE-2026-76425 | Analyzed | 未確認 | CWE-89 | A vulnerability in the APIs of Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks against the backend database. This vulnerability is due t |
| CVE-2026-76426 | Analyzed | 未確認 | CWE-89 | A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct SQL injection attacks against the monitoring database. Th |
| CVE-2026-76427 | Analyzed | 未確認 | CWE-611 | A vulnerability in the offline profiler feed service of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files that are stored on an affected device. Th |
| CVE-2026-76428 | Analyzed | 未確認 | CWE-89 | A vulnerability in the REST APIs of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct SQL injection attacks against the session database. This |
| CVE-2026-76431 | Analyzed | 未確認 | CWE-22 | A vulnerability in the file management function of the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to delete arbitra |
| CVE-2026-76432 | Analyzed | 未確認 | CWE-22 | A vulnerability in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker with administrative-level privileges to write arb |
| CVE-2026-76433 | Analyzed | 未確認 | CWE-22 | A vulnerability in the client provisioning download feature of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to access protected files on an affected |
| CVE-2026-76434 | Analyzed | 未確認 | CWE-22 | A vulnerability in the certificate import functionality of the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to read a |
| CVE-2026-76438 | Awaiting Analysis | 未確認 | CWE-863 | A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker with low privileges to alter |
| CVE-2026-76439 | Analyzed | 未確認 | CWE-306 | A vulnerability in the endpoint posture status reporting functionality of the guest portal web application of Cisco ISE could allow an unauthenticated, remote attacker to submit fo |
| CVE-2026-76440 | Awaiting Analysis | 未確認 | CWE-23 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducte |
| CVE-2026-76441 | Awaiting Analysis | 未確認 | CWE-284 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducte |
| CVE-2026-76442 | Awaiting Analysis | 未確認 | CWE-1284 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducte |
| CVE-2026-76443 | Awaiting Analysis | 未確認 | CWE-707 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducte |
| CVE-2026-76444 | Analyzed | 未確認 | CWE-306 | A vulnerability in an internal service of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to retrieve sensitive configuration information from an affect |
| CVE-2026-76446 | Analyzed | 未確認 | CWE-611 | A vulnerability in an API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to read specific files on the underlying operating system of an affected |
| CVE-2026-76447 | Analyzed | 未確認 | CWE-306 | A vulnerability in the Online Certificate Status Protocol (OCSP) responder of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to cause an administrative |
| CVE-2026-76448 | Analyzed | 未確認 | CWE-89 | A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to conduct an SQL or HQL in |
| CVE-2026-76449 | Analyzed | 未確認 | CWE-89 | A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to conduct an SQL or HQL in |
| CVE-2026-76450 | Analyzed | 未確認 | CWE-564 | A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to conduct an SQL or HQL in |
| CVE-2026-76451 | Analyzed | 未確認 | CWE-564 | A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to conduct an SQL or HQL in |
| CVE-2026-76460 | Analyzed | 掲載 | CWE-648 | A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insuffic |
| CVE-2026-76461 | Analyzed | 掲載 | CWE-89 | A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with roo |
| CVE-2026-76504 | Analyzed | 掲載 | CWE-177 | A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system wit |
| CVE-2026-76550 | Deferred | 未確認 | CWE-94 | The WP Import Export Lite WordPress plugin before 3.9.34 does not validate a user-supplied output path when writing export files, allowing users granted its export permission to wr |
| CVE-2026-76551 | Deferred | 未確認 | CWE-94 | The WP Import Export Lite WordPress plugin before 3.9.33 does not restrict which PHP function may be applied to exported field values, allowing users granted its export permission |
| CVE-2026-76552 | Deferred | 未確認 | CWE-434 | The WP Import Export Lite WordPress plugin before 3.9.33 does not validate the type, extension or content of files it retrieves from a user-supplied URL during import, allowing use |
| CVE-2026-76553 | Deferred | 未確認 | CWE-73 | The WP Import Export Lite WordPress plugin before 3.9.33 does not validate a path taken from stored, user-supplied data before recursively deleting the directory it resolves to, al |
| CVE-2026-76554 | Deferred | 未確認 | CWE-269 | The WP Import Export Lite WordPress plugin before 3.9.35 does not verify that the user running an import is permitted to create or modify user accounts and assign roles, allowing u |
| CVE-2026-76555 | Deferred | 未確認 | CWE-22 | The WP Import Export Lite WordPress plugin before 3.9.33 does not validate a user-supplied file path before reading it and copying it into a publicly accessible directory, allowing |
| CVE-2026-76556 | Deferred | 未確認 | CWE-89 | The WP Import Export Lite WordPress plugin before 3.9.33 does not properly sanitise and escape some export filter values before using them in SQL statements, allowing users holding |
| CVE-2026-76557 | Deferred | 未確認 | CWE-89 | The WP Import Export Lite WordPress plugin before 3.9.33 does not properly sanitise and escape some import configuration values before using them in SQL statements, allowing users |
| CVE-2026-76558 | Deferred | 未確認 | CWE-79 | The WP Import Export Lite WordPress plugin before 3.9.33 does not escape custom field names retrieved from the database before inserting them into the DOM of one of its administrat |
| CVE-2026-76559 | Deferred | 未確認 | CWE-918 | The WP Import Export Lite WordPress plugin before 3.9.33 does not properly validate URLs before requesting them during the import process, allowing users with the import capability |
| CVE-2026-76560 | Awaiting Analysis | 未確認 | CWE-863 | A flaw was found in 389 Directory Server. The SELFDN ACI bind-rule evaluator incorrectly matches an anonymous LDAP client's empty bind DN against an empty stored attribute value, a |
| CVE-2026-76561 | Awaiting Analysis | 未確認 | CWE-78 | A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component. The certificate profile import functionality does not fully validate uploaded profile content |
| CVE-2026-76562 | Deferred | 未確認 | CWE-79 | The Sidebar Manager Light plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sbm_description' parameter in all versions up to, and including, 1.18 due to in |
| CVE-2026-76570 | Analyzed | 未確認 | CWE-89 | Joomla Extension - joomcode.com - Unauthenticated SQL injection in read and write queries in JCTables 1.21.1 - The front-end CRUD API controller performs no Joomla token validatio |
| CVE-2026-76573 | Deferred | 未確認 | CWE-79 | The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'not_found' Shortcode Attribute in all versions up to, and includin |
| CVE-2026-76578 | Awaiting Analysis | 未確認 | CWE-306 | A flaw was found in FreeIPA. The self-managed OTP token ACI does not require authentication and does not restrict which attributes may be added alongside the token entry. An unauth |
| CVE-2026-76579 | Deferred | 未確認 | CWE-79 | The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'esi' parameter in all versions up to, and including, 7.9 due to insufficient input |
| CVE-2026-76642 | Awaiting Analysis | 未確認 | CWE-390 | util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations o |
| CVE-2026-76646 | Awaiting Analysis | 未確認 | CWE-400 | A remote attacker could cause excessive resource consumption by supplying specially crafted request parameters, potentially resulting in a denial of service condition. Older unsu |
| CVE-2026-76648 | Awaiting Analysis | 未確認 | CWE-862 | CopyAPIView (awx/awx/api/generics.py:873) sets permission_classes = (IsAuthenticated,), so DRF's get_object() performs no object-level RBAC. The get() handler (lines 988–991) expli |
| CVE-2026-76652 | Deferred | 未確認 | CWE-22 | An authenticated directory traversal vulnerability in file upload functionality has been identified in Archer MR600 (v2, v3 & v5) and TL-MR6400 v8. Due to insufficient validation o |
| CVE-2026-76653 | Deferred | 未確認 | CWE-126 | A missing authentication vulnerability in the VPN configuration management has been identified in Archer MR600 (v2, v3 & v5) and TL-MR6400 v8 due to improper access control; a remo |
| CVE-2026-76657 | Analyzed | 未確認 | CWE-287 | Vulnerabilities have been identified in the API of HPE Networking Fabric Composer that could potentially allow an unauthenticated remote attacker to circumvent existing authenticat |
| CVE-2026-76658 | Analyzed | 未確認 | CWE-287 | A vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to gain administrative access to vulnera |
| CVE-2026-76669 | Analyzed | 未確認 | CWE-269 | Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allow a remote low-privileged authenticated u |
| CVE-2026-76670 | Analyzed | 未確認 | CWE-269 | Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allow a remote low-privileged authenticated u |
| CVE-2026-76672 | Analyzed | 未確認 | CWE-200 | A vulnerability exists in the SD-WAN Orchestrator that may lead to the exposure of sensitive configuration information. An authenticated remote attacker with read-only privileges c |
| CVE-2026-76673 | Analyzed | 未確認 | CWE-287 | Vulnerabilities have been identified in the API of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authenticatio |
| CVE-2026-76674 | Analyzed | 未確認 | CWE-120 | Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to execut |
| CVE-2026-76675 | Analyzed | 未確認 | CWE-77 | A command injection vulnerability exists in the command line interface of EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker with hig |
| CVE-2026-76676 | Analyzed | 未確認 | CWE-121 | Buffer overflow vulnerabilities exist in the underlying operating system of EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker to execute arbitrary c |
| CVE-2026-76677 | Analyzed | 未確認 | CWE-269 | A privilege escalation vulnerability exists in the API of EdgeConnect SD-WAN Gateways. Successful exploitation could allow a remote low-privileged authenticated user to achieve adm |
| CVE-2026-76678 | Analyzed | 未確認 | CWE-269 | A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow a low-privilege authenticated remote attacker to escalate privileges. Successful explo |
| CVE-2026-76679 | Analyzed | 未確認 | CWE-400 | Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to conduct denial-of-service attacks. Successful exploitation could a |
| CVE-2026-76680 | Analyzed | 未確認 | CWE-918 | Vulnerabilities in the API of EdgeConnect SD-WAN Orchestrator could allow a remote attacker authenticated with low privileges to conduct server-side request forgery (SSRF) attacks. |
| CVE-2026-76681 | Analyzed | 未確認 | CWE-284 | A vulnerability in the API of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker with low privileges to access sensitive information beyond what is author |
| CVE-2026-76682 | Analyzed | 未確認 | CWE-120 | A vulnerability in the network security monitoring component of intrusion detection systems could allow an unauthenticated remote attacker to exploit a limited buffer overflow. Suc |
| CVE-2026-76683 | Analyzed | 未確認 | CWE-120 | Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to run arbitrary command |
| CVE-2026-76684 | Analyzed | 未確認 | CWE-287 | Vulnerabilities have been identified in the API of HPE Networking EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existin |
| CVE-2026-76685 | Analyzed | 未確認 | CWE-190 | A vulnerability exists in the proxy packet processing logic of the affected component where it improperly processes malformed or truncated input. An unauthenticated remote attacker |
| CVE-2026-76686 | Analyzed | 未確認 | CWE-400 | A vulnerability exists in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an unauthenticated remote attacker to c |
| CVE-2026-76687 | Analyzed | 未確認 | CWE-269 | A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow a low-privilege authenticated remote attacker to escalate privileges. Successful e |
| CVE-2026-76688 | Analyzed | 未確認 | CWE-287 | Vulnerabilities have been identified in the web-based management interface of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circum |
| CVE-2026-76689 | Analyzed | 未確認 | CWE-121 | A vulnerability exists in the configuration processing logic of the affected component where malformed input is improperly processed. An authenticated remote attacker with administ |
| CVE-2026-76690 | Analyzed | 未確認 | CWE-78 | A vulnerability exists in a component of the HPE Networking EdgeConnect SD-WAN Gateways that may allow for arbitrary command execution. An authenticated remote attacker could explo |
| CVE-2026-76691 | Analyzed | 未確認 | CWE-120 | Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker to exe |
| CVE-2026-76692 | Analyzed | 未確認 | CWE-200 | A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to obtain limited information from memory and disrupt the normal oper |
| CVE-2026-76693 | Analyzed | 未確認 | CWE-400 | A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to cause a denial-of-service against certain services running on impact |
| CVE-2026-76694 | Analyzed | 未確認 | CWE-269 | A privilege escalation vulnerability exists in the command line interface of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote |
| CVE-2026-76695 | Analyzed | 未確認 | CWE-120 | Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to send s |
| CVE-2026-76696 | Analyzed | 未確認 | CWE-400 | A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to conduct a denial of service attack. Successful exploitation could |
| CVE-2026-76697 | Analyzed | 未確認 | CWE-200 | A vulnerability in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways could allow a remote attacker authenticated with low privileges to access sensit |
| CVE-2026-76698 | Analyzed | 未確認 | CWE-77 | A command injection vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways. An authenticated remote attacker with limited access p |
| CVE-2026-76699 | Analyzed | 未確認 | CWE-120 | A buffer overflow vulnerability exists in a system service within the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated |
| CVE-2026-76700 | Analyzed | 未確認 | CWE-400 | Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to cause a denial-of-service. Successful exploitation could allow an at |
| CVE-2026-76701 | Analyzed | 未確認 | CWE-306 | A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to access sensitive information. Successful exploit |
| CVE-2026-76702 | Analyzed | 未確認 | CWE-400 | A vulnerability in the operating system of HPE Networking EdgeConnect SD-WAN Gateways could allow an authenticated local attacker to cause a denial-of-service. Successful exploitat |
| CVE-2026-76703 | Analyzed | 未確認 | CWE-120 | A buffer overflow vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways that could allow an authenticated attacker with administr |
| CVE-2026-76704 | Analyzed | 未確認 | CWE-79 | A vulnerability in the web-based management interface of the EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to execute arbitrary script code in a vict |
| CVE-2026-76705 | Analyzed | 未確認 | CWE-120 | A buffer overflow vulnerability exists in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker with |
| CVE-2026-76706 | Analyzed | 未確認 | CWE-200 | A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to obtain sensitive information. Successful exp |
| CVE-2026-76707 | Analyzed | 未確認 | CWE-200 | A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful exploitation could al |
| CVE-2026-76708 | Analyzed | 未確認 | CWE-798 | A vulnerability exists in the Analytics and Location Engine (ALE) where the application and underlying operating system use default, hard-coded credentials for several administrati |
| CVE-2026-76709 | Analyzed | 未確認 | CWE-284 | A vulnerability exists in the internal administrative component of Analytics and Location Engine (ALE). Successful exploitation of this vulnerability could allow an unauthenticated |
| CVE-2026-76710 | Analyzed | 未確認 | CWE-200 | A vulnerability exists in the Analytics and Location Engine (ALE) management interface that may allow for the disclosure of sensitive information. An unauthenticated remote attacke |
| CVE-2026-76711 | Analyzed | 未確認 | CWE-20 | A vulnerability exists in an Analytics and Location Engine (ALE) component where the impacted process improperly processes incoming socket connections. An unauthenticated remote at |
| CVE-2026-76712 | Analyzed | 未確認 | CWE-200 | A vulnerability exists in the Analytics and Location Engine (ALE) that may allow for unauthorized access, information disclosure, or denial of service. An unauthenticated remote at |
| CVE-2026-76713 | Analyzed | 未確認 | CWE-269 | A vulnerability exists in the maintenance restore functionality of Analytics and Location Engine (ALE). Successful exploitation of this vulnerability could allow an authenticated r |
| CVE-2026-76714 | Analyzed | 未確認 | CWE-78 | Vulnerabilities in the Analytics and Location Engine web interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could al |
| CVE-2026-76715 | Analyzed | 未確認 | CWE-300 | A vulnerability in an administrative component of Analytics and Location Engine (ALE) is vulnerable to a man-in-the-middle (MitM) attack. Successful exploitation of this vulnerabil |
| CVE-2026-76716 | Analyzed | 未確認 | CWE-770 | Multiple vulnerabilities exist in the Analytics and Location Engine (ALE) that may allow for unauthorized access or denial of service. An unauthenticated remote attacker could expl |
| CVE-2026-76717 | Analyzed | 未確認 | CWE-200 | A vulnerability exists in the Analytics and Location Engine (ALE) API that may allow for the disclosure of sensitive information. An unauthenticated remote attacker could exploit t |
| CVE-2026-76718 | Awaiting Analysis | 未確認 | CWE-79 | A potential security vulnerability in HPE OneView can be exploited to allow remote session hijacking or other unauthorized actions. |
| CVE-2026-76719 | Awaiting Analysis | 未確認 | CWE-79 | A security vulnerability in HPE OneView may be exploited remotely to perform session hijacking, data theft or other unauthorized actions. |
| CVE-2026-76720 | Awaiting Analysis | 未確認 | CWE-601 | A vulnerability in HPE OneView can be remotely exploited to cause a URL redirect. |
| CVE-2026-76721 | Awaiting Analysis | 未確認 | CWE-119 | Buffer overflow vulnerability exists in the affected interface of HPE Networking Instant ON that could allow an unauthenticated remote attacker to run arbitrary code on the underly |
| CVE-2026-76722 | Awaiting Analysis | 未確認 | CWE-134 | Uncontrolled Format string vulnerabilities exist in the affected interface of HPE Networking Instant ON APs that could allow an unauthenticated remote attacker to run arbitrary com |
| CVE-2026-76723 | Awaiting Analysis | 未確認 | CWE-120 | Buffer overflow vulnerabilities exist in the affected interface of HPE Networking Instant ON APS that could allow an unauthenticated adjacent attacker to achieve remote code execut |
| CVE-2026-76724 | Awaiting Analysis | 未確認 | CWE-77 | A command injection vulnerability exists in CLI of the affected HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to perform command injection by |
| CVE-2026-76725 | Awaiting Analysis | 未確認 | CWE-287 | A vulnerability has been identified in a management protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to circumvent existing authentic |
| CVE-2026-76726 | Awaiting Analysis | 未確認 | CWE-287 | An authentication bypass vulnerability in the API endpoint of HPE Networking Instant ON could allow an unauthenticated remote attacker to bypass network access controls if certain |
| CVE-2026-76727 | Awaiting Analysis | 未確認 | CWE-77 | Command injection vulnerabilities exist in the affected interface of HPE Networking Instant ON that could allow an authenticated remote attacker with high privileges to perform com |
| CVE-2026-76728 | Awaiting Analysis | 未確認 | CWE-918 | A vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high privileges to conduct a server-side request forgery (SSR |
| CVE-2026-76729 | Awaiting Analysis | 未確認 | CWE-134 | A format string vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high privileges to cause memory corruption with |
| CVE-2026-76730 | Awaiting Analysis | 未確認 | CWE-287 | An authentication bypass vulnerability exists in the PAPI protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to circumvent existing aut |
| CVE-2026-76731 | Awaiting Analysis | 未確認 | CWE-269 | An authentication bypass vulnerability in the captive portal of HPE Networking Instant On could allow an unauthenticated remote attacker to circumvent existing authentication contr |
| CVE-2026-76732 | Awaiting Analysis | 未確認 | CWE-269 | A local privilege-escalation vulnerability has been discovered in the affected daemon of HPE Networking Instant ON. Successful exploitation of this vulnerability could allow a loca |
| CVE-2026-76733 | Awaiting Analysis | 未確認 | CWE-400 | A denial-of-service vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an authenticated attacker with administrative privileges to cause a denia |
| CVE-2026-76734 | Awaiting Analysis | 未確認 | CWE-119 | A memory corruption vulnerability in the affected interface of HPE Networking Instant On could allow an unauthenticated remote attacker to conduct a denial of service attack. Succe |
| CVE-2026-76735 | Awaiting Analysis | 未確認 | CWE-200 | A sensitive information disclosure vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful exploitation could allow an authenticated local |
| CVE-2026-76736 | Awaiting Analysis | 未確認 | CWE-119 | A buffer overflow vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful exploitation could allow a low-privilege authenticated local atta |
| CVE-2026-76737 | Awaiting Analysis | 未確認 | CWE-22 | An authenticated path traversal vulnerability exists in the command line interface of HPE Networking Instant On. Successful exploitation could allow an attacker with administrative |
| CVE-2026-76738 | Awaiting Analysis | 未確認 | CWE-119 | A buffer overflow vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an authenticated attacker with administrative privileges to cause a denial |
| CVE-2026-76755 | Awaiting Analysis | 未確認 | CWE-119 | Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: *.*. |
| CVE-2026-76756 | Awaiting Analysis | 未確認 | CWE-119 | Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: *.*. |
| CVE-2026-76757 | Awaiting Analysis | 未確認 | CWE-119 | Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: *.*. |
| CVE-2026-76758 | Awaiting Analysis | 未確認 | CWE-20 | Vulnerability in Drupal Link content parser. This issue affects Link content parser versions: *.*. |
| CVE-2026-76759 | Awaiting Analysis | 未確認 | CWE-79 | Vulnerability in Drupal Screenshot. This issue affects Screenshot versions: *.*. |
| CVE-2026-76781 | Awaiting Analysis | 未確認 | CWE-476 | A flaw was found in libxml2. A local user or an attacker providing a specially crafted XML catalog can trigger a NULL pointer dereference during XML catalog parsing. This occurs wh |
| CVE-2026-76782 | Awaiting Analysis | 未確認 | CWE-434, CWE-79 | Vulnerability in Drupal Screenshot. This issue affects Screenshot versions: *.*. |
| CVE-2026-76790 | Deferred | 未確認 | CWE-79 | The Estatik Real Estate Plugin WordPress plugin before 4.3.5 does not sanitise and escape several values decoded from a request parameter before reflecting them back in an unauthen |
| CVE-2026-76796 | Awaiting Analysis | 未確認 | CWE-73 | The LoadImageAsPngBase64 endpoint of the Newell Brands DYMO Connect Desktop local web service accepts a file path parameter without adequate validation, allowing a crafted path to |
| CVE-2026-76801 | Deferred | 未確認 | CWE-269 | The FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and in |
| CVE-2026-76802 | Awaiting Analysis | 未確認 | CWE-78 | Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the DAST template loading branch does not apply the unsigned code-template signature ch |
| CVE-2026-76803 | Awaiting Analysis | 未確認 | CWE-284 | Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the nuclei/mysql JavaScript library does not enforce the local-file sandbox when a Java |
| CVE-2026-76804 | Awaiting Analysis | 未確認 | CWE-284 | Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the workflow template loading path does not enforce the -file capability gate when reso |
| CVE-2026-76805 | Awaiting Analysis | 未確認 | CWE-200 | Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the DAST/fuzz payload path in pkg/fuzz/parts.go can evaluate substituted runtime data m |
| CVE-2026-76819 | Rejected | 未確認 | Rejected reason: Further research determined the issue results from a dependency. | |
| CVE-2026-76820 | Awaiting Analysis | 未確認 | CWE-918 | OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260701.0, the synchronizerFetch GraphQL query called fetchRemoteStre |
| CVE-2026-76821 | Awaiting Analysis | 未確認 | CWE-1333, CWE-400 | OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260706.0, the JSON ingestion mapper's extractWithRegexp formula func |
| CVE-2026-76825 | Deferred | 未確認 | CWE-200, CWE-470, CWE-680, CWE-693 | RestrictedPython is a tool that helps define a subset of the Python language for accepting program input in a trusted environment. Prior to 8.4, RestrictedPython could allow a sand |
| CVE-2026-76834 | Deferred | 未確認 | CWE-502 | b2evolution CMS versions 6.7.8 through 7.2.5 contain an incomplete fix for CVE-2016-8901 where the serialized-array object check in param_check_serialized_array() fails to reject p |
| CVE-2026-76851 | Analyzed | 未確認 | CWE-918 | A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed remote code execution on the instance. Insufficient network isolation all |
| CVE-2026-76852 | Deferred | 未確認 | CWE-354 | Netcore NR268 firmware version 1.7.121109 has an improper integrity verification flaw in mtd_write allowing forged firmware authenticity checks. Attackers can exploit put_file.cgi |
| CVE-2026-76853 | Deferred | 未確認 | CWE-353 | Netcore NR268 firmware version 1.7.121109 contains a security check bypass vulnerability in the parame_put_file.cgi restore archive prefix validation. Attackers can exploit the fla |
| CVE-2026-76854 | Deferred | 未確認 | CWE-522 | Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in l7_web_auth_user_show.cgi related to captive-portal credential handling. Attackers c |
| CVE-2026-76855 | Deferred | 未確認 | CWE-359 | Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the audit endpoints handled by l7_web_auth_log_dump_cgi.c, audit_get_cgi.c, and mod_ |
| CVE-2026-76856 | Deferred | 未確認 | CWE-352 | Netcore NR255-V firmware version 1.5.130703 contains a cross-site request forgery vulnerability affecting the wan_config_set_cgi, wan_num_set_cgi, and lan_ip_change_cgi endpoints. |
| CVE-2026-76857 | Deferred | 未確認 | CWE-522 | Netcore NR255-V firmware version 1.5.130703 contains a sensitive information disclosure vulnerability in the ddns_wan_list_show.cgi endpoint and related DDNSset_cgi, IGD_GetCgiHand |
| CVE-2026-76858 | Deferred | 未確認 | CWE-79 | Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in ddns_wan_list_show.cgi caused by unsafe eval() handling of DDNS data. Attackers can injec |
| CVE-2026-76859 | Deferred | 未確認 | CWE-522 | Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the user_pass_show.cgi component. Low-privilege attackers can exploit this flaw via |
| CVE-2026-76860 | Deferred | 未確認 | CWE-121 | Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in wake_up_set.cgi caused by unbounded tokenization of MAC and ID input. Attackers can supply crafted MAC |
| CVE-2026-76861 | Deferred | 未確認 | CWE-121 | Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in ntools_tcpdump_start_set.cgi caused by an unsized sprintf call when processing form values. An attacker |
| CVE-2026-76862 | Deferred | 未確認 | CWE-88 | Netcore NR255-V version 1.5.130703 contains an os command argument injection vulnerability in the Nettools tcpdump launch paths, including ntools_start_set_cgi, ntools_tcpdump_star |
| CVE-2026-76863 | Deferred | 未確認 | CWE-863 | Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the mod_qos_bandwidth plan.json handling within filter_conns_dump_cgi.c and IGD_CgiC |
| CVE-2026-76864 | Deferred | 未確認 | CWE-79 | NR255-V version 1.5.130703 fails to sanitize QoS rule names before they are parsed via eval() in qos_xianz_add_cgi, qos_xianz_show_cgi, qos_filter_add_cgi, and qos_filter_show_cgi |
| CVE-2026-76865 | Deferred | 未確認 | CWE-476 | Netcore NR255-V version 1.5.130703 contains a null pointer dereference vulnerability in the QoS setter CGI handlers filter_conn_del_cgi.c and gre_prio_set_cgi.c due to unchecked at |
| CVE-2026-76866 | Deferred | 未確認 | CWE-88 | Netcore NR255-V firmware version 1.5.130703 builds root-run command lines from unquoted user-supplied DDNS input in DDNSset_cgi.c and related ddns_Proc.c components, enabling os co |
| CVE-2026-76867 | Deferred | 未確認 | CWE-79 | Netcore NR255-V firmware version 1.5.130703 contains a stored cross-site scripting vulnerability in routing and NAT configuration CGI components including routing_tab_add_cgi, rout |
| CVE-2026-76868 | Deferred | 未確認 | CWE-476 | Netcore NR255-V version 1.5.130703 contains a null pointer dereference vulnerability in route_policy_add.cgi caused by a missing exit_port parameter. Attackers can send requests la |
| CVE-2026-76869 | Deferred | 未確認 | CWE-121 | Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in reboot_timer_set.cgi caused by improper sscanf token parsing. Attackers can exploit this flaw by submit |
| CVE-2026-76870 | Deferred | 未確認 | CWE-125 | Netcore NR255-V version 1.5.130703 contains an out-of-bounds read vulnerability in the mtd_write pre-flash validation routine triggered by short firmware uploads. Attackers can upl |
| CVE-2026-76871 | Deferred | 未確認 | CWE-522 | Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in mod_vpn_remote/plan.json, pptpd_user_show.cgi, pptp_client_config_show.cgi, and l2tp |
| CVE-2026-76872 | Deferred | 未確認 | CWE-79 | Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in DHCP static IP and IP ACL management pages, including dhcp_add_staticip_cgi, dhcp_statici |
| CVE-2026-76873 | Deferred | 未確認 | CWE-79 | Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in the DHCP dynamic IP display and ARP bind list display components handling hostname fields |
| CVE-2026-76875 | Awaiting Analysis | 未確認 | CWE-416 | PyPy before versions 3.11.16 and 3.12.14 contains a use-after-free vulnerability in the pyexpat module's ExternalEntityParserCreate function that allows attackers to corrupt memory |
| CVE-2026-76898 | Deferred | 未確認 | CWE-918 | draw.io is a configurable diagramming and whiteboarding application. Prior to version 30.3.8, src/main/java/com/mxgraph/online/Utils.java checks IPv6 Unique Local Addresses in Util |
| CVE-2026-76899 | Awaiting Analysis | 未確認 | CWE-1284, CWE-89 | CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. From 1.7.0 until 1.7.4, POST /account-pool/page allows an authentic |
| CVE-2026-76900 | Deferred | 未確認 | CWE-918 | CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. In version 1.7.3, ApprovalResourceService.sendWebHook reads WebHook |
| CVE-2026-76901 | Deferred | 未確認 | CWE-639 | CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. Prior to 1.7.4, GET /pool/lead/get/{id} in PoolClueController.get a |
| CVE-2026-76902 | Deferred | 未確認 | CWE-306, CWE-862 | CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. Prior to 1.7.4, ShiroFilter configures /attachment/preview/{id} and |
| CVE-2026-76907 | Deferred | 未確認 | CWE-200, CWE-639 | LaSuite Doc is a collaborative note taking, wiki and documentation platform. From 4.8.2 until 5.4.0, GET /api/v1.0/documents/search/ accepts sequential seven-digit document paths t |
| CVE-2026-76909 | Awaiting Analysis | 未確認 | CWE-79 | Unleash is an open-source feature management platform. Prior to 8.0.3, the change-request approval email template at src/mailtemplates/requested-cr-approval/requested-cr-approval.h |
| CVE-2026-76910 | Awaiting Analysis | 未確認 | CWE-639 | Unleash is an open-source feature management platform. Prior to 8.0.3, cloneFeatureToggle and POST /api/admin/projects/:projectId/features/:featureName/clone authorize creation in |
| CVE-2026-76925 | Awaiting Analysis | 未確認 | CWE-367 | A flaw was found in Flatpak. A Time-of-check to time-of-use (TOCTOU) race condition exists in the `org.freedesktop.Flatpak.SystemHelper` component. This vulnerability occurs becaus |
| CVE-2026-76931 | Deferred | 未確認 | CWE-79 | The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘message’ parameter in all versions up to, and including, 3.3.205 due to insuff |
| CVE-2026-76949 | Deferred | 未確認 | CWE-290 | Authentication Bypass by Spoofing vulnerability in team-alembic ash_authentication allows an attacker who can plant a remember-me cookie in a victim's browser to replace that victi |
| CVE-2026-76958 | Awaiting Analysis | 未確認 | CWE-611 | SAP Integration Suite does not sufficiently validate XML documents accepted from untrusted sources in certain internal components. An attacker with low privileges could submit spec |
| CVE-2026-76959 | Awaiting Analysis | 未確認 | CWE-352 | SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request Forgery protection on certain requests due to this an attacker with low privileges |
| CVE-2026-76960 | Awaiting Analysis | 未確認 | CWE-352 | SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request Forgery protection on certain requests, due to this an attacker with low privileges |
| CVE-2026-76961 | Awaiting Analysis | 未確認 | CWE-352 | SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request Forgery protection on certain requests, due to this an attacker with low privileges |
| CVE-2026-76962 | Awaiting Analysis | 未確認 | CWE-862 | SAP S/4HANA (Manage Bank Chains app) does not perform sufficient authorization checks within certain affected functionality. An attacker with low privileges could send specially cr |
| CVE-2026-76963 | Awaiting Analysis | 未確認 | CWE-862 | Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform, an authenticated attacker could gain unauthorized access to sensitive system con |
| CVE-2026-76967 | Awaiting Analysis | 未確認 | CWE-502 | SAP NetWeaver Business Client does not perform sufficient validation when processing certain locally stored data during application startup. An attacker with low privileges on the |
| CVE-2026-76968 | Awaiting Analysis | 未確認 | CWE-497 | SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated low-privileged attacker to access certain administrative functionality or interfac |
| CVE-2026-76969 | Awaiting Analysis | 未確認 | CWE-522 | @sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled. An unauthenticated attacker c |
| CVE-2026-76971 | Awaiting Analysis | 未確認 | CWE-918 | Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could cause the server to initiate arbitrary outbound reque |
| CVE-2026-76974 | Awaiting Analysis | 未確認 | CWE-95 | SAP Fiori Launchpad does not sufficiently validate certain user-controlled input. An unauthenticated attacker could craft a malicious link that, when clicked by an authenticated us |
| CVE-2026-76977 | Awaiting Analysis | 未確認 | CWE-1289 | SAP UI5 does not sufficiently validate the parent frame's origin against the configured allowlist. An unauthenticated attacker could host a malicious page to bypass framing restric |
| CVE-2026-76978 | Awaiting Analysis | 未確認 | CWE-78 | ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to a Command Injection vulnerability in the Diagnose Settings feature. |
| CVE-2026-76979 | Awaiting Analysis | 未確認 | CWE-91 | ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to an XML Injection vulnerability in the Rule Tracking Compare Policies feature. |
| CVE-2026-76980 | Awaiting Analysis | 未確認 | CWE-20 | ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to a Data Exposure vulnerability in the Firewall Analyzer syslog collector. |
| CVE-2026-76992 | Deferred | 未確認 | CWE-770 | The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enforcing an appropriate upper limit. An unauthenticated remote attacker controlling |
| CVE-2026-77005 | Deferred | 未確認 | CWE-73 | The CODE MONKEYS PROPOSALS WordPress plugin through 1.0.1 does not validate a user-supplied file path before deleting a file, and does not check the capability of the user making |
| CVE-2026-77006 | Deferred | 未確認 | CWE-73 | The WebTotem Backups WordPress plugin before 1.1.0 does not validate a user-supplied file path, does not check the capability of the user making the request, and discards the resul |
| CVE-2026-77009 | Deferred | 未確認 | CWE-94 | The WatchMan-Site7 WordPress plugin through 4.2.0 does not restrict access to its debugging console, which executes user-supplied PHP code, allowing any authenticated user, such as |
| CVE-2026-77021 | Deferred | 未確認 | CWE-409 | Improper handling of highly compressed data (data amplification) in Checkmk <2.5.0p14, <2.4.0p37, <2.3.0p51 and 2.2.0 (EOL) allows an attacker who controls a host registered for pu |
| CVE-2026-77051 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Syncope. An administrator with adequate entitlements can achieve e |
| CVE-2026-77089 | Analyzed | 未確認 | CWE-290 | Command Center API contained an authentication bypass issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update Command Center. |
| CVE-2026-77091 | Analyzed | 未確認 | CWE-22 | DataCube contained a path traversal issue affecting security feature enforcement. Software customers upgrade to resolved maintenance release. Update Content Extractor and Index Sto |
| CVE-2026-77092 | Analyzed | 未確認 | CWE-502 | Content Extractor contained a deserialization of untrusted data issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update Content Ext |
| CVE-2026-77097 | Analyzed | 未確認 | CWE-306 | Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintena |
| CVE-2026-77098 | Analyzed | 未確認 | CWE-89 | Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server |
| CVE-2026-77101 | Analyzed | 未確認 | CWE-121 | CommServe contained a stack-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe. |
| CVE-2026-77102 | Analyzed | 未確認 | CWE-122 | CommServe contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe. |
| CVE-2026-77103 | Analyzed | 未確認 | CWE-288 | CommServe contained an authentication bypass issue affecting access authorization and information disclosure. Software customers upgrade to resolved maintenance release. Update Com |
| CVE-2026-77104 | Analyzed | 未確認 | CWE-22 | CommServe contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved maintenance release. Update CommServe. |
| CVE-2026-77105 | Analyzed | 未確認 | CWE-347 | CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update CommServe and We |
| CVE-2026-77106 | Analyzed | 未確認 | CWE-862 | Cvlaunchd contained a missing authorization issue affecting command execution authorization. Software customers upgrade to resolved maintenance release. Update all Commvault instal |
| CVE-2026-77108 | Analyzed | 未確認 | CWE-863 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated acc |
| CVE-2026-77109 | Analyzed | 未確認 | CWE-863 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated acc |
| CVE-2026-77110 | Analyzed | 未確認 | CWE-22 | Adobe Commerce is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature bypass. An att |
| CVE-2026-77111 | Analyzed | 未確認 | CWE-863 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerab |
| CVE-2026-77112 | Deferred | 未確認 | CWE-918 | Server-Side request forgery (SSRF) vulnerability in Global IT Informatics Technology Services Inc. Weoll allows Server Side Request Forgery. This issue affects Weoll: before 3.2.4 |
| CVE-2026-77117 | Awaiting Analysis | 未確認 | CWE-835 | Converting crafted SHIFT_JISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the convert |
| CVE-2026-77119 | Awaiting Analysis | 未確認 | CWE-346 | A validly signed NSEC3 from an unrelated sibling zone may be accepted as an insecurity proof, downgrading a secure delegation and letting a forged unsigned answer through. This iss |
| CVE-2026-77120 | Awaiting Analysis | 未確認 | CWE-78 | CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause privilege escalation to root and unauthoriz |
| CVE-2026-77121 | Analyzed | 未確認 | CWE-770 | A user account with permission to deploy artifacts to a hosted Maven repository could upload a POM file containing an oversized metadata field. This causes future attempts to list |
| CVE-2026-77122 | Analyzed | 未確認 | CWE-863 | An authorization flaw in the REST API repository details endpoint (GET /service/rest/v1/repositories/{repositoryName}) in Sonatype Nexus Repository 3 allowed an account holding rea |
| CVE-2026-77123 | Analyzed | 未確認 | CWE-201 | Nexus Repository 3 contains a sensitive information disclosure vulnerability in the capability read API. An account holding the nexus:capabilities:read privilege can retrieve the p |
| CVE-2026-77124 | Analyzed | 未確認 | CWE-184 | In affected versions of Nexus Repository 3, the script execution endpoint (POST /service/rest/v1/script/{name}/run) did not verify whether script execution had been administrativel |
| CVE-2026-77125 | Analyzed | 未確認 | CWE-863 | A vulnerability was identified in Sonatype Nexus Repository 3 in which two blobstore group management REST API endpoints did not correctly enforce the intended authorization check. |
| CVE-2026-77132 | Deferred | 未確認 | CWE-200, CWE-862 | It has been discovered that several AJAX routes used for the backend localization wizard failed to perform authorization checks. This allowed authenticated, low-privileged backend |
| CVE-2026-77147 | Deferred | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Syncope. An administrator with adequate entitlements for Implementations can create a malicious G |
| CVE-2026-77150 | Deferred | 未確認 | CWE-79 | The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'data[name]' Parameter in all versions up to, and including, 2.0.16 du |
| CVE-2026-77159 | Awaiting Analysis | 未確認 | CWE-61 | A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost() function. The function uses a path-based chown() on the swtpm logfile without checking for symbolic lin |
| CVE-2026-77161 | Deferred | 未確認 | CWE-89 | The Smart Marketing SMS and Newsletters Forms plugin for WordPress is vulnerable to generic SQL Injection via Parameter Name in all versions up to, and including, 5.1.24 due to ins |
| CVE-2026-77164 | Deferred | 未確認 | CWE-918 | Circles' remote-instance signature verification fetches the attacker-supplied keyId URL before trust in the remote instance is established, and explicitly allows local/private addr |
| CVE-2026-77165 | Deferred | 未確認 | CWE-284 | File owners were unable to unlock TYPE_TOKEN locks placed by other users, leaving files permanently locked with no recovery path outside of the database. |
| CVE-2026-77166 | Deferred | 未確認 | CWE-840 | The emoji field in the page emoji update endpoint does not properly validate user input. By injecting long text and line breaks, the sidebar layout becomes broken and can hide othe |
| CVE-2026-77169 | Deferred | 未確認 | CWE-284 | A vulnerability in the team folders (formerly group folders) app when used in combination with the workspace app allowed API/REST-only delegated administrators to bypass folder-lev |
| CVE-2026-77170 | Deferred | 未確認 | CWE-284 | The Deck config API allows authenticated users to set board-scoped configuration keys for arbitrary board IDs without validating whether the user owns or has permission to manage t |
| CVE-2026-77177 | Deferred | 未確認 | CWE-94 | Open GenAI Stack (aka ogx-ai) 2026-06-11, as used in the Meta AI backend for WhatsApp and other products, allows code execution because prompt injection (with Jinja2 template synta |
| CVE-2026-77179 | Awaiting Analysis | 未確認 | CWE-59 | On macOS, the virtio-fs host server used by Docker Sandboxes improperly follows symlinks when reopening an unlinked file from a stored path. A malicious guest can replace a parent |
| CVE-2026-77180 | Awaiting Analysis | 未確認 | CWE-76 | When NGINX Ingress Controller is configured with Ingress annotations, an injection vulnerability exists in the configuration generator of NGINX Ingress Controller. Multiple user-co |
| CVE-2026-77181 | Deferred | 未確認 | CWE-863 | Incorrect Authorization vulnerability in Apache Syncope. An administrator with ClientApp's update entitlement is unable to perform the related operation, while ClientApp's creat |
| CVE-2026-77185 | Awaiting Analysis | 未確認 | CWE-305 | Authentication bypass in sshd-core in Apache MINA SSHD versions 2.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5 for a certain (presumed rare) way to implement an SSH server. Apache MI |
| CVE-2026-77186 | Deferred | 未確認 | CWE-79 | The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'fallback' Shortcode Attribute in all versions up to, and including |
| CVE-2026-77187 | Deferred | 未確認 | CWE-79 | The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'before' and 'after' Shortcode Attributes in all versions up to, an |
| CVE-2026-77189 | Deferred | 未確認 | CWE-89 | The Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) plugin for WordPress is vulnerable to generic SQL Injection via 'orde |
| CVE-2026-77190 | Awaiting Analysis | 未確認 | CWE-20 | On affected platforms running Arista EOS, an unauthenticated attacker who is network-adjacent to the switch and able to connect to a device with PIM Sparse Mode and MLAG configured |
| CVE-2026-77191 | Awaiting Analysis | 未確認 | CWE-862 | An authenticated supplicant on an adjacent network may bypass intended network authorization policy and send unrestricted traffic during a brief window (milliseconds to seconds) be |
| CVE-2026-77193 | Deferred | 未確認 | CWE-22 | The eesy_ID2WP – Publish InDesign HTML5 plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.0.3 via the `id2wp_path` parameter. This makes |
| CVE-2026-77194 | Deferred | 未確認 | CWE-287 | The Simple Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in versions up to, and including, 4.8.0. This is due to |
| CVE-2026-77203 | Deferred | 未確認 | CWE-269 | The Groups – Memberships and Access Control plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.6.0. This is due to the groups_join() |
| CVE-2026-77221 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-77222 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-77223 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-77233 | Deferred | 未確認 | CWE-79 | The iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via AdSense Regex Re |
| CVE-2026-77239 | Awaiting Analysis | 未確認 | CWE-285 | WACRM is a self-hostable CRM template for WhatsApp. In version 0.7.0 and earlier, WACRM flow and automation write routes authenticate account viewers but do not enforce the agent r |
| CVE-2026-77240 | Deferred | 未確認 | CWE-639 | WACRM is a self-hostable CRM template for WhatsApp. In version 0.7.0 and earlier, the profiles_update row-level security policy in supabase/migrations/017_account_sharing.sql permi |
| CVE-2026-77242 | Analyzed | 未確認 | CWE-367, CWE-918 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, validate_url_for_ssrf checks a hostname's resolved addresses, |
| CVE-2026-77243 | Analyzed | 未確認 | CWE-862 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, ENABLED_TOOLS and TOOLSETS are applied when tools are listed b |
| CVE-2026-77244 | Analyzed | 未確認 | CWE-287, CWE-303, CWE-862 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the HTTP transport accepts requests without a verified user id |
| CVE-2026-77246 | Analyzed | 未確認 | CWE-200, CWE-22, CWE-441 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, an HTTP transport deployment with READ_ONLY_MODE=false accepts |
| CVE-2026-77247 | Analyzed | 未確認 | CWE-73 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Jira and Confluence upload tools interpret caller-controlled p |
| CVE-2026-77248 | Analyzed | 未確認 | CWE-22, CWE-306 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the streamable HTTP transport accepts requests without a user |
| CVE-2026-77249 | Analyzed | 未確認 | CWE-918 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, JiraUserMixin._lookup_user_by_permissions uses the module-leve |
| CVE-2026-77250 | Analyzed | 未確認 | CWE-312 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, OAuthConfig writes a plaintext fallback file containing access |
| CVE-2026-77251 | Analyzed | 未確認 | CWE-1276 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Jira search accepts a forbidden project clause because it chec |
| CVE-2026-77252 | Analyzed | 未確認 | CWE-284 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, caller-supplied projects_filter and spaces_filter arguments ca |
| CVE-2026-77253 | Analyzed | 未確認 | CWE-22 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Jira and Confluence attachment upload tools accept arbitrary l |
| CVE-2026-77254 | Analyzed | 未確認 | CWE-306 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, requests to the HTTP MCP endpoint without a per-user identity |
| CVE-2026-77255 | Analyzed | 未確認 | CWE-22, CWE-441 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the Jira update_issue attachments argument is converted into l |
| CVE-2026-77256 | Analyzed | 未確認 | CWE-732 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the plaintext OAuth fallback file containing refresh and acces |
| CVE-2026-77257 | Analyzed | 未確認 | CWE-22 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, HTTP-exposed Jira and Confluence upload tools pass a caller-pr |
| CVE-2026-77258 | Analyzed | 未確認 | CWE-22 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, upload_attachment in src/mcp_atlassian/confluence/attachments. |
| CVE-2026-77259 | Analyzed | 未確認 | CWE-22, CWE-552 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, confluence_upload_attachment opens a caller-selected server-lo |
| CVE-2026-77260 | Analyzed | 未確認 | CWE-22 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the Confluence and Jira upload_attachment implementations acce |
| CVE-2026-77261 | Analyzed | 未確認 | CWE-918 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, _make_ssrf_safe_hook is omitted from JiraFetcher and Confluenc |
| CVE-2026-77262 | Analyzed | 未確認 | CWE-22 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, confluence_upload_attachment accepts an attacker-controlled fi |
| CVE-2026-77263 | Deferred | 未確認 | CWE-79 | The iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up t |
| CVE-2026-77265 | Analyzed | 未確認 | CWE-918 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, header-supplied Jira or Confluence URLs are resolved and valid |
| CVE-2026-77266 | Analyzed | 未確認 | CWE-22 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, upload_attachment accepts absolute paths and traversal sequenc |
| CVE-2026-77267 | Analyzed | 未確認 | CWE-918 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the X-Atlassian-Jira-Url and X-Atlassian-Confluence-Url header |
| CVE-2026-77268 | Analyzed | 未確認 | CWE-732 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the OAuth fallback token directory and JSON file are created w |
| CVE-2026-77269 | Analyzed | 未確認 | CWE-22 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the remediation for CVE-2026-27825 protects download destinati |
| CVE-2026-77270 | Analyzed | 未確認 | CWE-22 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the Jira and Confluence attachment upload tools treat caller-c |
| CVE-2026-77271 | Analyzed | 未確認 | CWE-22, CWE-94 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, validate_safe_path defaults its base directory to os.getcwd(), |
| CVE-2026-77272 | Analyzed | 未確認 | CWE-79 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the OAuth error query parameter is passed to CallbackHandler._ |
| CVE-2026-77274 | Analyzed | 未確認 | CWE-918 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, validate_url_for_ssrf has a backslash authority confusion beca |
| CVE-2026-77281 | Awaiting Analysis | 未確認 | CWE-178, CWE-770, CWE-94 | Caddy is an extensible server platform that uses TLS by default. In version 2.11.3 and earlier, three configuration-dependent weaknesses affect the handler and placeholder layer. I |
| CVE-2026-77285 | Deferred | 未確認 | CWE-532 | OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, OpenBao Agent's exec rendering mode could write secrets from env_template to standard output whe |
| CVE-2026-77293 | Deferred | 未確認 | CWE-639, CWE-862 | TREK is a collaborative travel planner. Prior to 3.3.0, the DELETE /api/trips/:tripId/collab/notes/:noteId/files/:fileId endpoint authorizes an authenticated user against the attac |
| CVE-2026-77294 | Deferred | 未確認 | CWE-918 | TREK is a collaborative travel planner. Prior to 3.3.0, TREK allows an authenticated user to store an attacker-controlled llm_base_url through the settings API when the LLM_PARSING |
| CVE-2026-77301 | Awaiting Analysis | 未確認 | CWE-789 | adm-zip is a JavaScript library for creating and extracting ZIP archives in Node.js. Prior to 0.6.1, getData() in zipEntry.js trusts an entry's central-directory uncompressed size |
| CVE-2026-77320 | Deferred | 未確認 | CWE-200, CWE-284, CWE-602 | TREK is a collaborative travel planner. Prior to 3.3.0, getSharedTripData in server/src/services/shareService.ts returns days, assignments, dayNotes, and places through GET /api/sh |
| CVE-2026-77321 | Deferred | 未確認 | CWE-200, CWE-284, CWE-862 | TREK is a collaborative travel planner. Prior to 3.3.0, the get_trip_summary tool in server/src/mcp/tools/trips.ts is registered for scoped OAuth MCP tokens without requiring trips |
| CVE-2026-77322 | Awaiting Analysis | 未確認 | CWE-789 | SIPGO is a library for writing SIP services in the GO language. Prior to 1.4.3, WSConnection.Read in sip/transport_ws.go creates a wsutil.Reader without setting MaxFrameSize, allow |
| CVE-2026-77339 | Deferred | 未確認 | CWE-306, CWE-346 | Process Compose is a scheduler and orchestrator for non-containerized applications. Prior to 1.120.0, the MCP SSE listener in src/mcp/server.go accepts browser-origin requests to / |
| CVE-2026-77360 | Deferred | 未確認 | CWE-113 | oRPC is an tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to 1.14.8, the @orpc/server CORS plugin in packages/server/src/plugins/co |
| CVE-2026-77385 | Awaiting Analysis | 未確認 | CWE-639, CWE-862 | Kyoo is a self-hosted media server focused on movies, series, and anime. Prior to 5.1.0, a registered user with the core.play permission could supply a base64-encoded filesystem pa |
| CVE-2026-77386 | Deferred | 未確認 | CWE-601 | Kyoo is a self-hosted media server focused on movies, series, and anime. Prior to 5.1.0, an unauthenticated attacker could initiate the OIDC login flow with an attacker-controlled |
| CVE-2026-77393 | Awaiting Analysis | 未確認 | CWE-276 | In Ignition 8.1.53 and earlier, the Gateway "Create Project Role(s)" setting shipped blank, which permitted any authenticated user to create projects (if they can execute gateway s |
| CVE-2026-77394 | Deferred | 未確認 | CWE-79 | OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From 5.0.6 until 7.3.0, an authenticated actor with system_s |
| CVE-2026-77396 | Analyzed | 未確認 | CWE-122, CWE-787 | PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the PJSIP AVI parser in pjmedia/src/pjmedia/avi_player.c uses an input-file vide |
| CVE-2026-77399 | Awaiting Analysis | 未確認 | CWE-400, CWE-834 | icalendar is an RFC 5545 compatible parser and generator of iCalendar files for Python. From 6.1.0 until 7.2.2, vInt.from_ical accepts an attacker-controlled VALARM REPEAT value an |
| CVE-2026-77401 | Awaiting Analysis | 未確認 | CWE-693 | Zope AccessControl provides a general security framework for use in Zope. Prior to 7.4, applications that allow untrusted users to create and execute AccessControl-controlled Pytho |
| CVE-2026-77403 | Awaiting Analysis | 未確認 | CWE-770 | RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, Connection.openTune in connection.go accepts a server-advertised FrameMax below the AMQP frameMinSize value of 4096 |
| CVE-2026-77404 | Awaiting Analysis | 未確認 | CWE-116 | RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, URI.String in uri.go concatenates CertFile, KeyFile, CACertFile, and ServerName values directly into an AMQPS query |
| CVE-2026-77405 | Awaiting Analysis | 未確認 | CWE-326 | RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, tlsConfigFromURI in uri.go creates tls.Config values without setting MinVersion to tls.VersionTLS12. Builds using a |
| CVE-2026-77406 | Awaiting Analysis | 未確認 | CWE-195 | RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, Channel.Qos in channel.go accepts negative prefetchCount and prefetchSize integers and casts them directly to uint16 |
| CVE-2026-77407 | Awaiting Analysis | 未確認 | CWE-316 | RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, PlainAuth values defined in auth.go retain passwords as exported plaintext fields in Connection.Config.SASL after a |
| CVE-2026-77408 | Awaiting Analysis | 未確認 | CWE-190 | RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, the writeShortstr function in write.go casts the byte length of AMQP shortstr property values to uint8 without first |
| CVE-2026-77409 | Awaiting Analysis | 未確認 | CWE-770 | RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, Channel.dispatch in channel.go, confirms.confirm in confirms.go, and Connection.dispatch0 in connection.go synchrono |
| CVE-2026-77410 | Awaiting Analysis | 未確認 | CWE-789 | RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, Channel.recvContent in channel.go preallocates the message body slice with the uint64 ch.header.Size value supplied |
| CVE-2026-77411 | Awaiting Analysis | 未確認 | CWE-754 | RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, readLongstr in read.go returns an empty string and a nil error when a declared AMQP longstr length exceeds 0x7FFFFFF |
| CVE-2026-77412 | Awaiting Analysis | 未確認 | CWE-681 | RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, readField in read.go reads the length of an AMQP byte-array field with type tag x into a signed int32 and passes the |
| CVE-2026-77420 | Awaiting Analysis | 未確認 | CWE-1333 | JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, DefaultHistory.matchPatterns(String patterns, String line) in reader/src/main/java/org/jline |
| CVE-2026-77421 | Awaiting Analysis | 未確認 | CWE-1333 | JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in nano editor's regex search mode passes a user-controlled search term from |
| CVE-2026-77422 | Awaiting Analysis | 未確認 | CWE-1333 | JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in grep command in builtins/src/main/java/org/jline/builtins/PosixCommands.j |
| CVE-2026-77423 | Awaiting Analysis | 未確認 | CWE-1333 | JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in less viewer passes user-controlled search and display-filter patterns fro |
| CVE-2026-77425 | Awaiting Analysis | 未確認 | CWE-639, CWE-863 | Unleash is an open-source feature management platform. Prior to 8.0.3, POST /api/admin/projects/:projectId/features/:featureName/environments/:environment/strategies/set-sort-order |
| CVE-2026-77426 | Awaiting Analysis | 未確認 | CWE-639, CWE-862 | Unleash is an open-source feature management platform. Prior to 8.0.3, the Unleash admin API contains five authorization vulnerabilities. POST /api/admin/segments/strategies assign |
| CVE-2026-77465 | Deferred | 未確認 | CWE-674 | toml-node is a TOML parser for Node.js and the browser. Prior to 4.2.0, toml.parse() uses a Peggy 5.1.0 generated recursive-descent parser in lib/parser.js whose peg$parsevalue, pe |
| CVE-2026-77480 | Analyzed | 未確認 | CWE-1220 | Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-77481 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
| CVE-2026-77482 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-77483 | Analyzed | 未確認 | CWE-1390 | Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-77484 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network. |
| CVE-2026-77485 | Analyzed | 未確認 | CWE-416 | Use after free in SQL Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-77486 | Analyzed | 未確認 | CWE-122, CWE-190 | Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-77487 | Analyzed | 未確認 | CWE-284 | Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-77488 | Analyzed | 未確認 | CWE-191 | Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally. |
| CVE-2026-77489 | Analyzed | 未確認 | CWE-476 | Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-77490 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a n |
| CVE-2026-77491 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally. |
| CVE-2026-77492 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally. |
| CVE-2026-77493 | Analyzed | 未確認 | CWE-415 | Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. |
| CVE-2026-77494 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
| CVE-2026-77495 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. |
| CVE-2026-77498 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
| CVE-2026-77499 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
| CVE-2026-77500 | Analyzed | 未確認 | CWE-763 | Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-77501 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
| CVE-2026-77502 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
| CVE-2026-77503 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally. |
| CVE-2026-77504 | Analyzed | 未確認 | CWE-415 | Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-77505 | Analyzed | 未確認 | CWE-416 | Use after free in DNS Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-77516 | Deferred | 未確認 | CWE-639, CWE-862 | MaxKB is an open-source AI assistant for enterprise. From version 2.0.0 through 2.9.2, a lowest-role workspace member denied access to a tool by WorkspaceUserResourcePermission can |
| CVE-2026-77517 | Deferred | 未確認 | CWE-639, CWE-862 | MaxKB is an open-source AI assistant for enterprise. From version 2.0.0 through 2.10.2-lts, document and paragraph operate routes authorize only knowledge_id in the request path, t |
| CVE-2026-77518 | Deferred | 未確認 | CWE-862 | MaxKB is an open-source AI assistant for enterprise. In 2.10.2-lts and earlier, a normal workspace user who knows another user's active MCP tool_id in the same workspace can retrie |
| CVE-2026-77519 | Deferred | 未確認 | CWE-613 | MaxKB is an open-source AI assistant for enterprise. In 2.10.2-lts and earlier, the /chat/api/mcp authentication path looks up an ApplicationApiKey using only its secret and active |
| CVE-2026-77520 | Deferred | 未確認 | CWE-862 | MaxKB is an open-source AI assistant for enterprise. In 2.10.2-lts and earlier, a normal user in the same workspace can obtain another user's application_id from the homepage appli |
| CVE-2026-77521 | Deferred | 未確認 | CWE-250, CWE-749, CWE-78 | MaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.5-lts, assistants with a tool, MCP tool, skill, or sub-application use SandboxShellBackend, which exposes |
| CVE-2026-77522 | Deferred | 未確認 | CWE-918 | MaxKB is an open-source AI assistant for enterprise. In version 2.10.3-lts and earlier, the knowledge web-document import and synchronization crawler passes an authenticated worksp |
| CVE-2026-77523 | Deferred | 未確認 | CWE-639 | MaxKB is an open-source AI assistant for enterprise. In version 2.10.3-lts and earlier, the model parameter form route authorizes the path workspace but ModelSerializer.ModelParams |
| CVE-2026-77525 | Deferred | 未確認 | CWE-862 | MaxKB is an open-source AI assistant for enterprise. In 2.10.2-lts and earlier, management chat-record routes authorize the path application_id but load records using global chat_i |
| CVE-2026-77528 | Deferred | 未確認 | CWE-409, CWE-770 | Autobahn Python is a WebSocket and WAMP implementation for Python that supports Twisted and asyncio. Prior to 26.7.1, WebSocket endpoints that accept permessage-deflate and rely on |
| CVE-2026-77544 | Deferred | 未確認 | CWE-787 | A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack o |
| CVE-2026-77555 | Deferred | 未確認 | CWE-787 | A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack o |
| CVE-2026-77556 | Deferred | 未確認 | CWE-125 | A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on |
| CVE-2026-77558 | Deferred | 未確認 | CWE-125 | A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on |
| CVE-2026-77560 | Deferred | 未確認 | CWE-178, CWE-636, CWE-863 | Tinyauth is an authentication and authorization server. Prior to 5.1.2, Tinyauth compares forwarded hostnames case-sensitively while reverse proxies route equivalent hostnames case |
| CVE-2026-77561 | Deferred | 未確認 | CWE-307 | Tinyauth is an authentication and authorization server. Prior to 5.1.0, an unauthenticated remote attacker can send POST /api/user/login requests with 257 distinct nonexistent user |
| CVE-2026-77568 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-15747. Reason: This candidate is a duplicate of CVE-2026-15747. Notes: All CVE users should ref | |
| CVE-2026-77581 | Deferred | 未確認 | CWE-918 | BentoPDF is a client-side PDF toolkit that is self hostable. In 2.8.6 and earlier, the certificate and timestamp CORS proxy in cloudflare/cors-proxy-worker.js uses isPrivateOrReser |
| CVE-2026-77582 | Deferred | 未確認 | CWE-208 | Tinyauth is an authentication and authorization server. Prior to 5.1.0, Tinyauth exposes a remotely observable timing difference between authentication attempts for existing and no |
| CVE-2026-77601 | Deferred | 未確認 | CWE-78 | OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From 5.12.0 until 7.3.0, an authenticated actor can write th |
| CVE-2026-77602 | Deferred | 未確認 | CWE-94 | OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From 5.1.0 until 7.3.0, authenticated non-administrator user |
| CVE-2026-77605 | Awaiting Analysis | 未確認 | CWE-20, CWE-706 | Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the Folder as Workspace Run by system action in Notepad++ can resolve a different sibling file than the file |
| CVE-2026-77606 | Awaiting Analysis | 未確認 | CWE-79 | Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, when `headers=plain`, table h |
| CVE-2026-77607 | Awaiting Analysis | 未確認 | CWE-79 | Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, `sep` was inserted verbatim i |
| CVE-2026-77608 | Awaiting Analysis | 未確認 | CWE-79 | Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, when the `value` parameter wa |
| CVE-2026-77609 | Awaiting Analysis | 未確認 | CWE-601 | Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, `Special:URIResolver` resolve |
| CVE-2026-77610 | Awaiting Analysis | 未確認 | CWE-79 | Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, query debug output (`format=d |
| CVE-2026-77614 | Deferred | 未確認 | CWE-384 | Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to versions 19.7 and 20.2, the default security configuration in et |
| CVE-2026-77615 | Deferred | 未確認 | CWE-79 | Paella Player is a set of libraries to create a multi stream video player. Prior to Paella Player 2.12.11 (as used in Opencast prior to 19.7 and 20.2), there is a potential XSS att |
| CVE-2026-77616 | Awaiting Analysis | 未確認 | CWE-79 | Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. In versions 7.0.0 through 7.1.0, `Special:Ask` accept |
| CVE-2026-77619 | Awaiting Analysis | 未確認 | CWE-130, CWE-789 | Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source reads a 32-bit compressed-frame length from the network and uses it to size |
| CVE-2026-77620 | Awaiting Analysis | 未確認 | CWE-409 | Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source feeds each decompressed frame back into its decoder without limiting nested |
| CVE-2026-77621 | Awaiting Analysis | 未確認 | CWE-22, CWE-73 | Vector is a high-performance observability data pipeline. From 0.10.0 until 0.57.0, the file sink renders its templated path from event fields and opens the result without confinin |
| CVE-2026-77633 | Deferred | 未確認 | CWE-362, CWE-367, CWE-770 | Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, PrepareUpload in pkg/filemanager/fs/dbfs/upload.go checks a stale in-memory user storage value throu |
| CVE-2026-77637 | Deferred | 未確認 | CWE-862 | Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, tool.GET("wopi") and tool.POST("mail") in routers/router.go inherit ScopeAdminRead but omit the Requ |
| CVE-2026-77654 | Deferred | 未確認 | CWE-266 | Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux, 64 bit allows Privilege Escalation and Parameter Injection. |
| CVE-2026-77689 | Deferred | 未確認 | CWE-284 | The Booking for Appointments and Events Calendar WordPress plugin before 9.8.1 does not verify that a payment was actually taken before recording a booking as paid, trusting the p |
| CVE-2026-77692 | Awaiting Analysis | 未確認 | CWE-476 | An attacker can cause `named` to abort by sending a crafted DNS-over-HTTPS request with a cryptographically invalid SIG(0) record, and then closing the transport connection prematu |
| CVE-2026-77696 | Analyzed | 未確認 | CWE-208 | Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. Impact summary: An attacker able to measure SM2 signing |
| CVE-2026-77697 | Awaiting Analysis | 未確認 | CWE-269 | Zohocorp ManageEngine Endpoint Central versions below 11.4.2540.23 are vulnerable to Privilege Escalation During JAR Extraction |
| CVE-2026-77698 | Awaiting Analysis | 未確認 | CWE-269 | Zohocorp ManageEngine Endpoint Central versions before 11.5.2605.01 are vulnerable to local privilege escalation due to Agent upgrade. |
| CVE-2026-77699 | Awaiting Analysis | 未確認 | CWE-269 | Zohocorp ManageEngine Endpoint Central versions below 11.5.2605.01 are vulnerable to Local privilege escalation due to loading a dll from an untrusted path. |
| CVE-2026-77702 | Deferred | 未確認 | CWE-862 | The Eventin WordPress plugin before 4.1.24 does not prevent the token issued to a guest at checkout from being used to change that order's tickets afterwards, allowing unauthentic |
| CVE-2026-77703 | Deferred | 未確認 | CWE-322 | Key exchange without entity authentication vulnerability in HAVELSAN Inc. Liman Render Engine allows Adversary in the Middle (AiTM). This issue affects Liman Render Engine: from 1 |
| CVE-2026-77705 | Deferred | 未確認 | CWE-639 | The Booking for Appointments and Events Calendar WordPress plugin before 2.4.10 does not verify that the user editing a customer or employee record is entitled to modify the WordP |
| CVE-2026-77707 | Deferred | 未確認 | CWE-295 | Improper certificate validation vulnerability in HAVELSAN Inc. Liman Render Engine allows Adversary in the Middle (AiTM). This issue affects Liman Render Engine: from 1.0 before 1 |
| CVE-2026-77752 | Deferred | 未確認 | CWE-269 | The Temporary Login Without Password WordPress plugin before 1.9.9 does not verify that the user requesting a temporary login holds network super admin rights before granting the n |
| CVE-2026-77753 | Deferred | 未確認 | CWE-284 | The Temporary Login Without Password WordPress plugin before 1.9.9 does not prevent a temporary user from creating an Application Password, and does not revoke one when the tempora |
| CVE-2026-77756 | Awaiting Analysis | 未確認 | CWE-444 | Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Tomcat caused by processing the transfer-encoding header for an HTTP/1.0 re |
| CVE-2026-77762 | Awaiting Analysis | 未確認 | CWE-362 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Tomcat allows an attacker to inject trailer fields into another |
| CVE-2026-77764 | Deferred | 未確認 | CWE-639 | The GamiPress WordPress plugin before 7.9.9.6 does not properly restrict its video watch-tracking functionality, allowing users with a role as low as Subscriber to award the confi |
| CVE-2026-77765 | Deferred | 未確認 | CWE-284 | The Better Payment WordPress plugin before 2.3.4 does not validate the submitted payment amount server-side against the merchant's configured fixed price before building the gatew |
| CVE-2026-77766 | Deferred | 未確認 | CWE-639 | The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not scope one of its REST collection endpoints to the requesting user, |
| CVE-2026-77770 | Deferred | 未確認 | CWE-862 | The miniOrange 2FA WordPress plugin before 6.3.1, miniOrange 2FA WordPress plugin before 19.3 does not require a validated transaction before deleting site options whose names co |
| CVE-2026-77771 | Deferred | 未確認 | CWE-287 | The miniOrange 2FA WordPress plugin before 6.3.1, miniOrange 2FA WordPress plugin before 19.3 does not scope its second-factor attempt limit to the account being attacked, keying |
| CVE-2026-77773 | Deferred | 未確認 | CWE-200 | The Contact Form to Chat Apps | Click to Chat to Order WordPress plugin before 2.15.8 does not perform any capability, nonce or session check on one of its public AJAX actions, al |
| CVE-2026-77774 | Analyzed | 未確認 | CWE-863 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass secur |
| CVE-2026-77782 | Deferred | 未確認 | CWE-200 | The Rank Math SEO WordPress plugin before 1.0.277.1 does not check whether a post is password protected before using its content to build publicly generated SEO metadata, allowing |
| CVE-2026-77783 | Deferred | 未確認 | CWE-639 | The Rank Math SEO WordPress plugin before 1.0.277 does not verify that the post whose schema it renders on the front end is publicly viewable, allowing unauthenticated visitors to |
| CVE-2026-77784 | Deferred | 未確認 | CWE-639 | The Rank Math SEO WordPress plugin before 1.0.277 does not verify that a user is allowed to edit the object being modified before updating its SEO indexing metadata, allowing user |
| CVE-2026-77785 | Deferred | 未確認 | CWE-639 | The Rank Math SEO WordPress plugin before 1.0.277 does not verify that the requesting user is permitted to read the specific post referenced in a request before returning its cont |
| CVE-2026-77787 | Deferred | 未確認 | CWE-862 | The Rank Math SEO WordPress plugin before 1.0.277 does not perform a capability check when bulk metadata updates target taxonomy terms, and reuses the supplied object identifier a |
| CVE-2026-77788 | Deferred | 未確認 | CWE-639 | The Rank Math SEO WordPress plugin before 1.0.277 does not verify that the metadata row being updated belongs to the object the user was authorised against, allowing users with th |
| CVE-2026-77791 | Awaiting Analysis | 未確認 | CWE-400 | Uncontrolled Resource Consumption vulnerability in Apache Tomcat during sending of WebSocket close message enabled a DoS attack. This issue affects Apache Tomcat: from 11.0.0-M5 |
| CVE-2026-77792 | Deferred | 未確認 | CWE-79 | The RegistrationMagic WordPress plugin before 6.0.9.9 does not escape a registration form field value before outputting it in an HTML attribute on an administrative page, allowing |
| CVE-2026-77793 | Deferred | 未確認 | CWE-602 | The RegistrationMagic WordPress plugin before 6.0.9.9 does not validate the total price of a paid registration server-side, allowing unauthenticated users to complete a paid regist |
| CVE-2026-77794 | Deferred | 未確認 | CWE-472 | The RegistrationMagic WordPress plugin before 6.0.9.9 does not validate a client-supplied quantity multiplier when calculating the total price of a paid registration, allowing unau |
| CVE-2026-77797 | Awaiting Analysis | 未確認 | CWE-125, CWE-20 | Velociraptor's prefetch library contains an out of bound vulnerability which may cause a crash when parsing certain malformed prefetch files. |
| CVE-2026-77798 | Awaiting Analysis | 未確認 | CWE-833 | Velociraptor contains a deadlock condition that may be triggered by authenticated users. The issue stems from a lock management bug in the user management module. |
| CVE-2026-77807 | Deferred | 未確認 | CWE-22 | The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and |
| CVE-2026-77818 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Indu |
| CVE-2026-77820 | Deferred | 未確認 | CWE-79 | The WPComplete plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'empty' Shortcode Attribute in all versions up to, and including, 2.9.9.0 due to insufficient i |
| CVE-2026-77822 | Analyzed | 未確認 | CWE-918 | IBM ContextForge MCP Gateway could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery via DNS rebinding. |
| CVE-2026-77823 | Deferred | 未確認 | CWE-89 | The LearnPress plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter of the export_order_csv AJAX action in versions up to, and including, 4.4.4. This is |
| CVE-2026-77825 | Analyzed | 未確認 | CWE-22 | IBM ContextForge MCP Gateway 1.0.0 through 1.0.8 was vulnerable to path traversal in its Admin API log-download endpoint (`GET /v1/admin/logs/file`). The path confinement check use |
| CVE-2026-77826 | Deferred | 未確認 | CWE-287 | The RegistrationMagic WordPress plugin before 6.0.9.9 does not verify which application a Facebook access token was issued to before accepting it as proof of identity, allowing un |
| CVE-2026-77827 | Awaiting Analysis | 未確認 | CWE-428 | Maono Link 3.8.13 MaonoAiServices Windows service allows local privilege escalation for a standard user account via improper write privileges in 'C:\ProgramData\Maono'. Fixed in 4. |
| CVE-2026-77830 | Deferred | 未確認 | CWE-79 | The Spam protection, Honeypot, Anti-Spam by CleanTalk plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content aria-label Placeholder in all versions u |
| CVE-2026-77847 | Awaiting Analysis | 未確認 | CWE-798 | Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a use of hard-coded credential vulnerability. This could allow an attacker to intercept sensitive inform |
| CVE-2026-77853 | Deferred | 未確認 | CWE-78 | Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in FF-RFI079I4 and FF-RFI078I4. A user who can log in to the product's M-Pla |
| CVE-2026-77856 | Deferred | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_typescript allows an unauthenticated attacker to exhaust the BEAM atom table and abort the nod |
| CVE-2026-77860 | Analyzed | 未確認 | CWE-675 | In NLnetLabs Unbound 1.20.0 up to and including 1.26.0, a vulnerability on the 'serve-expired' code path can cause a double decrement on the 'wait-limit' counter per client IP esse |
| CVE-2026-77866 | Awaiting Analysis | 未確認 | CWE-636, CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in Slab safeurl allows an attacker who controls a validated URL to reach internal network destinations the library is configured to |
| CVE-2026-77874 | Awaiting Analysis | 未確認 | CWE-89 | IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5.SP1, and 3.33.1 through 3.33.3.SP1 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially craf |
| CVE-2026-77875 | Awaiting Analysis | 未確認 | CWE-922 | The application protects access through its calculator-style vault passcode, but the stored data is not bound to that authentication boundary. A local actor who can access shared e |
| CVE-2026-77883 | Deferred | 未確認 | CWE-202 | Exposure of sensitive information through data queries vulnerability in Apache Syncope. An administrator with adequate entitlements for Derived Schemas can create a malicious JEXL |
| CVE-2026-77884 | Deferred | 未確認 | CWE-552 | Gallery - Private Photo Vault 1.0.41 starts an unauthenticated HTTP server that is reachable from the local network. The server listens on TCP port 8080 and serves files and direct |
| CVE-2026-77886 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
| CVE-2026-77887 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally. |
| CVE-2026-77888 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
| CVE-2026-77889 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
| CVE-2026-77890 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
| CVE-2026-77891 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally. |
| CVE-2026-77892 | Analyzed | 未確認 | CWE-693 | No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack. |
| CVE-2026-77893 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
| CVE-2026-77894 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-77895 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
| CVE-2026-77896 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network. |
| CVE-2026-77897 | Analyzed | 未確認 | CWE-23 | Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally. |
| CVE-2026-77898 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. |
| CVE-2026-77899 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally. |
| CVE-2026-77901 | Analyzed | 未確認 | CWE-476 | Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-77903 | Analyzed | 未確認 | CWE-290 | Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-77904 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-77905 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. |
| CVE-2026-77906 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. |
| CVE-2026-77907 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. |
| CVE-2026-77908 | Analyzed | 未確認 | CWE-94 | Improper control of generation of code ('code injection') in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network. |
| CVE-2026-77909 | Analyzed | 未確認 | CWE-522 | Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network. |
| CVE-2026-77911 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-77912 | Analyzed | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability was identified in GitHub Enterprise Server that allowed an authenticated attacker to inject arbitrary HTML attributes into rendere |
| CVE-2026-77927 | Deferred | 未確認 | CWE-89 | ClipBucket v5 before 5.5.3-#182 contains a blind SQL injection vulnerability that allows authenticated users to extract arbitrary data from the database by submitting the check_pho |
| CVE-2026-77928 | Deferred | 未確認 | CWE-89 | ClipBucket v5 before 5.5.3-#182 contains a blind SQL injection vulnerability that allows authenticated users to extract arbitrary database contents by submitting the msg_id paramet |
| CVE-2026-77929 | Deferred | 未確認 | CWE-434 | ClipBucket v5 before 5.5.3-#182 contains a file upload vulnerability that allows authenticated users to achieve remote code execution by uploading a PHP file with valid image magic |
| CVE-2026-77950 | Deferred | 未確認 | CWE-209 | Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_typescript allows an unauthenticated attacker to receive unredacted internal error dat |
| CVE-2026-77955 | Analyzed | 未確認 | CWE-345 | In NLnet Labs Unbound 1.13.2 up to and including 1.26.1, a vulnerability in ZONEMD configured zones (zonemd-check: yes) which are located below (but not at) a trust anchor allow fo |
| CVE-2026-77960 | Deferred | 未確認 | CWE-798 | Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to th |
| CVE-2026-77967 | Deferred | 未確認 | CWE-294 | The Botslab G980H dash camera firmware accepts a reusable authentication value without adequately verifying its freshness or association with the requesting client. An unauthentica |
| CVE-2026-77968 | Awaiting Analysis | 未確認 | CWE-269 | A flaw was found in hawtio-operator. The operator's ClusterRole grants secrets: [create, get, list, update, watch] across all namespaces. While the operator uses a controller-runti |
| CVE-2026-77972 | Awaiting Analysis | 未確認 | CWE-367 | Time-of-check Time-of-use (TOCTOU) Race Condition in Slab safeurl allows an attacker who controls a hostname's DNS responses to reach internal network destinations that validation |
| CVE-2026-77974 | Deferred | 未確認 | CWE-306 | After spoofing the device and obtaining one user confirmation, an attacker may be able to cause the application to transmit firmware through an unauthenticated and unsigned update |
| CVE-2026-77987 | Analyzed | 未確認 | CWE-208, CWE-918 | A server-side request forgery (SSRF) vulnerability was identified in the notebook viewer of GitHub Enterprise Server. The notebook viewer validated the scheme and host of a user-su |
| CVE-2026-7799 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-77999 | Deferred | 未確認 | CWE-472, CWE-602 | Joomla Extension - j2commerce.com - Unauthenticated PayPal callback forgery leading to order confirmation fraud in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6 - The PayPal IPN |
| CVE-2026-7800 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-78000 | Deferred | 未確認 | CWE-79 | Joomla Extension - j2commerce.com - Reflected XSS via `filter_tag`, `pricefrom` and `priceto` in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6 - Four task handlers accepted a bas |
| CVE-2026-78006 | Deferred | 未確認 | CWE-502 | The The Events Calendar plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 6.17.4 via the is_safe_widget_instance function. This is d |
| CVE-2026-78012 | Awaiting Analysis | 未確認 | CWE-121 | An issue in the NetStaX EtherNet/IP Stack prior to v5.6.1 could allow a large Class 3 explicit-message request to exceed the application-side receive buffer without generating an e |
| CVE-2026-78030 | Deferred | 未確認 | CWE-470 | DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbm_type and dbm_mldbm attributes in DBD::DBM. DBD::DBM passes the dbm_type and dbm_mldbm connect attribu |
| CVE-2026-7804 | Deferred | 未確認 | CWE-79 | The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpf_fid' parameter in all versions up to, and including, 3.4 |
| CVE-2026-78043 | Awaiting Analysis | 未確認 | CWE-22 | The Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary con |
| CVE-2026-78064 | Deferred | 未確認 | CWE-639 | Joomla Extension - j2commerce.com - Anonymous cart-record tampering via inherited FOF `save` task in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6 - `fof.xml` grants the `carts` |
| CVE-2026-78065 | Deferred | 未確認 | CWE-639 | Joomla Extension - j2commerce.com - Guest checkout address disclosure to any authenticated user (IDOR) in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6 - `editAddress()` redirect |
| CVE-2026-78069 | Deferred | 未確認 | CWE-862 | Joomla Extension - j2commerce.com - Missing authorization on Apps controller delegation chain in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6 - `J2StoreControllerApps`'s `appTas |
| CVE-2026-78080 | Deferred | 未確認 | CWE-89 | Joomla Extension - feenders.de - Unauthenticated SQL injection in JooDatabase Lite < 5.1.0 - The cid parameter is used in queries without validation, allowing SQLi vectors. |
| CVE-2026-78081 | Deferred | 未確認 | CWE-352 | Joomla Extension - j2commerce.com - Missing CSRF protection on cart, checkout and myprofile controllers in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7 - A forged request riding |
| CVE-2026-78082 | Deferred | 未確認 | CWE-89 | Joomla Extension - joomshaper.com - Unauthenticated SQL Injection in Property Search and Map Filtering in SP Property < 4.1.4 - The property search and listing query builders assem |
| CVE-2026-78083 | Deferred | 未確認 | CWE-352 | Joomla Extension - joomshaper.com - Missing CSRF Token Verification in Property Booking and Agent Contact Endpoints in SP Property < 4.1.4 - The visitor booking (properties.booking |
| CVE-2026-78084 | Deferred | 未確認 | CWE-284, CWE-352 | Joomla Extension - joomshaper.com - Missing Access Control in Gallery Image Management in SP Property < 4.1.4 - The gallery management controller tasks lacked authorization checks |
| CVE-2026-78085 | Deferred | 未確認 | CWE-22 | Joomla Extension - joomshaper.com - Path Traversal in Gallery Image Management in SP Property < 4.1.4 - The gallery management controller tasks lacked directory confinement checks. |
| CVE-2026-78088 | Deferred | 未確認 | CWE-434 | The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Overwrite in all versions up to, a |
| CVE-2026-7809 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-78123 | Analyzed | 未確認 | CWE-825 | strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS#7 parsing in the openssl plugin. |
| CVE-2026-78124 | Analyzed | 未確認 | CWE-401 | strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime. |
| CVE-2026-78126 | Analyzed | 未確認 | CWE-476 | strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin. |
| CVE-2026-78127 | Analyzed | 未確認 | CWE-401 | libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser. |
| CVE-2026-78129 | Analyzed | 未確認 | CWE-835 | strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 decryption. |
| CVE-2026-78130 | Analyzed | 未確認 | CWE-476 | strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser. |
| CVE-2026-78131 | Analyzed | 未確認 | CWE-401 | strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser. |
| CVE-2026-78132 | Analyzed | 未確認 | CWE-835 | strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax. |
| CVE-2026-78133 | Analyzed | 未確認 | CWE-416 | libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling. |
| CVE-2026-78134 | Analyzed | 未確認 | CWE-863 | strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity. |
| CVE-2026-78135 | Analyzed | 未確認 | CWE-841 | libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATE_CHILD_SA requests are mishandled, there can be an authenticati |
| CVE-2026-78149 | Deferred | 未確認 | CWE-200 | The Smart Post WordPress plugin before 4.0.8 does not check whether a post is password protected before returning its content and its stored password through an unauthenticated AJ |
| CVE-2026-78150 | Deferred | 未確認 | CWE-639 | The Smart Post WordPress plugin before 4.0.8 does not check the type, ownership or status of the post it is asked to duplicate, allowing users with contributor privileges and abov |
| CVE-2026-78151 | Deferred | 未確認 | CWE-200 | The FormLayer WordPress plugin before 1.0.9 does not perform any authorization check before returning a form's full stored configuration in the response to its public submission ha |
| CVE-2026-78152 | Deferred | 未確認 | CWE-200 | The SureRank SEO WordPress plugin before 1.10.1 does not exclude users' registered account email addresses from the structured data it outputs on public pages by default, allowing |
| CVE-2026-78153 | Deferred | 未確認 | CWE-863 | The Restrict User Access WordPress plugin before 2.8.1 does not normalise the REST API route before checking it against the routes its content protection covers, allowing unauthent |
| CVE-2026-78159 | Deferred | 未確認 | CWE-94 | The The Events Calendar plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 6.17.3 via the parse_array function. This is due to insuff |
| CVE-2026-78172 | Deferred | 未確認 | CWE-79 | The Themify – WooCommerce Product Filter plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via Query Parameter Name in all versions up to, and including, 1.5.5 d |
| CVE-2026-78175 | Deferred | 未確認 | CWE-502 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.0.7 via the `withdraw_method |
| CVE-2026-78214 | Deferred | 未確認 | CWE-863 | An authentication bypass vulnerability exists in the protection of Actuator endpoints. The application determines whether authentication is required by matching the incoming reques |
| CVE-2026-78216 | Deferred | 未確認 | CWE-1220 | AshLua exposes Ash read actions to Lua scripts run through an eval action. A read call accepts an operation (list, min, max, first, sum, avg) that builds an ad-hoc Ash.Query.Aggreg |
| CVE-2026-78221 | Awaiting Analysis | 未確認 | CWE-131 | An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to cause memory corruption or disclose |
| CVE-2026-78222 | Awaiting Analysis | 未確認 | CWE-476 | A vulnerability exists in NGINX JavaScript where a malformed HTTP response received by ngx.fetch() can crash an NGINX worker when trusted JavaScript reads Response.statusText. Expl |
| CVE-2026-78223 | Deferred | 未確認 | CWE-347 | Improper Verification of Cryptographic Signature vulnerability in team-alembic AshAuthentication allows a caller of the token revocation action to neutralise a revocation or write |
| CVE-2026-78224 | Awaiting Analysis | 未確認 | CWE-611 | The XSLT Transformer Step builds a bare TransformerFactory without the proper security options set, so XXE injection can allow data exfiltration and denial-of-service attacks. |
| CVE-2026-78225 | Deferred | 未確認 | CWE-321 | A hardcoded cryptographic server key vulnerability exists in the deployer-ng Update Controller component of Wärtsilä FOS-Onboard. |
| CVE-2026-78227 | Analyzed | 未確認 | CWE-416 | NLnet Labs Unbound 1.22.0 up to and including 1.26.1, has a use-after-free vulnerability when compiled for DNS-over-QUIC support with '--with-libngtcp2'. Each DoQ stream owns an ou |
| CVE-2026-78229 | Awaiting Analysis | 未確認 | CWE-78 | Image Scanner Driver for Linux contains an OS command injection vulnerability. An attacker who can log in to a Linux system where the affected product is installed may execute an a |
| CVE-2026-78230 | Deferred | 未確認 | CWE-1220 | AshAi exposes Ash read actions to language-model tool calls. The read tool accepts an aggregate result type (min, max, sum, avg) that builds an ad-hoc Ash.Query.Aggregate over a na |
| CVE-2026-78234 | Awaiting Analysis | 未確認 | CWE-295 | A flaw was found in hawtio-operator. The operator reads the OpenShift Service CA private signing key from the openshift-service-ca namespace and uses it to mint client certificates |
| CVE-2026-78252 | Analyzed | 未確認 | CWE-79 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.3 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an authent |
| CVE-2026-78253 | Awaiting Analysis | 未確認 | CWE-674 | Uncontrolled recursion in QXmlStreamReader::readElementText() in Qt Group Qt allows attackers to cause a denial of service (application crash via stack exhaustion) via a crafted XM |
| CVE-2026-78254 | Analyzed | 未確認 | CWE-23 | The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target di |
| CVE-2026-78294 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Geo Mashup <= 1.13.21 versions. |
| CVE-2026-78295 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in Xagio SEO <= 7.1.0.43 versions. |
| CVE-2026-78296 | Deferred | 未確認 | CWE-345 | Insufficient Verification of Data Authenticity vulnerability in WP ManageNinja LLC FluentAuth allows Identity Spoofing. This issue affects FluentAuth: from n/a through 2.1.2. |
| CVE-2026-78299 | Awaiting Analysis | 未確認 | CWE-22 | In Eclipse Embedded CDT versions 6.0 to 6.7 if the CMSIS-Pack archive extracts a compromised CMSIS pack the archive extraction can extract files to locations outside of the pack, a |
| CVE-2026-78301 | Awaiting Analysis | 未確認 | CWE-349 | A malformed zone may contain an NS or DNAME node above its origin, which `named` treats as a zone cut. If an attacker inserts a malformed zone into a BIND authoritative server (e.g |
| CVE-2026-78302 | Deferred | 未確認 | CWE-79 | Joomla Extension - joomshaper.com - Unauthenticated Stored Cross-Site Scripting (XSS) via Unescaped Output in Views and Admin Lists in SP Property < 4.1.4 - Multiple template files |
| CVE-2026-78303 | Deferred | 未確認 | CWE-201 | Joomla Extension - joomshaper.com - Unvalidated Email Destination & Form Manipulation in Booking Requests in SP Property < 4.1.4 - Booking inquiries previously relied on client-sub |
| CVE-2026-78304 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-78308 | Deferred | 未確認 | CWE-287 | Improper Authentication vulnerability in DIAEnergie allows Authentication Bypass. This issue affects DIAEnergie: before 1.11.00.022. |
| CVE-2026-78309 | Deferred | 未確認 | CWE-89 | SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022. |
| CVE-2026-78310 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022. |
| CVE-2026-78311 | Deferred | 未確認 | CWE-89 | SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022. |
| CVE-2026-78312 | Deferred | 未確認 | CWE-22 | Path Traversal in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022. |
| CVE-2026-78313 | Deferred | 未確認 | CWE-284 | Improper Access Control in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022. |
| CVE-2026-78318 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Syncope. The notification message, as optionally shown by Console's |
| CVE-2026-78319 | Deferred | 未確認 | CWE-367 | A service running on the affected products contains a potential Time-of-Check Time-of-Use (TOCTOU) race condition. An unauthenticated remote attacker could exploit this race condit |
| CVE-2026-78325 | Deferred | 未確認 | CWE-79 | Cross-site scripting in the Evernote and Google Keep note importers in Standard Notes for Android through 3.201.24 allows an attacker to execute arbitrary JavaScript in the applica |
| CVE-2026-78327 | Awaiting Analysis | 未確認 | CWE-78 | An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management inter |
| CVE-2026-78328 | Awaiting Analysis | 未確認 | CWE-862 | A missing authorization vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows a lower-privileged Admin user to escalate privileges to Su |
| CVE-2026-78330 | Deferred | 未確認 | CWE-266 | Incorrect privilege assignment vulnerability in Apache Syncope. When the configured JWKS settings for internal JWT authentication are disclosed (at least protocol and key), an att |
| CVE-2026-78336 | Deferred | 未確認 | CWE-201 | Insertion of sensitive information into sent data vulnerability in Apache Syncope. Any authenticated user can query for the list of available OIDC providers configured for SSO w |
| CVE-2026-78361 | Deferred | 未確認 | CWE-862 | The zipMoney(Zip Co) Payments Plugin for WooCommerce WordPress plugin before 2.4.0 does not perform any authorisation checks on one of its front-end request handlers, and does not |
| CVE-2026-78362 | Deferred | 未確認 | CWE-269 | The SEO Flow by LupsOnline WordPress plugin before 3.0.3 does not correctly validate the credential supplied with its API requests, allowing unauthenticated users to be served as t |
| CVE-2026-78363 | Deferred | 未確認 | CWE-74 | The MW WP Form WordPress plugin before 5.1.5 does not prevent shortcodes in user-submitted values from being executed when it merges those values into a message that it later proce |
| CVE-2026-78374 | Deferred | 未確認 | CWE-201 | Joomla Extension - joomlart.com - Open mail relay via contact AJAX endpoint in T4 Page Builder extension < 2.3.0 - The front-end JSON editor endpoint exposes an action called conta |
| CVE-2026-78375 | Deferred | 未確認 | CWE-89 | Joomla Extension - joomshaper.com - Authenticated Privileged SQL Injection in the Content Plugin of SP Page Builder (Free and Pro) 5.2.1 - 6.9.0 - plgContentSppagebuilder::onConten |
| CVE-2026-78377 | Deferred | 未確認 | CWE-601 | URL redirection to untrusted site ('open redirect') vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Info |
| CVE-2026-78383 | Awaiting Analysis | 未確認 | CWE-770 | Allocation of resources without limits or throttling vulnerability in Apache Tomcat allows an unauthenticated AJP request to pin an AJP processing thread leading to denial of servi |
| CVE-2026-78393 | Deferred | 未確認 | CWE-79 | The Link Library WordPress plugin before 7.9.6 does not properly escape some parameters before outputting them in the addresses of links it generates on its front-end directory pag |
| CVE-2026-78394 | Deferred | 未確認 | CWE-22 | The Link Library WordPress plugin before 7.9.6 does not sanitize a user-supplied destination folder before writing a generated image to disk, allowing users with the Contributor ro |
| CVE-2026-78397 | Deferred | 未確認 | CWE-918 | The Link Library WordPress plugin before 7.9.6 does not validate the destination of a user-supplied URL before falling back to an unprotected fetch when its safe request is rejecte |
| CVE-2026-78408 | Awaiting Analysis | 未確認 | CWE-775 | The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). |
| CVE-2026-78409 | Awaiting Analysis | 未確認 | CWE-59 | The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not |
| CVE-2026-78410 | Awaiting Analysis | 未確認 | CWE-367 | A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can rep |
| CVE-2026-78415 | Awaiting Analysis | 未確認 | CWE-79 | IBM Sterling Secure Proxy 6.2.0.0 through 6.2.1.2 could allow a remote authenticated attacker to perform UI spoofing and phishing attacks due to improper neutralization of user-sup |
| CVE-2026-78424 | Awaiting Analysis | 未確認 | CWE-78 | Improper parameter handling in NeuVector allows any authenticated user who holds the namespaced Runtime Policies (write) permission or anyone with access to NeuVector’s internal gR |
| CVE-2026-78425 | Awaiting Analysis | 未確認 | CWE-287 | Authorised users of outside applications behind the same corporate identity provider (IdP), for example, a wiki, a ticketing system, an expenses tool, or anything they legitimately |
| CVE-2026-78426 | Awaiting Analysis | 未確認 | CWE-863 | The NeuVector JWT verifier accepts noncanonical Base64URL encodings of the same RSA signature field. An attacker holding a valid JWT that has not expired, but was logged out of Neu |
| CVE-2026-78427 | Awaiting Analysis | 未確認 | CWE-807 | The NeuVector admission webhook silently excludes containers from policy evaluation when their image path matches one of three hardcoded service mesh sidecar images. Since the imag |
| CVE-2026-78428 | Awaiting Analysis | 未確認 | CWE-384 | For users authenticated through SAML or OpenID Connect (OIDC), this vulnerability can result in one user receiving another user's authenticated session when multiple SSO login atte |
| CVE-2026-78437 | Awaiting Analysis | 未確認 | CWE-459 | Incomplete cleanup vulnerability in Apache Tomcat allows a malformed request to potentially (depends on timing) cause one request from another user to fail. This issue affects A |
| CVE-2026-78438 | Deferred | 未確認 | CWE-79 | The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via LazyLoad Background Mutator in all versions up to, and including, 2.10. |
| CVE-2026-78439 | Undergoing Analysis | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78441 | Undergoing Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-78442 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78444 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78445 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78446 | Modified | 未確認 | CWE-416 | Use after free in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network. |
| CVE-2026-78447 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-78448 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-78449 | Analyzed | 未確認 | CWE-416 | Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78450 | Analyzed | 未確認 | CWE-416 | Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78451 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack. |
| CVE-2026-78452 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical attack. |
| CVE-2026-78453 | Analyzed | 未確認 | CWE-191 | Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-78454 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally. |
| CVE-2026-78455 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack. |
| CVE-2026-78456 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
| CVE-2026-78457 | Modified | 未確認 | CWE-416 | Use after free in Windows Security App allows an authorized attacker to elevate privileges locally. |
| CVE-2026-78461 | Analyzed | 未確認 | CWE-22 | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-78462 | Analyzed | 未確認 | CWE-639 | Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-78463 | Analyzed | 未確認 | CWE-94 | Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78464 | Analyzed | 未確認 | CWE-367 | Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. |
| CVE-2026-78472 | Deferred | 未確認 | CWE-89 | The Ni WooCommerce Sales Report WordPress plugin before 4.2.0 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perfor |
| CVE-2026-78474 | Deferred | 未確認 | CWE-200 | The Ni WooCommerce Sales Report WordPress plugin before 4.2.0 does not have any authentication or authorisation checks on one of its report-printing routines, allowing unauthentic |
| CVE-2026-7848 | Deferred | 未確認 | CWE-89 | Alior Bank PrestaShop module "raty" for commercial partners is vulnerable to SQL Injection in the "hookActionObjectProductUpdateBefore", "hookActionObjectCategoryUpdateBefore", and |
| CVE-2026-78480 | Analyzed | 未確認 | CWE-306 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentication for Critical Function vulnerability |
| CVE-2026-78481 | Analyzed | 未確認 | CWE-321 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability. A low |
| CVE-2026-78482 | Analyzed | 未確認 | CWE-89 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS |
| CVE-2026-78483 | Analyzed | 未確認 | CWE-295 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthe |
| CVE-2026-78484 | Analyzed | 未確認 | CWE-77 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS |
| CVE-2026-78485 | Analyzed | 未確認 | CWE-22 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Limitation of a Pathname to a Restricted Directo |
| CVE-2026-78486 | Analyzed | 未確認 | CWE-321 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability. An una |
| CVE-2026-78487 | Analyzed | 未確認 | CWE-321 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability. A low |
| CVE-2026-78488 | Analyzed | 未確認 | CWE-78 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS |
| CVE-2026-78489 | Analyzed | 未確認 | CWE-295 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthe |
| CVE-2026-78490 | Analyzed | 未確認 | CWE-307 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Restriction of Excessive Authentication Attempts |
| CVE-2026-78491 | Analyzed | 未確認 | CWE-295 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthe |
| CVE-2026-78492 | Analyzed | 未確認 | CWE-295 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthe |
| CVE-2026-78493 | Analyzed | 未確認 | CWE-77 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS |
| CVE-2026-78494 | Analyzed | 未確認 | CWE-295 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthe |
| CVE-2026-78501 | Modified | 未確認 | CWE-77, CWE-923 | Improper neutralization of special elements used in a command ('command injection') in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to disclose information |
| CVE-2026-78502 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-78503 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-78504 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78505 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78506 | Analyzed | 未確認 | CWE-170 | Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
| CVE-2026-78507 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78508 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack. |
| CVE-2026-78509 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78510 | Modified | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-78511 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78512 | Analyzed | 未確認 | CWE-122, CWE-197 | Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78513 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. |
| CVE-2026-78514 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78515 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-78516 | Modified | 未確認 | CWE-126 | Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally. |
| CVE-2026-78517 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78518 | Analyzed | 未確認 | CWE-125, CWE-20 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78519 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78520 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78521 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78522 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-78523 | Analyzed | 未確認 | CWE-416 | Use after free in Windows DNS allows an unauthorized attacker to deny service over a network. |
| CVE-2026-78524 | Analyzed | 未確認 | CWE-787 | Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78525 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78526 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78528 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in BerqWP <= 4.1.15 versions. |
| CVE-2026-78536 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Robokassa payment gateway for Woocommerce <= 1.8.9 versions. |
| CVE-2026-78543 | Analyzed | 未確認 | CWE-835 | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote attacker to ca |
| CVE-2026-78545 | Analyzed | 未確認 | CWE-94 | The Okta Access Gateway does not sanitize the application label field before including it in the generated nginx configuration file. The unsanitized value is interpolated into an n |
| CVE-2026-78546 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read vulnerability in Citirx Workspace app for Windows. This issue affects Workspace app for Windows: before 2603.11 Current Release (CR), before 2507.1 LTSR CU3, an |
| CVE-2026-78547 | Awaiting Analysis | 未確認 | CWE-787 | Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.11 Current Release (CR), before 2507 |
| CVE-2026-78550 | Analyzed | 未確認 | CWE-95 | The Okta Access Gateway management console passes user-supplied input to eval() without sanitization during an authenticated administrator SSH session. As a result, the unsanitized |
| CVE-2026-78552 | Analyzed | 未確認 | CWE-693 | The Okta Access Gateway does not apply its Lua directive restriction to the application-level custom configuration field. The field is interpolated directly into the nginx server b |
| CVE-2026-78560 | Analyzed | 未確認 | CWE-287 | The Okta Access Gateway includes an optional pass-through authentication source that accepts user identity from a client-supplied HTTP header without cryptographic validation. In a |
| CVE-2026-78569 | Analyzed | 未確認 | CWE-78 | IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to execute arbitrary code due to an incomplete denylist in the security scanner. |
| CVE-2026-78571 | Analyzed | 未確認 | CWE-94 | IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to an unguarded eval() call on attacker-controlled input. |
| CVE-2026-78573 | Analyzed | 未確認 | CWE-1392 | IBM ContextForge MCP Gateway 1.0.0 through 1.0.7 could allow a remote attacker to gain administrative access due to the use of default credentials. |
| CVE-2026-78574 | Analyzed | 未確認 | CWE-426 | The Okta Hyperdrive Integration plugin resolves a required assembly using a registry path within the current user's hive without integrity verification. The referenced path is load |
| CVE-2026-78575 | Analyzed | 未確認 | CWE-78 | IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary commands due to improper validation of command-line arguments in the MCP stdi |
| CVE-2026-78579 | Analyzed | 未確認 | CWE-90 | The Okta Access Gateway does not sanitize SAML assertion attribute values before interpolating them into LDAP search filters in the LDAP datastore configuration. The raw values are |
| CVE-2026-78582 | Awaiting Analysis | 未確認 | CWE-862 | Missing Authorization (CWE-862) in Kibana can lead to unauthorized deletion of data via Exploiting Incorrectly Configured Access Control Security Levels (CAPEC-180). An authenticat |
| CVE-2026-78583 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization (CWE-863) in Kibana can lead to privilege escalation via Input Data Manipulation (CAPEC-153). Elasticsearch cluster privilege declarations originating from |
| CVE-2026-78584 | Analyzed | 未確認 | CWE-204 | Observable Response Discrepancy (CWE-204) in the Kibana Osquery feature can lead to information disclosure via Query System for Information (CAPEC-54). An authenticated user holdin |
| CVE-2026-78586 | Analyzed | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user with low-level |
| CVE-2026-78587 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization (CWE-863) in Fleet Server can lead to a denial of service of agent upload operations via Privilege Abuse (CAPEC-122). Fleet Server does not correctly verify |
| CVE-2026-78588 | Analyzed | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling (CWE-770) in Filebeat can lead to a denial of service via Excessive Allocation (CAPEC-130). An attacker able to reach the Fileb |
| CVE-2026-78590 | Analyzed | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in the Kibana Fleet feature can lead to the unauthorized deletion of privileged resources vi |
| CVE-2026-78591 | Analyzed | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in the Kibana Fleet feature can lead to the unauthorized deletion of resources via Path Trav |
| CVE-2026-78592 | Analyzed | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in Kibana can lead to the unauthorized deletion of privileged resources via Path Traversal ( |
| CVE-2026-78593 | Awaiting Analysis | 未確認 | CWE-94 | An insufficiently validated configuration field in Kibana's Cribl integration allows an authenticated user holding Kibana Fleet management privileges to inject attacker-controlled |
| CVE-2026-78594 | Analyzed | 未確認 | CWE-409 | Improper Handling of Highly Compressed Data (CWE-409) in APM Server can lead to a persistent denial of service via Excessive Allocation (CAPEC-130). An authenticated user with writ |
| CVE-2026-78595 | Awaiting Analysis | 未確認 | CWE-862 | Missing Authorization in Kibana Leading to Information Disclosure / Missing Authorization (CWE-862) in the Kibana Fleet feature can lead to information disclosure via Privilege Abu |
| CVE-2026-78596 | Awaiting Analysis | 未確認 | CWE-862 | Missing Authorization in Kibana Leading to Unauthorized Modification of Data / Missing Authorization (CWE-862) in Kibana can lead to unauthorized modification of data via Privilege |
| CVE-2026-78597 | Analyzed | 未確認 | CWE-862 | Missing Authorization (CWE-862) in the Kibana Entity Store feature can lead to unauthorized credential creation via Accessing Functionality Not Properly Constrained by ACLs (CAPEC- |
| CVE-2026-78598 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization (CWE-863) in the Kibana machine learning feature can lead to information disclosure via Exploiting Incorrectly Configured Access Control Security Levels (CA |
| CVE-2026-78599 | Analyzed | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in the Kibana Fleet feature can lead to the unauthorized deletion of internal resources via |
| CVE-2026-78600 | Analyzed | 未確認 | CWE-459 | Incomplete Cleanup (CWE-459) in Elastic Cloud on Kubernetes (ECK) can lead to unauthorized access via Privilege Abuse (CAPEC-122). Authentication credentials persist after a cross- |
| CVE-2026-78601 | Analyzed | 未確認 | CWE-862 | Missing Authorization (CWE-862) in Kibana can lead to information disclosure via Privilege Abuse (CAPEC-122). An authorization control was not applied to a Kibana Entity Store conf |
| CVE-2026-78602 | Analyzed | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in Elastic Maps Server can lead to information disclosure via Path Traversal (CAPEC-126). An |
| CVE-2026-78603 | Analyzed | 未確認 | CWE-862 | Missing Authorization (CWE-862) in Kibana can lead to information disclosure via Exploiting Incorrectly Configured Access Control Security Levels (CAPEC-180). An authenticated user |
| CVE-2026-78604 | Analyzed | 未確認 | CWE-732 | Incorrect Permission Assignment for Critical Resource (CWE-732) in Elastic Agent can lead to local privilege escalation via Replace Binaries (CAPEC-642). On Windows systems where E |
| CVE-2026-78605 | Analyzed | 未確認 | CWE-444 | Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') (CWE-444) in Elasticsearch can lead to information disclosure via HTTP Request Smuggling (CAPEC-33). Under s |
| CVE-2026-78606 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized disclosure, modification, and deletion of data via Accessing Functionality Not Properly Constrained by ACLs (CA |
| CVE-2026-78607 | Analyzed | 未確認 | CWE-862 | Missing Authorization (CWE-862) in the Elasticsearch custom inference service can lead to information disclosure via Privilege Abuse (CAPEC-122). A user holding only inference exec |
| CVE-2026-78608 | Analyzed | 未確認 | CWE-862 | Missing Authorization (CWE-862) in Kibana can lead to information disclosure via Privilege Abuse (CAPEC-122). An authorization control was not applied to an internal Kibana APM int |
| CVE-2026-78609 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization (CWE-863) in Elastic Cloud on Kubernetes (ECK) can lead to unauthorized modification of data via Metadata Spoofing (CAPEC-690). An actor holding limited Kub |
| CVE-2026-7861 | Deferred | 未確認 | CWE-502 | Deserialization of untrusted data vulnerability in Next4Biz Information Technologies Inc. CSM (Customer Service Management) allows Code Injection. This issue affects CSM (Customer |
| CVE-2026-78620 | Analyzed | 未確認 | CWE-73 | The Okta Access Gateway Kerberos configuration handler does not validate file paths specified in event payloads before writing file contents. The path from the event payload is use |
| CVE-2026-78622 | Awaiting Analysis | 未確認 | CWE-59 | The Okta Verify for Windows uninstaller does not verify whether the user data directory is a filesystem junction before deleting its contents with elevated privileges. The delete o |
| CVE-2026-78623 | Analyzed | 未確認 | CWE-89 | The Okta Access Gateway does not sanitize SAML assertion values before interpolating them into database queries in the advanced mode datastore configuration. The unsanitized values |
| CVE-2026-78624 | Analyzed | 未確認 | CWE-22 | The Okta Access Gateway backup restore function does not validate the filename embedded in an encrypted backup payload. This results in writing file contents to unintended location |
| CVE-2026-78625 | Analyzed | 未確認 | CWE-94 | The Okta Access Gateway does not sanitize dashboard label values before writing them into generated PHP configuration files. The generated file is automatically included during aut |
| CVE-2026-78626 | Analyzed | 未確認 | CWE-863 | The Okta Access Gateway improperly handles input sanitization and regular expression evaluation within its Protected Rule authorization check, resulting in an authorization bypass |
| CVE-2026-78627 | Analyzed | 未確認 | CWE-532 | The Okta Hyperdrive Integration installer does not mask the OAuth client secret when passed as an MSI property. The credential is recorded in plaintext in the installer log, the Ap |
| CVE-2026-78629 | Analyzed | 未確認 | CWE-303 | The Okta Hyperdrive agent plugin returns a success response without a signed SAML assertion when the organization's policy requires no MFA for a given user. The response contains o |
| CVE-2026-7863 | Deferred | 未確認 | CWE-78 | Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software |
| CVE-2026-78630 | Analyzed | 未確認 | CWE-78 | The Okta Access Gateway does not neutralize shell metacharacters in SNMP configuration values before a privileged script uses them to construct OS commands. An authenticated local |
| CVE-2026-78631 | Analyzed | 未確認 | CWE-532 | The Okta Hyperdrive Agent writes the decoded SAML bearer assertion to a local application log file at the default log level on every successful MFA completion. This insertion of se |
| CVE-2026-78635 | Awaiting Analysis | 未確認 | CWE-88 | The Okta Privileged Access client URL handler does not insert an option terminator before appending the target value to the command-line arguments. When a scaleft:// protocol handl |
| CVE-2026-78657 | Deferred | 未確認 | CWE-22 | The SigmaForms Pro – AI Generated Forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_submission_files functi |
| CVE-2026-78658 | Awaiting Analysis | 未確認 | CWE-212 | IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.25, and 7.3 through 7.3.2.20 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.15, 8.1 through 8.1.2.8, and 8.2 through 8.2.2.1 IBM |
| CVE-2026-7866 | Awaiting Analysis | 未確認 | CWE-121 | Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, |
| CVE-2026-78662 | Analyzed | 未確認 | CWE-770 | Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire |
| CVE-2026-78668 | Rejected | 未確認 | Rejected reason: reserved but not needed | |
| CVE-2026-78689 | Awaiting Analysis | 未確認 | CWE-122 | Description NGINX JavaScript (njs) has a vulnerability in the XML module's namespace prefix list parser, reachable through the xml.exclusiveC14n() method. An unauthenticated remo |
| CVE-2026-78738 | Deferred | 未確認 | CWE-79 | Silverpeas Core 6.4.6 is vulnerable to Cross Site Scripting (XSS) via the Document management file upload feature. |
| CVE-2026-78741 | Deferred | 未確認 | CWE-79 | Silverpeas Core <=6.4.6 is vulnerable to Cross Site Scripting (XSS) in the wysiwyg-CKEditor image upload feature. |
| CVE-2026-78742 | Deferred | 未確認 | CWE-79 | Silverpeas Core <=6.4.6 is vulnerable to Cross Site Scripting (XSS) via the Multimedia library application introduction. |
| CVE-2026-78745 | Deferred | 未確認 | CWE-284 | An issue in HiDPT/ Weyon HiDPTAndroid Hi3751V350 Hi3751V352E_DMO allows a remote attacker to execute arbitrary code via the Android Debug Bridge (ADB) daemon (adbd) |
| CVE-2026-7877 | Deferred | 未確認 | CWE-79 | The WP Recipe Maker Premium plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wprm-call-to-action' shortcode in all versions up to, and including, |
| CVE-2026-78806 | Deferred | 未確認 | CWE-200 | An issue in Matter Standard Specification-Implementation gap v1.5.1 Matter Project Chip V1.5.1 allows a local attacker to obtain sensitive information via the PerformCommissioningS |
| CVE-2026-78807 | Awaiting Analysis | 未確認 | CWE-346 | An issue in wpa_supplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing validation in the dri |
| CVE-2026-78834 | Deferred | 未確認 | CWE-94 | A code execution vulnerability exists in CMSimple 5.22 in the CoAuthors plugin. An authenticated low-privileged user who can modify page content and provide controlled imported con |
| CVE-2026-78837 | Deferred | 未確認 | CWE-89 | A SQL injection vulnerability in the ap_form_{id} parameter in AppNitro MachForm v30 allows attackers to access sensitive database information via a crafted SQL statement. |
| CVE-2026-78838 | Deferred | 未確認 | CWE-79 | A reflected cross-site scripting (XSS) vulnerability in the grid_datasource.php component of AppNitro MachForm v30 allows attackers to execute arbitrary Javascript in the context o |
| CVE-2026-78839 | Deferred | 未確認 | CWE-434 | An arbitrary file upload vulnerability in AppNitro MachForm v30 allows attackers to execute arbitrary code via uploading a crafted .phar file. |
| CVE-2026-7884 | Awaiting Analysis | 未確認 | CWE-79 | IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 allows a non-privileged user to edit their given name and surname to include malicious JavaScript code |
| CVE-2026-78847 | Deferred | 未確認 | CWE-95 | An issue in gray-matter All versions (verified on 4.0.3) allows the JavaScript engine in lib/engines.js using eval() to parse front matter when language is js/javascript.This allow |
| CVE-2026-78849 | Deferred | 未確認 | CWE-79 | Cross Site Scripting vulnerability in Netgate pfSense Plus software versions <= 26.03 pfSense CE software versions <= 2.8.1 allows a remote attacker to execute arbitrary code via t |
| CVE-2026-78902 | Awaiting Analysis | 未確認 | CWE-79 | Cross Site Scripting vulnerability in Netgate pfSense 26.03.1-RELEASE allows an attacker to execute arbitrary code via the pfBlockerNG package |
| CVE-2026-78970 | Deferred | 未確認 | CWE-862 | JeecgBoot 3.9.2 and earlier contains an authorization bypass vulnerability in the SystemApiController component. An authenticated attacker with any valid JWT token can access multi |
| CVE-2026-78971 | Deferred | 未確認 | CWE-94 | In Halo <= 2.25.4, the plugin management feature allows users to install/update malicious plugins, which could let attackers execute any command with Halo process permissions. |
| CVE-2026-78997 | Deferred | 未確認 | CWE-79 | UC Browser for Android (package com.UCMobile.intl, version 13.7.8.1314) contains a Universal Cross-Site Scripting vulnerability that allows an attacker to execute arbitrary JavaScr |
| CVE-2026-79035 | Deferred | 未確認 | CWE-79 | A reflected cross-site scripting (XSS) vulnerability in the p.rfihub.com component of Zeta Marketing Platform (ZMP) v1.0 allows attackers to execute arbitrary Javascript in the con |
| CVE-2026-79079 | Deferred | 未確認 | CWE-78 | An issue in CrossWire Xiphos <= 4.3.2 allows a local attacker to execute arbitrary code via the src/main/url.cc and src/gtk/menu_popup.c components |
| CVE-2026-79153 | Deferred | 未確認 | CWE-269 | Seclore FileSecure Desktop Client before 3.25.1.0 contains improper access control vulnerability in the kernel-mode driver component that allows an authenticated local user to gain |
| CVE-2026-79294 | Deferred | 未確認 | CWE-79 | Cross Site Scripting vulnerability in Moonshot AI Kimi version as of 2026-07-18 allows a remote attacker to execute arbitrary code via the HTML artifact Preview rendering; public S |
| CVE-2026-79298 | Deferred | 未確認 | CWE-693 | An issue in Howyar Technologies Inc SysReturn Versions prior to 11.3.034 and fixed in v.11.3.0.34 allows a local attcker to execute arbitrary code via the BOOTia32.efi and a crafte |
| CVE-2026-79300 | Deferred | 未確認 | CWE-180 | SEP sesam before 5.2.0.24 mishandles User Authorization with MFA. If AD authentication is configured and MFA is enforced, an attacker can create a second OTP access capability. SEP |
| CVE-2026-79303 | Deferred | 未確認 | CWE-89 | kaiten from 57.192.20 to before 57.214.26 is vulnerable to SQL Injection. Dynamic SQL statements are generated without the required data validation and without using parameterized |
| CVE-2026-79304 | Deferred | 未確認 | CWE-22 | CyberPanel 1.9.1 contains a path traversal vulnerability in the readFileContents method of the /filemanager/controller endpoint. An authenticated remote attacker with ownership of |
| CVE-2026-79306 | Deferred | 未確認 | CWE-22 | CyberPanel v1.9.1 contains a path traversal vulnerability in the compress method exposed through the /filemanager/controller endpoint. An authenticated remote attacker with ownersh |
| CVE-2026-79310 | Awaiting Analysis | 未確認 | CWE-94 | webpy web.py 0.76 is vulnerable to server-side template injection (SSTI). The template engine can be tricked into executing attacker-controlled template code that built-in security |
| CVE-2026-79311 | Deferred | 未確認 | CWE-79 | webpy web.py 0.76 is vulnerable to Cross Site Scripting (XSS) via render_jinja.__init__(). |
| CVE-2026-79312 | Deferred | 未確認 | CWE-384 | webpy web.py 0.76 is vulnerable to Session Fixation. The component Session._load() reads session_id directly from the request cookie and loads that session from the store, and _sav |
| CVE-2026-79313 | Deferred | 未確認 | CWE-613 | webpy web.py 0.76 is vulnerable to Insufficient Session Expiration. The application's session management relies on periodic cleanup to expire sessions instead of checking the last- |
| CVE-2026-79314 | Deferred | 未確認 | CWE-284 | A horizontal privilege escalation vulnerability exists in x-ui 0.3.2. An authenticated user can modify the inbound proxy configurations of other users, including remark, port, prot |
| CVE-2026-79315 | Deferred | 未確認 | CWE-79 | A reflected cross-site scripting vulnerability exists in x-ui 0.3.2. The management interface reflects the raw request URI into a client-side template binding expression used for s |
| CVE-2026-79316 | Deferred | 未確認 | CWE-284 | An improper access control vulnerability exists in x-ui 0.3.2. Any authenticated panel user can modify the xray configuration template through the settings interface and trigger a |
| CVE-2026-79317 | Deferred | 未確認 | CWE-613 | A session invalidation flaw exists in x-ui 0.3.2. The full user object is stored in a client-side signed cookie, and authentication only checks that a user object can be retrieved |
| CVE-2026-79318 | Deferred | 未確認 | CWE-22 | web2py 3.2.2-stable (commit a7330a2bf21219fa77860b6665de927dd4f98e6d) is vulnerable to Directory Traversal in read_file()/write_file() (applications/admin/controllers/webservices.p |
| CVE-2026-79319 | Awaiting Analysis | 未確認 | CWE-200 | Stencil core 4.43.5 is vulnerable to Incorrect Access Control. |
| CVE-2026-79320 | Awaiting Analysis | 未確認 | CWE-79 | Stencil core 4.43.5 contains a DOM-based cross-site scripting (XSS) vulnerability in the component runtime. When a downstream application enables the experimental slot fixes option |
| CVE-2026-79322 | Analyzed | 未確認 | CWE-89 | SQL injection in the RelatedProduct block in Mageplaza Blog for Magento 2 (mageplaza/magento-2-blog-extension) through 4.3.2 allows remote unauthenticated attackers to execute arbi |
| CVE-2026-79323 | Analyzed | 未確認 | CWE-200 | Information disclosure in the blogComments GraphQL query in Magefan Blog GraphQL for Magento 2 (magefan/module-blog-graph-ql) through 2.2.1 allows remote unauthenticated attackers |
| CVE-2026-79324 | Analyzed | 未確認 | CWE-639, CWE-862 | Missing authorization in the Address Delete controller in Mageplaza GDPR for Magento 2 (mageplaza/module-gdpr) through 4.2.9 allows remote unauthenticated attackers to delete any c |
| CVE-2026-79348 | Deferred | 未確認 | CWE-639 | KitchenAsty through 0.3.0 contains a broken object level authorization (IDOR) vulnerability in the reservations API. The endpoint GET /api/reservations/:id in packages/server appli |
| CVE-2026-79362 | Deferred | 未確認 | CWE-94 | Certain Woltlab products are affected by RCE via Cache Poisoning. WCF >= 6.1.0 until < 6.1.23 and WCF >= 6.2.0 until < 6.2.6. An authenticated low-privileged user can inject PHP in |
| CVE-2026-79376 | Deferred | 未確認 | CWE-1284, CWE-20 | An issue in the l2cap_handle_data() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via se |
| CVE-2026-79377 | Deferred | 未確認 | CWE-122 | A heap overflow in the a2dp_decoder_sbc.cpp component of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (Do |
| CVE-2026-79378 | Deferred | 未確認 | CWE-400 | An issue in the btm_acl_handle() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sendi |
| CVE-2026-79379 | Deferred | 未確認 | CWE-617 | A buffer overflow in the SBC_DecodeFrames() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier and fixed in v.5.0 allows attackers to cause a Den |
| CVE-2026-79387 | Deferred | 未確認 | CWE-89 | SQL injection vulnerability in PbootCMS versions 3.2.0 through 3.2.5 allows an authenticated user to modify arbitrary user account fields (including passwords and roles) via crafte |
| CVE-2026-79389 | Deferred | 未確認 | CWE-347 | Trueview T18161 S 6.0.23.4 contains an improper verification in MQTT command processing. An attacker with network access can replay or modify captured MQTT messages, including secu |
| CVE-2026-79390 | Deferred | 未確認 | CWE-284 | Trueview TI8161 6.0.23.4 is vulnerable to information disclosure due to the transmission of MQTT communications in plaintext over TCP port 1883. An unauthenticated attacker with ac |
| CVE-2026-79391 | Deferred | 未確認 | CWE-306 | No authentication exists in the MQTT service of Trueview 6.0.23.4. The MQTT broker accepts client connections on TCP port 1883 without requiring authentication, allowing a remote a |
| CVE-2026-79393 | Deferred | 未確認 | CWE-122 | A heap-based buffer overflow vulnerability in the WS-Addressing Action transformation function in the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 |
| CVE-2026-79394 | Deferred | 未確認 | CWE-1188 | An insecure default configuration in the embedded Happytime RTSP server within the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier ships w |
| CVE-2026-79395 | Deferred | 未確認 | CWE-287 | An improper authentication vulnerability in the WS-Security (wsse:UsernameToken) verification routine within the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005-v2 |
| CVE-2026-79396 | Deferred | 未確認 | CWE-798 | Use of hardcoded default credentials in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier stores static account credentials in unencrypted plaintext within bin/ |
| CVE-2026-79403 | Deferred | 未確認 | CWE-280 | An issue in Kilo Code before v7.4.1 allows a local attacker to execute arbitrary code via the permission/allow-everything endpoint |
| CVE-2026-79409 | Deferred | 未確認 | CWE-639 | An issue in Webkul Bagisto 2.4.9 allows a remote attacker to obtain sensitive information via the add-to-cart API and the downloadable fulfilment components. |
| CVE-2026-79410 | Deferred | 未確認 | CWE-20 | Improper validation of the quantity parameter in the add-to-cart path of Webkul Bagisto v2.4.9 allows authenticated attackers to reduce their order total below the legitimate price |
| CVE-2026-79411 | Deferred | 未確認 | CWE-269 | Incorrect privilege assignment in the admin user-management component of Webkul Bagisto 2.4.9 allows an authenticated backend user holding only the settings.users.edit permission t |
| CVE-2026-79417 | Deferred | 未確認 | CWE-284, CWE-367 | Improper Access Control in ArgusMonitor.sys in Argotronic eGbR ArgusMonitor 7.4.02 and earlier allows local, low-privileged users to bypass device handle access restrictions via a |
| CVE-2026-79418 | Analyzed | 未確認 | CWE-79 | EMX Tecnologia Gestao X version <= 8.4 contains a Stored Cross-Site Scripting (XSS) vulnerability in the Help Chat functionality. Improper neutralization of user-controlled input d |
| CVE-2026-79419 | Analyzed | 未確認 | CWE-79 | A reflected cross-site scripting (XSS) vulnerability exists in EMX Tecnologia Gestao X Business Suite 8.4 and earlier. The vulnerability is caused by insufficient validation and sa |
| CVE-2026-79423 | Deferred | 未確認 | CWE-78 | An authenticated remote code execution (RCE) vulnerability in the admin_config.php component of seacms v13.6 allows attackers to execute arbitrary code via a crafted POST request. |
| CVE-2026-79425 | Deferred | 未確認 | CWE-918 | An authenticated Server-Side Request Forgery (SSRF) in the /adminapi/file/online_upload component of CRMEB v6.0.0 allows attackers to scan internal resources via a crafted POST req |
| CVE-2026-79426 | Deferred | 未確認 | CWE-73 | An arbitrary file deletion vulnerability in the /adminapi/file/video_data_save component of CRMEB v6.0.0 allows authenticated attackers to delete arbitrary files via crafted POST r |
| CVE-2026-79513 | Analyzed | 未確認 | CWE-369 | A divide-by-zero vulnerability in the gf_dash_get_timeline_duration function (src/media_tools/dash_client.c) of GPAC v26.07.0 allows attackers to cause a Denial of Service (DoS) vi |
| CVE-2026-79514 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read in the gf_dm_data_received function (downloader.c) of GPAC v26.07.0 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request. Fi |
| CVE-2026-79515 | Deferred | 未確認 | CWE-125 | An out-of-bounds read in the stbtt_GetGlyphShape component of nothings stb commit 31c1ad3 allows attackers to cause a Denial of Service (DoS) via sending a crafted TTF file. |
| CVE-2026-79516 | Deferred | 未確認 | CWE-125 | An out-of-bounds read in the stbsp_vsnprintf function (stb_sprintf.h) of nothings stb commit 31c1ad3 allows attackers to cause a Denial of Service (DoS) via sending a crafted input |
| CVE-2026-79522 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read in the gf_dm_get_chunk_data function (src/utils/downloader.c) of GPAC v26.07.0 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP |
| CVE-2026-79534 | Deferred | 未確認 | CWE-22, CWE-59 | mark3labs mcp-filesystem-server v0.11.1 is vulnerable to Directory Traversal due to an improper link resolution in validatePath (filesystemserver/handler/helper.go). When filepath. |
| CVE-2026-79535 | Deferred | 未確認 | CWE-78 | mbailey VoiceMode <= 8.10.1 is vulnerable to OS Command Injection. The update_config MCP tool (and the "voicemode config set" CLI) writes a caller-supplied value into ~/.voicemode/ |
| CVE-2026-79536 | Deferred | 未確認 | CWE-89 | bytebase dbhub v1.2.0 was discovered to contain a SQL injection vulnerability in the /utils/sql-parser.ts component. This vulnerability allows attackers to access sensitive databse |
| CVE-2026-79537 | Deferred | 未確認 | CWE-639 | metatool-ai MetaMCP through 2.4.22 contains an insecure direct object reference (IDOR) in the MCP transport session dispatch. The session store (getSession in session-lifetime-mana |
| CVE-2026-79538 | Deferred | 未確認 | CWE-94 | metatool-ai MetaMCP up to and including 2.4.22 is vulnerable to Code Execution in the internal MCP inspector proxy endpoint GET /mcp-proxy/server/stdio (createTransport, STDIO bran |
| CVE-2026-79551 | Deferred | 未確認 | CWE-321 | Tenda Technology Co., Ltd NVR_4H CH3 v2.1 V27.5.58.6 was discovered to contain a hardcoded cryptographic key. |
| CVE-2026-79569 | Deferred | 未確認 | CWE-89 | Movie_Recommend v1.0.0 was discovered to contain a SQL injection vulnerability in the sort parameter at /loadingmore. This vulnerability allows attackers to access sensitive databa |
| CVE-2026-79570 | Deferred | 未確認 | CWE-89 | mfish-nocode-pro v1.0.0 was discovered to contain a SQL injection vulnerability in the tableName parameter at /sys/dbConnect/data. This vulnerability allows attackers to access sen |
| CVE-2026-79571 | Deferred | 未確認 | CWE-284 | Incorrect access control in the SellerAuthorizeAspect component of springboot-project v1.0.0 allows unauthenticated attackers to access all seller management interfaces and list al |
| CVE-2026-79572 | Deferred | 未確認 | CWE-611 | An XXE (XML External Entity) vulnerability in the level-rule module of Distribution Management v1.0.0 allows attackers to read sensitive files, scan internal networks, or launch se |
| CVE-2026-79573 | Deferred | 未確認 | CWE-89 | L-ONE v1.0.0 was discovered to contain multiple SQL injection vulnerabilities in the /attachment/getBusinessUploadList component via the busid, id, and taskid parameters. This vuln |
| CVE-2026-79574 | Deferred | 未確認 | CWE-94 | An issue in the gateway server of mpush v0.8.1 allows attackers to execute arbitrary code via sending a crafted broadcast message. |
| CVE-2026-79575 | Deferred | 未確認 | CWE-330 | The JWT signing secret in yfexam-exam v2.0 is derived from the username and the current month instead of a random server-side key, making the secret key easily obtainable via a bru |
| CVE-2026-79576 | Deferred | 未確認 | CWE-287 | An issue in the Single-Sign On (SSO) component of Digital-Infrastructure v9.6.7 allows attackers to authenticate as any user, including the Admin, without a password. |
| CVE-2026-79577 | Deferred | 未確認 | CWE-284 | An issue in the /cas/login component of sso-master v1.0.0 allows attackers to authenticate into the application without a password via sending a crafted POST request. |
| CVE-2026-79588 | Deferred | 未確認 | CWE-319 | U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to Cleartext transmission of administration credentials over HTTP. |
| CVE-2026-79590 | Deferred | 未確認 | CWE-476 | A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser |
| CVE-2026-79591 | Deferred | 未確認 | CWE-122 | A heap-buffer-overflow and use-after-free vulnerability exists in the xls_getCSS() function of libxls 1.6.3 due to insufficient validation of a file-controlled font index. |
| CVE-2026-79592 | Deferred | 未確認 | CWE-125 | An out-of-bounds read vulnerability exists in the xls_dumpSummary() function of libxls 1.6.3 due to insufficient validation of file-controlled OLE summary offsets. |
| CVE-2026-79602 | Awaiting Analysis | 未確認 | CWE-119 | A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG() in Xen. |
| CVE-2026-79603 | Awaiting Analysis | 未確認 | CWE-664 | x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen (if needed) when the page is re-used. Since it's pos |
| CVE-2026-79616 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read while parsing untrusted SVG path strings in Qt Quick's Context2D.path / PathSvg.path. |
| CVE-2026-79617 | Deferred | 未確認 | CWE-732 | Incorrect Permission Assignment for Critical Resource vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus LightDM Greeter allows Exploiting Incorrectly |
| CVE-2026-79621 | Deferred | 未確認 | CWE-345 | The CatalogX WordPress plugin before 6.1.3 does not sanitise or escape content that an unauthenticated user can store before including it in the product enquiry notification email |
| CVE-2026-79625 | Deferred | 未確認 | CWE-362 | Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead to incorrect reads or writes, |
| CVE-2026-79630 | Deferred | 未確認 | CWE-639 | The WPFunnels WordPress plugin before 3.13.0 does not verify that the product requested through a checkout order bump is the product that bump's discount was configured for, allow |
| CVE-2026-79631 | Deferred | 未確認 | CWE-200 | The WPFunnels WordPress plugin before 3.13.0 does not restrict access to the log files it writes to a predictable location under the public uploads directory, allowing unauthentic |
| CVE-2026-79632 | Deferred | 未確認 | CWE-862 | The WPFunnels WordPress plugin before 3.13.0 does not perform any authorisation or nonce check in one of its opt-in submission handlers, and takes the notification recipients and |
| CVE-2026-79635 | Analyzed | 未確認 | CWE-918 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Server-Side Request Forgery (SSRF) vulnerability. An unaut |
| CVE-2026-79636 | Analyzed | 未確認 | CWE-297 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Validation of Certificate with Host Mismatch vul |
| CVE-2026-79637 | Analyzed | 未確認 | CWE-295 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthe |
| CVE-2026-79638 | Analyzed | 未確認 | CWE-693 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Alternate XSS Syntax vulnerabi |
| CVE-2026-79639 | Analyzed | 未確認 | CWE-295 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthe |
| CVE-2026-79640 | Analyzed | 未確認 | CWE-89 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an SQ |
| CVE-2026-79641 | Analyzed | 未確認 | CWE-78 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS |
| CVE-2026-79642 | Analyzed | 未確認 | CWE-295 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthe |
| CVE-2026-79643 | Analyzed | 未確認 | CWE-480 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Incorrect Operator vulnerability. An unauthenticat |
| CVE-2026-79644 | Analyzed | 未確認 | CWE-295 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthe |
| CVE-2026-79645 | Analyzed | 未確認 | CWE-306 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentication for Critical Function vulnerability |
| CVE-2026-79651 | Awaiting Analysis | 未確認 | CWE-400 | A flaw was found in the theme localization endpoints of the keycloak-services component, which is the core service responsible for authentication flows and theme management in Keyc |
| CVE-2026-79677 | Awaiting Analysis | 未確認 | CWE-1025, CWE-772 | Missing release of resource after effective lifetime, Comparison using wrong factors vulnerability in Apache Tomcat allows a denial of service as a result of lost time outs for asy |
| CVE-2026-79678 | Awaiting Analysis | 未確認 | CWE-95 | A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval() call before the corresponding LDAP access |
| CVE-2026-79679 | Deferred | 未確認 | CWE-1391 | Use of Weak Credentials vulnerability in B&R Industrial Automation GmbH mapp Audit used in mapp Services. This issue affects mapp Audit used in mapp Services: before 6.8.0. |
| CVE-2026-79680 | Awaiting Analysis | 未確認 | CWE-288 | Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module. An attacker using a specially modified VNC client that violates the RFB pr |
| CVE-2026-79682 | Analyzed | 未確認 | CWE-77 | Dell PowerStore contains a Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands |
| CVE-2026-79683 | Analyzed | 未確認 | CWE-693 | Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to write attacker- |
| CVE-2026-79684 | Analyzed | 未確認 | CWE-693 | Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to bypass access r |
| CVE-2026-79685 | Analyzed | 未確認 | CWE-88 | Dell PowerStore contains an Argument Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to gain unauthorized access |
| CVE-2026-79686 | Analyzed | 未確認 | CWE-693 | Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to bypass access r |
| CVE-2026-79687 | Analyzed | 未確認 | CWE-306 | Dell PowerStore SDNAS contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerabi |
| CVE-2026-79689 | Analyzed | 未確認 | CWE-78 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS |
| CVE-2026-79690 | Analyzed | 未確認 | CWE-295 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthe |
| CVE-2026-79691 | Analyzed | 未確認 | CWE-295 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthe |
| CVE-2026-79692 | Analyzed | 未確認 | CWE-73 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an External Control of File Name or Path vulnerability. An u |
| CVE-2026-79693 | Analyzed | 未確認 | CWE-272 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Least Privilege Violation vulnerability. A high privileged |
| CVE-2026-79694 | Analyzed | 未確認 | CWE-215 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information Into Debugging Code vu |
| CVE-2026-79695 | Analyzed | 未確認 | CWE-409 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Handling of Highly Compressed Data (Data Amplifi |
| CVE-2026-79696 | Awaiting Analysis | 未確認 | CWE-184 | A Code Injection vulnerability in adk web in Google Cloud Agent Development Kit (ADK) for Python versions 2.0.0 through 2.6.0 on Python (OSS), Cloud Run, and GKE environments where |
| CVE-2026-79697 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was determined in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB |
| CVE-2026-79698 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB |
| CVE-2026-79699 | Awaiting Analysis | 未確認 | CWE-59 | A flaw was found in the containers/storage library. A crafted tar archive containing a malicious whiteout header (e.g. victim/.wh.) can cause the extraction destination directory t |
| CVE-2026-79700 | Deferred | 未確認 | CWE-807 | Joomla Extension - joomshaper.com - Unauthenticated CAPTCHA Bypass via Request-Controlled CAPTCHA Configuration in SP Page Builder Pro 5.1.4 - 6.9.0 - The optin_form addon read the |
| CVE-2026-79701 | Deferred | 未確認 | CWE-807 | Joomla Extension - joomshaper.com - Unauthenticated CAPTCHA Bypass in Module Context in the Contact, Opt-in and Form Builder Addons in SP Page Builder Pro 3.2.6 - 5.6.1p2 and 6.0.0 |
| CVE-2026-79705 | Awaiting Analysis | 未確認 | CWE-22 | A flaw was found in the buildah/copier Go package. When used outside of Buildah by a non-root caller, a crafted tar archive containing malicious symlinks can escape the target extr |
| CVE-2026-79707 | Awaiting Analysis | 未確認 | CWE-22 | A Path Traversal vulnerability in the builder endpoint in Google Cloud Agent Development Kit (ADK) versions 1.9.0 through 1.21.0 on Python allows an unauthenticated remote attacker |
| CVE-2026-79708 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab EE affecting all versions from 19.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions could have all |
| CVE-2026-79713 | Deferred | 未確認 | CWE-444 | The Breeze Cache WordPress plugin before 2.5.15 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, all |
| CVE-2026-79721 | Deferred | 未確認 | CWE-829 | Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's |
| CVE-2026-79723 | Analyzed | 未確認 | CWE-918 | IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of user-controlled API endpoints. |
| CVE-2026-79724 | Analyzed | 未確認 | CWE-78 | IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command. |
| CVE-2026-79725 | Analyzed | 未確認 | CWE-284 | IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to read arbitrary files due to improper access control. |
| CVE-2026-79727 | Analyzed | 未確認 | CWE-1258 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Exposure of Sensitive System Information Due to Uncleared |
| CVE-2026-79728 | Analyzed | 未確認 | CWE-23 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Traversal vulnerability. An unauthenticated |
| CVE-2026-79729 | Analyzed | 未確認 | CWE-295 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthe |
| CVE-2026-79730 | Analyzed | 未確認 | CWE-367 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerab |
| CVE-2026-79731 | Analyzed | 未確認 | CWE-798 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Credentials vulnerability. An unauthent |
| CVE-2026-79732 | Analyzed | 未確認 | CWE-295 | Dell Secure Connect Gateway (SCG) 5.0 Appliance, versions prior to 5.36.00.xx, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote ac |
| CVE-2026-79734 | Analyzed | 未確認 | CWE-295 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthe |
| CVE-2026-79735 | Analyzed | 未確認 | CWE-321 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability. An una |
| CVE-2026-79736 | Analyzed | 未確認 | CWE-295 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthe |
| CVE-2026-79738 | Analyzed | 未確認 | CWE-798 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Credentials vulnerability. An unauthent |
| CVE-2026-79740 | Analyzed | 未確認 | CWE-798 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Credentials vulnerability. An unauthent |
| CVE-2026-79741 | Analyzed | 未確認 | CWE-77 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in a Com |
| CVE-2026-79742 | Analyzed | 未確認 | CWE-94 | IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to an incomplete environment variable blocklist. |
| CVE-2026-79752 | Awaiting Analysis | 未確認 | CWE-89 | CakePHP is a rapid development framework for PHP. Prior to 4.5.12, 4.6.5, 5.1.9, 5.2.14, and 5.3.7, FunctionsBuilder::cast, FunctionsBuilder::extract, FunctionsBuilder::datePart, a |
| CVE-2026-79754 | Deferred | 未確認 | CWE-77 | Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. From version 1.6.19 to before version 1.17.2, Nuclio's Dashboard build pipeline does not sanitize the s |
| CVE-2026-79755 | Deferred | 未確認 | CWE-78 | Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.17.4, on the Nuclio local Docker platform, the function namespace is interpolated—un |
| CVE-2026-79756 | Deferred | 未確認 | CWE-78 | Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.17.4, the fix for unauthenticated OS command injection in the nuclio dashboard on th |
| CVE-2026-79758 | Deferred | 未確認 | CWE-284, CWE-639, CWE-862 | Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.8.0 until 2.5.1, authenticated Termix users can access the serv |
| CVE-2026-79759 | Deferred | 未確認 | CWE-639 | Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, the POST /credentials/:id/deploy-to-host endpo |
| CVE-2026-79760 | Deferred | 未確認 | CWE-918 | Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.5.0 until 2.5.1, Termix allows authenticated users to configure |
| CVE-2026-79761 | Deferred | 未確認 | CWE-78 | Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, the Termix SSH key deployment flow derives a g |
| CVE-2026-79762 | Deferred | 未確認 | CWE-321 | Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, Termix derives the keys that wrap OIDC and Web |
| CVE-2026-79763 | Deferred | 未確認 | CWE-308 | Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.4.0 until 2.5.1, the POST /users/totp/disable and POST /users/t |
| CVE-2026-79764 | Deferred | 未確認 | CWE-918 | Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.5.0 until 2.5.1, the /homepage/proxy endpoint accepts an authen |
| CVE-2026-79766 | Deferred | 未確認 | CWE-78 | Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.4.1 until 2.5.1, an authenticated Termix administrator can stor |
| CVE-2026-79767 | Awaiting Analysis | 未確認 | CWE-863 | Gardener implements the automated management and operation of Kubernetes clusters as a service. Prior to 1.142.6, 1.143.3, 1.144.2, and 1.145.0, the customverbauthorizer admission |
| CVE-2026-79904 | Analyzed | 未確認 | CWE-22 | Photoshop Mobile is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature bypass. A lo |
| CVE-2026-79905 | Analyzed | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2026-79906 | Analyzed | 未確認 | CWE-787 | Substance3D - Modeler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this iss |
| CVE-2026-79907 | Analyzed | 未確認 | CWE-415 | Acrobat Reader is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user |
| CVE-2026-79908 | Analyzed | 未確認 | CWE-787 | Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requ |
| CVE-2026-79909 | Analyzed | 未確認 | CWE-416 | Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires u |
| CVE-2026-79910 | Analyzed | 未確認 | CWE-125 | Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensi |
| CVE-2026-79913 | Deferred | 未確認 | CWE-697, CWE-918 | Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, the ValidateExternalURL server-side request forgery guard in pkg/request/ssrf.go passes resolved add |
| CVE-2026-79916 | Deferred | 未確認 | CWE-78 | MaxKB is an open-source AI assistant for enterprise. Prior to 2.10.5-lts, authenticated workspace members can inject control characters into AWS Bedrock access_key_id and secret_ac |
| CVE-2026-79917 | Deferred | 未確認 | CWE-285, CWE-639 | MaxKB is an open-source AI assistant for enterprise. In 2.7.0 through 2.10.4-lts, POST /chat/api/{application_id}/chat/{chat_id}/share_chat verifies that a conversation exists but |
| CVE-2026-79918 | Deferred | 未確認 | CWE-693 | MaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.6-lts, the ToolExecutor LD_PRELOAD sandbox hooks execve, execvpe, and execveat to prevent subprocess crea |
| CVE-2026-79919 | Deferred | 未確認 | CWE-693 | MaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.6-lts, function-library code running under the LD_PRELOAD sandbox can invoke ctypes.CDLL from an importli |
| CVE-2026-79920 | Deferred | 未確認 | CWE-862 | Ajenti is a Linux & BSD modular server admin panel. Prior to version 2.2.16, any authenticated user can call /api/core/tasks/start to enqueue InstallPlugin, UnInstallPlugin, or Upg |
| CVE-2026-79941 | Analyzed | 未確認 | CWE-77 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in a Com |
| CVE-2026-79942 | Analyzed | 未確認 | CWE-250 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Execution with Unnecessary Privileges vulnerability. A hi |
| CVE-2026-79943 | Analyzed | 未確認 | CWE-297 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Validation of Certificate with Host Mismatch vul |
| CVE-2026-79944 | Analyzed | 未確認 | CWE-272 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Least Privilege Violation vulnerability. A high privileged |
| CVE-2026-79945 | Analyzed | 未確認 | CWE-77 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS |
| CVE-2026-79946 | Analyzed | 未確認 | CWE-87 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Alternate XSS Syntax vulnerabi |
| CVE-2026-79947 | Analyzed | 未確認 | CWE-89 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS |
| CVE-2026-79950 | Analyzed | 未確認 | CWE-798 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Credentials vulnerability. An unauthent |
| CVE-2026-79952 | Analyzed | 未確認 | CWE-116 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Encoding or Escaping of Output vulnerability. An |
| CVE-2026-79954 | Awaiting Analysis | 未確認 | CWE-306 | NASA CryptoLib 1.5.0 contains an authentication downgrade vulnerability in the Telecommand (TC) receive path. The receiver selects the Security Association used for SDLS processing |
| CVE-2026-79959 | Deferred | 未確認 | CWE-798 | The Botslab G980H dash camera firmware contains a hard-coded root account password that cannot be changed by the user. An attacker who obtains the firmware or has physical access t |
| CVE-2026-79961 | Analyzed | 未確認 | CWE-306 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentication for Critical Function vulnerability |
| CVE-2026-79962 | Analyzed | 未確認 | CWE-567 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Concurrent Execution using Shared Resource with Improper S |
| CVE-2026-79963 | Analyzed | 未確認 | CWE-494 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Download of Code Without Integrity Check vulnerability. An |
| CVE-2026-79964 | Analyzed | 未確認 | CWE-116 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Escape, Meta, or Control Seque |
| CVE-2026-79965 | Analyzed | 未確認 | CWE-625 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an External Control of Critical State Data vulnerability. An |
| CVE-2026-79966 | Analyzed | 未確認 | CWE-532 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information into Log File vulnerab |
| CVE-2026-79967 | Analyzed | 未確認 | CWE-295 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthe |
| CVE-2026-79968 | Analyzed | 未確認 | CWE-367 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerab |
| CVE-2026-79969 | Analyzed | 未確認 | CWE-567 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Concurrent Execution using Shared Resource with Improper S |
| CVE-2026-79970 | Analyzed | 未確認 | CWE-347 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Verification of Cryptographic Signature vulnerab |
| CVE-2026-79971 | Analyzed | 未確認 | CWE-1236 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Sanitization of Custom Special Characters vulner |
| CVE-2026-79972 | Analyzed | 未確認 | CWE-89 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an SQ |
| CVE-2026-79973 | Analyzed | 未確認 | CWE-567 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Unsynchronized Access to Shared Data in a Multithreaded C |
| CVE-2026-79974 | Analyzed | 未確認 | CWE-287 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Authentication vulnerability. A low privileged a |
| CVE-2026-79975 | Analyzed | 未確認 | CWE-295 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. A low priv |
| CVE-2026-79987 | Deferred | 未確認 | CWE-470 | A remote, authenticated, non-admin Craft CMS Control Panel user with only the accessCp permission can execute operating system commands as the PHP web worker. |
| CVE-2026-79989 | Deferred | 未確認 | CWE-285 | The vulnerability allows any authenticated user to change their own password without providing the current password or having an active elevated session. It also allows the attacke |
| CVE-2026-79990 | Deferred | 未確認 | CWE-639 | Craft CMS GraphQL entry mutation resolvers (saveEntry, deleteEntry) read siteIddirectly from$argumentswithout passing throughArgumentManagerprepareArguments(), which is the functio |
| CVE-2026-79991 | Deferred | 未確認 | CWE-89 | Craft CMS GraphQL entry mutation resolvers (saveEntry, deleteEntry) read siteIddirectly from$argumentswithout passing throughArgumentManagerprepareArguments(), which is the functio |
| CVE-2026-79993 | Analyzed | 未確認 | CWE-862 | The `deleteContainer` opcode (0x14/20) is processed without verifying the caller's ACL permissions, allowing any authenticated client to delete specific znodes in the data tree reg |
| CVE-2026-79994 | Awaiting Analysis | 未確認 | CWE-367 | The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname. A malicious |
| CVE-2026-80047 | Awaiting Analysis | 未確認 | CWE-273, CWE-367, CWE-494 | A vulnerability in Hugging Face Transformers (versions 4.57.0 to 5.16.1) allows remote Python files to be written to local disk without user consent when using GenerativePreTrained |
| CVE-2026-80054 | Analyzed | 未確認 | CWE-732 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Incorrect Permission Assignment for Critical Resource vul |
| CVE-2026-80055 | Analyzed | 未確認 | CWE-90 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an LD |
| CVE-2026-80056 | Analyzed | 未確認 | CWE-532 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information into Log File vulnerab |
| CVE-2026-80057 | Analyzed | 未確認 | CWE-321 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability. A low |
| CVE-2026-80058 | Analyzed | 未確認 | CWE-312 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Cleartext Storage of Sensitive Information vulnerability. |
| CVE-2026-80071 | Deferred | 未確認 | CWE-269 | The User Registration & Membership WordPress plugin before 5.2.8 does not properly restrict who may author a membership plan or validate the plan a user attaches to their own acco |
| CVE-2026-80072 | Deferred | 未確認 | CWE-601 | The User Registration & Membership WordPress plugin before 5.2.8 does not validate the destination of a post-login redirect before redirecting, allowing unauthenticated attackers |
| CVE-2026-80073 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-80074 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-80075 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally. |
| CVE-2026-80076 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-80077 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-80078 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-80079 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-80080 | Analyzed | 未確認 | CWE-415 | Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-80081 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. |
| CVE-2026-80082 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-80083 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally. |
| CVE-2026-80084 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-80085 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-80086 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-80087 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-80088 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-80089 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-80090 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-80091 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-80093 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-80096 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-80097 | Analyzed | 未確認 | CWE-287 | Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally. |
| CVE-2026-80098 | Analyzed | 未確認 | CWE-347 | Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-80099 | Deferred | 未確認 | CWE-287 | Several Newfold plugins are vulnerable to Authentication Bypass. The vulnerability exists because the plugins bundle the wp-module-data module. In the module, the `authenticate()` |
| CVE-2026-80110 | Awaiting Analysis | 未確認 | CWE-863 | A flaw was found in pki-core. The v2 REST ACL filter selects a tie-breaking permission for colliding literal and wildcard ACL keys using lexicographic string comparison rather than |
| CVE-2026-80112 | Awaiting Analysis | 未確認 | CWE-732 | PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an improper access control vulnerability in the D |
| CVE-2026-80113 | Awaiting Analysis | 未確認 | CWE-782, CWE-787 | PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privilege escalation vulnerability in DirectIo6 |
| CVE-2026-80114 | Awaiting Analysis | 未確認 | CWE-321 | PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a hard-coded credentials vulnerability in DirectI |
| CVE-2026-80115 | Awaiting Analysis | 未確認 | CWE-782 | PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privilege escalation and denial-of-service vuln |
| CVE-2026-80116 | Awaiting Analysis | 未確認 | CWE-782 | PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privilege escalation vulnerability in DirectIo6 |
| CVE-2026-80117 | Awaiting Analysis | 未確認 | CWE-782 | PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privilege escalation vulnerability in DirectIo6 |
| CVE-2026-80118 | Awaiting Analysis | 未確認 | CWE-476, CWE-497, CWE-73 | PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an unauthenticated physical memory disclosure in |
| CVE-2026-80119 | Awaiting Analysis | 未確認 | CWE-497, CWE-73 | PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an information disclosure vulnerability in Direct |
| CVE-2026-80122 | Analyzed | 未確認 | CWE-295 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthe |
| CVE-2026-80123 | Analyzed | 未確認 | CWE-918 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Server-Side Request Forgery (SSRF) vulnerability. An unaut |
| CVE-2026-80124 | Analyzed | 未確認 | CWE-532 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information into Log File vulnerab |
| CVE-2026-80125 | Analyzed | 未確認 | CWE-295 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthe |
| CVE-2026-80126 | Analyzed | 未確認 | CWE-667 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Locking vulnerability. A low privileged attacker |
| CVE-2026-80127 | Analyzed | 未確認 | CWE-78 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS |
| CVE-2026-80128 | Analyzed | 未確認 | CWE-287 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Authentication vulnerability. A low privileged a |
| CVE-2026-80129 | Analyzed | 未確認 | CWE-22 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Limitation of a Pathname to a Restricted Directo |
| CVE-2026-80130 | Analyzed | 未確認 | CWE-23 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Traversal vulnerability. A low privileged at |
| CVE-2026-80131 | Analyzed | 未確認 | CWE-22 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Limitation of a Pathname to a Restricted Directo |
| CVE-2026-80132 | Analyzed | 未確認 | CWE-306 | ell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentication for Critical Function vulnerability. |
| CVE-2026-80133 | Analyzed | 未確認 | CWE-23 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Traversal vulnerability. An unauthenticated |
| CVE-2026-80134 | Analyzed | 未確認 | CWE-798 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Credentials vulnerability. An unauthent |
| CVE-2026-80135 | Analyzed | 未確認 | CWE-703 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Check or Handling of Exceptional Conditions vuln |
| CVE-2026-80143 | Awaiting Analysis | 未確認 | CWE-78 | Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulner |
| CVE-2026-80144 | Awaiting Analysis | 未確認 | CWE-78 | Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulner |
| CVE-2026-80145 | Awaiting Analysis | 未確認 | CWE-78 | Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulner |
| CVE-2026-80146 | Awaiting Analysis | 未確認 | CWE-121 | Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a stack-based buffer overf |
| CVE-2026-80147 | Awaiting Analysis | 未確認 | CWE-121 | Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a stack-based buffer overf |
| CVE-2026-80148 | Awaiting Analysis | 未確認 | CWE-918 | Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882 contain a server-side re |
| CVE-2026-80149 | Awaiting Analysis | 未確認 | CWE-918 | Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882 contain a server-side re |
| CVE-2026-80150 | Awaiting Analysis | 未確認 | CWE-918 | Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882 contain a server-side re |
| CVE-2026-80151 | Awaiting Analysis | 未確認 | CWE-78 | Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain |
| CVE-2026-80152 | Awaiting Analysis | 未確認 | CWE-78 | Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain |
| CVE-2026-80154 | Awaiting Analysis | 未確認 | CWE-330 | All firmware versions of Lantronix SLC8000, SLC9000, EMG8500, EMG7500, SLB882, SLCx-03, and SLCx-02 contain an authentication bypass vulnerability in the web management portal that |
| CVE-2026-80155 | Awaiting Analysis | 未確認 | CWE-22 | Lantronix SLC8000 before firmware v9.7.0.5, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain |
| CVE-2026-80156 | Awaiting Analysis | 未確認 | CWE-22 | Lantronix SLC8000 before firmware v9.7.0.5, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain |
| CVE-2026-80159 | Analyzed | 未確認 | CWE-426 | Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in privilege escalation. An attacker with high privileges could leverage this vulnerability t |
| CVE-2026-80160 | Analyzed | 未確認 | CWE-125 | Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensi |
| CVE-2026-80161 | Analyzed | 未確認 | CWE-843 | Acrobat Reader is affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could result in arbitrary code execution in the context of the cur |
| CVE-2026-80162 | Analyzed | 未確認 | CWE-416 | Acrobat Reader is affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive |
| CVE-2026-80164 | Analyzed | 未確認 | CWE-295 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthe |
| CVE-2026-80166 | Analyzed | 未確認 | CWE-269 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Privilege Management vulnerability. An unauthent |
| CVE-2026-80167 | Analyzed | 未確認 | CWE-321 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability. A low |
| CVE-2026-80169 | Analyzed | 未確認 | CWE-532 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information into Log File vulnerab |
| CVE-2026-80170 | Analyzed | 未確認 | CWE-798 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Credentials vulnerability. An unauthent |
| CVE-2026-80171 | Analyzed | 未確認 | CWE-331 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Entropy in PRNG vulnerability. A low privile |
| CVE-2026-80172 | Analyzed | 未確認 | CWE-345 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Verification of Data Authenticity vulnerabil |
| CVE-2026-80174 | Analyzed | 未確認 | CWE-613 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Session Expiration vulnerability. A low priv |
| CVE-2026-80175 | Analyzed | 未確認 | CWE-538 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information into Externally-Access |
| CVE-2026-80176 | Analyzed | 未確認 | CWE-257 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Plaintext Storage of a Password vulnerability. A low privi |
| CVE-2026-80177 | Analyzed | 未確認 | CWE-89 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an SQ |
| CVE-2026-80178 | Analyzed | 未確認 | CWE-269 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Privilege Management vulnerability. A low privil |
| CVE-2026-80180 | Deferred | 未確認 | CWE-79 | Stored XSS via markdown HTML processing in Apache Allura. This issue affects Apache Allura: from through 1.20.0. Users are recommended to upgrade to version 1.21.0, which fix |
| CVE-2026-80181 | Deferred | 未確認 | CWE-918 | Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF). This issue affects Apache Allura: through 1.20.0. Users are recommended to upgrade to version |
| CVE-2026-80190 | Deferred | 未確認 | CWE-79 | Apache Allura: stored XSS via SVN code repositories. Git repositories are not known to be affected. The vulnerability is likely mitigated via default CSP headers. This issue a |
| CVE-2026-80217 | Deferred | 未確認 | CWE-912 | Hidden functionality issue exists in FF-RFI079I4 and FF-RFI078I4, which may allow a user who can log in via SSH and access the enable mode on the product to execute arbitrary OS co |
| CVE-2026-80218 | Deferred | 未確認 | CWE-287 | Improper Authentication vulnerability in team-alembic AshAuthentication allows an attacker holding a sign-in token for one authenticated resource to be signed in as a user of a dif |
| CVE-2026-80219 | Rejected | 未確認 | Rejected reason: Red Hat Product Security has come to the conclusion that this CVE is not needed. | |
| CVE-2026-80225 | Analyzed | 未確認 | CWE-770 | In NLnetLabs Unbound up to and including 1.26.0, a degradation of service vulnerability is present in the TCP/DoT reading procedure where there is no limit on consecutive reads. A |
| CVE-2026-80229 | Modified | 未確認 | CWE-416 | When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches a |
| CVE-2026-80230 | Modified | 未確認 | CWE-295 | When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that disable standard peer verification (`CURLOPT_SSL_VERIFYPEER = 0` and `CURLOPT_SSL_VERIFYHOST = 0`), libcurl fail |
| CVE-2026-80231 | Modified | 未確認 | CWE-488 | A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a different Native CA Store setting (`CURLSSLOPT_NATIVE_CA`) than w |
| CVE-2026-80238 | Analyzed | 未確認 | CWE-250 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Execution with Unnecessary Privileges vulnerability. An u |
| CVE-2026-80239 | Analyzed | 未確認 | CWE-1258 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Exposure of Sensitive System Information Due to Uncleared |
| CVE-2026-80253 | Deferred | 未確認 | CWE-1263 | An improper physical access control issue exists in ShizenBox2 (dev-conf). If exploited, an attacker with physical access to the product may execute bootloader commands without aut |
| CVE-2026-80254 | Deferred | 未確認 | CWE-639 | Authorization bypass through user-controlled key issue exists in ShizenBox2 (edge-app). If exploited, an attacker who can log in to the product may change the other user's password |
| CVE-2026-80255 | Modified | 未確認 | CWE-201 | A `Set-Cookie:` header using tab (horizontal tab, ASCII code 9) instead of space (ascii code 32) immediately before the `Secure` attribute causes curl to store the cookie without i |
| CVE-2026-80274 | Awaiting Analysis | 未確認 | CWE-617 | If a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authoritative server replies with a valid wildcard answer and signed NSEC3 proof, followed by an un |
| CVE-2026-8030 | Analyzed | 未確認 | CWE-862 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have a |
| CVE-2026-80333 | Deferred | 未確認 | CWE-200 | The Solace Extra WordPress plugin before 1.7.2 does not perform any authorization or post-status checks on its front-end preview routes, allowing unauthenticated visitors to read t |
| CVE-2026-80338 | Deferred | 未確認 | CWE-862 | The CMB2 WordPress plugin before 2.13.0 does not perform any capability check on one of its AJAX actions, allowing users with a role as low as Subscriber to create arbitrary WordPr |
| CVE-2026-80339 | Deferred | 未確認 | CWE-200 | The Payment Plugins for Stripe WooCommerce WordPress plugin before 4.0.12 does not validate the order key before adding order data to the JavaScript configuration it outputs on the |
| CVE-2026-80340 | Deferred | 未確認 | CWE-200 | The Payment Plugins for PayPal WooCommerce WordPress plugin before 2.0.26 does not validate the order key before adding order data to the JavaScript configuration it outputs on the |
| CVE-2026-80341 | Deferred | 未確認 | CWE-863 | The Payment Plugins for PayPal WooCommerce WordPress plugin before 2.0.26 does not verify that a stored payment method belongs to the user attaching it, allowing any authenticated |
| CVE-2026-80342 | Deferred | 未確認 | CWE-639 | The Payment Plugins for PayPal WooCommerce WordPress plugin before 2.0.27 does not verify that a PayPal order supplied in a payment request belongs to the WooCommerce order being p |
| CVE-2026-80351 | Analyzed | 未確認 | CWE-95 | Improper neutralization of directives in dynamically evaluated code ('eval injection') vulnerability in Apache Camel K. An improper neutralization of directives in dynamically e |
| CVE-2026-80352 | Analyzed | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Camel K. A YAML injection vulnerability in custom resource configuration allows an authorized C |
| CVE-2026-80354 | Analyzed | 未確認 | CWE-639 | Authorization bypass through User-Controlled key vulnerability in Apache Camel K. An authorization vulnerability in custom resource resolution allows a tenant to reference secre |
| CVE-2026-80355 | Analyzed | 未確認 | CWE-352 | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Cross-Site Request Forgery (CSRF) vulnerability. An unauthenticated attacker with remote access could p |
| CVE-2026-80356 | Analyzed | 未確認 | CWE-200 | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. A low privileged attacker wi |
| CVE-2026-80357 | Awaiting Analysis | 未確認 | CWE-1191 | Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on 17G |
| CVE-2026-80358 | Awaiting Analysis | 未確認 | CWE-1191 | Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on 17G |
| CVE-2026-80359 | Awaiting Analysis | 未確認 | CWE-1191 | Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on 17G |
| CVE-2026-80378 | Analyzed | 未確認 | CWE-285 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to improper authorization. |
| CVE-2026-80379 | Analyzed | 未確認 | CWE-78 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an |
| CVE-2026-80380 | Analyzed | 未確認 | CWE-352 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote attacker to perform unauthorized actions due to cross-site request forgery. |
| CVE-2026-80412 | Analyzed | 未確認 | CWE-78 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper escaping of connector property values during OSH s |
| CVE-2026-80423 | Analyzed | 未確認 | CWE-200 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to the exposure of namespace-wide secrets via accessible |
| CVE-2026-80424 | Analyzed | 未確認 | CWE-22 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to create arbitrary files due to path traversal during archive extraction. |
| CVE-2026-80425 | Analyzed | 未確認 | CWE-78 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an |
| CVE-2026-80430 | Awaiting Analysis | 未確認 | CWE-59 | Improper Link Resolution Before File Access in the drag source staging path of the drag and drop protocol in kitty from 0.47.0 before 0.49.0 allows a program writing to the termina |
| CVE-2026-80431 | Awaiting Analysis | 未確認 | CWE-787 | Out-of-bounds Write in the natural width branch of the text sizing protocol in kitty from 0.40.0 before 0.49.0 allows a program writing to the terminal to write past the end of a f |
| CVE-2026-80432 | Awaiting Analysis | 未確認 | CWE-862 | Missing Authorization in the drop handling path of the drag and drop protocol in kitty from 0.47.0 before 0.49.0 allows a program writing to the terminal to obtain the contents of |
| CVE-2026-80434 | Analyzed | 未確認 | CWE-639 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to manipulate runtime caches and cause a denial of service due to an insecure direct object |
| CVE-2026-80436 | Analyzed | 未確認 | CWE-285 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service by deleting arbitrary RabbitMQ queues or exchanges due to impro |
| CVE-2026-80437 | Deferred | 未確認 | CWE-74 | The Ninja Forms WordPress plugin from 3.14.10 before 3.15.2 does not prevent shortcodes in request-derived values from being executed when it substitutes them into content it later |
| CVE-2026-80438 | Deferred | 未確認 | CWE-284 | The Ninja Forms WordPress plugin before 3.15.2 does not restrict its REST abilities to administrators, accepting a Ninja Forms WordPress plugin before 3.15.2-specific capability |
| CVE-2026-80439 | Deferred | 未確認 | CWE-74 | The Redirection for Contact Form 7 WordPress plugin from 2.2.7 before 3.2.11 does not prevent shortcodes in submitted form values from being executed when it substitutes those valu |
| CVE-2026-8044 | Awaiting Analysis | 未確認 | CWE-88 | CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability exists that could cause remote code execution by an attacker with a privile |
| CVE-2026-80440 | Deferred | 未確認 | CWE-74 | The Hustle WordPress plugin before 7.8.14.2 does not prevent shortcodes in submitted form values from being executed when it substitutes those values into the message it returns af |
| CVE-2026-80441 | Analyzed | 未確認 | CWE-89 | IBM Guardium Data Protection 12.2 is vulnerable to an unauthenticated second-order SQL injection vulnerability in the generateInsertQuery functionality of change-tracker-data.sql. |
| CVE-2026-80442 | Analyzed | 未確認 | CWE-78 | IBM Guardium Data Protection 12.2 is vulnerable to an authenticated OS command injection vulnerability in the exportCertificate functionality. Successful exploitation could allow a |
| CVE-2026-80444 | Deferred | 未確認 | CWE-601 | URL redirection to untrusted site ('open redirect') vulnerability in Abis Technology Ltd. Co. AVESİS allows Input Data Manipulation. This issue affects AVESİS: from 202608201331 b |
| CVE-2026-80462 | Deferred | 未確認 | CWE-306 | A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to protected Chef Automate functionality un |
| CVE-2026-80465 | Deferred | 未確認 | CWE-347 | A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.3), Mendix SAML (Mendix 11 compatible) (All versions < V4.2.3), Mendix SAML (Mendix 9 |
| CVE-2026-80467 | Deferred | 未確認 | CWE-269 | The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.7 does not restrict the role submitted through its front-end user forms to the roles the form actually offers, an |
| CVE-2026-80469 | Deferred | 未確認 | CWE-347 | An attacker may achieve arbitrary code execution on a target system by uploading a malicious device driver package, bypassing driver verification mechanisms, and triggering the exe |
| CVE-2026-80489 | Awaiting Analysis | 未確認 | CWE-835 | Converting crafted EUC_JISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the converter |
| CVE-2026-80490 | Deferred | 未確認 | CWE-125 | Algorithm::AhoCorasick::XS versions through 0.04 for Perl read the haystack string length before the scalar is stringified. The matches, first_match and match_details methods use |
| CVE-2026-80491 | Deferred | 未確認 | CWE-89 | The SAMO Forms WordPress plugin through 1.0.0 does not properly sanitise and escape user input before using it in SQL queries in several unauthenticated actions, allowing unauthent |
| CVE-2026-80494 | Deferred | 未確認 | CWE-552 | The Yogeta WP Cloud WordPress plugin through 1.0 does not validate a user-supplied file path before passing it to a file-read function on a public endpoint that lacks any authoriza |
| CVE-2026-80513 | Deferred | 未確認 | CWE-502 | The wpForo Forum WordPress plugin before 3.1.6 does not restrict which classes may be instantiated when it deserializes a user-supplied profile field value, allowing authenticated |
| CVE-2026-80514 | Deferred | 未確認 | CWE-348 | The wpForo Forum WordPress plugin from 3.0.0 before 3.1.6 does not verify the source of client-supplied IP address headers before using them to key its per-visitor rate limit on pa |
| CVE-2026-80515 | Deferred | 未確認 | CWE-647, CWE-863 | In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 the management-authorization gate that protects every /…/mgmt/… REST endpoint decides whether to apply its check by calling reques |
| CVE-2026-8065 | Awaiting Analysis | 未確認 | CWE-306 | An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to upload arbitrary firmware |
| CVE-2026-8066 | Awaiting Analysis | 未確認 | CWE-23 | A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to write or overwrite arbitrar |
| CVE-2026-8067 | Awaiting Analysis | 未確認 | CWE-862 | An improper authorization vulnerability in the end-of-life versions of RTU500’s web application allows an authenticated user to trigger the RTU500 to reboot through the reset endpo |
| CVE-2026-80726 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-80727 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: x86/mce: Set up the polling timer before CMCI discovery I hit the following on one of my machines: mce: CPU | |
| CVE-2026-80728 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amdgpu: fix aperture mapping leak" devres teardown is LIFO. The aperture devres node was registere | |
| CVE-2026-80729 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: initialise workingset state before folio split xas_try_split() adds __GFP_ACCOUNT for page-cac | |
| CVE-2026-80730 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix crash passing ERR_PTR to kthread_stop() In test_ringbuffer()'s out_free cleanup loop, the che | |
| CVE-2026-80731 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header dev_validate_header() reads dev->hard_header_len | |
| CVE-2026-80732 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ata: pata_sl82c105: fix bridge revision use-after-free pci_get_slot() returns a referenced PCI device. Commit | |
| CVE-2026-80733 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: remove WARN_ON_ONCE() from sk_mc_loop() sk_mc_loop() can be called for sockets that are neither AF_INET n | |
| CVE-2026-80734 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: initialize inode mapping flags for cached inodes [BUG] When running generic/795 with 8K block size, 4K | |
| CVE-2026-80735 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ovpn: ensure socket is owned by ovpn before deref sk_user_data Some subsystems, like BPF SOCKMAP, set sk_user_ | |
| CVE-2026-80736 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix bandwidth group reservation indexing Valid bandwidth group IDs range from 1 through MAX_GROUP | |
| CVE-2026-80737 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: serial: amba-pl011: synchronize DMA teardown dmaengine_terminate_all() does not wait for a running callback, s | |
| CVE-2026-80738 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie bpf_tcp_gen_syncookie and bpf_tcp_check_syncooki | |
| CVE-2026-80739 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock In case __mlx5e_add_fdb_flow() fails in lowe | |
| CVE-2026-80740 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/log: Fix infinite loop when scale is too large for display When scale is large enough that scaled_font exc | |
| CVE-2026-80741 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/log: Fix out-of-bounds read on empty message length drm_log_draw_kmsg_record() accesses s[len - 1] to stri | |
| CVE-2026-80742 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: af_packet: Don't send zero-byte data in tpacket_snd(). syzbot reported a WARNING in __dev_queue_xmit() trigger | |
| CVE-2026-80743 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers The irq handlers take a struct device pointer a | |
| CVE-2026-80744 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path In nft_flow_rule_offload_abort(), | |
| CVE-2026-80745 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: regulator: fp9931: Fix VPOS/VNEG voltage selector table The VPOSNEG_table[] mapping does not match the FP9931 | |
| CVE-2026-80746 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: clk: qcom: dispcc-eliza: Fix disp_cc_mdss_mdp_clk_src RCG stall on Eliza EVK Eliza EVK (eliza-cqs-evk.dts) doe | |
| CVE-2026-80747 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add bounds check for CRAT subtype length The CRAT parser validates that the subtype header fits wi | |
| CVE-2026-80748 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mmc: loongson2: Fix sg iteration in data reorder functions In ls2k0500_mmc_reorder_cmd_data() and ls2k2000_mmc | |
| CVE-2026-80749 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/connector/hdmi: Fix out of bounds memory read A helper function was copying a given audio infoframe into t | |
| CVE-2026-80750 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: fix remaining %pOF after of_node_put() scpsys_get_bus_protection_legacy() looks up several | |
| CVE-2026-80751 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: mfg: initialize prev_o in mtk_mfg_attach_dev() mtk_mfg_attach_dev() reads prev_o on the fi | |
| CVE-2026-80752 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Input: psxpad-spi - set driver data before use psxpad_spi_suspend() retrieves the controller state with spi_ge | |
| CVE-2026-80753 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ovpn: run deferred work on a module-owned workqueue ovpn queues several work items whose callbacks execute mod | |
| CVE-2026-80754 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix F55 transmitter electrode count typo During F55 sensor detection, the transmitter | |
| CVE-2026-80755 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: selinux: reject a permission value exceeding the class permission count perm_read() bounds a permission value | |
| CVE-2026-80756 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: selinux: do not cancel a policy conversion that never started sel_write_load() calls selinux_policy_cancel() w | |
| CVE-2026-80757 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: selinux: reject a class permission count below its inherited common security_get_permissions() maps an inherit | |
| CVE-2026-80758 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: futex: Avoid private hash use-after-free on final put futex_private_hash_put() drops the reference to fph befo | |
| CVE-2026-80759 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_aml: validate firmware segment lengths aml_download_firmware() reads two lengths from the firmw | |
| CVE-2026-80760 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: reject HCI_CMD_SYNC params_len above 255 mgmt_hci_cmd_sync() checks that the message length a | |
| CVE-2026-80761 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: zero the sockaddr before returning it in getname iso_sock_getname() fills a struct sockaddr_is | |
| CVE-2026-80762 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Fix accept list UAF during suspend hci_update_event_filter_sync() walks hdev->accept_list | |
| CVE-2026-80763 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: validate LE Set CIG Parameters response The Command Complete dispatch validates only the | |
| CVE-2026-80764 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: fix LE list UAF on reset hci_cc_reset() clears the LE accept and resolving lists without | |
| CVE-2026-80765 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: validate initial device info bounds The Hyper-V synthetic HID host supplies SYNTH_HID_INITIAL_DEV | |
| CVE-2026-80766 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: fix use-after-free of inrange_timer on remove uclogic_remove() cancels the pen in-range timer an | |
| CVE-2026-80767 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: sensor: custom: Fix use-after-free in enable_sensor enable_sensor_store() can call set_power_report_state | |
| CVE-2026-80768 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: ft260: fix stack-use-after-return write in I2C read race ft260_i2c_read() points dev->read_buf at a calle | |
| CVE-2026-80769 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: rapoo: fix missing hid_is_usb() check to_usb_interface() can only be used on a hid_device whose parent is | |
| CVE-2026-80770 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: stop device IO before hid_hw_stop on probe failure nintendo_hid_probe() calls hid_device_io_sta | |
| CVE-2026-80771 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: register input device after capabilities are set input_register_device() exposes the device to | |
| CVE-2026-80772 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler() joycon_ctlr_read_handler() casts an incomi | |
| CVE-2026-80773 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: huawei: fix missing hid_is_usb() check to_usb_interface() can only be used on a hid_device whose parent i | |
| CVE-2026-80774 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: asus: fix missing hid_is_usb() check to_usb_interface() can only be used on a hid_device whose parent is | |
| CVE-2026-80775 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: futex: Fix race on the initial mm->futex.phash.ref allocation futex_hash_allocate() allocates mm->futex.phash. | |
| CVE-2026-80776 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: futex: Fix race in futex_pivot_pending() during private hash resize A task performing a custom private hash re | |
| CVE-2026-80777 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: futex/pi: Plug private futex exec() race The check for private futexes whether the waiter's mm, which is store | |
| CVE-2026-80778 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: futex/pi: Reject cross-mm private futex owners A private futex key borrows the waiter's mm without taking an m | |
| CVE-2026-80779 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ The dedicated hardware timestamp RX queue is allocated | |
| CVE-2026-80780 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: pidff: fix OOB write when hid->inputs is empty hid_pidff_init_with_quirks() derives its input_dev from | |
| CVE-2026-80781 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: core: fix OOB read of field->usage in hid_set_field() hid_set_field() hands field->usage + offset to hid_ | |
| CVE-2026-80782 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: do not keep a stale msc->input if no input is claimed magicmouse_input_mapping() caches the f | |
| CVE-2026-80783 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event() magicmouse_raw_event() handles DOUBLE_R | |
| CVE-2026-80784 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: fix memory leak from alloc-during-teardown race mptcp_pm_destroy() empties msk->pm.anno_list and ms | |
| CVE-2026-80785 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fbdev: serialize mode sysfs access with lock_fb_info() show_mode(), show_modes(), and store_mode() access fb_i | |
| CVE-2026-80786 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fbdev: Wrap user-invoked calls to fb_set_var() in helper Handle fbcon during display updates in fb_set_var_fro | |
| CVE-2026-80787 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvmet: pci-epf: fix use-after-free in nvmet_pci_epf_exec_iod_work() nvmet_pci_epf_exec_iod_work() submits an I | |
| CVE-2026-80788 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations When fuzzing the nvme target code, I t | |
| CVE-2026-80789 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: bound SGL data length before allocating command buffers nvmet_tcp_map_data() reads the host-control | |
| CVE-2026-80790 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: fix invalid free in LS IOD error path nvmet_fc_alloc_ls_iodlist() advances iod while initializing th | |
| CVE-2026-80791 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: zero the AUTH_RECEIVE response buffer nvmet_execute_auth_receive() allocates the response buffer w | |
| CVE-2026-80792 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv6: fix use-after-free in ip6_finish_output2() ip6_finish_output2() caches a pointer to the IPv6 destination | |
| CVE-2026-80793 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv4: reject undersized MTUs in ip_do_fragment() ip_do_fragment() subtracts the IPv4 header length from the ef | |
| CVE-2026-80794 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix uninit-value in the RF discover/activated NTF handlers nci_rf_discover_ntf_packet() and nci_rf_i | |
| CVE-2026-80795 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix out-of-bounds write in nci_target_auto_activated() nci_target_auto_activated() appends a target | |
| CVE-2026-80796 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: add data_len bound checks to activation parameter extractors nci_extract_activation_params_iso_dep() | |
| CVE-2026-80797 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: purge fragmented skbs during cleanup pn53x_common_clean() purges resp_q before freeing the common | |
| CVE-2026-80798 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: reject PDUs shorter than the LLCP header Every LLCP PDU begins with a two-byte header (DSAP/SSAP + | |
| CVE-2026-80799 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers nfc_llcp_parse_gb_tlv() and nfc_llcp_parse_connectio | |
| CVE-2026-80800 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: bound the connect_sn TLV walk to the skb Commit 27256cdb290e ("nfc: llcp: bound SNL TLV parsing to | |
| CVE-2026-80801 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfc: microread: validate target discovery payload lengths microread_target_discovered() parses target discover | |
| CVE-2026-80802 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfc: fdp: bound the device-reported read length and fix an skb leak fdp_nci_i2c_read() takes the next packet l | |
| CVE-2026-80803 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfc: digital: clamp SENSF_RES length to the destination buffer digital_in_recv_sensf_res() memcpy()s resp->len | |
| CVE-2026-80804 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfs: restore nofs context unconditionally in xfs_trans_roll When __xfs_trans_commit() fails in xfs_trans_roll( | |
| CVE-2026-80805 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfs: validate attr entry pointer before field access xfs_attr3_leaf_verify_entry() accesses lentry/rentry fiel | |
| CVE-2026-80806 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable DAX on new encrypted files Currently, when a new encrypted regular file is created, the cal | |
| CVE-2026-80807 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: reject invalid block index in GC ioctl Syzbot reported list corruption caused by a double list_add_tai | |
| CVE-2026-80808 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ext4: stop retrying saturated xattr cache entries ext4_xattr_block_set() retries when a cache entry selected f | |
| CVE-2026-80809 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix missing metadata reservation for large xattrs [BUG] lsetxattr() panics the kernel when setting a la | |
| CVE-2026-80810 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: fix folio size overflow in io_vec_fill_bvec() io_vec_fill_bvec() computes the folio size with a | |
| CVE-2026-80811 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: io_uring/cmd: fix iovec leak when the async cmd is not recycled An io_async_cmd carries an iovec array in ->ve | |
| CVE-2026-80812 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: dummy: Check card index validity at probe snd_dummy_probe() blindly trusts that the given devptr->id val | |
| CVE-2026-80813 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvmet: fix NULL pointer dereference in nvmet_execute_identify_nslist() When a host issues an Identify command | |
| CVE-2026-80814 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rndis_host: add overflow check in rndis_rx_fixup() Add an overflow check to ensure that data_offset + data_len | |
| CVE-2026-80815 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Use a private URB for the notification endpoint scarlett2_init_notify() used mixer->urb, whic | |
| CVE-2026-80816 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: Use a private URB for the notification endpoint fcp_init_notify() used mixer->urb, which snd_usb_mi | |
| CVE-2026-80817 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/iommufd: Fix NULL pointer deref in iommufd_ioas_change_process when racing with iopt_map_file_pages iomm | |
| CVE-2026-80818 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Fix CMD_SYNC use-after-free on teardown arm_smmu_impl_remove() is registered as a devres | |
| CVE-2026-80819 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept rfcomm_sock_recvmsg() completes a deferred | |
| CVE-2026-80820 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfs: don't livelock in scrub on a circular unlinked list LOLLM points out that online fsck can livelock if an | |
| CVE-2026-80821 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvmet: pci-epf: put CQ ref on create_cq mapping failure nvmet_pci_epf_create_cq() calls nvmet_cq_create(), whi | |
| CVE-2026-80822 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mailbox: mchp-ipc-sbi: Add null check for devm_kasprintf() Add a check to see if devm_kasprintf() is not NULL | |
| CVE-2026-80823 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: validate ATR_REQ length against the received frame st21nfca_tm_recv_atr_req() checks that the r | |
| CVE-2026-80824 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: usbfs: fix use-after-free of usb_device in usbdev_release() usbdev_release() drops its reference to the s | |
| CVE-2026-80825 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: ensure tx headroom in usb_sdio_tx_prepare_skb mt7925_usb_sdio_tx_prepare_skb() pushes a TX | |
| CVE-2026-80826 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: USB: c67x00: fix use-after-free in c67x00_add_iso_urb() When TD creation fails for the last packet of an isoch | |
| CVE-2026-80827 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: option: fix slab OOB read in interrupt URB callback The interrupt URB buffer is allocated in setu | |
| CVE-2026-80828 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Complete cleanup after system-resume errors A failed system resume can leave the card unusabl | |
| CVE-2026-80829 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output() snd_usbmidi_novation_output() lays out a two-b | |
| CVE-2026-80830 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: core: Add lock to usb_wakeup_notification() Add a spin lock to usb_wakeup notification to prevent a race | |
| CVE-2026-80831 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: mxs-dcp - fix source scatterlist length access mxs_dcp_aes_block_crypt() uses sg_dma_len() without map | |
| CVE-2026-80832 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix CCM AAD buffer underallocation The AAD buffer allocated in qce_aead_ccm_prepare_buf_assoclen | |
| CVE-2026-80833 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ss - Remove crypto_rng interface Since the crypto_rng interface for hardware PRNGs is unused and | |
| CVE-2026-80834 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ce - Remove crypto_rng interface Since the crypto_rng interface for hardware PRNGs is unused and | |
| CVE-2026-80835 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Remove crypto_rng interface qcom-rng.c exposes the same hardware through two completely sep | |
| CVE-2026-80836 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: virtio - bound the akcipher result length virtio_crypto_dataq_akcipher_callback() sets the result leng | |
| CVE-2026-80837 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: don't queue packet path object notifications All file:line references below are against | |
| CVE-2026-80838 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vxlan: keep the last remote linked during FDB flush A non-nexthop FDB entry is expected to have at least one r | |
| CVE-2026-80839 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: reject unrepresentable multicast TVLV offsets The network and transport header fields in struct sk | |
| CVE-2026-80840 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv6: seg6: clear IPv4 control block on IPIP decapsulation End.DX4 and End.DT4 decapsulate an IPv4 packet thro | |
| CVE-2026-80841 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/packet: defer vmalloc TX_RING free until skbs finish AF_PACKET TX_RING skbs keep a raw pointer to their ri | |
| CVE-2026-80842 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context br_multicast_toggle_one_vlan() cle | |
| CVE-2026-80843 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfrm: fix xfrm_state_construct() auth-trunc leak attach_auth_trunc() can allocate x->aalg while leaving x->pro | |
| CVE-2026-80844 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segments_left AH6 rearranges routing-header addresses before computing or v | |
| CVE-2026-80845 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfrm: avoid lock inversion in nat keepalive work nat_keepalive_work() walks the state table while xfrm_state_w | |
| CVE-2026-80846 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfrm: drop ESP-in-TCP packets with no ingress device ESP-in-TCP receives records through the TCP strparser. ha | |
| CVE-2026-80847 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tcp: clamp route advmss to TCP_MIN_MSS tcp_select_initial_window() assumes that callers never pass an MSS smal | |
| CVE-2026-80848 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfrm: espintcp: fix UAF during close ZDI reported and analyzed a race condition during close for espintcp sock | |
| CVE-2026-80849 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: fix use-after-free of current_key on reconnect to another peer tcp_inbound_ao_hash() is called bef | |
| CVE-2026-80850 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tcp: fix AO info use-after-free in tcp_ao_connect_init() tcp_v4_connect() adds a SYN-SENT socket to the ehash | |
| CVE-2026-80851 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: gtp: serialize PDP context updates PDP contexts can be deleted through GTP_CMD_DELPDP or while the GTP network | |
| CVE-2026-80852 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tls: device: fix out-of-bounds write in tls_append_frag() Found with syzkaller and a local syzbot instance run | |
| CVE-2026-80853 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Allocate full pages for {DE,EN}CRYPT ops on SNP-enabled hosts When {de,en}crypting memory of an SEV | |
| CVE-2026-80854 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_tcm: keep port count until LUN teardown completes tcm_usbg_drop_nexus() permits session removal | |
| CVE-2026-80855 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fuse: fix invalidate lock leak on open O_TRUNC DAX failure fuse_open() takes filemap_invalidate_lock() for a D | |
| CVE-2026-80856 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fuse: fix invalidate lock leak on setattr writeback failure fuse_do_setattr() takes filemap_invalidate_lock() | |
| CVE-2026-80857 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fuse: wait for FR_FINISHED on abort_on_kill to prevent use-after-free The abort_on_kill path in request_wait_a | |
| CVE-2026-80858 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fuse: publish io-uring queues with release semantics fuse_uring_create_queue() initializes a fuse_ring_queue a | |
| CVE-2026-80859 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fuse: fix missing barrier when checking io-uring readiness fuse_block_alloc() reads fch->initialized and then | |
| CVE-2026-80860 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fuse: fix race between interrupt and resend After commit f8fce75fedf7 ("fuse: clear intr_entry in fuse_resend | |
| CVE-2026-80861 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: xhci: bail out of setup if the controller is inaccessible xhci_gen_setup() locates the operational regist | |
| CVE-2026-80862 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix usage of page_frag_cache nvme uses page_frag_cache to preallocate PDU for each preallocated requ | |
| CVE-2026-80863 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix OOB in free_rd_atomic_resources() free_rd_atomic_resources() iterates using qp->attr.max_dest_rd | |
| CVE-2026-80864 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp rxe_qp_from_attr() handles IB_QP_MAX_DEST_RD | |
| CVE-2026-80865 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Add missing access_ok call to copy_user_syms As reported by sashiko we use __get_user without prior acces | |
| CVE-2026-80866 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tipc: avoid busy looping in tipc_exit_net() Blamed commit introduced a busy-wait loop in tipc_exit_net() to wa | |
| CVE-2026-80867 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: alpha/PCI: Add security_locked_down() check to pci_mmap_resource() Currently, Alpha's pci_mmap_resource() does | |
| CVE-2026-80868 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs3: Allocate iomap inline_data using alloc_page This fixes a BUG reported in iomap_write_end_inline: iomap_ | |
| CVE-2026-80869 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the attribute-list entry in ntfs_read_inode_mount() The $MFT attribute-list walk in ntfs_read_inod | |
| CVE-2026-80870 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Validate CRIU-restored IDs before idr_alloc The KFD CRIU restore flow restores previously saved ob | |
| CVE-2026-80871 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: xilinx-trng - Remove crypto_rng interface Implementing the crypto_rng interface has no purpose, as it | |
| CVE-2026-80872 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/tas2781: Cancel async firmware request at unbind TAS2781 HDA I2C and SPI queue RCA firmware loading | |
| CVE-2026-80873 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Write ESR_EL2 for injected nested SError exceptions kvm_inject_el2_exception() writes ESR_EL2 | |
| CVE-2026-80874 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: arm64: dts: renesas: ironhide: Describe inline ECC carveouts The DBSC5 DRAM controller protects DRAM content u | |
| CVE-2026-80875 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipvs: use parsed transport offset in TCP state lookup TCP state handling reparses the skb to find the TCP head | |
| CVE-2026-80876 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix event length with forced 8-byte alignment When RB_FORCE_8BYTE_ALIGNMENT is true, rb_calculate | |
| CVE-2026-80877 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix vllist leak Fix a leak of the new vllist in afs_update_cell() in the event that it is an empty list ( | |
| CVE-2026-80878 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix leak of ungot volume Fix afs_lookup_volume_rcu() so that it doesn't leak a dying volume if afs_try_ge | |
| CVE-2026-80879 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write A circular locking dependency involves INODE_ | |
| CVE-2026-80880 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Properly support implicit ODP rereg_mr Due to all the child mkeys in the implicit ODP configuration w | |
| CVE-2026-80881 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix buffer head management in ocfs2_read_blocks() In ocfs2_read_blocks(), caller should't assume that b | |
| CVE-2026-80882 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm Ensure the ENOMEM error value is set | |
| CVE-2026-80883 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered The host1x_client_reg | |
| CVE-2026-80884 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntb: Store original DMA address for future release The DMA API requires that dma_free_attrs receive the exact | |
| CVE-2026-80885 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix uncancelled rxrpc OOB message handler Fix AFS to cancel its OOB message processing (typically to resp | |
| CVE-2026-80886 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: serial: msm: Disable DMA for kernel console UART At the moment, concurrent writes from userspace and the kerne | |
| CVE-2026-80887 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: use check_add_overflow for shader size+offset bound vmw_shader_define() validates the user-supplie | |
| CVE-2026-80888 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: drop dma_buf reference on foreign-fd prime import ttm_prime_fd_to_handle() returns -ENOSYS when th | |
| CVE-2026-80889 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix timer drain order, wakeup handling and tx_gen ordering This patch is a follow-up to commit cf0 | |
| CVE-2026-80890 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sctp: reject stale cookies with mismatched verification tags sctp_unpack_cookie() skips cookie expiration chec | |
| CVE-2026-80891 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Validate AIBV and AISB before pinning guest pages The AIBV holds one bit per MSI-X vector for | |
| CVE-2026-80892 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: erofs: cap LZMA stream pool size fs/erofs/decompressor_lzma.c sizes the module-global MicroLZMA stream pool fr | |
| CVE-2026-80893 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() copy_hugetlb_page_range() clears the uff | |
| CVE-2026-80894 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix wrong hwpt passed to iommufd_auto_response_faults on replace iommufd_hwpt_replace_device() calls: | |
| CVE-2026-80895 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mshv: Order pt_vp_array publish against irqfd assertion path mshv_partition_ioctl_create_vp() initialises a VP | |
| CVE-2026-80896 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mshv: Fix race in mshv_irqfd_deassign mshv_irqfd_deactivate() and the hlist traversal of pt_irqfds_list requir | |
| CVE-2026-80897 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfs: release readahead folios on iterator preparation failure netfs_prepare_read_iterator() batches readahea | |
| CVE-2026-80898 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfs: clear PG_private_2 on copy-to-cache append failure netfs_pgpriv2_copy_to_cache() marks the folio with P | |
| CVE-2026-80899 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: erofs: remove fscache backend entirely EROFS over fscache was introduced to provide image lazy pulling functio | |
| CVE-2026-80900 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: Make UMP message size check more robust If message offset was larger than the buffer length the si | |
| CVE-2026-80901 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipvs: fix the checksum validations ip_vs_in_icmp_v6() is missing checksum validation for ICMPv6 packets from c | |
| CVE-2026-80902 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA When terminating DMA transfers, active des | |
| CVE-2026-80903 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix sync entry leak on OA config emit failure xe_oa_emit_oa_config() releases the sync entries and | |
| CVE-2026-80904 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/tls: Fail tls_sw_splice_read() after a failed async decrypt When an async decrypt fails, tls_decrypt_done( | |
| CVE-2026-80905 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: tap: fix wrong transport_header when sending VLAN-tagged frame In tap_get_user_xdp(), when processing a V | |
| CVE-2026-80906 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: packet: fix wrong transport_header when sending VLAN-tagged frame In packet_parse_headers(), when process | |
| CVE-2026-80907 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD dpb min size calculation for H264 This should use actual number of references from the dec | |
| CVE-2026-80908 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reject UVD message with dimensions above 4096 Fixes potential overflow in DPB size calculations. | |
| CVE-2026-80909 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reject UVD message with invalid number of h265 refs Same change as for h264, avoids overflow later | |
| CVE-2026-80910 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses EAR SPKR PA Gain" and the four "WSA RX* Mux" control | |
| CVE-2026-80911 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked() If either tplg_ops->dai_config or widget_k | |
| CVE-2026-80912 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: selinux: reject an unclaimed class value in security_get_classes() security_get_classes() sizes an array by p_ | |
| CVE-2026-80913 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: selinux: require every boolean value to be defined p_bools.nprim comes from the policy image independently of | |
| CVE-2026-80914 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready iso_conn_ready() looks up the BIS list | |
| CVE-2026-80915 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix DPT allocation paths. Remove the fallback for VRAM to system memory, I tested it and that doesn't | |
| CVE-2026-80916 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: kcov: fix data corruption and race conditions on PREEMPT_RT syzbot is reporting KCOV state corruption on PREEM | |
| CVE-2026-80917 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems On 32-bit systems the config space is to | |
| CVE-2026-80918 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: core: fix number/pointer type confusion on long items When fetch_item() is called by hid_scan_report() on | |
| CVE-2026-80919 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix recursive ww_mutex acquire in amdgpu_devcoredump_format When dumping IB contents from a hung j | |
| CVE-2026-80920 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: io_uring: defer eventfd signaling when queued from a wakeup handler io_req_local_work_add() signals the CQ rin | |
| CVE-2026-80921 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: zero stale crypto bits When shadowing crypto access bits from a format0 apcb (crycb 0 or 1), | |
| CVE-2026-80922 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed. Other | |
| CVE-2026-80923 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xhci: dbgtty: Fix unregister on tty_register_driver() failure If tty_register_driver() fails, it drops the ref | |
| CVE-2026-80924 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - use kfree_sensitive() for derived key buffers crypto_krb5_prepare_encryption() and crypto_krb5_ | |
| CVE-2026-80925 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vlan: fix skb_under_panic and races when toggling HW VLAN offload Toggling hardware VLAN TX offload (NETIF_F_H | |
| CVE-2026-80926 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in oplock break notification smb2_oplock_break_noti() reads opinfo->conn without any | |
| CVE-2026-80927 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: timekeeping: Check the return value of tk_get_aux_ts64 in __do_adjtimex() If the auxiliary clock is disabled d | |
| CVE-2026-80928 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smack: fix cred UAF in smack_file_send_sigiotask() When inspecting the credentials of another task, objective | |
| CVE-2026-80929 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sysctl: move the "cad_pid" entry from pid_table[] to kern_reboot_table[] cad_pid is global, and kill_cad_pid() | |
| CVE-2026-80930 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout i2c_nuvoton_wait_for_stat() enables the IRQ before waiting f | |
| CVE-2026-80931 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: w1: ds28e17: reject an oversize length on an I2C block read w1_f19_i2c_master_transfer() is the master_xfer fo | |
| CVE-2026-80932 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: flush works in dependency order virtio_vsock_remove() stops the virtqueues and then flushes each | |
| CVE-2026-80933 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: validate default EEPROM firmware size The default EEPROM firmware is parsed and copied as | |
| CVE-2026-80934 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix TX DMA mapping leak for AddBA req frames mt7996/mt7992 hand the firmware a HW MAC-TXP | |
| CVE-2026-80935 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: bound the device EEPROM address before the EFUSE copy mt7996_mcu_get_eeprom() derives the | |
| CVE-2026-80936 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: cancel mlo_pm_work on stop mt7925 queues mlo_pm_work with a 5 second delay during multi-li | |
| CVE-2026-80937 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy mt7915_mcu_get_eeprom() copies a fix | |
| CVE-2026-80938 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex mt7615_suspend() acquired the mt76 mutex a | |
| CVE-2026-80939 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: pci: add .shutdown callback to stop rfkill polling on reboot Since the hardware rfkill polling wa | |
| CVE-2026-80940 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: pci: fix resource leak on failed NAPI setup rtw_pci_probe() allocates PCI resources through rtw_p | |
| CVE-2026-80941 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb() The skb passed to the rtw_hci_tx_write() is expec | |
| CVE-2026-80942 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: rtl8192du: Fix possible memory leak in rtl92du_init_sw_vars() The memory allocated inside rtl92 | |
| CVE-2026-80943 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: rtl8192du: check QoS TID before indexing tids rtl92du_tx_fill_desc() uses ieee80211_get_tid() t | |
| CVE-2026-80944 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Detach sync cmd buffer on interrupted wait mwifiex synchronous commands keep the caller-provide | |
| CVE-2026-80945 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - unmap dst before software fallback on decompress On a hardware analytics error, decompress retri | |
| CVE-2026-80946 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fuse: copy request headers via a stack buffer for io-uring The fuse-io-uring transport copies req->in.h out to | |
| CVE-2026-80947 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop rtl8xxxu arms rx_urb_wq from the RX completion path: | |
| CVE-2026-80948 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start() In iwl_op_mode_dvm_start(), jumping to out_free | |
| CVE-2026-80949 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control() The memory allocated for buf is not freed in some | |
| CVE-2026-80950 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: i3c: renesas: Check that the transfer is valid before accessing it The Renesas I3C driver uses an asynchronous | |
| CVE-2026-80951 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: i3c: master: svc: bound IBI payload to the requested max_payload_len svc_i3c_master_handle_ibi() reads the IBI | |
| CVE-2026-80952 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix info leak and UAF in device unregister path i3c_master_unregister_i3c_devs() clears i3cdev->d | |
| CVE-2026-80953 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: i3c: master: adi: initialize the lock before enabling interrupts adi_i3c_master_probe() requests the IRQ and u | |
| CVE-2026-80954 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: i3c: Fix unlocked dereference of dev->desc in i3c_device_get_supported_xfer_mode() i3c_device_get_supported_xf | |
| CVE-2026-80955 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: fix use-after-free and invalid seg operations in kset_replay() In kset_replay, when key->seg_gen is | |
| CVE-2026-80956 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: only hand out initialized cache segments get_cache_segment() scans the segment map up to cache->n_s | |
| CVE-2026-80957 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: detect a cycle in the last-kset chain during replay cache_replay() follows the on-media last-kset c | |
| CVE-2026-80958 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: clamp the tail kset read to the segment data region The tail-kset read in cache_replay(), the write | |
| CVE-2026-80959 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: bound the persisted tail-position offset cache_pos_decode() takes the persisted key_tail and dirty_ | |
| CVE-2026-80960 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate on-media seg_num against the cache device size seg_num is read from the crc32c-only superb | |
| CVE-2026-80961 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate kset key_num and intra-segment bounds Two more fields decoded from the cache device go unb | |
| CVE-2026-80962 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate geometry fields from on-disk cache_info cache_segs_init() iterates cache_info->n_segs time | |
| CVE-2026-80963 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dm-stats: fix a crash if allocation of per-cpu data fails If "dm_kvzalloc(percpu_alloc_size, cpu_to_node(cpu)) | |
| CVE-2026-80964 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: virmidi: Check card index validity at probe virmidi driver blindly trusts that the given devptr->id valu | |
| CVE-2026-80965 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: serial-u16550: Check card index validity at probe serial-u16550 driver blindly trusts that the given dev | |
| CVE-2026-80966 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: portman2x4: Check card index validity at probe Although portman2x4 driver has a check of the given devpt | |
| CVE-2026-80967 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: pcxhr: initialize mutexes before requesting threaded IRQ pcxhr_probe() requests pcxhr_threaded_irq() bef | |
| CVE-2026-80968 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: mts64: Check card index validity at probe Although mts64 driver has a check of the given devptr->id valu | |
| CVE-2026-80969 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: mpu401: Check card index validity at probe mpu401 driver blindly trusts that the given devptr->id value | |
| CVE-2026-80970 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: do not copy out an uninitialised init response fcp_ioctl_init() allocates its response buffer with | |
| CVE-2026-80971 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: bcd2000: clear the URB pointers on disconnect bcd2000_free_usb_related_resources() frees both URBs and l | |
| CVE-2026-80972 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Check card index validity at probe aloop driver blindly trusts that the given devptr->id value is | |
| CVE-2026-80973 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: bound the MIDI event length from the device usb6fire_comm_receiver_handler() forwards a MIDI even | |
| CVE-2026-80974 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mfd: sm501: Fix potential memory leaks during remove The memory allocated for struct sm501_devdata in sm501_pc | |
| CVE-2026-80975 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mfd: qnap-mcu: keep the reply buffer alive past a command timeout qnap_mcu_exec() publishes an on-stack buffer | |
| CVE-2026-80976 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: seg6: reset IP6CB after IPv6 decapsulation decap_and_validate() pulls the outer SRv6 headers and makes the inn | |
| CVE-2026-80977 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: skbuff: don't touch shared zerocopy state in skb_tx_error() skb_tx_error() completes the zerocopy uarg an | |
| CVE-2026-80978 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: cap advertised IP tunnel headroom IP tunnel devices derive their advertised needed_headroom from lower ou | |
| CVE-2026-80979 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/smc: unregister the connection before draining the rx tasklet smc_conn_free() calls smc_ism_unset_conn() o | |
| CVE-2026-80980 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/smc: stop killed, freed and out_of_sync sharing a byte The three connection state flags are single-bit bit | |
| CVE-2026-80981 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() smc_llc_srv_add_link() keeps add_llc p | |
| CVE-2026-80982 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix use-after-free in smc_rx_pipe_buf_release() smc_rx_splice() hands RMB pages to a pipe and takes a | |
| CVE-2026-80983 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix socket refcount leak in smc_switch_conns() smc_switch_conns() takes a reference on the SMC socket | |
| CVE-2026-80984 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/smc: do not dereference an unset send buffer on the SMC-D teardown path smc_close_stream_wait() calls smc_ | |
| CVE-2026-80985 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry smc_llc_rmt_delete_rkey() and smc_llc_save_ad | |
| CVE-2026-80986 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages On a link whose device has max_recv_sge == 1 there | |
| CVE-2026-80987 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: NTB: ntb_transport: Reject oversized TX buffers ntb_process_tx() handles an oversized buffer by calling tx_han | |
| CVE-2026-80988 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: NTB: ntb_transport: Fail TX enqueue when the QP link is down Commit f195a1a6fe41 ("ntb: Drop packets when qp l | |
| CVE-2026-80989 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Mark the connection down when bringing it up fails Every failure path in tbnet_connected_wor | |
| CVE-2026-80990 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Release the Rx HopID that was handed out on mismatch tb_xdomain_alloc_in_hopid() passes the | |
| CVE-2026-80991 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: ravb: serialize PTP clock teardown ravb_ptp_interrupt() can race with ravb_ptp_stop() and pass the clock | |
| CVE-2026-80992 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: ravb: avoid dereferencing an invalid PTP clock The PTP clock is unavailable before the first open, so que | |
| CVE-2026-80993 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: phylink: correctly validate returned PCS in phylink_inband_caps In phylink_inband_caps(), the PCS returne | |
| CVE-2026-80994 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix flow mask use-after-free on flow deletion The commit in the Fixes tag below made so flow | |
| CVE-2026-80995 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: mctp: hold a reference to the route device in mctp_route_lookup() mctp_route_lookup() uses rt->dev withou | |
| CVE-2026-80996 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: l2tp: do not propagate multicast notification errors The tunnel create, tunnel modify, session create, an | |
| CVE-2026-80997 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: ipa: fix stalled modem TX queue after runtime resume ipa_start_xmit() unconditionally stops the TX queue | |
| CVE-2026-80998 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: bnxt: ring the doorbell when SW USO exits early When a burst of packets is handed down to the driver, the | |
| CVE-2026-80999 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: realtek: use gpiod_set_value_cansleep for reset GPIO rtl83xx_reset_assert() and rtl83xx_reset_deasse | |
| CVE-2026-81000 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom tun_get_user() uses tun->align both as skb headroom and when choosing how muc | |
| CVE-2026-81001 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: slip: fix use-after-free in sl_sync() slip_devs[] stores bare net_device pointers and takes no reference on th | |
| CVE-2026-81002 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xdp: fix zero-copy frame layout xdp_convert_zc_to_xdp_frame() clones an XSK packet into an order-0 page and ad | |
| CVE-2026-81003 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/iucv: filter frames in afiucv_hs_rcv() by ingress device afiucv_hs_rcv() selects a socket from iucv_sk_lis | |
| CVE-2026-81004 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipmi:msghandler: Cancel work cleanly on an error If an error occurs during startup of an IPMI interface, it ma | |
| CVE-2026-81005 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipmi: si: Fix NULL pointer dereference after failed registration try_smi_init() allocates new_smi->si_sm and l | |
| CVE-2026-81006 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipmi: Remove all sysfs files on registration failure ipmi_add_smi() creates the nr_users and nr_msgs files bef | |
| CVE-2026-81007 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipmi: ipmb: validate write message length ipmb_write() read message fields before validating the length byte. | |
| CVE-2026-81008 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: interconnect: Fix use after free in icc_get() and of_icc_get_by_index() In of_icc_get_by_index() and icc_get() | |
| CVE-2026-81009 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: io_uring/query: cap user size passed to copy_struct_to_user io_handle_query_entry() clamps hdr.size for the in | |
| CVE-2026-81010 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: honor task_work cancellation io_waitid_cb() may run through the fallback task_work path when | |
| CVE-2026-81011 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: pass validated element count to package parsers The per-type package parsers are han | |
| CVE-2026-81012 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix off-by-one write in hp_get_string_from_buffer() hp_get_string_from_buffer() clam | |
| CVE-2026-81013 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix heap OOB read on empty password write validate_password_input() computes length | |
| CVE-2026-81014 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix heap OOB read in sk_store() and kek_store() sk_store() and kek_store() strip a t | |
| CVE-2026-81015 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails amd_pmc_probe() registers the LPS0 s2idle | |
| CVE-2026-81016 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Propagate SMU errors and validate S2D address amd_stb_s2d_init() discards the return val | |
| CVE-2026-81017 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/chrome: sensorhub: Bound the EC-reported sensor number Each EC FIFO event carries an 8-bit sensor num | |
| CVE-2026-81018 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Free system certificate signatures Multi-certificate support also allows the system a | |
| CVE-2026-81021 | Deferred | 未確認 | CWE-200 | The SupportCandy WordPress plugin before 3.5.3 does not perform an authorization check on one of its support-ticket attachment download paths, allowing unauthenticated attackers t |
| CVE-2026-81022 | Deferred | 未確認 | CWE-200 | The SupportCandy WordPress plugin before 3.5.3 does not validate a submitted per-ticket authorization code before disclosing the real code to the requester, allowing unauthenticat |
| CVE-2026-81046 | Analyzed | 未確認 | CWE-284 | Dell ThinOS 10, versions prior to 2605_10.2616, contain a Protection Mechanism Failure vulnerability. An unauthenticated attacker with remote access could potentially exploit this |
| CVE-2026-81048 | Analyzed | 未確認 | CWE-77 | Dell ThinOS 10, versions prior to 2605_10.2616, contain an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. An unauthenticated att |
| CVE-2026-81049 | Analyzed | 未確認 | CWE-353 | Dell ThinOS 10, versions prior to 2605_10.2616, contain a Missing Support for Integrity Check vulnerability. A high privileged attacker with local access could potentially exploit |
| CVE-2026-81051 | Analyzed | 未確認 | CWE-1328 | Dell ThinOS 10, versions prior to 2605_10.2616, contain a Security Version Number Mutable to Older Versions vulnerability. A low privileged attacker with physical access could pote |
| CVE-2026-81052 | Analyzed | 未確認 | CWE-494 | Dell ThinOS 10, versions prior to 2605_10.2616, contain a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with physical access could potentially |
| CVE-2026-81090 | Deferred | 未確認 | CWE-352, CWE-434 | The Gpx2Graphics WordPress plugin through 0.3 does not perform a CSRF check when handling file uploads, nor validate the type of the uploaded file, allowing attackers to make a log |
| CVE-2026-81158 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization vulnerability in Drupal Entity API allows Forceful Browsing. This issue affects Entity API versions: from 0.0.0 to 1.8.0. |
| CVE-2026-81159 | Analyzed | 未確認 | CWE-208 | Observable Timing Discrepancy vulnerability in Drupal Commerce CyberSource allows Brute Force. This issue affects Commerce CyberSource versions: from 0.0.0 to 1.10.0. |
| CVE-2026-81160 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Slick Carousel allows Stored XSS. This issue affects Slick Carousel ver |
| CVE-2026-81161 | Analyzed | 未確認 | CWE-267 | Privilege Defined With Unsafe Actions vulnerability in Drupal Content Moderation Notifications allows Privilege Escalation. This issue affects Content Moderation Notifications vers |
| CVE-2026-81162 | Analyzed | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in Drupal DXPR Builder: The Best Editing (AI) Experience for Drupal allows Forceful Browsing. This issue affects DXP |
| CVE-2026-81164 | Analyzed | 未確認 | CWE-862 | Missing Authorization vulnerability in Drupal Entity PDF allows Forceful Browsing. This issue affects Entity PDF versions: from 0.0.0 to 2.1.5. |
| CVE-2026-81165 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization vulnerability in Drupal Blazy allows Forceful Browsing. This issue affects Blazy versions: from 0.0.0 to 3.0.18. |
| CVE-2026-81166 | Analyzed | 未確認 | CWE-862 | Missing Authorization vulnerability in Drupal Digital Signage Framework allows Forceful Browsing. This issue affects Digital Signage Framework versions: from 0.0.0 to 2.6.1. |
| CVE-2026-81167 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Address Suggestion allows Cross-Site Scripting (XSS). This issue affect |
| CVE-2026-81168 | Analyzed | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA Protected Page allows Functionality Bypass. This issue affects CAPTCHA Protected Page versi |
| CVE-2026-81176 | Deferred | 未確認 | CWE-770 | Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job. Prior to 5.9.2, devalue.parse does not reject out-of-bo |
| CVE-2026-81178 | Deferred | 未確認 | CWE-863 | SysReptor is a fully customizable pentest reporting platform. Prior to 2026.55, an unauthenticated holder of a public note share link receives project-wide collaborative editing me |
| CVE-2026-81179 | Deferred | 未確認 | CWE-807 | SysReptor is a fully customizable pentest reporting platform. Prior to 2026.58, installations that enable password reset by email while configuring ALLOWED_HOSTS with a wildcard ac |
| CVE-2026-81180 | Deferred | 未確認 | CWE-20 | SysReptor is a fully customizable pentest reporting platform. Prior to 2026.61, authenticated users of SysReptor Professional can upload image files whose formats cause image proce |
| CVE-2026-81181 | Deferred | 未確認 | CWE-384 | SysReptor is a fully customizable pentest reporting platform. Prior to 2026.68, the password authentication flow for protected shared notes does not rotate the session identifier a |
| CVE-2026-81182 | Deferred | 未確認 | CWE-639 | SysReptor is a fully customizable pentest reporting platform. Prior to 2026.68, an unauthenticated attacker who holds a public read-write note share link can disclose an uploaded f |
| CVE-2026-81192 | Deferred | 未確認 | CWE-426 | `OpenTelemetry.Resources.Host` NuGet package, which provides OpenTelemetry resource detectors for host, is affected by an untrusted search path vulnerability on macOS. Prior to ver |
| CVE-2026-81194 | Deferred | 未確認 | CWE-639 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not properly verify authorization when retrieving order line-item data, allowing any authenticated user in |
| CVE-2026-81195 | Deferred | 未確認 | CWE-200 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not perform an authorization check before returning per-student course enrollment and progress data, allow |
| CVE-2026-81196 | Deferred | 未確認 | CWE-639 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not properly verify ownership of quiz question identifiers, allowing users with instructor access to read |
| CVE-2026-81197 | Deferred | 未確認 | CWE-200 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not restrict access to a REST route that lists an author's courses, nor does it filter that listing by pub |
| CVE-2026-81198 | Deferred | 未確認 | CWE-639 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not properly verify ownership of a curriculum object before acting on it, allowing authenticated users wit |
| CVE-2026-81199 | Deferred | 未確認 | CWE-200 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not perform an authorization check before returning a student's learning statistics, allowing unauthentica |
| CVE-2026-81201 | Analyzed | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Monster Menus allows Stored XSS. This issue affects Monster Menus versi |
| CVE-2026-81204 | Analyzed | 未確認 | CWE-94 | IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary code due to code injection during graph construction. |
| CVE-2026-81205 | Analyzed | 未確認 | CWE-90 | Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Drupal LDAP / Active Directory Integration allows LDAP Injection. This issue a |
| CVE-2026-81207 | Analyzed | 未確認 | CWE-918 | IBM DataStage on Cloud Pak for Data 5.4.0.0 allows any authenticated tenant — with no project membership or role — fully controls scheme/host/port/path of an outbound fetch origina |
| CVE-2026-81208 | Analyzed | 未確認 | CWE-522 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow an authenticated user to access sensitive information due to improper handling of encrypted credentials. An attacker could e |
| CVE-2026-81210 | Analyzed | 未確認 | CWE-639 | IBM DataStage on Cloud Pak for Data 5.4.0.0 concatenates three caller-supplied strings into a String.format path on the shared /ds-storage RWX PVC and returns the file with no proj |
| CVE-2026-81211 | Analyzed | 未確認 | CWE-862 | IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary Python code due to improper authorization of custom components in stored flow |
| CVE-2026-81213 | Analyzed | 未確認 | CWE-918 | IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to obtain sensitive information from internal network resources due to improper validation of user-supplied URLs |
| CVE-2026-81235 | Analyzed | 未確認 | CWE-325 | Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Cryptographic Step vulnerability. A high privileged attacker with remote access could potentially expl |
| CVE-2026-81236 | Analyzed | 未確認 | CWE-434 | Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access |
| CVE-2026-81237 | Analyzed | 未確認 | CWE-287 | Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially explo |
| CVE-2026-81238 | Analyzed | 未確認 | CWE-306 | Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access cou |
| CVE-2026-81239 | Analyzed | 未確認 | CWE-434 | Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access |
| CVE-2026-81240 | Analyzed | 未確認 | CWE-434 | Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access |
| CVE-2026-81265 | Analyzed | 未確認 | CWE-918 | IBM Langflow OSS 1.0.0 through 1.11.5. |
| CVE-2026-81268 | Analyzed | 未確認 | CWE-613 | IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute flows and obtain sensitive information due to insufficient session expiration of API ke |
| CVE-2026-81269 | Analyzed | 未確認 | CWE-862 | Missing Authorization vulnerability in Drupal Data field allows Forceful Browsing. This issue affects Data field versions: from 0.0.0 to 2.0.13. |
| CVE-2026-81270 | Deferred | 未確認 | CWE-200 | Apache Allura: exposure of non-public information via search. This issue affects Apache Allura: through 1.20.0. Users are recommended to upgrade to version 1.21.0, which fixe |
| CVE-2026-81275 | Deferred | 未確認 | CWE-22 | Subscriber Arbitrary File Download in Youzify <= 1.3.7 versions. |
| CVE-2026-81281 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in Graphene <= 2.9.4 versions. |
| CVE-2026-81282 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in Product Variations Swatches for WooCommerce <= 1.1.18 versions. |
| CVE-2026-81283 | Deferred | 未確認 | CWE-502 | Subscriber PHP Object Injection in WP User Frontend <= 4.3.10 versions. |
| CVE-2026-81286 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in WCFM Marketplace <= 3.8.1 versions. |
| CVE-2026-81288 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Upsell Order Bump Offer for WooCommerce <= 3.1.5 versions. |
| CVE-2026-81289 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.13.1 versions. |
| CVE-2026-81292 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Simple Payment <= 2.5.1 versions. |
| CVE-2026-81294 | Deferred | 未確認 | CWE-266 | Unauthenticated Privilege Escalation in Authorizer <= 3.15.1 versions. |
| CVE-2026-81295 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Under Construction <= 5.82 versions. |
| CVE-2026-81300 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Calculation For Contact Form 7 <= 1.0 versions. |
| CVE-2026-81301 | Deferred | 未確認 | CWE-926 | Ekia File Manager 1.2.7 exposes com.ekia.filecontrolmanager.OpenFileProvider as an exported Android ContentProvider without requiring caller permissions. The provider maps the cal |
| CVE-2026-81302 | Deferred | 未確認 | CWE-276 | PALLET CONTROL products contain an incorrect default permission vulnerability, which may allow a local attacker to execute arbitrary code with SYSTEM privileges on the affected pro |
| CVE-2026-81303 | Awaiting Analysis | 未確認 | CWE-441 | A flaw was found in hawtio-operator. The operator holds routes/custom-host:create permission cluster-wide and writes the tenant-supplied spec.routeHostName value from the Hawtio cu |
| CVE-2026-81305 | Deferred | 未確認 | CWE-829 | CM2507 IP cameras automatically execute a predetermined script from removable media without verifying its authenticity or integrity. An attacker with physical access to the device |
| CVE-2026-81310 | Awaiting Analysis | 未確認 | CWE-59 | Image Scanner Driver for Linux contains a link following vulnerability. An attacker who can log in to a Linux system where the product is installed may overwrite arbitrary files by |
| CVE-2026-81320 | Awaiting Analysis | 未確認 | CWE-532 | A flaw was found in hawtio-operator. When a custom Route TLS secret is configured and the operator runs at debug log level 1 or higher, the entire Route object — including the TLS |
| CVE-2026-81321 | Deferred | 未確認 | CWE-312 | CM2507 IP cameras store configured wireless network credentials in cleartext within the device filesystem. An attacker who obtains filesystem access through physical access, a debu |
| CVE-2026-81326 | Deferred | 未確認 | CWE-321 | QND uses a hard-coded cryptographic key, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to obtain administrator |
| CVE-2026-81330 | Deferred | 未確認 | CWE-319 | The C6 ear camera transmits live video to the EarVision Android application over unencrypted UDP streams. The application manifest permits cleartext traffic, and captured network t |
| CVE-2026-81338 | Deferred | 未確認 | CWE-345 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not properly sanitise and restrict HTML in user-submitted content before storing it and rendering it to ot |
| CVE-2026-81339 | Deferred | 未確認 | CWE-639 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not perform a per-object ownership check when returning a quiz attempt result, allowing any authenticated |
| CVE-2026-81340 | Deferred | 未確認 | CWE-639 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not perform per-object ownership or capability checks when updating orders through its REST API, allowing |
| CVE-2026-81347 | Deferred | 未確認 | CWE-73 | The Frontend Admin by DynamiApps WordPress plugin before 3.29.13 does not properly validate a user-controllable directory path before deleting files within it, allowing unauthentic |
| CVE-2026-81348 | Deferred | 未確認 | CWE-200 | The My Private Site WordPress plugin before 4.2.3 does not apply its site-privacy access control to certain unauthenticated front-end read surfaces, allowing unauthenticated users |
| CVE-2026-81349 | Analyzed | 未確認 | CWE-78 | Improper neutralization of special elements used in an os command ('os command injection') in Azure HDInsights allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-81352 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network. |
| CVE-2026-81353 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally. |
| CVE-2026-81354 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally. |
| CVE-2026-81355 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally. |
| CVE-2026-81356 | Analyzed | 未確認 | CWE-444 | Inconsistent interpretation of http requests ('http request/response smuggling') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-81357 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-81375 | Awaiting Analysis | 未確認 | CWE-610 | A Confused Deputy vulnerability in the EmailTask component in Google Cloud Application Integration versions prior to 2026-06-30 on Google Cloud Platform allows an authenticated att |
| CVE-2026-81376 | Analyzed | 未確認 | CWE-1023, CWE-693 | Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-81377 | Analyzed | 未確認 | CWE-22 | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to perform tampering over a network. |
| CVE-2026-81378 | Analyzed | 未確認 | CWE-436 | Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-81379 | Analyzed | 未確認 | CWE-636 | Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-81380 | Analyzed | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information |
| CVE-2026-81381 | Analyzed | 未確認 | CWE-522 | Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-81383 | Analyzed | 未確認 | CWE-706 | Use of incorrectly-resolved name or reference in Visual Studio Code allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-81385 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network. |
| CVE-2026-81386 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-81387 | Analyzed | 未確認 | CWE-497 | Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-81388 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-81389 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-81390 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-81391 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-81392 | Analyzed | 未確認 | CWE-125, CWE-20 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-81393 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-81394 | Analyzed | 未確認 | CWE-497 | Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-81395 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-81396 | Analyzed | 未確認 | CWE-121, CWE-193 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-81397 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-81398 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-81399 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-81400 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-81401 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-81402 | Deferred | 未確認 | CWE-434 | The DS Ad Rotator WordPress plugin through 0.8 does not perform any capability check, nonce verification, or file-type validation on its image upload handler, allowing unauthentica |
| CVE-2026-81404 | Deferred | 未確認 | CWE-79 | The IPGP Visitors Origin WordPress plugin before 1.6 does not sanitise or escape user input before reflecting it back in the HTTP response, allowing unauthenticated attackers to pe |
| CVE-2026-81423 | Deferred | 未確認 | CWE-601 | The Accept Stripe Payments WordPress plugin before 2.1.4 does not validate a user-supplied URL before using it in a redirect, allowing unauthenticated attackers to redirect visitor |
| CVE-2026-81424 | Deferred | 未確認 | CWE-639 | The Accept Stripe Payments WordPress plugin before 2.1.4 does not verify that the product fulfilled when a checkout is completed matches the product the authoritative payment was a |
| CVE-2026-81426 | Deferred | 未確認 | CWE-352 | The WC Vendors WordPress plugin before 2.7.2.1 does not have CSRF protection on some of its front-end order shipment status actions, which could allow attackers to make a logged-i |
| CVE-2026-81427 | Deferred | 未確認 | CWE-862 | The WC Vendors WordPress plugin before 2.7.2.1 does not verify that the vendor submitting a front-end order shipment status change owns the referenced order, allowing any authenti |
| CVE-2026-81428 | Deferred | 未確認 | CWE-639 | The WC Vendors WordPress plugin before 2.7.2.1 does not verify ownership or the object type of user-supplied IDs when saving product variations, allowing authenticated users with |
| CVE-2026-81429 | Deferred | 未確認 | CWE-79 | The Export & Import WPBakery Page Builder WordPress plugin through 1.0.2 does not perform any CSRF check on its template-import feature and does not sanitise the imported data befo |
| CVE-2026-81431 | Deferred | 未確認 | CWE-269 | The Registration Form for WooCommerce WordPress plugin before 1.1.3 does not validate that the form referenced during registration is a legitimate registration form, reading the pe |
| CVE-2026-81432 | Deferred | 未確認 | CWE-352 | The JetStyleManager for Gutenberg WordPress plugin before 1.3.9 does not have CSRF protection on some of its AJAX actions, allowing attackers to make a logged-in user with the edit |
| CVE-2026-81433 | Deferred | 未確認 | CWE-120, CWE-121, CWE-787 | A stack-based buffer overflow vulnerability in WatchGuard Fireware OS's DHCP fingerprinting daemon (fingerd) allows an unauthenticated attacker with adjacent network access to exec |
| CVE-2026-81438 | Analyzed | 未確認 | CWE-327 | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains Use of a Broken or Risky Cryptographic Algorithm vulnerability. An unauthenticated attacker with remote a |
| CVE-2026-81439 | Analyzed | 未確認 | CWE-863 | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially |
| CVE-2026-81440 | Analyzed | 未確認 | CWE-798 | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Credentials vulnerability. An unauthenticated attacker with remote access could poten |
| CVE-2026-81441 | Analyzed | 未確認 | CWE-306 | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with local acce |
| CVE-2026-81442 | Analyzed | 未確認 | CWE-269 | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability. A low privileged attacker with remote access could potent |
| CVE-2026-81443 | Analyzed | 未確認 | CWE-918 | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Server-Side Request Forgery (SSRF) vulnerability. A low privileged attacker with remote access could po |
| CVE-2026-81445 | Analyzed | 未確認 | CWE-269 | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability. A high privileged attacker with remote access could poten |
| CVE-2026-81446 | Analyzed | 未確認 | CWE-918 | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Server-Side Request Forgery (SSRF) vulnerability. An unauthenticated attacker with remote access could |
| CVE-2026-81447 | Analyzed | 未確認 | CWE-295 | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network acces |
| CVE-2026-81453 | Analyzed | 未確認 | CWE-22 | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A low pr |
| CVE-2026-81455 | Awaiting Analysis | 未確認 | CWE-306 | Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote acce |
| CVE-2026-81467 | Analyzed | 未確認 | CWE-78 | Dell ThinOS 10, versions prior to 2605_10. 2616, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenti |
| CVE-2026-81468 | Analyzed | 未確認 | CWE-78 | Dell ThinOS 10, versions prior to 2605_10. 2616, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privil |
| CVE-2026-81469 | Awaiting Analysis | 未確認 | CWE-428 | Dell Inventory Collector Client, versions prior to 15.0.0, contain an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially e |
| CVE-2026-81473 | Awaiting Analysis | 未確認 | CWE-287 | Dell Rugged Control Center (RCC), versions prior to 5.2.206, contain an Improper Authorization vulnerability. A low privileged attacker with local access could potentially exploit |
| CVE-2026-81474 | Analyzed | 未確認 | CWE-122 | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Heap-based Buffer Overflow vulnerability. A low privileged attacker with local access could potentially |
| CVE-2026-81475 | Analyzed | 未確認 | CWE-306 | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote acc |
| CVE-2026-81476 | Analyzed | 未確認 | CWE-78 | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerabili |
| CVE-2026-81477 | Analyzed | 未確認 | CWE-122 | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Heap-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potential |
| CVE-2026-81478 | Analyzed | 未確認 | CWE-321 | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with remote access could |
| CVE-2026-81479 | Analyzed | 未確認 | CWE-187 | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Partial String Comparison vulnerability. A low privileged attacker with local access could potentially |
| CVE-2026-81480 | Analyzed | 未確認 | CWE-121 | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Stack-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentia |
| CVE-2026-81481 | Analyzed | 未確認 | CWE-22 | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An unaut |
| CVE-2026-81505 | Deferred | 未確認 | CWE-639 | Convoy is a cloud native webhooks gateway. Prior to 26.6.8, Convoy's GET /api/v1/projects/{projectID}/sources/{sourceID} endpoint authorizes access to the project in the URL, but H |
| CVE-2026-81508 | Deferred | 未確認 | CWE-125 | ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In 5.5.5, 6.0.1, and 6.1, the BlueDroid A2DP sink function btc_a2dp_sink_handle_inc_media() reads a timesta |
| CVE-2026-8151 | Deferred | 未確認 | CWE-352 | The Simple Membership MailChimp Integration WordPress plugin before 1.9.8 does not have CSRF checks in its settings page, allowing attackers to trick a logged-in administrator into |
| CVE-2026-81515 | Awaiting Analysis | 未確認 | CWE-755 | Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. From 4.0.0 until 4.3.0, EurekaDiscoveryClient deseriali |
| CVE-2026-81516 | Awaiting Analysis | 未確認 | CWE-755 | Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. From 4.0.0 until 4.3.0, ConsulDiscoveryClient construct |
| CVE-2026-81531 | Deferred | 未確認 | CWE-200 | An information disclosure vulnerability has been identified in Omada Controller. An API endpoint intended for Controller initialization remains accessible after completion and may |
| CVE-2026-81536 | Analyzed | 未確認 | CWE-611 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection. |
| CVE-2026-81537 | Analyzed | 未確認 | CWE-78 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to OS command injection. |
| CVE-2026-81539 | Analyzed | 未確認 | CWE-78 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS c |
| CVE-2026-81540 | Analyzed | 未確認 | CWE-22 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to overwrite ruleset files belonging to other tenants due to a path traversal vulnerability. |
| CVE-2026-81543 | Deferred | 未確認 | CWE-269 | The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 10.7.1. This is due to missing capability ch |
| CVE-2026-81545 | Analyzed | 未確認 | CWE-78 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an |
| CVE-2026-81546 | Deferred | 未確認 | CWE-121 | The Affinity by Canva application before 3.3.0 (September 2026 release) did not perform adequate bounds checking when parsing Affinity document files leading to a stack-based buffe |
| CVE-2026-81547 | Analyzed | 未確認 | CWE-22 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to path traversal. |
| CVE-2026-81548 | Analyzed | 未確認 | CWE-78 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an |
| CVE-2026-81549 | Analyzed | 未確認 | CWE-918 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of the X-Forwarded-Proto header. |
| CVE-2026-81550 | Analyzed | 未確認 | CWE-78 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS c |
| CVE-2026-81551 | Analyzed | 未確認 | CWE-22 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to arbitrarily write to or delete files on shared storage due to a path traversal vulnerabil |
| CVE-2026-81552 | Analyzed | 未確認 | CWE-78 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of environment variables. |
| CVE-2026-81554 | Analyzed | 未確認 | CWE-22 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an absolute-path traversal vulnerability. |
| CVE-2026-81563 | Awaiting Analysis | 未確認 | CWE-401 | A BIND resolver encountering an SVCB/HTTPS AliasMode record referencing 14 or more SVCB/HTTPS ServiceMode records may fail to properly deallocate internal resources. If this happen |
| CVE-2026-81564 | Deferred | 未確認 | CWE-22 | Joomla Extension - joomshaper.com - Missing Directory Confinement in Media Rename Allowing Arbitrary File Rename in SP Page Builder (Free and Pro) 4.0.0 - 6.9.0 - The media rename |
| CVE-2026-81565 | Deferred | 未確認 | CWE-22 | Joomla Extension - joomshaper.com - Missing Directory Confinement in Media Upload in SP Page Builder (Free and Pro) 4.0.0 - 6.9.0 - The folder request parameter replaced the genera |
| CVE-2026-81566 | Deferred | 未確認 | CWE-284 | Joomla Extension - joomshaper.com - Missing Access Control in Menu Item Creation in SP Page Builder (Free and Pro) 4.0.0 - 6.9.0 - The add-to-menu routine invoked the com_menus ite |
| CVE-2026-81567 | Deferred | 未確認 | CWE-89 | Joomla Extension - j2commerce.com - Unauthenticated blind SQL injection in the storefront product list in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7 - Unauthenticated, blind ex |
| CVE-2026-81568 | Deferred | 未確認 | CWE-22 | Joomla Extension - j2commerce.com - Arbitrary file read via `task=download` in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7 - `J2StoreModelOrderdownloads::getFilePath()` built th |
| CVE-2026-81569 | Deferred | 未確認 | CWE-285 | An improper authorization vulnerability exists in the handling of sub-workflow tasks. An authenticated user who does not have permission to access a target project can reference an |
| CVE-2026-81571 | Deferred | 未確認 | CWE-74 | The Brave WordPress plugin before 0.8.8 does not prevent a URL parameter used to pre-fill a form field from being passed to WordPress's shortcode engine, allowing unauthenticated a |
| CVE-2026-81583 | Deferred | 未確認 | CWE-269 | The My Login WordPress plugin before 7.2.0 does not enforce the network's registration setting when processing site signups on multisite installations, allowing users with a subsc |
| CVE-2026-81623 | Analyzed | 未確認 | CWE-78 | IBM Guardium Data Protection 12.2 could allow an authenticated user to execute arbitrary commands with low user privileges on the system due to improper validation of user supplied |
| CVE-2026-81626 | Analyzed | 未確認 | CWE-89 | IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the Load Balancer Groups component. An unauthenticated user can inject SQL statements through th |
| CVE-2026-81627 | Awaiting Analysis | 未確認 | CWE-787 | A flaw was found in QEMU. The VAPIC setup hypercall in hw/i386/vapic.c does not validate that the writable RAM alias remains within the option ROM window. A privileged guest user o |
| CVE-2026-81630 | Deferred | 未確認 | CWE-345 | The Botslab G980H dash camera firmware does not adequately verify the authenticity of firmware updates. The update process retrieves firmware through an unprotected connection and |
| CVE-2026-81632 | Deferred | 未確認 | CWE-598 | Use of HTTP Request With Sensitive Query String vulnerability in team-alembic AshAuthenticationPhoenix allows someone able to read access logs, proxy logs or browser history to rec |
| CVE-2026-81634 | Analyzed | 未確認 | CWE-122 | In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow during the RRSet canonicalisation routine. Th |
| CVE-2026-81635 | Deferred | 未確認 | CWE-79 | A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an attacker to execute an arbitrary script in the web browser of a user who accesses a website using the a |
| CVE-2026-81637 | Deferred | 未確認 | CWE-613 | Insufficient Session Expiration vulnerability in team-alembic AshAuthentication allows an attacker who obtains a victim's OAuth2 state value to replay the callback and sign that vi |
| CVE-2026-81638 | Deferred | 未確認 | CWE-173 | Improper Handling of Alternate Encoding vulnerability in ash-project ash_double_entry allows an attacker to submit several distinct string spellings of the same identifier. AshDou |
| CVE-2026-81640 | Deferred | 未確認 | CWE-798 | An attacker could derive the camera's Wi-Fi password and connect to its wireless network. This weakens or eliminates the security value of the access-point password and may expose |
| CVE-2026-81642 | Analyzed | 未確認 | CWE-122 | In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code execution as a result of |
| CVE-2026-81644 | Deferred | 未確認 | CWE-264 | DoS vulnerability in the preview service module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-81645 | Deferred | 未確認 | CWE-125 | Out-of-bounds read vulnerability in the graphics module. Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-81646 | Deferred | 未確認 | CWE-125 | Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-81647 | Deferred | 未確認 | CWE-680 | Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-81648 | Deferred | 未確認 | CWE-862 | The CryptoPayment Gateway WordPress plugin from 1.2.1 to 1.2.2 does not apply an authorization check on one of its AJAX endpoints, allowing unauthenticated users to invoke administ |
| CVE-2026-81650 | Deferred | 未確認 | CWE-434 | The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not correctly validate the extensions of files extracted from an uploaded archive, due to a variable b |
| CVE-2026-81651 | Deferred | 未確認 | CWE-639 | The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the user saving a gallery owns it, allowing any user granted its gallery-management ca |
| CVE-2026-81652 | Deferred | 未確認 | CWE-639 | The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the requesting user is entitled to a given image record before returning it, allowing |
| CVE-2026-81653 | Deferred | 未確認 | CWE-639 | The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the user acting on an image owns the gallery it belongs to, allowing users granted its |
| CVE-2026-81654 | Deferred | 未確認 | CWE-639 | The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not check that a user holds its options capability before saving image sizing settings, allowing users |
| CVE-2026-81655 | Deferred | 未確認 | CWE-94 | The Ad Inserter WordPress plugin before 2.8.19 does not correctly restrict access to one of its settings pages, making it reachable by every logged in user under a configuration i |
| CVE-2026-81656 | Analyzed | 未確認 | CWE-89 | IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the New Query Builder REST Processor. A low-privileged authenticated user can inject SQL stateme |
| CVE-2026-81657 | Analyzed | 未確認 | CWE-502 | IBM Guardium Data Protection 12.2 could allow a remote unauthenticated attacker to execute arbitrary code on the system due to the deserialization of untrusted data. |
| CVE-2026-81665 | Awaiting Analysis | 未確認 | CWE-122 | A heap-based buffer overflow was found in Corosync's Totem Process Group (totempg) message reassembly. When processing fragmented multicast messages, the buffer used to reassemble |
| CVE-2026-81666 | Awaiting Analysis | 未確認 | CWE-190 | An integer overflow was found in Corosync's handling of membership commit token messages. The length-validation check for these messages can be bypassed on 32-bit systems due to an |
| CVE-2026-81669 | Analyzed | 未確認 | CWE-78 | IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the create csr wildcard CLI command. An authenticated privileged CLI user can inject arbitra |
| CVE-2026-81736 | Awaiting Analysis | 未確認 | CWE-1050 | If a BIND resolver has cached a tree of SVCB/HTTPS AliasMode records, and is then queried for the root of that tree, the resolver will spend disproportionate CPU time constructing |
| CVE-2026-81737 | Deferred | 未確認 | CWE-79 | The FAQ Builder AYS WordPress plugin before 1.8.5 does not sanitize or escape content submitted by unauthenticated visitors before storing it and outputting it in an admin area pag |
| CVE-2026-81738 | Awaiting Analysis | 未確認 | CWE-121, CWE-193, CWE-787 | OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out-of-bounds write via crafted DOMAIN-SEARCH entries |
| CVE-2026-81741 | Deferred | 未確認 | CWE-601 | The Groundhogg — CRM, Newsletters, and Marketing Automation WordPress plugin before 4.7.2 does not restrict the redirect target of its email preference confirmation flow to the sit |
| CVE-2026-81742 | Deferred | 未確認 | CWE-79 | The BE REST Endpoints WordPress plugin through 1.0.0 does not perform any authorization check before allowing widgets to be read, created, updated and deleted, and does not sanitiz |
| CVE-2026-81754 | Deferred | 未確認 | CWE-79 | The Vigilant – 100% Free Security Suite: Firewall, 2FA, Login, Headers, Scanner… plugin for WordPress is vulnerable to Stored Cross-Site Scripting via User-Agent Header in all vers |
| CVE-2026-81769 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in LiquidThemes Booking Hub allows Privilege Escalation. This issue affects Booking Hub: from n/a through 1.3.1. |
| CVE-2026-81770 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Interactive Geo Maps <= 1.6.30 versions. |
| CVE-2026-81771 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in TrustedSite <= 1.2.5 versions. |
| CVE-2026-81772 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Ninja Forms - Layout & Styles <= 3.0.31 versions. |
| CVE-2026-81773 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Ninja Forms File Uploads Extension <= 3.3.26 versions. |
| CVE-2026-81774 | Deferred | 未確認 | CWE-497 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Dotstore WooCommerce Product Attachment woo-product-attachment allows Retrieve Embedded |
| CVE-2026-81775 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Estatik <= 4.3.4 versions. |
| CVE-2026-81776 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WP QuickLaTeX <= 3.8.8 versions. |
| CVE-2026-81781 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Unbounce Unbounce Landing Pages unbounce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Unbounc |
| CVE-2026-81782 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in WP Docs <= 2.3.1 versions. |
| CVE-2026-81783 | Deferred | 未確認 | CWE-288 | Subscriber Broken Authentication in MailMunch – Grow your Email List <= 3.2.5 versions. |
| CVE-2026-81784 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Marcin Wise Chat wise-chat allows Object Injection.This issue affects Wise Chat: from n/a through 3.4.2. |
| CVE-2026-81785 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in BuddyForms <= 2.9.0 versions. |
| CVE-2026-81786 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Thank You Page Customizer for WooCommerce <= 1.2.2 versions. |
| CVE-2026-81787 | Deferred | 未確認 | CWE-288 | Unauthenticated Broken Authentication in IMPress for IDX Broker <= 3.3.0 versions. |
| CVE-2026-81788 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in IMPress for IDX Broker <= 3.3.0 versions. |
| CVE-2026-81789 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Studio Wombat Advanced Product Fields Extended for WooCommerce allows Path Traversal |
| CVE-2026-81790 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Viszt Péter Csomagpontok és szállítási címkék WooCommerce-hez allows Exploiting Incorrectly Configured Access Control Security Levels. This |
| CVE-2026-81791 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in EventON <= 2.5.7 versions. |
| CVE-2026-81792 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in MultiVendorX Product Catalog Enquiry for WooCommerce by MultiVendorX woocommerce-catalog-enquiry allows Privilege Escalation.This is |
| CVE-2026-81793 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a |
| CVE-2026-81794 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Shirt Product Designer for WooCommerce 1.0.4 versions. |
| CVE-2026-81795 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Page Visits Counter – Lite <= 1.2.3 versions. |
| CVE-2026-81796 | Deferred | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in WEN Solutions WP Travel wp-travel allows Password Recovery Exploitation.This issue affects WP Travel: from |
| CVE-2026-81798 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Easy Appointments allows DOM-Based XSS. This issue affects Easy Appointments: |
| CVE-2026-81799 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Return Refund and Exchange For WooCommerce <= 4.6.4 versions. |
| CVE-2026-81800 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Verified Reviews (Avis Vérifiés) <= 2.4.6 versions. |
| CVE-2026-81801 | Deferred | 未確認 | CWE-862 | Subscriber Settings Change in WP-Stateless <= 4.4.1 versions. |
| CVE-2026-81802 | Deferred | 未確認 | CWE-639 | Unauthenticated Insecure Direct Object References (IDOR) in WpEvently <= 5.6.0 versions. |
| CVE-2026-81803 | Deferred | 未確認 | CWE-94 | Subscriber Remote Code Execution (RCE) in RepairBuddy <= 4.1224 versions. |
| CVE-2026-81804 | Deferred | 未確認 | CWE-201 | Unauthenticated Sensitive Data Exposure in ZHBackup – Backup, Restore & Migration <= 2.4.2 versions. |
| CVE-2026-81805 | Deferred | 未確認 | CWE-266 | Unauthenticated Privilege Escalation in SiteSkite <= 2.1.5 versions. |
| CVE-2026-81806 | Deferred | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in John Darrel Hide My WP Ghost allows Server Side Request Forgery. This issue affects Hide My WP Ghost: from n/a through 7.0.09. |
| CVE-2026-81807 | Deferred | 未確認 | CWE-79 | The Simple Ajax Chat WordPress plugin before 20260827 does not escape chat message content before rendering it, allowing unauthenticated users to inject arbitrary HTML attributes |
| CVE-2026-81810 | Deferred | 未確認 | CWE-269 | The All-in-One WP Migration and Backup WordPress plugin before 7.111 does not perform any capability check on several of its AJAX actions, gating them only on an installation-wide |
| CVE-2026-81821 | Deferred | 未確認 | CWE-321 | The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to decrypt and view sensitive information. |
| CVE-2026-81822 | Deferred | 未確認 | CWE-327 | The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to reverse engineer PIMBoards users’ app-native passwords through computational |
| CVE-2026-81823 | Deferred | 未確認 | CWE-862 | The vulnerability, if exploited, could allow an unauthenticated miscreant to perform read operations intended only for PIMBoards users, resulting in information disclosure. Write o |
| CVE-2026-81824 | Deferred | 未確認 | CWE-79 | The vulnerability, if exploited, could allow a miscreant to run arbitrary JavaScript code in a browser session of a PIMBoards user who was socially engineered to click on a malicio |
| CVE-2026-81825 | Deferred | 未確認 | CWE-79 | The Simple Ajax Chat – Add a Fast, Secure Chat Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Chat Message in all versions up to, and including, <= 20260 |
| CVE-2026-81829 | Awaiting Analysis | 未確認 | CWE-22 | A flaw was found in SmallRye JWT's AwsAlbKeyResolver, which is used by applications to verify JSON Web Tokens signed by AWS Application Load Balancers. When the AWS_ALB key provide |
| CVE-2026-81830 | Awaiting Analysis | 未確認 | CWE-73 | The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted configuration directory constraint via incorrect file path va |
| CVE-2026-81832 | Analyzed | 未確認 | CWE-611 | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 SAP Adapter is vulnerable to an XML |
| CVE-2026-81841 | Awaiting Analysis | 未確認 | CWE-862 | Pausing a shared (public) dashboard did not revoke its access token for the endpoints that serve frontend bootstrap data. Anyone holding the link to a paused shared dashboard could |
| CVE-2026-81842 | Awaiting Analysis | 未確認 | CWE-863 | An authenticated user with edit permission on one folder can move a library panel into another folder where they only have view permission, through the library elements API or the |
| CVE-2026-81846 | Deferred | 未確認 | CWE-639 | An authorization bypass in the runZero Platform MCP service has been resolved in version 5.1.260826.0. This issue is an instance of CWE-639: Authorization Bypass Through User-Contr |
| CVE-2026-81855 | Deferred | 未確認 | CWE-321 | A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard. |
| CVE-2026-81859 | Awaiting Analysis | 未確認 | CWE-327 | CP4BA - IBM Enterprise Records could allow a local attacker to obtain sensitive information due to the use of a broken or risky cryptographic algorithm. |
| CVE-2026-81861 | Awaiting Analysis | 未確認 | CWE-522 | CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authentication information and unauthorized access to RTU functionality. |
| CVE-2026-81862 | Analyzed | 未確認 | CWE-532 | Apache Airflow's Teradata provider embedded cloud storage credentials directly into SQL statements. `S3ToTeradataOperator` and `AzureBlobStorageToTeradataOperator` interpolate the |
| CVE-2026-81866 | Analyzed | 未確認 | CWE-862 | Apache NiFi 2.9.0 through 2.11.0 provide Connector configuration update and verification REST API methods that do not enforce authorization checking on Assets and Secrets reference |
| CVE-2026-81867 | Awaiting Analysis | 未確認 | CWE-502 | A Deserialization of Untrusted Data vulnerability in the JavaScript Task in Google Cloud Application Integration versions prior to 2026-06-28 on Google Cloud Platform allows an aut |
| CVE-2026-81868 | Awaiting Analysis | 未確認 | CWE-288, CWE-295 | Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. Prior to 4.3.0, Steeltoe.Security.Authorization.Certifi |
| CVE-2026-81869 | Awaiting Analysis | 未確認 | CWE-176, CWE-400 | OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.10.0 until 1.33.0, the sdk/trace/span.go attribute truncation path can fail to enforce AttributeValueLeng |
| CVE-2026-81870 | Deferred | 未確認 | CWE-200, CWE-532 | OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic |
| CVE-2026-81871 | Awaiting Analysis | 未確認 | CWE-295, CWE-923 | OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the exporters/otlp/otlplog/otlploggrpc package loads OTEL_EXPORTER_OTLP_LOGS_CERTIFICATE, OTEL_ |
| CVE-2026-81872 | Awaiting Analysis | 未確認 | CWE-400, CWE-834 | OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the go.opentelemetry.io/otel/sdk/log BatchingProcessor can enter a tight CPU loop when attacker |
| CVE-2026-81875 | Awaiting Analysis | 未確認 | CWE-20, CWE-400, CWE-409 | HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to version 6.9.12, SHCParser in org.hl7.fhir.r5/src/main/java/org/hl7 |
| CVE-2026-81876 | Awaiting Analysis | 未確認 | CWE-20, CWE-400, CWE-835 | HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to version 6.9.12, SHCParser in org.hl7.fhir.r5/src/main/java/org/hl7 |
| CVE-2026-81878 | Analyzed | 未確認 | CWE-190, CWE-787 | radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's CPython bytecode .pyc marshal parser was vulnerable because the CPython mar |
| CVE-2026-81879 | Analyzed | 未確認 | CWE-125 | radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's ELF PN_XNUM handling was vulnerable because the ELF parser allocated the pr |
| CVE-2026-81880 | Analyzed | 未確認 | CWE-400, CWE-834 | radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Apple Preferred Executable Format loader was vulnerable because the PEF loa |
| CVE-2026-81881 | Analyzed | 未確認 | CWE-125, CWE-191 | radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Mach-O Swift field-metadata parser was vulnerable because a relative Swift |
| CVE-2026-81882 | Analyzed | 未確認 | CWE-125, CWE-170 | radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's binary property-list Unicode parser was vulnerable because the binary-prope |
| CVE-2026-81883 | Analyzed | 未確認 | CWE-125 | radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Lua 5.3 bytecode function parser was vulnerable because the Lua 5.3 bytecod |
| CVE-2026-81884 | Analyzed | 未確認 | CWE-125 | radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Mach-O LC_DATA_IN_CODE parser was vulnerable because the Mach-O LC_DATA_IN_ |
| CVE-2026-81885 | Analyzed | 未確認 | CWE-770, CWE-835 | radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's NE relocation fixup-chain parser was vulnerable because the NE relocation p |
| CVE-2026-81886 | Analyzed | 未確認 | CWE-770 | radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Windows 64-bit crash-dump dmp64 parser was vulnerable because the Windows d |
| CVE-2026-81894 | Analyzed | 未確認 | CWE-79, CWE-89 | Concrete CMS 9.5.2 and below is vulnerable to stored DOM-based Cross-site Scripting (XSS) via the Gallery block's per-image Caption field because the bundled Magnific Popup lightbo |
| CVE-2026-81895 | Analyzed | 未確認 | CWE-89 | In Concrete CMS before 9.5.3, the Document Library block stored the file-set identifiers submitted through fsID[] without validating them as integers, and when the block was config |
| CVE-2026-81896 | Analyzed | 未確認 | CWE-79 | Concrete CMS before 9.5.3 does not apply HTML entity encoding to user-defined Form block question labels when rendering them as column headers in the Dashboard Form Submissions rep |
| CVE-2026-81897 | Analyzed | 未確認 | CWE-352, CWE-79 | In Concrete CMS below CMS 9.5.3, the save_control action in the Express entities forms dashboard controller did not validate the anti-CSRF token. By causing an authenticated admini |
| CVE-2026-81898 | Awaiting Analysis | 未確認 | CWE-79 | In Concrete CMS below version 9.5.3, the Address attribute's country-less text formatter skipped HTML-escaping, enabling stored XSS in Express association views. A user able to sub |
| CVE-2026-81899 | Awaiting Analysis | 未確認 | CWE-79 | Concrete CMS 9.0.0 to 9.5.2 stored group folder names without sanitization and printed them unescaped on the Members > Groups dashboard page, resulting in stored cross-site scripti |
| CVE-2026-81900 | Analyzed | 未確認 | CWE-79 | Concrete CMS before 9.5.3 applied only trim() to the YouTube block's stored width and height values and printed them into iframe HTML attributes without escaping or integer casting |
| CVE-2026-81901 | Analyzed | 未確認 | CWE-862 | In Concrete CMS 9.2.0 through 9.5.2, the REST API page update endpoint (PUT /ccm/api/1.0/pages/{cID}) did not enforce page-property, page-template, or page-type authorization. A us |
| CVE-2026-81902 | Analyzed | 未確認 | CWE-352 | Concrete CMS 9 through 9.5.2 did not validate a CSRF token in the orphaned block removal panel action (removeOrphanedBlocks). A remote attacker could craft a request that, when loa |
| CVE-2026-81903 | Analyzed | 未確認 | CWE-79 | Concrete CMS versions 9.0.0 to 9.5.2 stored the Page Container icon value submitted through the dashboard without validating it against the set of known container icons. The unvali |
| CVE-2026-81904 | Deferred | 未確認 | CWE-862 | Concrete CMS below 9.5.3 registered view assets for every sub-block of a Stack, Container, or layout area without checking whether the requesting user could view that sub-block. An |
| CVE-2026-81905 | Deferred | 未確認 | CWE-640, CWE-863 | Concrete CMS below 9.5.3 stores user validation hashes for multiple purposes (email/registration validation, password reset, and persistent login) in a single table with a type col |
| CVE-2026-81906 | Deferred | 未確認 | CWE-288 | Concrete CMS OAuth callback login path prior to version 9.5.3 did not check whether an account was active or email-validated before establishing a session. A deactivated or unvalid |
| CVE-2026-81907 | Analyzed | 未確認 | CWE-352 | Concrete CMS 9.5.2 and below is vulnerable to Cross-Site Request Forgery (CSRF) in the Express "Clear Entries" function (POST /index.php/dashboard/system/express/entities/delete_en |
| CVE-2026-81908 | Deferred | 未確認 | CWE-862 | Concrete CMS 9.2.0 to 9.5.2 contain a missing authorization vulnerability in the REST API Groups list endpoint. The listGroups() method in concrete/src/Api/Controller/Groups.php re |
| CVE-2026-81909 | Deferred | 未確認 | CWE-862 | Concrete CMS 9 through 9.5.2 is vulnerable to Missing Authorization in the block alias route (Process::alias() in concrete/controllers/backend/block/process.php).It does not verify |
| CVE-2026-81910 | Analyzed | 未確認 | CWE-1336 | Concrete CMS 9 through 9.5.2 is vulnerable to Server-Side Template Injection (SSTI) in Theme Customizer via Unvalidated Style Values. Values submitted through the customizer (color |
| CVE-2026-81911 | Analyzed | 未確認 | CWE-79 | Concrete CMS versions 9.0.0 to 9.5.2 is vulnerable to Stored XSS in Board Custom Slot dialog. The custom_slot save_template endpoint authorizes the request only against the target |
| CVE-2026-81912 | Analyzed | 未確認 | CWE-352 | Concrete CMS before 9.5.3 is vulnerable to Cross-Site Request Forgery in the Move Multiple Groups feature. The dashboard/users/groups/bulkupdate/confirm() endpoint moved the select |
| CVE-2026-81913 | Analyzed | 未確認 | CWE-601 | Concrete CMS versions 9.5.0 through 9.5.2 are vulnerable to Open Redirect via the rcURL parameter. An attacker can craft a single link on the site's own domain that sends a user to |
| CVE-2026-81914 | Analyzed | 未確認 | CWE-943 | Apache Airflow's Google provider built Google Drive search expressions by interpolating file and folder names directly into single-quoted string literals, without escaping the quot |
| CVE-2026-81915 | Analyzed | 未確認 | CWE-639, CWE-862 | Concrete CMS below 9.5.3 does not perform an object-level authorization check when a Page Type was updated. The Types::submit() dashboard controller loaded and saved the Page Type |
| CVE-2026-81916 | Analyzed | 未確認 | CWE-639, CWE-862 | Concrete CMS before 9.5.3 evaluated the authorization check for an Express entry submission against the entity of the posted form rather than the entity identified by the dashboard |
| CVE-2026-81917 | Analyzed | 未確認 | CWE-79 | Concrete CMS below 9.5.3 does not apply HTML output escaping to the file description and tags fields when rendering the Document Library block, so a user with permission to edit fi |
| CVE-2026-81918 | Analyzed | 未確認 | CWE-79 | Concrete CMS below 9.5.3 is vulnerable to Stored XSS via the Date Format field in the Page Attribute Display block. A user with edit_page_contents permissions could store a payload |
| CVE-2026-81919 | Analyzed | 未確認 | CWE-352 | Concrete CMS below 9.5.3 did not validate an anti-CSRF token on the block-arrangement backend endpoint (the arrange() action of Concrete\Controller\Backend\Page\ArrangeBlocks). The |
| CVE-2026-81920 | Analyzed | 未確認 | CWE-352 | Concrete CMS below 9.5.3 was vulnerable to Cross-Site Request Forgery in the dashboard SEO Excluded Words page. The reset() controller action cleared the administrator-configured r |
| CVE-2026-81921 | Analyzed | 未確認 | CWE-862 | Concrete CMS 8.5.3 through 9.5.2 enabled the OAuth 2.0 refresh-token grant using the unmodified upstream League grant, which issued new access tokens from a valid refresh token wit |
| CVE-2026-81922 | Analyzed | 未確認 | CWE-862 | Concrete CMS before 9.5.3 did not enforce a per-page authorization check when reordering pages from the sitemap. In the sitemap Explore dashboard controller, the send_to_top and se |
| CVE-2026-81923 | Analyzed | 未確認 | CWE-862 | In Concrete CMS before 9.5.3, the SEO Bulk Update Meta Tags editor did not check per-page edit permissions before saving. The saveRecord() action validated the per-page CSRF token |
| CVE-2026-81924 | Analyzed | 未確認 | CWE-352 | Concrete CMS before 9.5.3 is vulnerable to Cross-Site Request Forgery (CSRF) in the theme page-template activation feature. The Dashboard theme Inspect controller's activate_files( |
| CVE-2026-81925 | Analyzed | 未確認 | CWE-79 | Concrete CMS before 9.5.3 improperly neutralized a user-supplied custom date format when rendering conversation messages, resulting in reflected cross-site scripting. An attacker c |
| CVE-2026-81926 | Analyzed | 未確認 | CWE-79 | Concrete CMS 9.4.0 through 9.5.2 did not escape colliding page paths before rendering them in the location panel's duplicate-path confirmation dialog. The panel's check endpoint re |
| CVE-2026-81927 | Analyzed | 未確認 | CWE-79 | Concrete CMS before 9.5.3 contained a stored cross-site scripting vulnerability in SVG file handling. When SVG processing was set to the non-default "Reject files containing potent |
| CVE-2026-81928 | Deferred | 未確認 | CWE-674 | Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sig_data when re-encoding a message with a misplaced TSIG record. sig_data signs a messag |
| CVE-2026-81930 | Analyzed | 未確認 | CWE-522 | Apache Airflow's Snowflake provider did not validate the connection's `account` and `region` fields before interpolating them into request URLs. The SQL API endpoint is built as `h |
| CVE-2026-81933 | Analyzed | 未確認 | CWE-89 | IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the Analytic Grid Service Handler. A low-privileged authenticated user can inject SQL statements |
| CVE-2026-81937 | Analyzed | 未確認 | CWE-78 | IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the import remotelog_config file CLI command. A highly privileged authenticated user can inj |
| CVE-2026-81939 | Awaiting Analysis | 未確認 | CWE-22 | A Zip Slip vulnerability in the SonicWall Network Security Manager (NSM) On-Prem file upload and archive processing functionality allows an attacker to extract files outside the in |
| CVE-2026-81940 | Analyzed | 未確認 | CWE-94 | IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special characters in flow display nam |
| CVE-2026-81941 | Analyzed | 未確認 | CWE-284 | IBM Langflow OSS 1.0.0 through 1.11.5 allows an authenticated non-administrative user could execute arbitrary operating system commands on the server at the privilege level of the |
| CVE-2026-81942 | Deferred | 未確認 | CWE-78 | PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain an OS command injection vulnerability in the web server. |
| CVE-2026-81943 | Deferred | 未確認 | CWE-489 | PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain active debug functionality in the embedded software. An |
| CVE-2026-81944 | Deferred | 未確認 | CWE-121 | PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in the web server. Insuffi |
| CVE-2026-81945 | Deferred | 未確認 | CWE-121 | PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in the web server. Insuffi |
| CVE-2026-81946 | Deferred | 未確認 | CWE-121 | PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 use MD5-based password hashing, a cryptographic algorithm with k |
| CVE-2026-81947 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-81948 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-81949 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-81950 | Analyzed | 未確認 | CWE-415 | Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-81951 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-81952 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-81953 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-81954 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-81955 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. |
| CVE-2026-81956 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-81957 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-81958 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-81959 | Analyzed | 未確認 | CWE-122, CWE-190 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-81960 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-81963 | Analyzed | 掲載 | CWE-284, CWE-59 | Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally. |
| CVE-2026-81973 | Analyzed | 未確認 | CWE-416 | Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires u |
| CVE-2026-81975 | Analyzed | 未確認 | CWE-416 | Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires u |
| CVE-2026-81976 | Analyzed | 未確認 | CWE-416 | Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires u |
| CVE-2026-81977 | Analyzed | 未確認 | CWE-191 | Acrobat Reader is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerabili |
| CVE-2026-81978 | Analyzed | 未確認 | CWE-125 | Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensi |
| CVE-2026-81979 | Analyzed | 未確認 | CWE-787 | Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requ |
| CVE-2026-81980 | Analyzed | 未確認 | CWE-787 | Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requ |
| CVE-2026-81981 | Analyzed | 未確認 | CWE-787 | Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requ |
| CVE-2026-81982 | Analyzed | 未確認 | CWE-125 | Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensi |
| CVE-2026-81983 | Analyzed | 未確認 | CWE-787 | Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requ |
| CVE-2026-81984 | Analyzed | 未確認 | CWE-416 | Acrobat Reader is affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive |
| CVE-2026-81985 | Analyzed | 未確認 | CWE-416 | Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires u |
| CVE-2026-81986 | Analyzed | 未確認 | CWE-416 | Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires u |
| CVE-2026-81987 | Analyzed | 未確認 | CWE-190 | Acrobat Reader is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this |
| CVE-2026-81988 | Analyzed | 未確認 | CWE-416 | Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires u |
| CVE-2026-81989 | Analyzed | 未確認 | CWE-416 | Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires u |
| CVE-2026-81990 | Analyzed | 未確認 | CWE-416 | Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires u |
| CVE-2026-81991 | Analyzed | 未確認 | CWE-125 | Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensi |
| CVE-2026-81992 | Analyzed | 未確認 | CWE-122 | Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issu |
| CVE-2026-81993 | Analyzed | 未確認 | CWE-122 | Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclos |
| CVE-2026-81994 | Analyzed | 未確認 | CWE-1321 | Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could lead to arbitrary file system re |
| CVE-2026-81995 | Awaiting Analysis | 未確認 | CWE-20 | Adobe Experience Manager Forms JEE is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An at |
| CVE-2026-81996 | Analyzed | 未確認 | CWE-863 | Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain |
| CVE-2026-81997 | Analyzed | 未確認 | CWE-863 | Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass secur |
| CVE-2026-81998 | Analyzed | 未確認 | CWE-787 | Substance3D - Modeler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this iss |
| CVE-2026-81999 | Awaiting Analysis | 未確認 | CWE-918 | Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. An attacker with high privileges cou |
| CVE-2026-82000 | Awaiting Analysis | 未確認 | CWE-918 | Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could expl |
| CVE-2026-82001 | Analyzed | 未確認 | CWE-400 | Acrobat Reader is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to e |
| CVE-2026-82003 | Analyzed | 未確認 | CWE-20 | Adobe Campaign Classic (ACC) is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privi |
| CVE-2026-82004 | Analyzed | 未確認 | CWE-78 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitra |
| CVE-2026-82005 | Analyzed | 未確認 | CWE-787 | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r |
| CVE-2026-82006 | Analyzed | 未確認 | CWE-122 | Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this i |
| CVE-2026-82007 | Analyzed | 未確認 | CWE-190 | Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of t |
| CVE-2026-82008 | Analyzed | 未確認 | CWE-20 | Adobe Campaign Classic (ACC) is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privi |
| CVE-2026-82009 | Analyzed | 未確認 | CWE-89 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary cod |
| CVE-2026-82010 | Analyzed | 未確認 | CWE-89 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary cod |
| CVE-2026-82011 | Analyzed | 未確認 | CWE-89 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a Security fe |
| CVE-2026-82013 | Analyzed | 未確認 | CWE-918 | Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit th |
| CVE-2026-82019 | Awaiting Analysis | 未確認 | CWE-79 | TripleLift's ad rendering script (video-bundle.js) contains a DOM-based cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in |
| CVE-2026-82023 | Deferred | 未確認 | CWE-863 | LearnPress WordPress Plugin before 4.4.6 contains a broken object-level authorization vulnerability that allows authenticated attackers with the Instructor role to add answers to q |
| CVE-2026-82024 | Deferred | 未確認 | CWE-79 | LearnPress WordPress Plugin before 4.4.6 contains a stored cross-site scripting vulnerability that allows authenticated attackers with the Instructor role to inject persistent mali |
| CVE-2026-82028 | Deferred | 未確認 | CWE-89 | Magistrala before 1.0.0 contains a SQL injection vulnerability in the timescale-reader and postgres-reader HTTP API services that allows authenticated attackers to inject arbitrary |
| CVE-2026-82035 | Awaiting Analysis | 未確認 | CWE-22 | PyMuPDF through 1.28.2, fixed in commit b2c8f3a, contains a path traversal vulnerability in the font branch of extract_objects() in src/__main__.py, where the output filename is co |
| CVE-2026-82049 | Awaiting Analysis | 未確認 | CWE-59 | In CPython 3.13 and earlier, the tarfile module's data and tar extraction filters are vulnerable to crafted archives containing a hard link to a symbolic link. Such archives may ca |
| CVE-2026-82052 | Analyzed | 未確認 | CWE-617 | The $regexFindAll expression can be used by an authenticated user who can run aggregation pipeline stages to crash a MongoDB server (mongod). Under certain specific conditions the |
| CVE-2026-82053 | Analyzed | 未確認 | CWE-863 | A security issue exists in MongoDB's LDAP authorization integration where pooled LDAP connections can retain stale authentication identities after user authentication under certain |
| CVE-2026-82054 | Analyzed | 未確認 | CWE-770 | A security issue exists in MongoDB server's JSON Pointer parser used during $jsonSchema query filter processing. When a find command includes a specially crafted $jsonSchema filter |
| CVE-2026-82055 | Analyzed | 未確認 | CWE-476 | A security issue exists in MongoDB's 2dsphere index key generation that can cause a server crash due to a null pointer dereference. When a specially crafted GeoJSON document is ins |
| CVE-2026-82056 | Analyzed | 未確認 | CWE-416 | A race condition in MongoDB server's text index query parsing can cause a heap use-after-free read when handling upsert retry paths. Under certain concurrent index lifecycle operat |
| CVE-2026-82057 | Analyzed | 未確認 | CWE-843 | A security issue was discovered in MongoDB where an authenticated user with readWrite privileges could crash the mongod server process. By specifying a custom WiredTiger storage co |
| CVE-2026-82058 | Analyzed | 未確認 | CWE-248 | A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing |
| CVE-2026-82059 | Analyzed | 未確認 | CWE-617 | An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authenticated user rather than being restricted to internal cluster operations. |
| CVE-2026-82060 | Analyzed | 未確認 | CWE-943 | In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects as |
| CVE-2026-82061 | Analyzed | 未確認 | CWE-416 | A use-after-free security issue exists in the server's query execution memory tracking subsystem. An authenticated user with read privileges can trigger a write to freed heap memor |
| CVE-2026-82062 | Analyzed | 未確認 | CWE-863 | A security issue in MongoDB Server allows an authenticated user with elevated internal privileges to bypass a disabled feature gate in the applyOps command by specifying an interna |
| CVE-2026-82063 | Analyzed | 未確認 | CWE-416 | A use-after-free security issue in the cursor management component of MongoDB Server allows an authenticated user to cause a denial of service. Under specific timing conditions dur |
| CVE-2026-82064 | Analyzed | 未確認 | CWE-617 | A security issue in MongoDB Server allows an unauthenticated network user to cause a denial of service on a specific type of replica set member. The server contains an assertion in |
| CVE-2026-82065 | Analyzed | 未確認 | CWE-617 | A security issue in the MongoDB Server's storage engine integration layer allows an authenticated user with collection creation privileges to cause a persistent denial of service. |
| CVE-2026-82066 | Analyzed | 未確認 | CWE-125 | A heap out-of-bounds read security issue exists in the query planning component of MongoDB Server. An authenticated user with database read and write privileges can trigger the sec |
| CVE-2026-82067 | Analyzed | 未確認 | CWE-178 | Improper handling of case sensitivity in the configuration validation component of MongoDB Server may cause the authorization subsystem to remain in a default disabled state during |
| CVE-2026-82068 | Analyzed | 未確認 | CWE-617 | A security issue in MongoDB Server allows an authenticated user with write privileges to trigger a persistent fatal assertion crash by sending specially crafted retryable write com |
| CVE-2026-82069 | Analyzed | 未確認 | CWE-212 | A security issue in MongoDB Server's query statistics serialization on the router allows users with monitoring privileges to access unredacted search query text from other users' o |
| CVE-2026-82070 | Analyzed | 未確認 | CWE-522 | A security issue in MongoDB Server's diagnostic reporting interface allows an authenticated user with monitoring privileges to access insufficiently protected credentials from conc |
| CVE-2026-82071 | Analyzed | 未確認 | CWE-787 | Insufficient validation of storage engine configuration options in MongoDB Server allows an authenticated user with write privileges to supply crafted parameters during collection |
| CVE-2026-82073 | Analyzed | 未確認 | CWE-863 | A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization checks and access data fro |
| CVE-2026-82074 | Analyzed | 未確認 | CWE-863 | MongoDB Server contains an incorrect authorization vulnerability in the aggregation framework. An authenticated user with minimal privileges can craft a specially formatted aggrega |
| CVE-2026-82075 | Analyzed | 未確認 | CWE-770 | An uncontrolled resource consumption weakness exists in the request-handling path of the MongoDB sharded-cluster router process. A client that has network access to a router port a |
| CVE-2026-82076 | Analyzed | 未確認 | CWE-190 | An integer overflow in the query planning component of MongoDB Server can allow an authenticated user with ordinary database-level read/write privileges to bypass an internal resou |
| CVE-2026-82077 | Awaiting Analysis | 未確認 | CWE-22, CWE-78 | An improper limitation of a pathname to a restricted directory (path traversal) vulnerability in the Scan-to-Fax component of PaperCut NG and PaperCut MF allows an authenticated ad |
| CVE-2026-82079 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability in the Nintendo Switch local wireless networking functionality may allow an attacker within wireless range to execute arbitrary code usi |
| CVE-2026-82092 | Analyzed | 未確認 | CWE-36 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an absolute-path traversal vulnerability. |
| CVE-2026-82093 | Analyzed | 未確認 | CWE-502 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to unsafe deserialization of untrusted data. |
| CVE-2026-82094 | Analyzed | 未確認 | CWE-22 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to traverse directories on the system due to improper limitation of a pathname to a restrict |
| CVE-2026-82095 | Analyzed | 未確認 | CWE-78 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS c |
| CVE-2026-82097 | Analyzed | 未確認 | CWE-918 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to a Server-Side Request Forgery (SSRF) vulnerability. |
| CVE-2026-82098 | Analyzed | 未確認 | CWE-78 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an |
| CVE-2026-82099 | Analyzed | 未確認 | CWE-78 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS c |
| CVE-2026-82100 | Analyzed | 未確認 | CWE-22 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability. |
| CVE-2026-82107 | Analyzed | 未確認 | CWE-287 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information and bypass security restrictions due to improper authenticat |
| CVE-2026-82124 | Deferred | 未確認 | CWE-200 | The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not check whether a post is password protected before including its content in the structured data it ge |
| CVE-2026-82125 | Deferred | 未確認 | CWE-639 | The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not correctly verify the ownership or the moderation status of a comment before returning its content, a |
| CVE-2026-82126 | Deferred | 未確認 | CWE-284 | The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not check that a user is allowed to edit the specific post they request schema generation for, allowing |
| CVE-2026-82127 | Deferred | 未確認 | CWE-79 | The Schema & Structured Data for WP & AMP WordPress plugin before 1.67 does not perform a capability check when saving several of its fields, nor escape them when outputting them b |
| CVE-2026-82157 | Awaiting Analysis | 未確認 | CWE-295 | Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network acces |
| CVE-2026-82163 | Awaiting Analysis | 未確認 | CWE-276 | Dell Command | Intel vPro Out of Band, versions prior to 4.7.2, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentiall |
| CVE-2026-82164 | Awaiting Analysis | 未確認 | CWE-732 | Dell Trusted Device Client, versions prior to 8.1.359.0, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access |
| CVE-2026-82165 | Awaiting Analysis | 未確認 | CWE-276 | Dell Command | Integration Suite for System Center, versions prior to 6.7.2, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access cou |
| CVE-2026-82180 | Deferred | 未確認 | CWE-290, CWE-295 | In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 when the MQTT API is enabled with the certificate authentication policy, CertificateMqttFilter parses an X.509 certificate that th |
| CVE-2026-82182 | Deferred | 未確認 | CWE-89 | The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.133 does not sanitise a user supplied list of identifiers before using it in a SQL query, allowing administrat |
| CVE-2026-82183 | Deferred | 未確認 | CWE-287 | The OAuth Single Sign On WordPress plugin before 7.0.1 does not verify the identity assertion returned by its Steam single sign-on flow, allowing unauthenticated attackers to log |
| CVE-2026-82184 | Deferred | 未確認 | CWE-862 | The WPLP Cookie Consent WordPress plugin before 4.4.2 does not have any authorisation or CSRF checks when storing visitor consent state, and the code that does so runs on every fr |
| CVE-2026-82185 | Deferred | 未確認 | CWE-862 | The WPLP Cookie Consent WordPress plugin before 4.4.2 does not have capability or nonce checks on some of its A/B testing actions, allowing any authenticated user, such as a subsc |
| CVE-2026-82186 | Deferred | 未確認 | CWE-89 | The WPLP Cookie Consent WordPress plugin before 4.4.2 does not properly validate a pagination parameter before using it in a SQL query, allowing users with administrator privilege |
| CVE-2026-82187 | Deferred | 未確認 | CWE-434 | The Web to Print Online Designer WordPress plugin before 2.15.0 does not validate the type or extension of uploaded files, and hands the token protecting those uploads to any visit |
| CVE-2026-82189 | Deferred | 未確認 | CWE-472, CWE-602 | Joomla Extension - j2commerce.com - Any order can be marked Failed by anyone in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7 - Unauthenticated denial-of-service against the order |
| CVE-2026-82190 | Deferred | 未確認 | CWE-1241 | Joomla Extension - j2commerce.com - Predictable/forgeable order access token in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7 - Anyone who obtains the site's Joomla `secret` can c |
| CVE-2026-82191 | Deferred | 未確認 | CWE-1241 | Joomla Extension - j2commerce.com - Unescaped request data reflected into PayPal notify redirect in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7 - A crafted link to the paypal no |
| CVE-2026-82193 | Deferred | 未確認 | CWE-22 | The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.134 does not validate a user supplied file name before using it to build a write path, allowing administrators |
| CVE-2026-82194 | Deferred | 未確認 | CWE-73 | The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.134 does not validate a user supplied path before using it in a file deletion routine, allowing administrators |
| CVE-2026-82195 | Deferred | 未確認 | CWE-862 | The 10Web Booster WordPress plugin before 2.34.0 does not restrict access to the routine which issues the shared secret that authenticates its cloud connection, disclosing that se |
| CVE-2026-82208 | Modified | 未確認 | CWE-295 | With the wolfSSL backend, when CA caching is enabled and an `CURLOPT_SSL_CTX_FUNCTION` callback replaces the trust store, libcurl can silently reinstall the cached store after the |
| CVE-2026-82209 | Modified | 未確認 | CWE-201 | When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a `Set-Cookie` header where the `Domain` attribute explicitly matches |
| CVE-2026-82213 | Deferred | 未確認 | CWE-639 | The Nexi XPay Build WordPress plugin from 7.6.1 to 7.6.2 does not verify that the saved payment token being requested belongs to the current user, allowing unauthenticated attacker |
| CVE-2026-82215 | Deferred | 未確認 | CWE-345 | The Payment Gateway PayPay for WooCommerce WordPress plugin from 0.5 to 0.9.3 does not verify the authenticity of the payment notifications it receives before acting on them, allow |
| CVE-2026-82223 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in WP Event SOlution <= 4.1.22 versions. |
| CVE-2026-82232 | Deferred | 未確認 | CWE-89 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Apache Syncope. An administrator with adequate entitlements can achieve exe |
| CVE-2026-82293 | Awaiting Analysis | 未確認 | CWE-863 | Incorrect Authorization (CWE-863) in the Kibana machine learning feature can lead to unauthorized resource consumption via Exploiting Incorrectly Configured Access Control Security |
| CVE-2026-82294 | Analyzed | 未確認 | CWE-400 | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). |
| CVE-2026-82298 | Awaiting Analysis | 未確認 | CWE-863 | Incorrect Authorization (CWE-863) in Kibana can lead to denial of service via Exploiting Incorrectly Configured Access Control Security Levels (CAPEC-180). |
| CVE-2026-82299 | Awaiting Analysis | 未確認 | CWE-863 | Incorrect Authorization (CWE-863) in Kibana can lead to information disclosure via Exploiting Incorrectly Configured Access Control Security Levels (CAPEC-180). |
| CVE-2026-82300 | Analyzed | 未確認 | CWE-400 | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). |
| CVE-2026-82302 | Awaiting Analysis | 未確認 | CWE-863 | Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized configuration modification via Exploiting Incorrectly Configured Access Control Security Levels (CAPEC-180). |
| CVE-2026-82304 | Deferred | 未確認 | CWE-89 | The Music Store WordPress plugin before 1.4.5 does not sanitise and escape user input before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated |
| CVE-2026-82305 | Deferred | 未確認 | CWE-639 | The YITH WooCommerce Wishlist WordPress plugin before 4.18.1 does not verify that a user is authorised to rename a given wishlist, allowing unauthenticated users to rename any wish |
| CVE-2026-82307 | Deferred | 未確認 | CWE-89 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Dolusoft Software Technologies SOPLOG allows SQL Injection. This issue affect |
| CVE-2026-82309 | Deferred | 未確認 | CWE-405, CWE-770 | Robots::Validate versions from 0.3.2 before 0.3.11 for Perl allow unbounded outbound DNS queries per validation via a forward-confirmation loop that does not bound the names it que |
| CVE-2026-82310 | Analyzed | 未確認 | CWE-613 | Apache Airflow FAB provider: deactivating a user account does not stop tokens issued to that account before deactivation. Password authentication correctly rejects the disabled acc |
| CVE-2026-82311 | Analyzed | 未確認 | CWE-613 | Apache Airflow FAB provider: resetting a user's password does not delete that user's existing database-backed sessions, despite documented behaviour that it does. The cleanup compa |
| CVE-2026-82312 | Awaiting Analysis | 未確認 | CWE-412, CWE-732 | OpenVPN 2.0.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to cause a denial of service via a NULL DACL on named IPC objects |
| CVE-2026-82323 | Deferred | 未確認 | CWE-639 | Authorization bypass through User-Controlled key vulnerability in Enocta Educational Technologies Inc. Enocta Platform allows Exploitation of Trusted Identifiers. This issue affec |
| CVE-2026-82325 | Awaiting Analysis | 未確認 | CWE-415, CWE-416 | A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated users to cause a system crash via crafted control messages |
| CVE-2026-82326 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Enocta Educational Technologies Inc. Enocta Platform allows XSS Targeting HTML |
| CVE-2026-82331 | Awaiting Analysis | 未確認 | CWE-59 | Improper link resolution before file access ('link following') vulnerability in the `tar` source plugin of Apache BuildStream running on Python < 3.12 allows malicious source tarba |
| CVE-2026-82340 | Analyzed | 未確認 | CWE-94 | IBM Guardium Data Protection 12.2 is vulnerable to unauthenticated insecure deserialization and attacker-controlled reflective method dispatch in the Change Audit System (CAS) list |
| CVE-2026-82348 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key in Apache Roller 6.1.5 allows an authenticated user with authoring rights on one weblog to read, modify, or delete resources belong |
| CVE-2026-82355 | Analyzed | 未確認 | CWE-384 | When a request to the Airflow core API carries both a session cookie and an explicit `Authorization: Bearer` token, Airflow resolves the caller from the cookie and ignores the bear |
| CVE-2026-82356 | Awaiting Analysis | 未確認 | CWE-326, CWE-327 | Imprivata EAM <=26.2.6 lacks the ability to rotate its RSA key pair after deployment when generating an X.509 certificate. Using an RSA key pair indefinitely for certificate genera |
| CVE-2026-82368 | Awaiting Analysis | 未確認 | CWE-284 | Insecure access controls on internal service ports in Brocade SANnav versions before 3.0.1a allow local, non-administrative host users to communicate directly with backend manageme |
| CVE-2026-82369 | Awaiting Analysis | 未確認 | CWE-78 | Insufficient input sanitization of shell metacharacters in the Brocade SANnav CLI scripting component permits authenticated users to break out of restricted execution contexts on m |
| CVE-2026-82370 | Awaiting Analysis | 未確認 | CWE-77 | Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service permits network-adjacent attackers to execute arbitrary administrative switch CLI commands |
| CVE-2026-82371 | Awaiting Analysis | 未確認 | CWE-532 | Plaintext exposure of sensitive authentication data in Brocade SANnav discovery service log files enables individuals with file read access to retrieve administrative switch creden |
| CVE-2026-82372 | Awaiting Analysis | 未確認 | CWE-532 | Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav versions before 3.0.1a results in pre-shared keys being recorded in application |
| CVE-2026-82375 | Deferred | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) in Apache Roller 6.1.5 allows an authenticated user with entry-editing rights on a weblog to cause outbound HTTP requests to attacker-chosen dest |
| CVE-2026-82376 | Deferred | 未確認 | CWE-611 | Improper Restriction of XML External Entity Reference in Apache Roller 6.1.5 allows a user with entry-editing rights on a weblog to cause the server to parse an attacker-influenced |
| CVE-2026-82377 | Deferred | 未確認 | CWE-862 | Missing Authorization in Apache Roller 6.1.5 allows an authenticated user to read, modify, or delete weblog content belonging to other weblogs through the legacy XML-RPC Blogger an |
| CVE-2026-82378 | Deferred | 未確認 | CWE-863 | Incorrect Authorization in the OAuth 1.0a authorization endpoint of Apache Roller 6.1.5 allows an unauthenticated remote attacker who learns an outstanding request token for a conf |
| CVE-2026-82379 | Deferred | 未確認 | CWE-294 | Authentication Bypass by Capture-replay in Apache Roller 6.1.5 allows an attacker who captures a valid WSSE digest authentication header to replay it and gain the victim's AtomPub |
| CVE-2026-82380 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) in Apache Roller 6.1.5 allows a remote attacker to cause a logged-in user to perform state-changing actions under the victim's authority, because |
| CVE-2026-82381 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows a user with authoring rights on a weblog to store crafted content |
| CVE-2026-82382 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows a remote attacker to perform reflected cross-site scripting again |
| CVE-2026-82383 | Deferred | 未確認 | CWE-306 | Missing Authentication for Critical Function in Apache Roller 6.1.5 allows an unauthenticated remote attacker to persistently change a site-global configuration value (the frontpag |
| CVE-2026-82384 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data in Apache Roller 6.1.5 allows an unauthenticated remote attacker to cause deserialization of attacker-controlled bytes, because the XML-RPC endpoi |
| CVE-2026-82385 | Deferred | 未確認 | CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor in Apache Roller 6.1.5 allows a weblog administrator to read files on the application classpath, including Roller configu |
| CVE-2026-82386 | Deferred | 未確認 | CWE-611 | Improper Restriction of XML External Entity Reference in Apache Roller 6.1.5 allows a weblog administrator to read files readable by the Roller process and reach internal network a |
| CVE-2026-82387 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows a user with media-upload rights to store active content on Roller |
| CVE-2026-82399 | Awaiting Analysis | 未確認 | CWE-770 | CoreDNS is a DNS server written in Go. Prior to 1.14.7, the DNS-over-HTTPS, DNS-over-HTTP/3, DNS-over-QUIC, and DNS-over-gRPC request paths in plugin/pkg/doh/doh.go, core/dnsserver |
| CVE-2026-82404 | Deferred | 未確認 | CWE-1321 | TOON is a compact, human-readable serialization of JSON data for LLM prompts. Prior to 2.3.1, decoding attacker-controlled TOON with a __proto__, constructor, or prototype key wrot |
| CVE-2026-82405 | Deferred | 未確認 | CWE-863 | Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, the KleverUpdateAccountPermission built-in authorizes replacement of a target account's permi |
| CVE-2026-82406 | Deferred | 未確認 | CWE-841 | Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, the native marketplace function core/kapp/market/market.go Buy does not check IsClaimed befor |
| CVE-2026-82407 | Deferred | 未確認 | CWE-20 | Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, core/kapp/validators/validators.go Register and the runtime validator update path accept a su |
| CVE-2026-82409 | Deferred | 未確認 | CWE-116 | Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, indexer/common.go serializedDataForUpdateAccounts places the attacker-controlled acc.Name val |
| CVE-2026-82410 | Deferred | 未確認 | CWE-248 | Pocketbase is an open source web backend written in go. Prior to 0.22.48 and 0.39.7, PocketBase's panic-recovery middleware covers regular request handling but not internal child a |
| CVE-2026-82412 | Deferred | 未確認 | CWE-78 | ntopng is a web-based network traffic monitoring application. Prior to 6.7.260717, the vulnerability-scan endpoints scripts/lua/rest/v2/add/host/to_scan.lua and scripts/lua/rest/v2 |
| CVE-2026-82426 | Deferred | 未確認 | CWE-22 | Description Nimbus accepted the `uploadedJarLocation` argument of `submitTopology` / `submitTopologyWithOpts` as a server-side path and opened it directly, without checking that i |
| CVE-2026-82427 | Deferred | 未確認 | CWE-22 | Description A topology's `topology.blobstore.map` lets the submitter choose a local name for each blob that the supervisor localises. That name was used to build a path under the |
| CVE-2026-82428 | Deferred | 未確認 | CWE-22 | Description Dependency artifacts uploaded with `storm jar --artifacts` were stored under a blob key derived only from the Maven coordinate, for example `dep---.jar`. The key was t |
| CVE-2026-82429 | Deferred | 未確認 | CWE-367 | Description The setuid-root `worker-launcher` binary adjusts ownership and permissions of worker directories by walking the tree with FTS and calling `lchown` and `chmod` on each |
| CVE-2026-82430 | Deferred | 未確認 | CWE-367 | Description When launching a Docker or OCI worker, the setuid-root `worker-launcher` first changes ownership of the entire worker directory to the untrusted topology user, and onl |
| CVE-2026-82431 | Deferred | 未確認 | CWE-863 | Description `SimpleACLAuthorizer` evaluated the user-level command set by returning early when `nimbus.users` was empty, before `nimbus.groups` was considered. An operator who res |
| CVE-2026-82432 | Deferred | 未確認 | CWE-863 | Description Nimbus validated `topology.blobstore.map` against the calling subject at submission time only. The rebalance operation accepts configuration overrides and stripped a s |
| CVE-2026-82433 | Deferred | 未確認 | CWE-522, CWE-862 | Description `getNimbusConf` returned the complete daemon configuration without redaction after only a user-level authorization check. Where the cluster is configured with them, th |
| CVE-2026-82434 | Deferred | 未確認 | CWE-522, CWE-532 | Description When ZooKeeper authentication is configured, Storm deliberately retains `storm.zookeeper.topology.auth.payload` in the topology configuration, because workers need it. |
| CVE-2026-82435 | Deferred | 未確認 | CWE-789 | Description The worker's Netty message decoder is installed ahead of the SASL authentication handlers in the pipeline and acts on frames before any authentication has taken place. |
| CVE-2026-82437 | Deferred | 未確認 | CWE-862 | Description The Logviewer offers `logs.users` and `logs.groups` so operators can control who may read log content. For daemon logs those settings were not applied: the access deci |
| CVE-2026-82438 | Deferred | 未確認 | CWE-346, CWE-942 | Description Three separate mechanisms allowed a web page on an unrelated origin to read responses that Storm's HTTP components served to an authenticated user. The Logviewer refl |
| CVE-2026-82439 | Deferred | 未確認 | CWE-770 | Description The DRPC server kept a map from function name to request queue and created an entry the first time a function name was seen. No code path ever removed an entry: reques |
| CVE-2026-82441 | Deferred | 未確認 | CWE-20, CWE-639 | Description A submitted topology carries two lists of blobstore keys, `dependency_jars` and `dependency_artifacts`, which the client fills in after uploading the corresponding blo |
| CVE-2026-82443 | Analyzed | 未確認 | CWE-918 | Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit th |
| CVE-2026-82514 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-82519 | Deferred | 未確認 | CWE-862 | Really Simple Security plugin for WordPress before 9.8.2 contains a missing authorization check vulnerability that allows authenticated low-privileged attackers to bypass enforced |
| CVE-2026-82520 | Deferred | 未確認 | CWE-409 | parsedmarc before 11.0.1 decompresses gzip and ZIP attachments in a single unbounded read with no limit on decompressed output size. Because parsedmarc automatically processes inco |
| CVE-2026-82521 | Deferred | 未確認 | CWE-22 | parsedmarc 9.0.6 before 11.0.1 writes forensic report sample files using an output path derived from the email subject. When the subject consists entirely of path traversal sequenc |
| CVE-2026-82522 | Deferred | 未確認 | CWE-681 | libjxl before 0.12 contains an integer underflow vulnerability in the container box parser that allows remote attackers to inject arbitrary metadata by exploiting 64-bit box size t |
| CVE-2026-82524 | Deferred | 未確認 | CWE-434 | UnoPim before 2.1.5 contains an authenticated file upload vulnerability that allows authenticated administrators to upload arbitrary PHP files through the TinyMCE image upload endp |
| CVE-2026-82525 | Deferred | 未確認 | CWE-611, CWE-829 | Exterro FTK Imager before 8.3 contains an XML external entity (XXE) injection vulnerability that allows attackers to read arbitrary files from the host filesystem by embedding mali |
| CVE-2026-82526 | Deferred | 未確認 | CWE-89 | R2R through 3.6.6 contains a stacked SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL statements by manipulating the index name parameter |
| CVE-2026-82527 | Deferred | 未確認 | CWE-89 | R2R through 3.6.6 contains a SQL injection vulnerability that allows unauthenticated attackers to inject SQL predicates into the chunks search query by manipulating the filter key |
| CVE-2026-82530 | Awaiting Analysis | 未確認 | CWE-290 | IP2Location Country Blocker plugin for WordPress before 2.45.0 contains an access control bypass vulnerability that allows unauthenticated remote attackers to circumvent IP-based r |
| CVE-2026-82533 | Deferred | 未確認 | CWE-807 | DeepSeek Harness before 0.1.2-alpha.1 contains an authentication bypass vulnerability that grants unauthenticated access to its local HTTP agent-control API by accepting a client-s |
| CVE-2026-82535 | Deferred | 未確認 | CWE-79 | Chamilo LMS before 1.11.42 and 3.0.0 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious script payloads into survey answ |
| CVE-2026-82536 | Deferred | 未確認 | CWE-184 | Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability in the shell command parsing logic that allows attackers to execute denied shell commands by exploiting the om |
| CVE-2026-82537 | Deferred | 未確認 | CWE-436 | Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability that allows attackers to execute denied shell commands by exploiting a word-boundary mismatch in comment handl |
| CVE-2026-82538 | Deferred | 未確認 | CWE-89 | ILIAS before versions 9.22, 10.10, and 11.3 contains a SQL injection vulnerability in the repository trash table where the table navigation sort field from HTTP requests is passed |
| CVE-2026-82546 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows an unauthenticated remote attacker to store a crafted comment-aut |
| CVE-2026-82560 | Deferred | 未確認 | CWE-835 | Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width. Each =over adds its i |
| CVE-2026-82561 | Analyzed | 未確認 | CWE-862 | Apache NiFi 1.5.0 through 2.11.0 provide REST API methods that replace the entire contents of a Process Group using a client-supplied flow definition, covering Process Group flow r |
| CVE-2026-82563 | Deferred | 未確認 | CWE-290 | An attacker could impersonate the camera and place themselves in a man-in-the-middle or device-emulation position. This permits manipulation of device status responses, observation |
| CVE-2026-82566 | Deferred | 未確認 | CWE-613 | The Botslab G980H dash camera firmware contains a session management vulnerability in which authentication state can remain valid after the associated client connection has been te |
| CVE-2026-82567 | Deferred | 未確認 | CWE-862 | The myPRO Manager notification gateway exposes an unauthenticated HTTP endpoint used to send SMS messages through a connected GSM modem. The endpoint is accessible over the network |
| CVE-2026-82578 | Awaiting Analysis | 未確認 | CWE-611 | When XML batch processing is turned on and the XPath option is selected, the raw batch input goes through a default XPath/JAXP setup with no entity restrictions, so XXE injection c |
| CVE-2026-82582 | Deferred | 未確認 | CWE-639 | An authorization bypass vulnerability exists in SHIRASAGI through a user-controlled key, which may allow an unauthorized attacker to retrieve files from the groupware's shared file |
| CVE-2026-82583 | Awaiting Analysis | 未確認 | CWE-89 | NextGen Connect (Mirth Connect) versions 4.7.1 and earlier allow an authenticated user to execute arbitrary SQL through a Database Connector API, which could result in disclosure o |
| CVE-2026-82584 | Deferred | 未確認 | CWE-150 | Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in ash-project igniter allows a malicious package publisher to forge the mix igniter.install confirmatio |
| CVE-2026-82585 | Deferred | 未確認 | CWE-319 | The Botslab G980H dash camera firmware transmits sensitive information over unencrypted HTTP and RTSP connections. An attacker capable of intercepting communications on the device' |
| CVE-2026-82586 | Deferred | 未確認 | CWE-424 | Improper Protection of Alternate Path vulnerability in ash-project ash_lua allows a user-supplied Lua script to read attributes that are not on the exposed-field allow-list. AshLu |
| CVE-2026-82617 | Analyzed | 未確認 | CWE-1333 | The two built-in name-finder patterns exposed by opennlp.tools.namefind.RegexNameFinderFactory - DEFAULT_REGEX_NAME_FINDER.EMAIL and DEFAULT_REGEX_NAME_FINDER.URL - contain ambiguo |
| CVE-2026-82672 | Deferred | 未確認 | CWE-444 | Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in elixir-mint mint allows a malicious HTTP/1 server to desynchronize a strict interm |
| CVE-2026-82684 | Awaiting Analysis | 未確認 | CWE-862 | Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a Missing Authorization vulnerability. This could allow an attacker to extract system credentials, confi |
| CVE-2026-82685 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in team-alembic AshAuthentication allows an authenticated attacker to overwrite and confirm another user's email addr |
| CVE-2026-82708 | Deferred | 未確認 | CWE-22 | The Botslab G980H dash camera firmware contains a path traversal vulnerability in its HTTP server. An attacker with access to the device's WiFi network could submit a crafted reque |
| CVE-2026-82710 | Deferred | 未確認 | CWE-150 | Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in ash-project usage_rules allows a malicious package publisher to inject terminal control sequences int |
| CVE-2026-82712 | Awaiting Analysis | 未確認 | CWE-352 | Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a cross-site request forgery vulnerability. This could allow an attacker to perform state changing opera |
| CVE-2026-82716 | Deferred | 未確認 | CWE-532 | The Botslab G980H dash camera firmware includes sensitive configuration information, including WiFi credentials, in diagnostic logs generated during the support process. These logs |
| CVE-2026-82717 | Analyzed | 未確認 | CWE-122 | In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under certain systems and compilation options could le |
| CVE-2026-82720 | Analyzed | 未確認 | CWE-416 | NLnet Labs Unbound 1.12.0 up to and including 1.26.0 has a use-after-free vulnerability when compiled for DNS-over-HTTPs support with '--with-libnghttp2'. During failure code paths |
| CVE-2026-82723 | Deferred | 未確認 | CWE-532 | Insertion of Sensitive Information into Log File vulnerability in team-alembic AshAuthentication allows disclosure of user password digests to readers of the audit store. The audi |
| CVE-2026-82728 | Deferred | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint allows a remote HTTP server to exhaust memory on the client host and cause a denial of servic |
| CVE-2026-82729 | Deferred | 未確認 | CWE-407 | Inefficient Algorithmic Complexity vulnerability in elixir-mint mint allows a remote HTTP server to exhaust CPU on the client host and cause a denial of service. parse_hex_prefix/ |
| CVE-2026-82730 | Deferred | 未確認 | CWE-863 | Incorrect Authorization vulnerability in ash-project ash_typescript allows an unauthorized RPC caller to read attribute values that Ash field policies denied. When a field policy |
| CVE-2026-82731 | Deferred | 未確認 | CWE-601 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in ash-project ash_typescript allows an attacker who controls a path-parameter value to redirect a generated clien |
| CVE-2026-82732 | Deferred | 未確認 | CWE-20 | Improper Input Validation vulnerability in ash-project ash_typescript allows a remote attacker to submit argument values outside a declared allowlist or bound on typed-controller r |
| CVE-2026-82733 | Deferred | 未確認 | CWE-209 | Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_typescript allows an unauthenticated attacker to read internal application data from a |
| CVE-2026-82734 | Deferred | 未確認 | CWE-1284 | Improper Validation of Specified Quantity in Input vulnerability in ash-project ash allows an attacker to submit a non-finite decimal value that bypasses numeric bounds constraints |
| CVE-2026-82735 | Deferred | 未確認 | CWE-400 | Uncontrolled Resource Consumption vulnerability in ash-project ash allows an attacker to force an expensive regular expression to run on input that a length constraint should have |
| CVE-2026-82736 | Deferred | 未確認 | CWE-180 | Incorrect Behavior Order: Validate Before Canonicalize vulnerability in ash-project ash lets an attacker store a case-insensitive string value that violates its length or match con |
| CVE-2026-82737 | Deferred | 未確認 | CWE-190 | Integer Overflow or Wraparound vulnerability in ash-project ash lets an attacker corrupt a stored vector and crash later reads of it by submitting a vector with more than 65,535 el |
| CVE-2026-82738 | Deferred | 未確認 | CWE-20 | Improper Input Validation vulnerability in ash-project ash allows an attacker to persistently deny reads of a record by storing a non-version-7 UUID in an Ash.Type.UUIDv7 attribute |
| CVE-2026-82739 | Deferred | 未確認 | CWE-209 | Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash discloses the stored value of a confirmed field to an actor who fails its confirmation |
| CVE-2026-82740 | Deferred | 未確認 | CWE-20 | Improper Input Validation vulnerability in ash-project ash fails to enforce the outer array constraints on a doubly-nested {:array, {:array, type}} attribute, letting invalid input |
| CVE-2026-82741 | Deferred | 未確認 | CWE-1287 | Improper Validation of Specified Type of Input vulnerability in ash-project ash lets an attacker confuse the stored type tag of an Ash.Type.Union value that uses storage: :map_with |
| CVE-2026-82742 | Deferred | 未確認 | CWE-400 | Uncontrolled Resource Consumption vulnerability in ash-project ash lets an attacker exhaust node memory by matching a filter that spans multiple to-many relationships in memory. A |
| CVE-2026-82743 | Deferred | 未確認 | CWE-400 | Uncontrolled Resource Consumption vulnerability in ash-project ash lets a slow asynchronous read spin a scheduler thread at full CPU while the framework waits for it. Ash.Actions. |
| CVE-2026-82744 | Deferred | 未確認 | CWE-636 | Not Failing Securely (Failing Open) vulnerability in ash-project ash skips an Ash.Reactor change when the guard controlling it raises, so a change meant to run does not. An Ash.Re |
| CVE-2026-82745 | Deferred | 未確認 | CWE-284 | Improper Access Control vulnerability in ash-project ash lets a create action overwrite an existing record when the ETS or Mnesia data layer is used, because neither enforced prima |
| CVE-2026-82746 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in ash-project ash allows an actor to update records forbidden by resource policies through the atomic path of Ash.update_many/4. Ash.update_ma |
| CVE-2026-82747 | Deferred | 未確認 | CWE-863 | Incorrect Authorization vulnerability in ash-project ash returns records that a runtime read policy denies to any actor. When a resource has an access_type :runtime read policy (a |
| CVE-2026-82748 | Deferred | 未確認 | CWE-863 | Incorrect Authorization vulnerability in ash-project ash authorizes an aggregate under one read action while computing it under another, so an aggregate can run with policies that |
| CVE-2026-82749 | Deferred | 未確認 | CWE-863 | Incorrect Authorization vulnerability in ash-project ash widens a relationship's parent(...) scoping filter to match unintended records when the referenced parent field cannot be r |
| CVE-2026-82750 | Deferred | 未確認 | CWE-1284 | Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per sponsored payment by a large multi |
| CVE-2026-82751 | Deferred | 未確認 | CWE-1284 | Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per sponsored payment by a large multi |
| CVE-2026-82752 | Deferred | 未確認 | CWE-1284 | Improper Validation of Specified Quantity in Input vulnerability in ash-project ash allows an attacker to store a value of arbitrary size in an attribute whose length constraint sh |
| CVE-2026-82753 | Deferred | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_authentication_oauth2_server allows an unauthenticated attacker to exhaust database storage an |
| CVE-2026-82754 | Deferred | 未確認 | CWE-424 | Improper Protection of Alternate Path vulnerability in ash-project ash_authentication_oauth2_server exposes the state-changing OAuth endpoints under an unintended URL prefix, bypas |
| CVE-2026-82755 | Deferred | 未確認 | CWE-524 | Use of Cache Containing Sensitive Information vulnerability in ash-project ash_authentication_oauth2_server allows a shared HTTP cache to serve one tenant's OAuth discovery metadat |
| CVE-2026-82756 | Deferred | 未確認 | CWE-116 | Improper Encoding or Escaping of Output vulnerability in ash-project ash_authentication_oauth2_server allows an unauthenticated attacker to inject arbitrary authentication paramete |
| CVE-2026-82757 | Deferred | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in ash-project ash_authentication_oauth2_server allows an attacker who controls a client metadata URL and its DNS to make the serve |
| CVE-2026-82758 | Deferred | 未確認 | CWE-287 | Improper Authentication vulnerability in ash-project ash_authentication_oauth2_server allows an unauthenticated attacker to register OAuth clients even when Dynamic Client Registra |
| CVE-2026-82759 | Deferred | 未確認 | CWE-760 | Use of a One-Way Hash with a Predictable Salt vulnerability in team-alembic AshAuthentication allows readers of the audit store to recover the client IP addresses that the audit lo |
| CVE-2026-82760 | Deferred | 未確認 | CWE-407 | Inefficient Algorithmic Complexity vulnerability in team-alembic AshAuthentication allows an unauthenticated attacker to exhaust CPU and memory via an oversized base62 segment in a |
| CVE-2026-82761 | Deferred | 未確認 | CWE-367 | Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in team-alembic AshAuthentication allows an attacker holding a leaked magic link to replay its single-use token and |
| CVE-2026-82762 | Deferred | 未確認 | CWE-78 | Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerabi |
| CVE-2026-82763 | Deferred | 未確認 | CWE-79 | Cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary script may be executed on a lo |
| CVE-2026-82764 | Deferred | 未確認 | CWE-352 | Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a specially crafted page while logged in to the affected product, unintended operations |
| CVE-2026-82765 | Deferred | 未確認 | CWE-23 | Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, arbitrary files on the server may be viewed and/o |
| CVE-2026-82766 | Deferred | 未確認 | CWE-78 | Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in SGA1000. If this vulnerability is exploited, an arbitrary OS command may |
| CVE-2026-82767 | Deferred | 未確認 | CWE-79 | Cross-site scripting vulnerability exists in SGA1000. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser. |
| CVE-2026-82768 | Deferred | 未確認 | CWE-23 | Path traversal vulnerability exists in SGA1000. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the pro |
| CVE-2026-82769 | Deferred | 未確認 | CWE-79 | Cross-site scripting vulnerability exists in Contec RP-WAH-SR Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser. |
| CVE-2026-82770 | Deferred | 未確認 | CWE-120 | Buffer overflow vulnerability exists in Contec RP-WAH-SR Series. If a remote attacker sends a specially crafted request to the product's web service, an arbitrary program may be ex |
| CVE-2026-82771 | Deferred | 未確認 | CWE-79 | Cross-site scripting vulnerability exists in Contec EC1000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser. |
| CVE-2026-82772 | Deferred | 未確認 | CWE-120 | Buffer overflow vulnerability exists in Contec EC1000 series. If a remote attacker sends a specially crafted request to the product's web service, an arbitrary program may be execu |
| CVE-2026-82773 | Deferred | 未確認 | CWE-79 | Cross-site scripting vulnerability exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. If this vulnerability is exploited, an arbitrary script may be execut |
| CVE-2026-82774 | Deferred | 未確認 | CWE-78 | Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. If this |
| CVE-2026-82775 | Deferred | 未確認 | CWE-548 | An exposure of information through directory listing issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. Accessing a specific URL on this product may |
| CVE-2026-82776 | Deferred | 未確認 | CWE-79 | Cross-site scripting vulnerability exists in CONPROSYS PAC Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser. |
| CVE-2026-82777 | Deferred | 未確認 | CWE-78 | Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS PAC Series. If this vulnerability is exploited, an arbitrary OS |
| CVE-2026-82778 | Deferred | 未確認 | CWE-548 | An exposure of information through directory listing issue exists in CONPROSYS PAC Series. Accessing a specific URL on this product may allow a remote unauthenticated attacker to o |
| CVE-2026-82779 | Deferred | 未確認 | CWE-78 | Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS TM Series. If this vulnerability is exploited, an arbitrary OS |
| CVE-2026-82780 | Deferred | 未確認 | CWE-434 | Unrestricted upload of file with dangerous type issue exists in CONPROSYS TM Series. If a specially crafted file is uploaded by a remote authenticated attacker, an arbitrary comman |
| CVE-2026-82781 | Deferred | 未確認 | CWE-79 | Cross-site scripting vulnerability exists in CONPROSYS nano Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser. |
| CVE-2026-82782 | Deferred | 未確認 | CWE-787 | Out-of-bounds write vulnerability exists in CONPROSYS nano Series. Receiving a specially crafted request created and sent by a remote attacker may cause a denial-of-service (DoS) c |
| CVE-2026-82783 | Deferred | 未確認 | CWE-256 | Plaintext storage of a password issue exists in CONPROSYS nano Series . If this vulnerability is exploited, an attacker with physical access to the product may obtain credentials. |
| CVE-2026-82784 | Deferred | 未確認 | CWE-306 | Missing authentication for critical function vulnerability exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*. An attacker may execute a REST API without authentication, |
| CVE-2026-82785 | Deferred | 未確認 | CWE-121 | Stack-based buffer overflow vulnerability exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*. Receiving a specially crafted request created and sent by a remote attacker |
| CVE-2026-82786 | Deferred | 未確認 | CWE-522 | Insufficiently protected credentials issue exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*. If this vulnerability is exploited, sensitive information may be restored |
| CVE-2026-82787 | Deferred | 未確認 | CWE-306 | Missing authentication for critical function vulnerability exists in CPSL-08P1EN. If this vulnerability is exploited, an affected product may be operated by a remote attacker witho |
| CVE-2026-82788 | Deferred | 未確認 | CWE-79 | Cross-site scripting vulnerability exists in CPSL-08P1EN. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser. |
| CVE-2026-82789 | Deferred | 未確認 | CWE-95 | An improper neutralization of directives in dynamically evaluated code ('Eval Injection') issue exists in CONPROSYS HMI System(CHS). If exploited, arbitrary code may be executed by |
| CVE-2026-8279 | Deferred | 未確認 | CWE-862 | The Masteriyo LMS plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the 'delete_item_permissions_check' function in the CoursePr |
| CVE-2026-82790 | Deferred | 未確認 | CWE-79 | Cross-site scripting vulnerability exists in PC-HELPER Wireless I/O DIO-0404RY-LWF and PC-HELPER Wireless I/O DIO-0404RY-LWF-US. If this vulnerability is exploited, an arbitrary sc |
| CVE-2026-82791 | Deferred | 未確認 | CWE-78 | Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this |
| CVE-2026-82792 | Deferred | 未確認 | CWE-79 | Cross-site scripting vulnerability exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary script may be execute |
| CVE-2026-82793 | Deferred | 未確認 | CWE-434 | Unrestricted upload of file with dangerous type issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If a specially crafted file is uploaded by a remote |
| CVE-2026-82794 | Deferred | 未確認 | CWE-78 | SolarView Compact contains an OS command Injection vulnerability in in Schedule Settings. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker |
| CVE-2026-82795 | Deferred | 未確認 | CWE-79 | SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting. If this vulnerability is exploited, an arbitrary OS command may be execu |
| CVE-2026-82796 | Deferred | 未確認 | CWE-79 | SolarView Compact contains a cross-site scripting vulnerability in Image Management. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who |
| CVE-2026-82804 | Deferred | 未確認 | CWE-78 | The scriptPath parameter is incorporated into a /bin/sh -c command without sufficient neutralization of shell metacharacters, allowing shell command substitution and execution. An |
| CVE-2026-82832 | Analyzed | 未確認 | CWE-79 | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation. |
| CVE-2026-82837 | Analyzed | 未確認 | CWE-201, CWE-522 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that certain conditions could have allow |
| CVE-2026-82841 | Deferred | 未確認 | CWE-200 | The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 1.26.8, UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 2.26.8.26 does not have any capabili |
| CVE-2026-82842 | Deferred | 未確認 | CWE-269 | The SAML Single Sign On WordPress plugin before 6.0.0 does not honour the configured criterion for linking an incoming single sign-on identity to a WordPress account, always resol |
| CVE-2026-82843 | Deferred | 未確認 | CWE-287 | The WP OAuth Server ( Login with WordPress ) WordPress plugin before 6.4.0 does not bind the OpenID Connect identity assertion it issues to the authorization grant being exchanged, |
| CVE-2026-82845 | Deferred | 未確認 | CWE-502 | The Masteriyo LMS WordPress plugin before 3.4.1 does not prevent user-supplied values held as metadata from being deserialized when they are read back, allowing users with a minim |
| CVE-2026-82846 | Deferred | 未確認 | CWE-79 | The Masteriyo LMS WordPress plugin before 3.4.0 does not sanitise and escape some course settings before outputting them in a page available to all visitors, allowing users with a |
| CVE-2026-82847 | Deferred | 未確認 | CWE-79 | The Masteriyo LMS WordPress plugin before 3.4.1 does not sanitise and escape one of its course fields before outputting it back in the course editor, allowing users with the instr |
| CVE-2026-82848 | Deferred | 未確認 | CWE-862 | The Masteriyo LMS WordPress plugin before 3.4.0 does not perform any authorization check before returning a course enrolment record over its REST API, allowing unauthenticated use |
| CVE-2026-82849 | Deferred | 未確認 | CWE-639 | The Masteriyo LMS WordPress plugin before 3.4.2 does not verify that the user making the request owns the course-progress records being returned, allowing any authenticated user, |
| CVE-2026-82850 | Deferred | 未確認 | CWE-200 | The Masteriyo LMS WordPress plugin before 3.4.2 does not restrict access to quiz answer keys, allowing any authenticated user, such as a student, to retrieve the correct answers f |
| CVE-2026-82851 | Deferred | 未確認 | CWE-639 | The Masteriyo LMS WordPress plugin before 3.4.1 does not verify ownership of, or restrict the type of, the records a user requests for download, allowing users with the instructor |
| CVE-2026-82883 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Marcus Login With Ajax allows Reflected XSS. This issue affects Login With Aj |
| CVE-2026-82884 | Deferred | 未確認 | CWE-79 | The All in One SEO WordPress plugin before 5.0.0.1 does not sanitise and escape some content stored in posts before rendering it back in the post editor, which could allow users wi |
| CVE-2026-82885 | Undergoing Analysis | 未確認 | CWE-862 | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to gain elevated privileges due to missing authorization in the REST API. |
| CVE-2026-82887 | Undergoing Analysis | 未確認 | CWE-78 | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command |
| CVE-2026-82890 | Undergoing Analysis | 未確認 | CWE-79 | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary JavaScript code due to improper neutralization of input during web page generatio |
| CVE-2026-82892 | Undergoing Analysis | 未確認 | CWE-78 | IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command. |
| CVE-2026-82893 | Undergoing Analysis | 未確認 | CWE-269 | IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management. |
| CVE-2026-82896 | Undergoing Analysis | 未確認 | CWE-22 | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to traverse directories on the system due to a path traversal vulnerability. |
| CVE-2026-82901 | Deferred | 未確認 | CWE-434 | The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Arbitrary File Upload due to insufficient file type validation in the 'uacf7_wpcf7_mail_components' functi |
| CVE-2026-82911 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) in the OrderConfirmController at GET /order/confirm/{order_number} in Roskus Prospero Flow CRM before 5.15.11 allows an unauthenticated attacker t |
| CVE-2026-82915 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System |
| CVE-2026-82918 | Deferred | 未確認 | CWE-611 | XG VisionTerminal, XG-X VisionTerminal, LJ Series Terminal-Software and WI Series Terminal-Software provided by Keyence Corporation improperly restrict XML external entity referenc |
| CVE-2026-82920 | Analyzed | 未確認 | CWE-863 | Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7 fail to enforce authorization boundaries on the access control policy update endpoint which allows a channe |
| CVE-2026-82923 | Deferred | 未確認 | CWE-862 | The AI Website Builder WordPress plugin (GitHub build) 1.0.0 does not perform any authorisation or nonce check on its REST API routes, allowing unauthenticated attackers to install |
| CVE-2026-82925 | Deferred | 未確認 | CWE-502 | The Site Reviews WordPress plugin before 8.3.0 does not prevent request data from being deserialized, and derives the key protecting that data by padding out the site's WordPress n |
| CVE-2026-82926 | Deferred | 未確認 | CWE-476 | NULL pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower: before afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a. |
| CVE-2026-82927 | Deferred | 未確認 | CWE-822 | Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower: before 06994e303637512e39062f3e037c222e8448e57e. |
| CVE-2026-82928 | Deferred | 未確認 | CWE-1242 | mH-DEVELOPER smart home module contains a hardcoded SSH public key in /root/.ssh/authorized_keys, serving as a potential backdoor. The SSH daemon allows root login via key authenti |
| CVE-2026-82929 | Deferred | 未確認 | CWE-321 | mH-DEVELOPER smart home module uses the same hard-coded SSH host keys on every device, with no per-device key generation. An attacker who extracts these keys from the firmware can |
| CVE-2026-82930 | Deferred | 未確認 | CWE-306 | mH-DEVELOPER smart home module does not verify tokens in its authorization middleware, leaving all HTTP API and WebSocket endpoints accessible without authentication. An unauthenti |
| CVE-2026-82932 | Deferred | 未確認 | CWE-923 | mH-DEVELOPER smart home module does not load any firewall rules at startup. This leaves all listening services, including SSH, HTTP, WebSocket, and Node-RED, fully exposed on the L |
| CVE-2026-82933 | Deferred | 未確認 | mH-DEVELOPER smart home module sends its web interface and API traffic over unencrypted HTTP. Passwords, authentication tokens, and device commands are transmitted in cleartext. An | |
| CVE-2026-82935 | Deferred | 未確認 | CWE-1104 | mH-DEVELOPER smart home module ships with an end-of-life, unsupported Debian 8 and Node.js runtime v17.0.1 in its production firmware. This exposes the device to publicly known vul |
| CVE-2026-82936 | Deferred | 未確認 | CWE-770 | mH-DEVELOPER smart home module is vulnerable to Denial of Service due to uncontrolled resource consumption. The Express bodyParser is configured with a 250 MB limit for JSON and UR |
| CVE-2026-82955 | Deferred | 未確認 | CWE-295, CWE-347 | In the current development version of Eclipse aeriOS, which has not yet had an official release, the KrakenD instance included in the API Gateway component had the disable_jwk_secu |
| CVE-2026-82958 | Deferred | 未確認 | CWE-116, CWE-1336, CWE-74 | In Eclipse Ditto versions [1.3.0, 3.9.6], the ImplicitThingCreationMessageMapper of the connectivity service builds a CreateThing command by substituting placeholder values (e.g. { |
| CVE-2026-82964 | Awaiting Analysis | 未確認 | CWE-281, CWE-653, CWE-862 | Improper preservation of permissions in the Avast sandbox minifilter driver (aswSnx.sys) on Windows allows a local, low-privileged attacker executing inside the sandbox to escape f |
| CVE-2026-82967 | Undergoing Analysis | 未確認 | CWE-306 | IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that allows an unauthenticated remote attacker to bypass IP-based access controls and access the Guardiu |
| CVE-2026-82968 | Awaiting Analysis | 未確認 | CWE-639 | A flaw was found in the first-broker-login flow of the Keycloak identity management service. When a user links a social identity provider account to their local account, the verifi |
| CVE-2026-82969 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management |
| CVE-2026-82973 | Awaiting Analysis | 未確認 | CWE-93 | Improper neutralization of CRLF sequences in IMAP command construction in psyb0t/docker-mailbox before 0.4.13 allows a remote unauthenticated attacker, when bearer-token authentica |
| CVE-2026-82980 | Deferred | 未確認 | CWE-287 | Any authenticated user can lock or unlock files they do not own by targeting absolute WebDAV paths of other users. The DAV plugin resolves files from the absolute request URI witho |
| CVE-2026-82982 | Deferred | 未確認 | CWE-840 | The Approval app's approve/reject endpoint is meant to require the file's current etag as a freshness check, preventing an approver from approving or rejecting a file whose content |
| CVE-2026-82985 | Deferred | 未確認 | CWE-284 | The Photos app's filter-based "smart albums" build their file listing using the search configuration (photosSourceFolders) of the user viewing the album, rather than the album owne |
| CVE-2026-82992 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Installation). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerabi |
| CVE-2026-82993 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.61-8.63. Easily exp |
| CVE-2026-82994 | Awaiting Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2. |
| CVE-2026-82995 | Awaiting Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2. |
| CVE-2026-82996 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2. |
| CVE-2026-82997 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-82998 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-82999 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-83000 | Awaiting Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-83001 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-83002 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-83003 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-83004 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-83005 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-83006 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-83007 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-83008 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-83009 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-8301 | Deferred | 未確認 | CWE-78 | Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Boot Repa |
| CVE-2026-83010 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-83011 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2. |
| CVE-2026-83012 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-83013 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-83014 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Cube Manager). Supported versions that are affected are 8.61-8.63. Easily exploitab |
| CVE-2026-83015 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Cube Manager). Supported versions that are affected are 8.61-8.63. Difficult to exp |
| CVE-2026-83016 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63. Difficult to exploit vuln |
| CVE-2026-83017 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are 8.61-8.63. Easily ex |
| CVE-2026-83018 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63. Easily exploitable vulner |
| CVE-2026-83019 | Analyzed | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63. Easily exploitable vulner |
| CVE-2026-83020 | Awaiting Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2. |
| CVE-2026-83021 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14 |
| CVE-2026-83022 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-83023 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. |
| CVE-2026-83024 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. |
| CVE-2026-83025 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. |
| CVE-2026-83026 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. |
| CVE-2026-83027 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. |
| CVE-2026-83028 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. |
| CVE-2026-83029 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). Supported versions that are affected are 12.2.1.4.0 and 14. |
| CVE-2026-8303 | Deferred | 未確認 | CWE-266 | Incorrect privilege assignment vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus-software allows Privilege Escalation. This issue affects Pardus-soft |
| CVE-2026-83030 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). Supported versions that are affected are 12.2.1.4.0 and 14. |
| CVE-2026-83031 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-83032 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-83033 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-83034 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-83035 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-83036 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-83037 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-83038 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: TopLink Integration). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, |
| CVE-2026-83039 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily |
| CVE-2026-8304 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus About allows Exploiting Incorrectly Configured Access Control Security Levels. |
| CVE-2026-83040 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0 |
| CVE-2026-83041 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0 |
| CVE-2026-83042 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. E |
| CVE-2026-83043 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily |
| CVE-2026-83044 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite (component: Install). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulner |
| CVE-2026-83045 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. E |
| CVE-2026-83046 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. E |
| CVE-2026-83047 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. E |
| CVE-2026-83048 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. E |
| CVE-2026-83049 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0 |
| CVE-2026-83050 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. E |
| CVE-2026-83051 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. E |
| CVE-2026-83052 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. E |
| CVE-2026-83053 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. E |
| CVE-2026-83054 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1. |
| CVE-2026-83055 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1. |
| CVE-2026-83056 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1. |
| CVE-2026-83057 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1. |
| CVE-2026-83058 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1. |
| CVE-2026-83059 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1. |
| CVE-2026-83060 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1. |
| CVE-2026-83061 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1. |
| CVE-2026-83062 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1. |
| CVE-2026-83063 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1. |
| CVE-2026-83064 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. E |
| CVE-2026-83065 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). The supported version that is affected is 14.1.2.0.0. Difficult to ex |
| CVE-2026-83066 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1. |
| CVE-2026-83067 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Shared Components). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-83068 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Core). The supported version that is affected is 24.1. Easily |
| CVE-2026-83069 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware (component: Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0 |
| CVE-2026-83070 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub product of Oracle PeopleSoft (component: Enterprise Portal). The supported version that is affected is 9.1. Easily |
| CVE-2026-83071 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Machine Learning). Supported versions that are affected are 8.2.0.0.0 |
| CVE-2026-83072 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Search Bean [Incl. Advanced]). Supported versions that are affected are 12.2.3-1 |
| CVE-2026-83073 | Deferred | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.7. Easily explo |
| CVE-2026-83074 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.7. Easily explo |
| CVE-2026-83075 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.7. Easily explo |
| CVE-2026-83076 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle HR Intelligence product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult |
| CVE-2026-83077 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.7. Easily explo |
| CVE-2026-83078 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.7. Easily explo |
| CVE-2026-83079 | Deferred | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.7. Easily explo |
| CVE-2026-83080 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Banking Branch product of Oracle Financial Services Applications (component: Reports). Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. |
| CVE-2026-83081 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 14.5.0.0.0-14.9 |
| CVE-2026-83082 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnera |
| CVE-2026-83083 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnera |
| CVE-2026-83084 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnera |
| CVE-2026-83085 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.7. Easily explo |
| CVE-2026-83086 | Deferred | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.7. Easily explo |
| CVE-2026-83087 | Deferred | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.7. Difficult to |
| CVE-2026-83088 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged att |
| CVE-2026-83089 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Alert product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable |
| CVE-2026-83090 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-83091 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily expl |
| CVE-2026-83092 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult t |
| CVE-2026-83093 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2. |
| CVE-2026-83094 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2. |
| CVE-2026-83095 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2. |
| CVE-2026-83096 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2. |
| CVE-2026-83097 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2. |
| CVE-2026-83098 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2. |
| CVE-2026-83099 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2. |
| CVE-2026-83100 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2. |
| CVE-2026-83101 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2. |
| CVE-2026-83102 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2. |
| CVE-2026-83103 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2. |
| CVE-2026-83104 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2. |
| CVE-2026-83105 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2. |
| CVE-2026-83106 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2. |
| CVE-2026-83107 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2. |
| CVE-2026-83108 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2. |
| CVE-2026-83109 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2. |
| CVE-2026-83110 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnera |
| CVE-2026-83111 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Diffic |
| CVE-2026-83112 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.7-12.2. |
| CVE-2026-83113 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitabl |
| CVE-2026-83114 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to expl |
| CVE-2026-83115 | Deferred | 未確認 | CWE-1284, CWE-306 | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone). Supported versions that are affected are 12.2.3-12.2.15 |
| CVE-2026-83116 | Deferred | 未確認 | CWE-200 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.5-12.2.15. Eas |
| CVE-2026-83117 | Deferred | 未確認 | CWE-269 | Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vul |
| CVE-2026-83118 | Deferred | 未確認 | CWE-269 | Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vul |
| CVE-2026-83119 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.6-12.2.15. Easily ex |
| CVE-2026-83120 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Alert product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable |
| CVE-2026-83121 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnera |
| CVE-2026-83122 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exp |
| CVE-2026-83123 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exp |
| CVE-2026-83124 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily explo |
| CVE-2026-83125 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exp |
| CVE-2026-83126 | Deferred | 未確認 | CWE-352 | Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily explo |
| CVE-2026-83127 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily expl |
| CVE-2026-83128 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily expl |
| CVE-2026-83129 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Sales product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable |
| CVE-2026-83130 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Site Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitab |
| CVE-2026-83131 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: File download). Supported versions that are affected are 12.2.3-12.2 |
| CVE-2026-83132 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulne |
| CVE-2026-83133 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulne |
| CVE-2026-83134 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulne |
| CVE-2026-83135 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulne |
| CVE-2026-83136 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-83137 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-83138 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficu |
| CVE-2026-83140 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily expl |
| CVE-2026-83141 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily expl |
| CVE-2026-83142 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Proposals product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita |
| CVE-2026-83143 | Deferred | 未確認 | CWE-284 | Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (component: eDetailing). Supported versions that are affected are 17.0-26.7. Easily exploitable vulne |
| CVE-2026-83144 | Deferred | 未確認 | CWE-284 | Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component: Order Management). Supported versions that are affected are 17.0-26.7. Easily |
| CVE-2026-83145 | Deferred | 未確認 | CWE-284 | Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component: Order Management). Supported versions that are affected are 17.0-26.7. Easily |
| CVE-2026-83146 | Deferred | 未確認 | CWE-284 | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability |
| CVE-2026-83147 | Deferred | 未確認 | CWE-269 | Vulnerability in the PeopleSoft Enterprise FIN Inventory Brazil product of Oracle PeopleSoft (component: Inventory). The supported version that is affected is 9.1. Easily exploit |
| CVE-2026-83148 | Deferred | 未確認 | CWE-269 | Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker having Test |
| CVE-2026-83149 | Deferred | 未確認 | CWE-284 | Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker having Test |
| CVE-2026-83150 | Deferred | 未確認 | CWE-269 | Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with log |
| CVE-2026-83151 | Awaiting Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-83152 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Project Intelligence product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easi |
| CVE-2026-83153 | Deferred | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable |
| CVE-2026-83154 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability al |
| CVE-2026-83155 | Deferred | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable |
| CVE-2026-83156 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle XML Developers Kit component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Difficult |
| CVE-2026-83157 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone). Supported versions that are affected are 12.2.3-12.2.15 |
| CVE-2026-83158 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone). Supported versions that are affected are 12.2.3-12.2.15 |
| CVE-2026-83159 | Deferred | 未確認 | CWE-284 | Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: ADPatch). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerab |
| CVE-2026-83160 | Deferred | 未確認 | CWE-284 | Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged att |
| CVE-2026-83161 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Project Intelligence product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easi |
| CVE-2026-83162 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Difficult to |
| CVE-2026-83163 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Attachments / File Upload). Supported versions that are affected are 12.2.3-1 |
| CVE-2026-83164 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result). Supported versions that are affected are 12.2.3-12.2.15. E |
| CVE-2026-83165 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.2.3-12.2.15. E |
| CVE-2026-83166 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result). Supported versions that are affected are 12.2.3-12.2.15. E |
| CVE-2026-83167 | Deferred | 未確認 | CWE-200 | Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi |
| CVE-2026-83168 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces). Supported versions that are affected are 12.2.3-12. |
| CVE-2026-83169 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Java Server Issues). Supported versions that are affected are 12.2.3-12.2.15. Dif |
| CVE-2026-83170 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are 12.2.3-12.2.15. Easily explo |
| CVE-2026-83171 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are 12.2.3-12.2.15. Difficult to |
| CVE-2026-83172 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: OSO Other). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vul |
| CVE-2026-83173 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are 12.2.3-12.2.15. Easily explo |
| CVE-2026-83174 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Application Framework). Supported versions that are affected are 12.2.3-12.2.15 |
| CVE-2026-83175 | Deferred | 未確認 | CWE-200 | Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi |
| CVE-2026-83176 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework). Supported versions that are affected are 12.2.3-12.2 |
| CVE-2026-83177 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are 12.2.3-12.2.15. Easily explo |
| CVE-2026-83178 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Difficult to |
| CVE-2026-83179 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Applications Calendar). Supported versions that are affected are 12.2.3-12. |
| CVE-2026-83180 | Deferred | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable |
| CVE-2026-83181 | Deferred | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workspaces). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerabil |
| CVE-2026-83182 | Deferred | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Configuration Tools). Supported versions that are affected are 17.0-26.7. Difficult to exploit |
| CVE-2026-83183 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable |
| CVE-2026-83184 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Difficult to |
| CVE-2026-83185 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework). Supported versions that are affected are 12.2.3-12.2 |
| CVE-2026-83186 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Applications Calendar). Supported versions that are affected are 12.2.3-12. |
| CVE-2026-83187 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Applications Calendar). Supported versions that are affected are 12.2.3-12. |
| CVE-2026-83188 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily explo |
| CVE-2026-83189 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Proxy User Delegation). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-83190 | Deferred | 未確認 | CWE-269 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable |
| CVE-2026-83191 | Deferred | 未確認 | CWE-269 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Difficult to exploi |
| CVE-2026-83192 | Deferred | 未確認 | CWE-269 | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability |
| CVE-2026-83193 | Deferred | 未確認 | CWE-269 | Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (component: Life Sciences). Supported versions that are affected are 17.0-26.7. Easily exploitable vu |
| CVE-2026-83194 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.10-12.2.15. Easily expl |
| CVE-2026-83195 | Deferred | 未確認 | CWE-269 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable |
| CVE-2026-83196 | Deferred | 未確認 | CWE-269 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable |
| CVE-2026-83197 | Deferred | 未確認 | CWE-306 | Vulnerability in the Siebel Apps - Financial Services product of Oracle Siebel CRM (component: Financial Accounts). Supported versions that are affected are 17.0-26.7. Easily expl |
| CVE-2026-83198 | Deferred | 未確認 | CWE-601 | Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily expl |
| CVE-2026-83199 | Deferred | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable |
| CVE-2026-83200 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Process Manufacturing Intelligence product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3 |
| CVE-2026-83201 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable |
| CVE-2026-83202 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable |
| CVE-2026-83203 | Deferred | 未確認 | CWE-284 | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability al |
| CVE-2026-83204 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Sourcing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exp |
| CVE-2026-83205 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-83206 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Banking Corporate Lending Process Management product of Oracle Financial Services Applications (component: Base). Supported versions that are affected |
| CVE-2026-83207 | Deferred | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Integration - Scripting). Supported versions that are affected are 17.0-26.7. Easily exploitab |
| CVE-2026-83208 | Deferred | 未確認 | CWE-89 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Migration). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerabilit |
| CVE-2026-83209 | Deferred | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workflow). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerabilit |
| CVE-2026-83210 | Deferred | 未確認 | CWE-89 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable |
| CVE-2026-83211 | Deferred | 未確認 | CWE-269 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable |
| CVE-2026-83212 | Deferred | 未確認 | CWE-269 | Vulnerability in the Siebel Apps - Self Service product of Oracle Siebel CRM (component: Helpdesk/Training). Supported versions that are affected are 17.0-26.7. Easily exploitable |
| CVE-2026-83213 | Deferred | 未確認 | CWE-284 | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Reports). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability al |
| CVE-2026-83214 | Deferred | 未確認 | CWE-269 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable |
| CVE-2026-83215 | Deferred | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable |
| CVE-2026-83216 | Deferred | 未確認 | CWE-269 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable |
| CVE-2026-83217 | Deferred | 未確認 | CWE-284 | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability al |
| CVE-2026-83218 | Deferred | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Difficult to exploi |
| CVE-2026-83219 | Deferred | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable |
| CVE-2026-83220 | Deferred | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Event Publish and Subscribe). Supported versions that are affected are 23.6-26.7. Easily explo |
| CVE-2026-83221 | Deferred | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability all |
| CVE-2026-83222 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable |
| CVE-2026-83223 | Deferred | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Siebel Remote). Supported versions that are affected are 17.0-26.7. Difficult to exploit vulner |
| CVE-2026-83224 | Deferred | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable |
| CVE-2026-83225 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable |
| CVE-2026-83226 | Deferred | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Difficult to exploi |
| CVE-2026-83227 | Deferred | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI). Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability a |
| CVE-2026-83228 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable |
| CVE-2026-83229 | Deferred | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Siebel Management Console). Supported versions that are affected are 17.0-26.7. Easily exploita |
| CVE-2026-8323 | Deferred | 未確認 | CWE-601 | URL redirection to untrusted site ('open redirect') vulnerability in Armiya Information Technologies Ltd. Co. Access Control System allows Fake the Source of Data. This issue affe |
| CVE-2026-83230 | Deferred | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Siebel Management Console). Supported versions that are affected are 17.0-26.7. Easily exploita |
| CVE-2026-83231 | Deferred | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-dbclient-mongodb). Supported versions that are affected are 3.0.0-3.2.20 and 4.0.0-4.5.4. Diff |
| CVE-2026-83232 | Awaiting Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Console / Repository Explorer). Supported versions that are affected are 12.2.1.4.0 and |
| CVE-2026-83233 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is |
| CVE-2026-83234 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is |
| CVE-2026-83235 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is |
| CVE-2026-83236 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is |
| CVE-2026-83237 | Deferred | 未確認 | CWE-200 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 1 |
| CVE-2026-83238 | Deferred | 未確認 | CWE-200 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 1 |
| CVE-2026-83239 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported versi |
| CVE-2026-83240 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 1 |
| CVE-2026-83241 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 1 |
| CVE-2026-83242 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is |
| CVE-2026-83243 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is |
| CVE-2026-83244 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 1 |
| CVE-2026-83245 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 1 |
| CVE-2026-83246 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 1 |
| CVE-2026-83247 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 1 |
| CVE-2026-83248 | Deferred | 未確認 | CWE-400 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 1 |
| CVE-2026-83249 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 1 |
| CVE-2026-83250 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 1 |
| CVE-2026-83251 | Deferred | 未確認 | CWE-400 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 1 |
| CVE-2026-83252 | Deferred | 未確認 | CWE-306 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 1 |
| CVE-2026-83253 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported versi |
| CVE-2026-83254 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 1 |
| CVE-2026-83255 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 1 |
| CVE-2026-83256 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 1 |
| CVE-2026-83257 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 1 |
| CVE-2026-83258 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 1 |
| CVE-2026-83259 | Deferred | 未確認 | CWE-200 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 1 |
| CVE-2026-83260 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Event Java PX). The supported version that is affected is 9.3.6. Easily exploitable vulnerability |
| CVE-2026-83261 | Awaiting Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Core). The supported version that is affected is 3.6.1. Easily exploitable vuln |
| CVE-2026-83262 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Difficul |
| CVE-2026-83263 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Difficul |
| CVE-2026-83264 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily e |
| CVE-2026-83265 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Agent). Supported versions that are affected are 12.2.1.4.0 and 14.1 |
| CVE-2026-83266 | Deferred | 未確認 | CWE-306 | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Resource Catalog Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-83267 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Publisher Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01. |
| CVE-2026-83268 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0 |
| CVE-2026-83269 | Awaiting Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0 |
| CVE-2026-83270 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0. |
| CVE-2026-83271 | Deferred | 未確認 | CWE-269 | Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerabili |
| CVE-2026-83272 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Text component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Difficult to exploit vul |
| CVE-2026-83273 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). The supported version that is affected is 26.01.0 |
| CVE-2026-83274 | Deferred | 未確認 | CWE-200 | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Easily exploitable vul |
| CVE-2026-83276 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http2). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vul |
| CVE-2026-83277 | Deferred | 未確認 | CWE-200 | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Easily exploitable vul |
| CVE-2026-83278 | Deferred | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-integrations-neo4j). Supported versions that are affected are 3.0.0-3.2.20 and 4.0.0-4.5.4. Di |
| CVE-2026-83279 | Deferred | 未確認 | CWE-200 | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Easily exploitable vul |
| CVE-2026-83280 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-http2). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vul |
| CVE-2026-83281 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerabi |
| CVE-2026-83282 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). The supported version that is affected is 12.2.1. |
| CVE-2026-83283 | Awaiting Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). The supported version that is affected is 12.2.1. |
| CVE-2026-83284 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0 |
| CVE-2026-83285 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search). The supported version that is affected is 12.2.1.4.0. Eas |
| CVE-2026-83286 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). Supported versions that are affected are 8.2.0.0.0 |
| CVE-2026-83287 | Deferred | 未確認 | CWE-200 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Presentation Services). Supported versions that are affected are 8.2.0 |
| CVE-2026-83288 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search). Supported versions that are affected are 8.2.0.0.0, 12.2.1 |
| CVE-2026-83289 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web General). Supported versions that are affected are 8.2.0 |
| CVE-2026-83290 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). Supported versions that are affected are 8.2.0.0.0 |
| CVE-2026-83291 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). Supported versions that are affected are 8.2.0.0.0 |
| CVE-2026-83292 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). Supported versions that are affected are 8.2.0.0.0 |
| CVE-2026-83293 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: FNDN). The supported version that is affected is 12.2.1.4.0. Easily e |
| CVE-2026-83294 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). Supported versions that are affected are 8.2.0.0.0 |
| CVE-2026-83295 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Presentation Services). Supported versions that are affected are 8.2.0 |
| CVE-2026-83296 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search). Supported versions that are affected are 8.2.0.0.0, 12.2.1 |
| CVE-2026-83297 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0 |
| CVE-2026-83298 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). The supported version that is affected is 12.2.1.4.0. Easily exploitable v |
| CVE-2026-83299 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web General). The supported version that is affected is 12. |
| CVE-2026-83300 | Deferred | 未確認 | CWE-200 | Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite (component: Install). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulner |
| CVE-2026-83301 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Service Administration UI). The supported version that is affected is |
| CVE-2026-83302 | Deferred | 未確認 | CWE-200 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Publisher Security). The supported version that is affected is 12.2.1.4.0. Easily exploitable |
| CVE-2026-83303 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0 |
| CVE-2026-83304 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web General). Supported versions that are affected are 8.2.0 |
| CVE-2026-83305 | Deferred | 未確認 | CWE-306 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0 |
| CVE-2026-83306 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Resource Catalog Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-83307 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0 |
| CVE-2026-83308 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0 |
| CVE-2026-83309 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easi |
| CVE-2026-83310 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0 |
| CVE-2026-83311 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0 |
| CVE-2026-83312 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: E-Business Suite - XDO). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01 |
| CVE-2026-83313 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0 |
| CVE-2026-83314 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. |
| CVE-2026-83315 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0 |
| CVE-2026-83316 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). The supported version that is affected is 26.01.0 |
| CVE-2026-83317 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Installation). Supported versions that are affected are 8.2.0.0.0, 12. |
| CVE-2026-83318 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Administration). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. |
| CVE-2026-83319 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulner |
| CVE-2026-83320 | Deferred | 未確認 | CWE-601 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Administration). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. |
| CVE-2026-83321 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Actions). Supported versions that are affected are 8.2.0.0.0 |
| CVE-2026-83322 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). Supported versions that are affected are 8.2.0.0.0 |
| CVE-2026-83323 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). The supported version that is affected is 26.01.0 |
| CVE-2026-83324 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0. |
| CVE-2026-83325 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). Supported versions that are affected are 8.2.0.0.0 |
| CVE-2026-83326 | Deferred | 未確認 | CWE-200 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected are 25.12-26.7. Easily exploitable vul |
| CVE-2026-83327 | Awaiting Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-83328 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-83329 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.9-12.2.15. Easily |
| CVE-2026-83330 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: WebSocket). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability all |
| CVE-2026-83331 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.9-12.2.15. Easily |
| CVE-2026-83332 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.9-12.2.15. Easily |
| CVE-2026-83333 | Awaiting Analysis | 未確認 | CWE-400 | Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows unau |
| CVE-2026-83334 | Deferred | 未確認 | CWE-306 | Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-83335 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Supported versions that are affected are 8.2.0.0.0 |
| CVE-2026-83336 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Supported versions that are affected are 8.2.0.0.0 |
| CVE-2026-83337 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Middleware Common Libraries and Tools product of Oracle Fusion Middleware (component: Remote Diagnostic Agent). Supported versions that are affected ar |
| CVE-2026-83338 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces). Supported versions that are affected are 12.2.3-12. |
| CVE-2026-83339 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 1 |
| CVE-2026-83340 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Security). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily |
| CVE-2026-83341 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone). Supported versions that are affected are 12.2.3-12.2.15 |
| CVE-2026-83342 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: System Wide). Supported versions that are affected are 2.4.0.1 |
| CVE-2026-83343 | Deferred | 未確認 | CWE-306 | Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: System Wide). Supported versions that are affected are 2.5.0.2 |
| CVE-2026-83344 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Database Application Table). Supported versions that are affected are 12.2.1 |
| CVE-2026-83345 | Deferred | 未確認 | CWE-400 | Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite (component: Install). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulner |
| CVE-2026-83346 | Deferred | 未確認 | CWE-284 | Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware (component: Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0 |
| CVE-2026-83347 | Deferred | 未確認 | CWE-400 | Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows unau |
| CVE-2026-83348 | Deferred | 未確認 | CWE-269 | Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerabili |
| CVE-2026-83349 | Awaiting Analysis | 未確認 | CWE-400 | Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitab |
| CVE-2026-83350 | Awaiting Analysis | 未確認 | CWE-400 | Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerabi |
| CVE-2026-83351 | Deferred | 未確認 | CWE-269 | Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Difficult to exploit vulnerability allows unauthenticated |
| CVE-2026-83352 | Deferred | 未確認 | CWE-200 | Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite (component: Install). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulner |
| CVE-2026-83353 | Deferred | 未確認 | CWE-269 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-83354 | Deferred | 未確認 | CWE-200 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 15.1.1.0.0. Difficult to exploit vulnerabil |
| CVE-2026-83355 | Awaiting Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component: Metrics). Supported versions that are affected are 13.5 and |
| CVE-2026-83356 | Deferred | 未確認 | CWE-284 | Vulnerability in the Enterprise Command Center Framework product of Oracle E-Business Suite (component: Security). The supported version that is affected is V16. Easily exploitab |
| CVE-2026-83357 | Awaiting Analysis | 未確認 | CWE-22 | Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM for JDK 17: |
| CVE-2026-83368 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affe |
| CVE-2026-83369 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Access SDK). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Diffic |
| CVE-2026-83408 | Awaiting Analysis | 未確認 | CWE-94 | Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM for JDK 17: |
| CVE-2026-83410 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-83411 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easil |
| CVE-2026-83412 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-83413 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-83414 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 15.1.1.0.0. Difficult to exploit vulnerabil |
| CVE-2026-83415 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-83416 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1. |
| CVE-2026-83417 | Awaiting Analysis | 未確認 | CWE-200 | Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications (component: SEPP). Supported versions that are affecte |
| CVE-2026-83418 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications (component: SEPP). Supported versions that are affecte |
| CVE-2026-83419 | Awaiting Analysis | 未確認 | CWE-200 | Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications (component: SEPP). Supported versions that are affecte |
| CVE-2026-83420 | Awaiting Analysis | 未確認 | CWE-269 | Vulnerability in the PeopleSoft Enterprise FIN Engineering Brazil product of Oracle PeopleSoft (component: Engineering). The supported version that is affected is 9.1. Easily exp |
| CVE-2026-83422 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. E |
| CVE-2026-83423 | Awaiting Analysis | 未確認 | CWE-269 | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Ea |
| CVE-2026-83424 | Awaiting Analysis | 未確認 | CWE-200 | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Oracle JDeveloper). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Eas |
| CVE-2026-83425 | Awaiting Analysis | 未確認 | CWE-200 | Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are |
| CVE-2026-83428 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. |
| CVE-2026-83429 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. |
| CVE-2026-83430 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-83431 | Analyzed | 未確認 | CWE-285 | Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: WebUI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vu |
| CVE-2026-83432 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). Supported versions that are affected are 12.2.3-12.2.15. Easi |
| CVE-2026-83433 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Depot Repair Diagnostics). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-83434 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-83435 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.13-12.2.15. Diffic |
| CVE-2026-83436 | Awaiting Analysis | 未確認 | CWE-400 | Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Recall Management). Supported versions that are affected are 12.2.3-12.2.15. Easily exploit |
| CVE-2026-83437 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita |
| CVE-2026-83438 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to |
| CVE-2026-83439 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-idcs-mapper). Supported versions that are affected are 3.0.0-3.2.20 and 4.0 |
| CVE-2026-83440 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi |
| CVE-2026-83441 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to |
| CVE-2026-83442 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi |
| CVE-2026-83443 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Assets product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable |
| CVE-2026-83444 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi |
| CVE-2026-83445 | Awaiting Analysis | 未確認 | CWE-269 | Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are |
| CVE-2026-83446 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components). Supported versions that are affected are 12.2.3-12.2.15. E |
| CVE-2026-83447 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-83448 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-83449 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-83450 | Undergoing Analysis | 未確認 | CWE-269 | Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Setup Workbench). Supported versions that are affected are 12.2.3-12.2.15. Difficult t |
| CVE-2026-83451 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficu |
| CVE-2026-83452 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12. |
| CVE-2026-83453 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12. |
| CVE-2026-83454 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12. |
| CVE-2026-83455 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. |
| CVE-2026-83456 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. |
| CVE-2026-83457 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. |
| CVE-2026-83458 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: JSON). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows u |
| CVE-2026-83459 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-media-multipart). Supported versions that are affected are 3.0.0-3.2.20. Easily exploitable vu |
| CVE-2026-83460 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: LRA). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows un |
| CVE-2026-83461 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15. |
| CVE-2026-83462 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15. |
| CVE-2026-83463 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15. |
| CVE-2026-83464 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15. |
| CVE-2026-83465 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15. |
| CVE-2026-83477 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Workbenches). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitabl |
| CVE-2026-83479 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.14-12.2.15. Easily exploit |
| CVE-2026-83480 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: WebSocket). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability all |
| CVE-2026-83481 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.14-12.2.15. Easily exploit |
| CVE-2026-83482 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.14-12.2.15. Easily exploit |
| CVE-2026-83483 | Awaiting Analysis | 未確認 | CWE-269 | Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Self-serv What-if Analysis). Supported versions that are affected are 12.2.3-12.2.15. |
| CVE-2026-83484 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle US Federal Human Resources product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15 |
| CVE-2026-83485 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable v |
| CVE-2026-83486 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable v |
| CVE-2026-83487 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable v |
| CVE-2026-83488 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-security). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitab |
| CVE-2026-83489 | Awaiting Analysis | 未確認 | CWE-269 | Vulnerability in the Oracle Banking Origination product of Oracle Financial Services Applications (component: Onboarding Batch Processes). Supported versions that are affected are |
| CVE-2026-83490 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily explo |
| CVE-2026-83491 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to |
| CVE-2026-83498 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83501 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally. |
| CVE-2026-83527 | Awaiting Analysis | 未確認 | CWE-288 | An Authentication Bypass vulnerability in Sentry before R10.8.2, R10.7.3 and R10.6.4 allows a remote unauthenticated attacker to gain administrative level access. |
| CVE-2026-83530 | Analyzed | 未確認 | CWE-789 | A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit() configured on the CEL environment, and a memory allocation would occur proport |
| CVE-2026-83532 | Deferred | 未確認 | CWE-79 | The Custom Menu Wizard Widget WordPress plugin through 3.3.1 does not sanitize and escape several shortcode attributes before rendering them into HTML, allowing users with contribu |
| CVE-2026-83533 | Deferred | 未確認 | CWE-345 | The WP Express Checkout WordPress plugin before 2.4.9 does not verify server-side that a payment was actually completed before marking an order as paid, allowing unauthenticated us |
| CVE-2026-83534 | Awaiting Analysis | 未確認 | CWE-250 | PostgreSQL Anonymizer contains a vulnerability in the anon.anonymize_database_parallel() function that allows the owner of a table to run arbitrary code with superuser privilege. T |
| CVE-2026-83537 | Deferred | 未確認 | CWE-345 | The WP Express Checkout WordPress plugin before 2.5.0 does not verify server-side that a payment was actually completed before marking an order as paid, allowing unauthenticated us |
| CVE-2026-8354 | Deferred | 未確認 | CWE-79 | The Gum Addon for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pop_tag' parameter in all versions up to, and including, 1.3.15 due to insuff |
| CVE-2026-83541 | Deferred | 未確認 | CWE-79 | The Sina Extension for Elementor WordPress plugin before 3.10.4 does not properly escape a Table widget setting before outputting it within an HTML attribute, which could allow use |
| CVE-2026-83543 | Deferred | 未確認 | CWE-918 | The Greenshift WordPress plugin before 13.2.0 does not validate a user-supplied URL before fetching it server-side, allowing users with contributor-level access and above to make |
| CVE-2026-83544 | Deferred | 未確認 | CWE-79 | The Greenshift WordPress plugin before 13.2.0 does not properly escape a block animation attribute before outputting it within an HTML attribute, allowing users with contributor-l |
| CVE-2026-83545 | Deferred | 未確認 | CWE-79 | The CoolClock WordPress plugin before 4.3.8 does not properly escape a custom skin setting before outputting it inside an inline script, allowing users with contributor-level acces |
| CVE-2026-83546 | Deferred | 未確認 | CWE-79 | The CoolClock WordPress plugin before 4.3.8 does not properly escape a skin setting before outputting it within an HTML attribute, allowing users with contributor-level access and |
| CVE-2026-83547 | Deferred | 未確認 | CWE-79 | The Xpro Addons WordPress plugin before 1.7.4 does not properly escape some of its widgets' settings before outputting them within HTML attributes, which could allow users with the |
| CVE-2026-83548 | Analyzed | 掲載 | CWE-441, CWE-918 | A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could pot |
| CVE-2026-83549 | Analyzed | 掲載 | CWE-78 | Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 Appliance Management |
| CVE-2026-83551 | Awaiting Analysis | 未確認 | CWE-312 | Cleartext storage of sensitive information in the @step and @remote decorator pipeline component in Amazon SageMaker Python SDK before v3.11.0 and v2.256.0 might allow an authentic |
| CVE-2026-83555 | Deferred | 未確認 | CWE-862 | The Email Subscribers & Newsletters WordPress plugin before 5.9.35 does not verify the per-subscriber management token before changing a subscriber's subscription status, allowing |
| CVE-2026-83557 | Awaiting Analysis | 未確認 | CWE-502, CWE-915 | DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator. It denies p |
| CVE-2026-83560 | Deferred | 未確認 | CWE-200 | The New User Approve WordPress plugin before 3.2.10 does not properly verify authentication on a set of integration REST API routes when the integration is unconfigured, allowing u |
| CVE-2026-83561 | Deferred | 未確認 | CWE-79 | The Complianz GDPR/CCPA Cookie Consent Banner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Elementor Cookie Blocker Regex in all versio |
| CVE-2026-83562 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in WCFM Marketplace <= 3.8.2 versions. |
| CVE-2026-83591 | Deferred | 未確認 | CWE-79 | The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Regex Transformation in all versions up to, and |
| CVE-2026-83593 | Deferred | 未確認 | CWE-79 | The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'conversation' parameter in all vers |
| CVE-2026-83595 | Deferred | 未確認 | CWE-352 | AVideo contains a cross-site request forgery vulnerability in plugin/API/set.json.php that allows attackers to perform state-changing actions by crafting GET requests that bypass C |
| CVE-2026-83597 | Awaiting Analysis | 未確認 | CWE-269 | Netdata is an open source observability tool. From version 2.0.0 until 2.10.4, Netdata Windows Agent MSI repair launches powershell.exe and wevtutil.exe as elevated interactive pro |
| CVE-2026-83598 | Awaiting Analysis | 未確認 | CWE-269, CWE-427 | Netdata is an open source observability tool. From rom 2.0.0 until 2.10.4, during Netdata Windows Agent MSI repair, powershell.exe runs as SYSTEM without -NoProfile and loads %USER |
| CVE-2026-83599 | Awaiting Analysis | 未確認 | CWE-409 | Netdata is an open source observability tool. Prior to 2.11.0, Netdata's unauthenticated WebSocket server negotiates permessage-deflate before authentication, and src/web/websocket |
| CVE-2026-83600 | Awaiting Analysis | 未確認 | CWE-193, CWE-400 | Netdata is an open source observability tool. Prior to 2.10.4, an authenticated child agent can send an oversized CHART SLOT value that str2ull_encoded passes to pluginsd_rrdset_ca |
| CVE-2026-83601 | Awaiting Analysis | 未確認 | CWE-190, CWE-787 | Netdata is an open source observability tool. Prior to 2.10.4, an authenticated child agent can send an oversized DIMENSION SLOT value that str2ull_encoded passes to pluginsd_rrddi |
| CVE-2026-83602 | Awaiting Analysis | 未確認 | CWE-284 | Netdata is an open source observability tool. From 2.0.0 until 2.11.0, Netdata registers /api/v3/settings in src/web/api/v3/web_api_v3.c with HTTP_ACL_NOCHECK and HTTP_ACCESS_ANONY |
| CVE-2026-83603 | Awaiting Analysis | 未確認 | CWE-502, CWE-73 | Netdata is an open source observability tool. Prior to 2.10.4, the setuid-root ndsudo helper command fail2ban-client-status-socket in src/collectors/utils/ndsudo.c accepts a caller |
| CVE-2026-83605 | Deferred | 未確認 | CWE-91 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.14 and 0.9.11, and in xmldom version |
| CVE-2026-83606 | Deferred | 未確認 | CWE-1333, CWE-400 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.9.0-beta.9 until 0.9.11, the processing-instruction production in l |
| CVE-2026-83607 | Deferred | 未確認 | CWE-91 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.14 and 0.9.11, and in xmldom version |
| CVE-2026-83608 | Deferred | 未確認 | CWE-91 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom version |
| CVE-2026-83609 | Deferred | 未確認 | CWE-625, CWE-91 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.9.0 until 0.9.12, the shared reg() builder in lib/grammar.js compil |
| CVE-2026-83610 | Deferred | 未確認 | CWE-116 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom version |
| CVE-2026-83611 | Deferred | 未確認 | CWE-1286 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom version |
| CVE-2026-83612 | Deferred | 未確認 | CWE-178, CWE-400 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.9.0-beta.1 until 0.9.12, HTML-mode parsing through DOMParser.parseF |
| CVE-2026-83613 | Deferred | 未確認 | CWE-407 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom version |
| CVE-2026-83614 | Deferred | 未確認 | CWE-400, CWE-407 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom versions |
| CVE-2026-83615 | Deferred | 未確認 | CWE-770 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom versions |
| CVE-2026-83616 | Deferred | 未確認 | CWE-91 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom version |
| CVE-2026-83617 | Deferred | 未確認 | CWE-625, CWE-91 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.9.11 until 0.9.12, the requireWellFormed: true element and attribut |
| CVE-2026-83618 | Deferred | 未確認 | CWE-625, CWE-91 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.9.10 until 0.9.12, the requireWellFormed: true serializer validates |
| CVE-2026-83619 | Deferred | 未確認 | CWE-1333, CWE-400 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.7.0 until 0.8.15, the release-0.8.x parser in lib/sax.js trims capt |
| CVE-2026-83621 | Deferred | 未確認 | CWE-862 | ntopng is a web-based network traffic monitoring application. Prior to 6.7.260717, POST /lua/rest/v2/edit/system/edit_blacklist.lua in scripts/lua/rest/v2/edit/system/edit_blacklis |
| CVE-2026-83625 | Deferred | 未確認 | CWE-79 | The Contact Form by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via IP Address Header in all versions up to, and including, 1.10.2 due to insufficie |
| CVE-2026-83627 | Deferred | 未確認 | CWE-94 | The Hummingbird – Speed Optimization, Caching, Minify, Compress & CDN plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.21.0 via t |
| CVE-2026-83628 | Deferred | 未確認 | CWE-862 | The Theme My Login plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 7.1.15 on Multisite installations. This is due to the `tml_ms_signu |
| CVE-2026-83660 | Analyzed | 未確認 | CWE-918 | Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not requir |
| CVE-2026-83711 | Analyzed | 未確認 | CWE-639 | Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-83743 | Deferred | 未確認 | CWE-285, CWE-639 | A weakness has been identified in invoiceninja Invoice Ninja up to 5.13.26. This affects an unknown part of the file /vedor/profile/ of the component Vendor Portal Profile Update. |
| CVE-2026-83744 | Deferred | 未確認 | CWE-918 | A security vulnerability has been detected in invoiceninja Invoice Ninja up to 5.13.26. This vulnerability affects the function Purify::isHostSafe of the file app/Services/Pdf/Puri |
| CVE-2026-83772 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was detected in Cobham SATCOM VSAT7090 Maritime Satellite Router up to 20260704. This issue affects the function c_set_reports_decode of the file mail-report.sh of |
| CVE-2026-83801 | Awaiting Analysis | 未確認 | CWE-79 | Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.37 and 3.1.8, a user with extras.add_relationship or extras.change_relationship permission can s |
| CVE-2026-83803 | Awaiting Analysis | 未確認 | CWE-502 | Sentry is an error tracking and performance monitoring tool. From 23.11.0 until 26.7.0, Sentry instances with the relocation feature enabled unsafely deserialize a legacy database |
| CVE-2026-83805 | Awaiting Analysis | 未確認 | CWE-285, CWE-639 | Nautobot is a Network Source of Truth and Network Automation Platform. From 3.0.0 until 3.1.8, the generic ApprovalWorkflowStageResponse create endpoint does not enforce approver-g |
| CVE-2026-83939 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83940 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83941 | Analyzed | 未確認 | CWE-862 | Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-83942 | Analyzed | 未確認 | CWE-862 | Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83944 | Analyzed | 未確認 | CWE-284 | Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-83946 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Azure Portal allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-83948 | Analyzed | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in Microsoft Azure CLI allows an authorized attacker to execute code over a network. |
| CVE-2026-83949 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
| CVE-2026-83951 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
| CVE-2026-83952 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83954 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83955 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83959 | Analyzed | 未確認 | CWE-122 | Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th |
| CVE-2026-83961 | Analyzed | 未確認 | CWE-287 | ColdFusion is affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain limited read and |
| CVE-2026-83962 | Analyzed | 未確認 | CWE-121 | Substance3D - Modeler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of t |
| CVE-2026-83963 | Analyzed | 未確認 | CWE-787 | Substance3D - Modeler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this iss |
| CVE-2026-83964 | Analyzed | 未確認 | CWE-295 | Adobe Connect is affected by an Improper Certificate Validation vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to di |
| CVE-2026-83967 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83968 | Analyzed | 未確認 | CWE-400, CWE-416 | Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83969 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83970 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83971 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83972 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83973 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83974 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83975 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83976 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83977 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83978 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83979 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83980 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83981 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83982 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83983 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83985 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83986 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83987 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83988 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83989 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to deny service over a network. |
| CVE-2026-83990 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83991 | Analyzed | 未確認 | CWE-306 | Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally. |
| CVE-2026-83992 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83995 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83996 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83997 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83998 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83999 | Analyzed | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges loc |
| CVE-2026-84000 | Analyzed | 未確認 | CWE-122, CWE-190 | Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally. |
| CVE-2026-84001 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network. |
| CVE-2026-84003 | Analyzed | 未確認 | CWE-294 | Authentication bypass by capture-replay in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-84021 | Deferred | 未確認 | CWE-79 | The Bold Page Builder WordPress plugin before 5.9.8 does not properly validate a link URL before outputting it in an HTML attribute, relying on a filter that can be evaded, allowin |
| CVE-2026-84022 | Deferred | 未確認 | CWE-79 | The Bold Page Builder WordPress plugin before 5.9.8 does not sanitise and escape several shortcode attributes before outputting them in HTML attributes, allowing users with the Con |
| CVE-2026-84023 | Deferred | 未確認 | CWE-352 | The BEAR WordPress plugin before 1.2.2 does not verify a CSRF nonce or check user capabilities before updating taxonomy terms, allowing an attacker to modify arbitrary terms by tr |
| CVE-2026-84024 | Deferred | 未確認 | CWE-352 | The BEAR WordPress plugin before 1.2.2 does not verify a CSRF nonce before saving its meta field configuration, allowing an attacker to overwrite that configuration by tricking a |
| CVE-2026-84025 | Deferred | 未確認 | CWE-639 | The BEAR WordPress plugin before 1.2.2 does not perform ownership checks on several handlers that return product data by a user-supplied identifier, allowing users who are restric |
| CVE-2026-84026 | Deferred | 未確認 | CWE-200 | The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not restrict access to a REST endpoint that returns user records, allow |
| CVE-2026-84027 | Deferred | 未確認 | CWE-862 | The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not check user capabilities when creating orders through its REST API, |
| CVE-2026-84028 | Deferred | 未確認 | CWE-79 | The Bold Page Builder WordPress plugin before 5.9.9 does not sanitise and escape a shortcode attribute before outputting it in an HTML attribute, allowing users with the Contributo |
| CVE-2026-84031 | Analyzed | 未確認 | CWE-79 | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation. |
| CVE-2026-84034 | Analyzed | 未確認 | CWE-798 | IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the hardware_assess/obstore binaries. A low-privileged authenticated user can recover ha |
| CVE-2026-84036 | Analyzed | 未確認 | CWE-285 | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization. |
| CVE-2026-84042 | Awaiting Analysis | 未確認 | CWE-269 | A flaw was found in crun. When crun is built with libkrun and a container is started rootful with passt networking (krun.use_passt), crun can execute attacker-controlled payload fr |
| CVE-2026-84043 | Deferred | 未確認 | CWE-345 | The ePayco Payment Gateway for WooCommerce WordPress plugin before 8.4.7 does not properly verify the authenticity of payment confirmation requests, allowing unauthenticated attack |
| CVE-2026-84044 | Deferred | 未確認 | The Restaurant Menu and Food Ordering WordPress plugin before 2.4.12 does not verify that a PayPal payment notification genuinely originates from PayPal, allowing unauthenticated a | |
| CVE-2026-84045 | Deferred | 未確認 | The E-cab Taxi Booking Manager for Woocommerce WordPress plugin before 2.0.5 does not validate a client-supplied trip distance and base-price value on the server before pricing a b | |
| CVE-2026-84046 | Deferred | 未確認 | CWE-918 | The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not validate a user-supplied URL before fetching it server-side, allowi |
| CVE-2026-84047 | Deferred | 未確認 | CWE-89 | The Album Cover Finder WordPress plugin through 0.7.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQ |
| CVE-2026-84048 | Deferred | 未確認 | CWE-284 | Joomla Extension - joomgalleryfriends.net - Unauthenticated arbitrary file upload via the TUS endpoint in JoomGallery < 4.4.2 - The TUS endpoint allows arbitrary file uploads, howe |
| CVE-2026-84059 | Deferred | 未確認 | CWE-74, CWE-77 | A flaw has been found in ICP DAS UA-2200 and UA-5200 up to 20260704. The affected element is the function ArmAngstromInstructionSet of the file /CGI?RestApi=SetHostname. Executing |
| CVE-2026-84061 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in zhongyu09 OpenChatBI up to 0.3.0. Affected by this vulnerability is the function _validate_sql_safety of the file openchatbi/text2sql/generat |
| CVE-2026-84062 | Deferred | 未確認 | CWE-639 | BurgerEditor 3.0.0 through 3.4.0 contains an issue with authorization bypass through user-controlled key. If this vulnerability is exploited, the content of the page may be altered |
| CVE-2026-84063 | Deferred | 未確認 | CWE-434 | BurgerEditor 3.2.0 through 3.4.0 contains an issue with unrestricted upload of file with dangerous type. If this vulnerability is exploited, an arbitrary file may be uploaded by an |
| CVE-2026-84064 | Analyzed | 未確認 | CWE-89 | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL co |
| CVE-2026-84066 | Deferred | 未確認 | CWE-862 | The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9 does not verify that the requesting user owns the post being modified before w |
| CVE-2026-84068 | Deferred | 未確認 | CWE-89 | The Quentn WP WordPress plugin before 1.2.15 does not adequately escape a request parameter before using it in an unprepared SQL query, allowing unauthenticated attackers to extrac |
| CVE-2026-84069 | Deferred | 未確認 | CWE-22 | The WebFacing™ WordPress plugin before 5.4 does not restrict access to one of its bundled scripts and does not validate a user-supplied path before using it to include a local fil |
| CVE-2026-84070 | Analyzed | 未確認 | CWE-79 | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation. |
| CVE-2026-84071 | Analyzed | 未確認 | CWE-78 | IBM Guardium Data Protection 12.2 is vulnerable to OS command injection in the Universal Connector plugin upload functionality. A privileged authenticated attacker can provide a ma |
| CVE-2026-84073 | Analyzed | 未確認 | CWE-89 | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL co |
| CVE-2026-84074 | Analyzed | 未確認 | CWE-79 | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation. |
| CVE-2026-84075 | Analyzed | 未確認 | CWE-306 | IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to missing authentication for the ChangeTrackerServlet. |
| CVE-2026-84076 | Analyzed | 未確認 | CWE-285 | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization. |
| CVE-2026-84077 | Analyzed | 未確認 | CWE-352 | IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site request forgery vulnerability. |
| CVE-2026-84078 | Analyzed | 未確認 | CWE-306 | IBM Guardium Data Protection 12.2 is vulnerable to a missing authentication vulnerability in the LoadBalancerServlet. An unauthenticated user can access privileged load-balancer op |
| CVE-2026-84081 | Analyzed | 未確認 | CWE-295 | IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper certificate validation. |
| CVE-2026-84082 | Analyzed | 未確認 | CWE-89 | IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command. |
| CVE-2026-84083 | Analyzed | 未確認 | CWE-269 | IBM Guardium Data Protection 12.2 is vulnerable to local privilege escalation via the SUID-root nmap_wrapper binary on the Collector appliance. A local attacker with low-privileged |
| CVE-2026-84084 | Analyzed | 未確認 | CWE-352 | IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site request forgery (CSRF) vulnerability. |
| CVE-2026-84085 | Analyzed | 未確認 | CWE-78 | IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command. |
| CVE-2026-84086 | Analyzed | 未確認 | CWE-22 | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper limitation of a pathname to a restricted directory. |
| CVE-2026-84088 | Deferred | 未確認 | CWE-79 | The Xpro Addons — 140+ Widgets for Elementor WordPress plugin before 1.7.9 does not validate or sanitize a widget link setting before storing and using it in a JavaScript navigatio |
| CVE-2026-84089 | Analyzed | 未確認 | CWE-269 | IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management. |
| CVE-2026-84091 | Deferred | 未確認 | CWE-287 | The SUMIT Payment Gateway for WooCommerce WordPress plugin before 4.0.0 does not verify with the payment provider that a payment notification is genuine before marking the correspo |
| CVE-2026-84095 | Deferred | 未確認 | CWE-79 | The wp-review-slider-pro WordPress plugin before 12.7.12 does not perform a capability check on one of its AJAX handlers, and the nonce protecting it is generated for every visitor |
| CVE-2026-84096 | Deferred | 未確認 | CWE-79 | The wp-review-slider-pro WordPress plugin before 12.7.12 does not perform a capability check on the AJAX handler that saves its review submission forms, and the nonce protecting it |
| CVE-2026-84097 | Deferred | 未確認 | CWE-89 | The wp-review-slider-pro WordPress plugin before 12.7.12 does not sanitize a value stored through one of its AJAX handlers, which lacks a capability check, before using it in a SQL |
| CVE-2026-84098 | Deferred | 未確認 | CWE-863 | The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not properly verify a listing's ownership before deleting it, allowing |
| CVE-2026-84099 | Deferred | 未確認 | CWE-502 | The wpstorecart WordPress plugin through 5.0.7 does not prevent direct, unauthenticated access to a bundled add-on that deserializes user-supplied input without restricting the per |
| CVE-2026-84105 | Analyzed | 未確認 | CWE-89 | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper neutralization of special elements used in an SQL comm |
| CVE-2026-84106 | Analyzed | 未確認 | CWE-79 | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation. |
| CVE-2026-84108 | Analyzed | 未確認 | CWE-79 | IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of input during web page generation. |
| CVE-2026-84109 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.6. Affected by this issue is the function getOrder of the file webmain/webmainAction.php. Executing a manipulation |
| CVE-2026-84110 | Deferred | 未確認 | CWE-602 | A vulnerability was detected in Releasit Releasit COD Form & Upsells v1. This vulnerability affects unknown code of the component OTP Validation. The manipulation results in client |
| CVE-2026-84111 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in Chanjet CRM up to 20260707. This issue affects some unknown processing of the file jxf_dump_table.php. This manipulation of the argument gblOrgID causes sq |
| CVE-2026-84113 | Deferred | 未確認 | CWE-89 | The Quentn WP WordPress plugin before 1.2.15 does not properly sanitise and escape a parameter before using it in an SQL query, allowing high privilege users such as administrators |
| CVE-2026-84114 | Deferred | 未確認 | CWE-287 | A vulnerability has been found in Cleo Harmony up to 5.8.1.10. Impacted is the function LocalUserUtil.getNativeUserByAssertions of the component SAML Authentication. Such manipulat |
| CVE-2026-84115 | Deferred | 未確認 | CWE-266, CWE-269 | A vulnerability was found in Cleo Harmony up to 5.8.1.10. The affected element is an unknown function of the file /api/connections of the component JWT Refresh Token Handler. Perfo |
| CVE-2026-84117 | Analyzed | 未確認 | CWE-284 | Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 155. |
| CVE-2026-84118 | Analyzed | 未確認 | CWE-416 | Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2. |
| CVE-2026-84119 | Analyzed | 未確認 | CWE-416 | Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thund |
| CVE-2026-84120 | Analyzed | 未確認 | CWE-416 | Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 14 |
| CVE-2026-84121 | Analyzed | 未確認 | CWE-416 | Sandbox escape due to use-after-free in the DOM: Security component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunder |
| CVE-2026-84122 | Analyzed | 未確認 | CWE-416 | Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbir |
| CVE-2026-84123 | Analyzed | 未確認 | CWE-416 | Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2 |
| CVE-2026-84124 | Analyzed | 未確認 | CWE-416 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thund |
| CVE-2026-84125 | Analyzed | 未確認 | CWE-416 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2. |
| CVE-2026-84126 | Analyzed | 未確認 | CWE-120 | Incorrect boundary conditions in the Layout: Grid component. This vulnerability was fixed in Firefox 155 and Thunderbird 155. |
| CVE-2026-84127 | Analyzed | 未確認 | CWE-200 | Information disclosure in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 155. |
| CVE-2026-84128 | Analyzed | 未確認 | CWE-284 | Privilege escalation in the WebDriver BiDi component. This vulnerability was fixed in Firefox 155 and Thunderbird 155. |
| CVE-2026-84129 | Analyzed | 未確認 | CWE-346 | Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2. |
| CVE-2026-84130 | Analyzed | 未確認 | CWE-200 | Information disclosure in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2. |
| CVE-2026-84131 | Analyzed | 未確認 | CWE-763 | Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thund |
| CVE-2026-84132 | Analyzed | 未確認 | CWE-200 | Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2. |
| CVE-2026-84133 | Analyzed | 未確認 | CWE-346 | Site isolation issue in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2. |
| CVE-2026-84134 | Analyzed | 未確認 | CWE-200 | Other issue in the Profile Backup component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2. |
| CVE-2026-84135 | Modified | 未確認 | CWE-20, CWE-200 | Other issue in Firefox Focus for Android. This vulnerability was fixed in Firefox 155. |
| CVE-2026-84136 | Modified | 未確認 | CWE-200, CWE-79 | Other issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2. |
| CVE-2026-84137 | Modified | 未確認 | CWE-346, CWE-451 | Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2. |
| CVE-2026-84138 | Modified | 未確認 | CWE-400 | Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 155 and Thunderbird 155. |
| CVE-2026-84139 | Modified | 未確認 | CWE-1021 | Clickjacking issue in the DOM: Events component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2. |
| CVE-2026-84140 | Modified | 未確認 | CWE-346 | Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2. |
| CVE-2026-84141 | Modified | 未確認 | CWE-190 | Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2. |
| CVE-2026-84142 | Modified | 未確認 | CWE-119, CWE-200 | Internally found bugs present in Thunderbird 154. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort |
| CVE-2026-84143 | Modified | 未確認 | CWE-119, CWE-200 | Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-rele |
| CVE-2026-84144 | Analyzed | 未確認 | CWE-119 | Internally found bugs present in Thunderbird 154 and Thunderbird ESR 153.1. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presu |
| CVE-2026-84145 | Analyzed | 未確認 | CWE-119 | Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-rele |
| CVE-2026-84146 | Deferred | 未確認 | CWE-200 | The Xpro Addons — 140+ Widgets for Elementor WordPress plugin before 1.7.8 does not perform any capability or post-status check before rendering a WooCommerce product summary from |
| CVE-2026-84147 | Deferred | 未確認 | CWE-434 | This vulnerability exists in the ERP system due to improper authentication controls and inadequate file type validation at the API endpoint. An unauthenticated remote attacker coul |
| CVE-2026-84148 | Deferred | 未確認 | CWE-639 | This vulnerability exists in the ERP system due to improper authentication and authorization controls in the API endpoint. An unauthenticated remote attacker could exploit this vul |
| CVE-2026-84149 | Deferred | 未確認 | CWE-527 | This vulnerability exists in the ERP system due to exposure of repository information through a publicly accessible .git directory. An unauthenticated remote attacker could exploit |
| CVE-2026-84150 | Deferred | 未確認 | CWE-639 | The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not verify that the target user of a REST route matches the authenticat |
| CVE-2026-84151 | Deferred | 未確認 | CWE-79 | The Post Grid WordPress plugin before 7.9.5 does not limit an expansion of the WordPress allowed-HTML list to its own markup and applies it site-wide, allowing users with the Cont |
| CVE-2026-84153 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in Xinhu Rainrock RockOA up to 2.3.2. The impacted element is the function toaddval of the file /index.php?m=index&a=publicsavevalue&ajaxbool=true. E |
| CVE-2026-84154 | Deferred | 未確認 | CWE-94 | A Code Injection vulnerability affecting GEOVIA Geospatial Data Manager from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x could allow an attacker to execute arbi |
| CVE-2026-84165 | Deferred | 未確認 | CWE-284 | A vulnerability relating to incorrect access control in OpenNebula by OpenNebula Systems, affecting all versions prior to 7.4. This vulnerability could allow an authenticated user |
| CVE-2026-84168 | Deferred | 未確認 | CWE-200 | The Easy Hide Login WordPress plugin before 1.7 does not fully enforce its hidden-login protection, allowing an unauthenticated attacker to reach the standard login page through ce |
| CVE-2026-84171 | Deferred | 未確認 | CWE-434 | The WP images upload on piclect WordPress plugin through 1.0 does not validate the name or type of uploaded files before writing them to a publicly accessible directory, allowing u |
| CVE-2026-84173 | Deferred | 未確認 | CWE-863 | In Eclipse Ankaios versions v0.5.1 through v1.0.1, the agent-side Control Interface authorizer incorrectly evaluates multi-segment allow rules whose first path segment is a wildcar |
| CVE-2026-84175 | Deferred | 未確認 | CWE-674, CWE-918 | In Eclipse Ditto versions 3.0.0 to 3.9.6, the Things service fetches WoT (Web of Things) ThingModels over HTTP from URLs supplied by API users in the definition field of a Thing or |
| CVE-2026-84179 | Deferred | 未確認 | CWE-200, CWE-522 | Description getTopologyPageInfo merged the Nimbus daemon configuration with the topology's own configuration and returned the result without redaction in the topology_conf field |
| CVE-2026-84185 | Awaiting Analysis | 未確認 | CWE-347 | A flaw was found in the jwcrypto library, which is used for implementing Javascript Object Signing and Encryption (JOSE) standards. The issue occurs when the library verifies a Gen |
| CVE-2026-84186 | Deferred | 未確認 | CWE-290 | Vulnerability involving incorrect access control in the Tools::getRemoteAddr() function in PrestaShop, which allows the client’s IP address to be spoofed via the X-Forwarded-For he |
| CVE-2026-84187 | Deferred | 未確認 | CWE-284 | AVideo contains a missing authentication vulnerability in plugin/Live/on_publish.php that allows unauthenticated attackers to mark arbitrary scheduled broadcasts as failed by sendi |
| CVE-2026-84188 | Deferred | 未確認 | CWE-79 | LibreNMS versions <= 26.4.0 contain a stored cross-site scripting vulnerability in the graph_descr.<graphtype> configuration settings, which are echoed verbatim without HTML escapi |
| CVE-2026-84189 | Deferred | 未確認 | CWE-79 | LibreNMS through 26.4.0 renders JSON fields (name, ip, model, author, commit message) returned by the admin-configurable Oxidized integration URL (oxidized.url) into the device sho |
| CVE-2026-84190 | Deferred | 未確認 | CWE-77 | LibreNMS versions before 26.5.0 contain a remote code execution vulnerability in the AboutController where the snmpget configuration parameter is passed to shell_exec() without pro |
| CVE-2026-84191 | Deferred | 未確認 | CWE-79 | LibreNMS before 26.5.0 contains stored cross-site scripting vulnerabilities in VRF display pages where mplsVpnVrfDescription, vrf_name, and mplsVpnVrfRouteDistinguisher fields from |
| CVE-2026-84192 | Deferred | 未確認 | CWE-79 | LibreNMS before 26.3.1 contains a stored cross-site scripting vulnerability in legacy PHP templates that output SNMP-sourced and syslog-sourced data without escaping. An attacker w |
| CVE-2026-84193 | Deferred | 未確認 | CWE-79 | LibreNMS through 26.2.0 contains a stored cross-site scripting vulnerability in legacy PHP template pages that render unescaped SNMP-sourced data fields including BGP peer descript |
| CVE-2026-84194 | Deferred | 未確認 | CWE-78 | LibreNMS versions >= 23.10.0 and < 26.2.0 (fixed in 26.4.0) contain an authenticated OS command injection vulnerability in libvirt discovery. When libvirt support is enabled (enabl |
| CVE-2026-84195 | Awaiting Analysis | 未確認 | CWE-200 | Kyverno before 1.16.4 automatically attaches the admission controller's ServiceAccount token to outbound HTTP requests in apiCall service mode without explicit authorization header |
| CVE-2026-84196 | Awaiting Analysis | 未確認 | CWE-918 | Kyverno before 1.18.0 contains a server-side request forgery vulnerability in apiCall.service.url that allows authenticated users to send arbitrary HTTP requests by injecting user- |
| CVE-2026-84197 | Deferred | 未確認 | CWE-295, CWE-297, CWE-300 | In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-node from 2.0.0 to 3.9.0 and of its predecessor package @eclipse-ditto |
| CVE-2026-84199 | Awaiting Analysis | 未確認 | CWE-918 | Kyverno before 1.16.2 contains a server-side request forgery (SSRF) vulnerability in the APICall feature. The URL field in a Policy's ServiceCall configuration is not validated, so |
| CVE-2026-84200 | Awaiting Analysis | 未確認 | CWE-284 | Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in enforce mode is combined with two PolicyExceptions, the less restrictive exceptio |
| CVE-2026-84201 | Deferred | 未確認 | CWE-22 | appium-mcp-server through 0.1.61 fails to validate or normalize file paths in the write_file and write_files_batch tools, allowing attackers to write files outside the intended PRO |
| CVE-2026-84202 | Deferred | 未確認 | CWE-502 | ModelScope uses PyYAML's unsafe yaml.Loader to parse model configuration files, allowing arbitrary code execution through Python object construction tags. Attackers can craft malic |
| CVE-2026-84203 | Deferred | 未確認 | CWE-613 | Memos versions 0.26.0 through 0.30.0 fail to revoke refresh tokens when a user changes their password, allowing attackers to maintain account access. An attacker with a stolen refr |
| CVE-2026-84204 | Deferred | 未確認 | CWE-862 | GROWI contains an access control vulnerability in the GET /_api/v3/attachment/:id endpoint that fails to validate page access permissions. Authenticated attackers can retrieve atta |
| CVE-2026-84205 | Deferred | 未確認 | CWE-639 | GROWI contains an access control vulnerability in the GET /_api/v3/revisions/:id endpoint that validates access against a query parameter but returns the revision identified by the |
| CVE-2026-84206 | Analyzed | 未確認 | CWE-863 | Snipe-IT before 8.7.0 gates the bulk asset restore endpoint on the assets.edit permission instead of assets.delete, allowing users without delete rights to restore soft-deleted ass |
| CVE-2026-84207 | Deferred | 未確認 | CWE-918 | Heym before 0.0.98 fails to apply SSRF egress guards to WebSocket Send and WebSocket Trigger nodes, allowing authenticated users to connect to internal services. Attackers can craf |
| CVE-2026-84208 | Deferred | 未確認 | CWE-89 | AVideo through version 29.0 contains an unauthenticated SQL injection vulnerability in the User_Location plugin's regions.json.php and cities.json.php endpoints. The country and re |
| CVE-2026-84215 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Timetics <= 1.0.61 versions. |
| CVE-2026-84217 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Mamunur Rashid Classified Listing classified-listing allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Class |
| CVE-2026-84218 | Awaiting Analysis | 未確認 | CWE-184 | A flaw was found in Jolokia's JSR-160 proxy functionality where insufficient validation of client-controlled JMX service URLs allows a bypass of the denylist introduced to mitigate |
| CVE-2026-84219 | Deferred | 未確認 | CWE-79 | The Kirki WordPress plugin before 6.3.0 does not hold back every spelling of the HTML entities it decodes when rendering, allowing unauthenticated users to store JavaScript in a c |
| CVE-2026-84221 | Deferred | 未確認 | CWE-89 | The Kirki WordPress plugin before 6.3.0 does not escape a user-supplied identifier before using it in a SQL query, allowing users with editor-level access and above to append arbi |
| CVE-2026-84222 | Deferred | 未確認 | CWE-200 | The Kirki WordPress plugin before 6.3.0 does not check whether the requester is allowed to read a post before rendering and returning its page content, allowing unauthenticated us |
| CVE-2026-84223 | Deferred | 未確認 | CWE-79 | The Kirki WordPress plugin before 6.3.1 does not sanitize uploaded SVG files while making them uploadable site-wide, allowing users with author-level access and above to upload a |
| CVE-2026-84225 | Deferred | 未確認 | CWE-639 | The Kirki WordPress plugin before 6.3.0 does not check that a user is allowed to act on a collaboration comment before changing its state, allowing users whom an administrator has |
| CVE-2026-84226 | Awaiting Analysis | 未確認 | CWE-426 | OpenVPN version 2.5.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to perform a binary planting attack during network configuration steps |
| CVE-2026-84232 | Awaiting Analysis | 未確認 | CWE-79 | A flaw was found in pulpcore's content serving application. Files uploaded to Pulp file-type repositories are served with their original content type (e.g., text/html for .html fil |
| CVE-2026-84233 | Awaiting Analysis | 未確認 | CWE-78 | A flaw was found in rpm. A local attacker could supply a specially crafted `.gem` filename containing RPM macro syntax. When a user or automated workflow invokes `rpmuncompress -x` |
| CVE-2026-84235 | Awaiting Analysis | 未確認 | CWE-400 | A denial-of-service security issue exists in the affected product. The security issue stems from a crafted CIP packet being sent crashing the module. The device requires a restart |
| CVE-2026-84238 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in YITH Request a Quote for WooCommerce Premium < 4.46.0 versions. |
| CVE-2026-84239 | Analyzed | 未確認 | CWE-89 | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper neutralization of special elements used in an SQL comm |
| CVE-2026-84241 | Analyzed | 未確認 | CWE-285 | IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper authorization. |
| CVE-2026-84256 | Awaiting Analysis | 未確認 | CWE-78, CWE-88 | An argument parsing issue in OpenVPN 2.1_rc10 through 2.6.22 and 2.7_alpha1 through 2.7.7 on Windows allows remote authenticated users to execute arbitrary commands via a crafted c |
| CVE-2026-84267 | Awaiting Analysis | 未確認 | CWE-908 | A flaw was found in the SFTP backend in gvfs. When mounting a share, a malicious SFTP server can cause read_string() to allocate a buffer with a certain length but the function doe |
| CVE-2026-84268 | Awaiting Analysis | 未確認 | CWE-122 | A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause read_reply() to process a length that exceeds the size req |
| CVE-2026-84269 | Awaiting Analysis | 未確認 | CWE-122 | A flaw was found in the AFP backend in gvfs. When mounting a share, a malicious AFP server can cause the DSI read path to process a length that exceeds the size requested by the cl |
| CVE-2026-84270 | Awaiting Analysis | 未確認 | CWE-125 | A flaw was found in the MTP backend in gvfs. When reading a file from a mounted MTP device, do_read() in gvfsbackendmtp.c trusts the data length returned by the device without limi |
| CVE-2026-84279 | Deferred | 未確認 | CWE-79 | The Fancy Product Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'output_format' parameter in all versions up to, and including, 6.5.2 due to in |
| CVE-2026-84280 | Deferred | 未確認 | CWE-79 | The Fancy Product Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Order 'elements[].title' Parameter in all versions up to, and including, |
| CVE-2026-84281 | Deferred | 未確認 | CWE-79 | The Fancy Product Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'productTitle' in '_fpd_data' Order Item Meta in all versions up to, and including, |
| CVE-2026-84282 | Deferred | 未確認 | A Server-Side Request Forgery (SSRF) vulnerability exists in the ONLYOFFICE ownCloud Integration plugin version 9.12. The /apps/onlyoffice/ajax/settings/address endpoint does not s | |
| CVE-2026-84283 | Deferred | 未確認 | CWE-922 | Secure Folder 1.2 stores files selected for its password-protected vault as unencrypted files in the Android shared-storage tree. A local application or file manager that has acces |
| CVE-2026-84285 | Deferred | 未確認 | CWE-78 | An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.3 through 17.5 could allow an attacker to execute arbitrary commands on the server. |
| CVE-2026-84287 | Deferred | 未確認 | CWE-404 | A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is some unknown functionality of the file gateway/platforms/api_server.py of the component Session |
| CVE-2026-84288 | Deferred | 未確認 | CWE-404 | A vulnerability has been found in NousResearch hermes-agent up to 0.18.2. This affects the function HermesACPAgent.prompt of the file acp_adapter/session.py of the component ACP Pr |
| CVE-2026-84289 | Deferred | 未確認 | CWE-400, CWE-789 | A vulnerability was found in NousResearch hermes-agent up to 0.18.2. This vulnerability affects the function list_tools of the file tools/mcp_tool.py of the component MCP Tool. Per |
| CVE-2026-84292 | Analyzed | 未確認 | CWE-116 | fast-uri serializes the port component of a URI without validating it. When recomposing the authority, the userinfo and host components are escaped but the port is concatenated ver |
| CVE-2026-84293 | Deferred | 未確認 | CWE-79 | The Repeater Fields for Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Repeated Multi-Input Sub-Field Values in all versions up to, and includi |
| CVE-2026-84298 | Deferred | 未確認 | CWE-639, CWE-862 | Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. Prior to 0.95.3, the V1 DurableTask stream handler stores worker-supplied task_ |
| CVE-2026-84301 | Deferred | 未確認 | CWE-918 | FastGPT is an open-source LLM platform for building AI applications on a knowledge base. Prior to 4.15.2, the safe Axios request interceptor in packages/service/common/api/axios.ts |
| CVE-2026-84302 | Deferred | 未確認 | CWE-862 | Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, Discourse AI reviewables associated with private messages could appear in the |
| CVE-2026-84303 | Deferred | 未確認 | CWE-178, CWE-863 | gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, the xDS RBAC HTTP filter in internal/xds/httpfilter/rbac/rbac.go does not lowercase header matcher names in norm |
| CVE-2026-84304 | Deferred | 未確認 | CWE-400 | gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame as a separate recvMsg in recvBuffer, so |
| CVE-2026-84305 | Deferred | 未確認 | CWE-407 | sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, sqlparse.format(sql, reindent=True) and sqlformat --reindent route attacker-controlled parenthesized tupl |
| CVE-2026-84306 | Deferred | 未確認 | CWE-294 | Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.12.6 and 5.7.6, packages/panels/src/Auth/MultiFactor/App/AppAuthentication |
| CVE-2026-84307 | Deferred | 未確認 | CWE-204 | Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.12.5 and 5.7.5, packages/panels/src/Auth/Pages/Login.php presents the mult |
| CVE-2026-84308 | Deferred | 未確認 | CWE-208, CWE-385 | phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php performs data-dependent |
| CVE-2026-84309 | Analyzed | 未確認 | CWE-835 | pypdf is a free and open-source pure-python PDF library. Prior to 6.16.0, an attacker can craft a PDF whose cyclic tree structure causes pypdf/generic/_data_structures.py TreeObjec |
| CVE-2026-84310 | Analyzed | 未確認 | CWE-405, CWE-834 | pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/_doc_common.py _get_outline to consume long runtimes and lar |
| CVE-2026-84311 | Analyzed | 未確認 | CWE-834 | pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/_page.py PageObject._extract_text and PageObject.extract_xfo |
| CVE-2026-84323 | Analyzed | 未確認 | CWE-862 | Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to o |
| CVE-2026-84324 | Analyzed | 未確認 | CWE-416 | Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium secur |
| CVE-2026-84325 | Analyzed | 未確認 | CWE-20 | Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a |
| CVE-2026-84326 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in V8 in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secur |
| CVE-2026-84327 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Autofill in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to obtain sensitive information vi |
| CVE-2026-84328 | Analyzed | 未確認 | CWE-862 | Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a cra |
| CVE-2026-84329 | Analyzed | 未確認 | CWE-441 | Confused deputy in CredentialProvider in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak sensitive inf |
| CVE-2026-84330 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in FullScreen in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security |
| CVE-2026-84331 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Actor in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafte |
| CVE-2026-84332 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in SiteSettings in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium se |
| CVE-2026-84333 | Analyzed | 未確認 | CWE-416 | Use after free in Dawn in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chrom |
| CVE-2026-84334 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.75 allowed a local attacker to execute arbitrary code outside the sandbox via a local progr |
| CVE-2026-84335 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to p |
| CVE-2026-84347 | Analyzed | 未確認 | CWE-416 | Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-84348 | Analyzed | 未確認 | CWE-200 | Information leak in MediaCapture in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. (Chromium secu |
| CVE-2026-84349 | Analyzed | 未確認 | CWE-416 | Use after free in Browser in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox v |
| CVE-2026-84350 | Analyzed | 未確認 | CWE-416 | Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Inte |
| CVE-2026-84351 | Analyzed | 未確認 | CWE-121 | Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside th |
| CVE-2026-84352 | Analyzed | 未確認 | CWE-416 | Use after free in WebGL in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chro |
| CVE-2026-84353 | Analyzed | 未確認 | CWE-416 | Use after free in Shared Tab Groups in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside |
| CVE-2026-84354 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox |
| CVE-2026-84355 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Navigation in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a c |
| CVE-2026-84356 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in FullScreen in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Low) |
| CVE-2026-84357 | Analyzed | 未確認 | CWE-20 | Improper input validation in Omnibox in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network |
| CVE-2026-84358 | Analyzed | 未確認 | CWE-269 | Improper privilege management in Downloads in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to spoof address bar via a cra |
| CVE-2026-84359 | Analyzed | 未確認 | CWE-200 | Information leak in Skia in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML pag |
| CVE-2026-84361 | Deferred | 未確認 | CWE-78 | Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and 2.10.3, a malicious dependency package from a custom Composer repository or an untrusted composer.l |
| CVE-2026-84363 | Deferred | 未確認 | CWE-444 | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.13.5, Hono's query helpers treat a question mark after a literal hash fragment as t |
| CVE-2026-84364 | Deferred | 未確認 | CWE-400 | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.13.5, when parseBody() expands dot-separated form field names into nested objects w |
| CVE-2026-84365 | Deferred | 未確認 | CWE-22 | Hono is a Web application framework that provides support for any JavaScript runtime. From 4.12.12 until 4.13.5, the fix released for CVE-2026-39408 does not cover every traversal |
| CVE-2026-84366 | Deferred | 未確認 | CWE-319 | Scrapy is a high-level web crawling and scraping framework for Python. Prior to 2.17.0, in scrapy/core/downloader/handlers/s3.py, Scrapy's S3DownloadHandler converts an S3-scheme b |
| CVE-2026-84367 | Deferred | 未確認 | CWE-1321 | joi is a schema description language and data validator for JavaScript. From 16.0.0 until 17.13.5 and 18.2.4, joi's lib/types/keys.js internals.rename() implementation used by obje |
| CVE-2026-84368 | Deferred | 未確認 | CWE-1321 | joi is a schema description language and data validator for JavaScript. From 16.0.0 until 17.13.6 and 18.2.5, the @hapi/joi package through 17.1.1 and the successor joi package con |
| CVE-2026-84369 | Deferred | 未確認 | CWE-79 | SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version 1.0.0 until versions 2.8.4, 3.3.5, and 4.1.0, the opt-in rem |
| CVE-2026-84370 | Deferred | 未確認 | CWE-184, CWE-79 | SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version 1.0.0 until versions 2.8.4, 3.3.5, and 4.1.0, the opt-in rem |
| CVE-2026-84371 | Deferred | 未確認 | CWE-79 | ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. From version 1.9.0 until version 2.17.7, pac |
| CVE-2026-84372 | Deferred | 未確認 | CWE-93 | Predis is a flexible and feature-complete Redis and Valkey client for PHP. From version 3.0.0-RC1 until version 3.3.0, pipeline handling on aggregate cluster and replication connec |
| CVE-2026-84373 | Deferred | 未確認 | CWE-22 | Vitest is a testing framework powered by Vite. From 2.1.0 until 4.1.11 and 5.0.0-rc.2, the public mockerPlugin and standalone interceptorPlugin exports in packages/mocker/src/node/ |
| CVE-2026-84374 | Deferred | 未確認 | CWE-22, CWE-73 | Laravel Excel provides supercharged Excel exports and imports in Laravel. From 3.1.8 until 3.1.70, in src/Files/Disk.php the Maatwebsite\Excel\Files\Disk::copy() method resolves th |
| CVE-2026-84375 | Deferred | 未確認 | CWE-400, CWE-407 | js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 until 3.15.2, 4.3.2, and 5.4.1, maxTotalMergeKeys in lib/js-yaml/loader.js and lib/loader.js does not count empty mapping |
| CVE-2026-84376 | Deferred | 未確認 | CWE-187 | Astro is a web framework for content-driven websites. Prior to 7.2.4, Astro stripped a configured non-root base path from request pathnames using a string-prefix check without veri |
| CVE-2026-84377 | Awaiting Analysis | 未確認 | CWE-918 | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to versions 1.88.6 and 1.96.2, any authenticated LiteLLM proxy user could redirect an ou |
| CVE-2026-84378 | Awaiting Analysis | 未確認 | CWE-407 | HTTPX2 is a next generation HTTP client for Python. From 2.5.0 until 2.10.0, the HTTPX2 Server-Sent Events parser in src/httpx2/httpx2/_sse.py repeatedly copies and rescans buffere |
| CVE-2026-84379 | Awaiting Analysis | 未確認 | CWE-93 | HTTPX2 is a next generation HTTP client for Python. Prior to 2.11.0, FileField.render_headers() in src/httpx2/httpx2/_multipart.py directly interpolates attacker-controlled content |
| CVE-2026-84380 | Awaiting Analysis | 未確認 | CWE-444 | HTTPX2 is a next generation HTTP client for Python. Prior to 2.11.0, Request._prepare() in src/httpx2/httpx2/_models.py can add a body-derived Content-Length header to a request th |
| CVE-2026-84381 | Awaiting Analysis | 未確認 | CWE-319 | HTTPX2 is a next generation HTTP client for Python. Prior to 2.10.0, httpcore2 fails to start TLS in src/httpcore2/httpcore2/_sync/socks_proxy.py and src/httpcore2/httpcore2/_async |
| CVE-2026-84382 | Awaiting Analysis | 未確認 | CWE-409 | HTTPX2 is a next generation HTTP client for Python. Prior to 2.12.0, the HTTPX2 content decoders in src/httpx2/httpx2/_decoders.py fully inflate each gzip, deflate, br, or zstd net |
| CVE-2026-84383 | Deferred | 未確認 | CWE-787 | libheif is a HEIF and AVIF file format decoder and encoder. From 1.22.0 until 1.23.2, a crafted HEIF, HEIC, or AVIF item graph using nested iden and auxl references can make HeifPi |
| CVE-2026-84384 | Deferred | 未確認 | CWE-409 | libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.2, crafted HEIF or AVIF mime metadata and unci image data can cause decompress_brotli() and do_in |
| CVE-2026-84385 | Awaiting Analysis | 未確認 | CWE-284 | A improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, FortiSOAR PaaS 7.5.0 through 7.5.3, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all |
| CVE-2026-84386 | Awaiting Analysis | 未確認 | CWE-283 | A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via via a |
| CVE-2026-84387 | Awaiting Analysis | 未確認 | CWE-77 | A improper neutralization of special elements used in a command ('command injection') vulnerability in Fortinet FortiSandbox 5.2.0, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4 |
| CVE-2026-84388 | Awaiting Analysis | 未確認 | CWE-1021 | A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions, FortiPAM Chrome Extension 7.4 all versions may allow at |
| CVE-2026-84389 | Awaiting Analysis | 未確認 | CWE-601 | A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM 7.4.1 through 7.4.2 may allow attacker to execute unauthori |
| CVE-2026-84390 | Awaiting Analysis | 未確認 | CWE-540 | A inclusion of sensitive information in source code vulnerability in Fortinet FortiMonitorOnSight 7.2.4 through 7.2.7, FortiMonitorOnSight 7.2.0 through 7.2.2 may allow attacker to |
| CVE-2026-84391 | Awaiting Analysis | 未確認 | CWE-457 | A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may allow attacker to denial of service via <insert attack vector here> |
| CVE-2026-84392 | Awaiting Analysis | 未確認 | CWE-476 | A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiPAM 1.9.0, FortiPAM 1.8 all versions, FortiPAM |
| CVE-2026-84393 | Awaiting Analysis | 未確認 | CWE-297 | A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow attacker to information disc |
| CVE-2026-84394 | Analyzed | 未確認 | CWE-436 | fast-uri accepts a host that contains an unbalanced or misplaced authority bracket without reporting an error. A host that starts with an opening bracket but does not end with a cl |
| CVE-2026-84395 | Awaiting Analysis | 未確認 | CWE-918 | Premiere Pro is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation potentially resulting in unauthorized write access. Exploit |
| CVE-2026-84396 | Awaiting Analysis | 未確認 | CWE-476 | InDesign Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to cras |
| CVE-2026-84397 | Awaiting Analysis | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2026-84398 | Deferred | 未確認 | CWE-258 | CM2507 IP cameras accept an empty password for a privileged account exposed through its ONVIF management service. An attacker with network access to the affected device could acces |
| CVE-2026-84399 | Deferred | 未確認 | CWE-863 | The Botslab G980H dash camera firmware contains an authorization vulnerability in its session based command functionality. The product does not sufficiently associate an authentica |
| CVE-2026-84400 | Deferred | 未確認 | CWE-306 | CareCam CM2507 IP cameras contain an insufficiently protected network maintenance mechanism that can activate a remote debugging service. An attacker on the same local network who |
| CVE-2026-84403 | Deferred | 未確認 | CWE-306 | The Botslab G980H dash camera firmware does not require authenticated pairing or client binding before permitting access to Bluetooth Low Energy communications and GATT characteris |
| CVE-2026-84408 | Deferred | 未確認 | CWE-782 | QND contains an improper access control vulnerability in a named pipe, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is inst |
| CVE-2026-84409 | Awaiting Analysis | 未確認 | CWE-79 | The device's update mechanism retrieves metadata for software updates over an unencrypted HTTP connection and stores portions of that metadata for later use. A management interface |
| CVE-2026-84412 | Analyzed | 未確認 | CWE-94 | Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context |
| CVE-2026-84414 | Analyzed | 未確認 | CWE-732 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to change the ownership of arbitrary files due to improper validation of an attacker-controlled file path. |
| CVE-2026-84421 | Analyzed | 未確認 | CWE-22 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of paths during archive extraction. |
| CVE-2026-84422 | Analyzed | 未確認 | CWE-78 | IBM Guardium Data Protection 12.2 is vulnerable to command injection in the CLI certificate SMIME recipient deletion functionality, allowing an authenticated privileged CLI user to |
| CVE-2026-84423 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability has been found in Casdoor up to 4.0.0. This affects an unknown function of the file controllers/resource.go of the component upload-resource API. Such manipulation |
| CVE-2026-84425 | Deferred | 未確認 | CWE-404 | A vulnerability was found in zhayujie CowAgent up to 2.1.3. This impacts the function BrowserTool of the file agent/tools/browser/browser_tool.py of the component Browser Tool. Per |
| CVE-2026-84427 | Deferred | 未確認 | CWE-404 | A vulnerability was determined in zhayujie CowAgent up to 2.1.7. Affected is an unknown function of the file agent/tools/bash/bash.py of the component Bash Tool. Executing a manipu |
| CVE-2026-84428 | Analyzed | 未確認 | CWE-178 | fastify versions before 5.12.2 implement the case-insensitive nature of HTTP header names by lowercasing names in a route's header schema before compiling it, but the transformatio |
| CVE-2026-84430 | Deferred | 未確認 | CWE-913, CWE-915 | A security vulnerability has been detected in gouguoa up to 5.10.0/6.0.1. This vulnerability affects the function update of the file app/home/controller/Index.php of the component |
| CVE-2026-84431 | Deferred | 未確認 | CWE-22 | A vulnerability was detected in AirAsia MOVE App up to 12.47.1 on Android. This issue affects the function com.airasia.core.utils.RealPathUtil.getRealPath of the component com.aira |
| CVE-2026-84432 | Deferred | 未確認 | CWE-352 | Concrete CMS 9 through 9.5.2 did not validate an anti-CSRF token in the Boards custom slot dialog controller (concrete/controllers/dialog/board/custom_slot.php) saveTemplate() act |
| CVE-2026-84434 | Deferred | 未確認 | CWE-434 | The Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.1.0.4 via the upload_file function. This is due to a mismatch |
| CVE-2026-84436 | Analyzed | 未確認 | CWE-78 | IBM Guardium Data Protection 12.2 is vulnerable to command injection in the certificate export CLI functionality, allowing a privileged authenticated CLI user to execute arbitrary |
| CVE-2026-84437 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in OpenCart 4.1.0.3/4.1.0.4. The impacted element is an unknown function of the file catalog/controller/account/address.php of the component Autocomplete |
| CVE-2026-84438 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in OpenCart 4.1.0.3/4.1.0.4. This affects an unknown function of the file catalog/controller/account/edit.php of the component Autocomplete Workflow. |
| CVE-2026-84439 | Analyzed | 未確認 | CWE-117 | When audit logging is enabled (zookeeper.audit.enable=true), an unauthenticated attacker can inject arbitrary fields into Apache ZooKeeper's audit log by sending a digest authentic |
| CVE-2026-84440 | Analyzed | 未確認 | CWE-78 | IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality. An authenticated attacker who can influence policy alert text can |
| CVE-2026-84441 | Deferred | 未確認 | CWE-22 | A security vulnerability has been detected in Piwigo up to 16.3.0. Affected by this issue is some unknown functionality of the file i.php of the component Image Derivative Handler. |
| CVE-2026-84442 | Deferred | 未確認 | CWE-22 | A vulnerability was identified in MapQuest Get Directions App 10.16.1 on Android. This vulnerability affects the function getDataColumn of the file ExpoShareIntentModule.kt of the |
| CVE-2026-84444 | Deferred | 未確認 | CWE-787 | libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, when WITH_UNCOMPRESSED_CODEC is enabled, heif_context_add_image_tile() accepts an independently constru |
| CVE-2026-84445 | Awaiting Analysis | 未確認 | CWE-129, CWE-248 | gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and 1.83.2, servers created with xds.NewGRPCServer() allow internal/transport/http2_server.go to accept an RPC co |
| CVE-2026-84446 | Deferred | 未確認 | CWE-835 | libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, crafted HEIF sequence timing and edit-list data can make Track::init_sample_timing_table() compute a lo |
| CVE-2026-84447 | Deferred | 未確認 | CWE-770 | libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.1 and earlier, crafted grid, iovl, and iden reference graphs can repeatedly decode the same base image because p |
| CVE-2026-84448 | Deferred | 未確認 | CWE-125, CWE-131 | libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, the public heif_region_item_add_region_inline_mask_data() function in libheif/api/libheif/heif_regions. |
| CVE-2026-84449 | Deferred | 未確認 | CWE-125, CWE-190 | libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.19.6, Op_RGB24_32_to_YCbCr::convert_colorspace() stores image-plane strides in an integer width that can over |
| CVE-2026-84450 | Deferred | 未確認 | CWE-617 | libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.3, a crafted image item containing a clap property and an ispe width or height greater than INT32 |
| CVE-2026-84451 | Deferred | 未確認 | CWE-125 | libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.3, the no-icef full-item branch of unc_decoder::get_compressed_image_data_uncompressed() in libhe |
| CVE-2026-84452 | Deferred | 未確認 | CWE-306, CWE-942 | Windows ML CLI is a command line tool for building portable, performant, and high-quality AI models for Windows ML. Prior to 0.4.0, the src/winml/modelkit/serve/cli_api.py componen |
| CVE-2026-84458 | Deferred | 未確認 | CWE-287 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when the "Automatic account link on initial logon" setting is enabled, Zammad binds an incoming |
| CVE-2026-84460 | Deferred | 未確認 | CWE-639 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, any authenticated user can call the REST endpoint for getting a tag list and receive the tag nam |
| CVE-2026-84461 | Deferred | 未確認 | CWE-203, CWE-307, CWE-799 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, the two-factor login step let an attacker try unlimited password guesses for any account without |
| CVE-2026-84462 | Deferred | 未確認 | CWE-1336, CWE-20, CWE-94 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, a security filter that protects Zammad's AI Agent configuration can be bypassed by entering spec |
| CVE-2026-84463 | Deferred | 未確認 | CWE-352, CWE-79, CWE-838 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, a user with Knowledge Base editing rights for a category can embed a video widget in a published |
| CVE-2026-84464 | Deferred | 未確認 | CWE-200, CWE-639, CWE-863 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, zammad's External Data Source feature, used to look up records from an external system, did not |
| CVE-2026-84465 | Deferred | 未確認 | CWE-290, CWE-295, CWE-347 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when Zammad checks the digital signature on an incoming S/MIME-signed email, it does not verify |
| CVE-2026-84469 | Analyzed | 未確認 | CWE-20 | fastify versions before 5.12.2 decide whether to compile a request schema based on JavaScript truthiness, but JSON Schema Draft 7 defines the boolean false as a valid schema that r |
| CVE-2026-8447 | Analyzed | 未確認 | CWE-79 | IBM Langflow OSS 1.0.0 through 1.11.2 suffer from a stored cross-site scripting vulnerability in the Playground chat interface. |
| CVE-2026-84470 | Awaiting Analysis | 未確認 | CWE-862 | A flaw was found in Ansible Automation Platform's automation-controller (AWX). The Bulk Job Launch API (POST /api/v2/bulk/job_launch/) authorizes the requested instance_groups with |
| CVE-2026-84474 | Awaiting Analysis | 未確認 | CWE-807 | A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The provisioning-callback secret (host_config_key) is exposed to users holding only the read-level |
| CVE-2026-84476 | Deferred | 未確認 | CWE-290 | WWBN AVideo fails to validate trusted proxies before accepting X-Real-IP and X-Forwarded-For headers, allowing attackers to spoof the client address used by enforceRateLimit(). Att |
| CVE-2026-84477 | Deferred | 未確認 | CWE-79 | AVideo Live_schedule::setTitle() and setDescription() store POST input without sanitization, allowing users with streaming permission to inject malicious scripts. Unauthenticated a |
| CVE-2026-84478 | Deferred | 未確認 | CWE-73 | WWBN AVideo contains a path traversal vulnerability in the API get_api_login_code endpoint that allows unauthenticated attackers to delete arbitrary .log files by supplying directo |
| CVE-2026-84479 | Deferred | 未確認 | CWE-290 | WWBN AVideo (current e01e41ecc and earlier) makes three login-time security controls depend solely on the client-supplied User-Agent header. The isAVideoEncoder()/isAVideoMobileApp |
| CVE-2026-84480 | Deferred | 未確認 | CWE-613 | WWBN AVideo fails to validate password recovery token expiration in userRecoverPassSave.json.php, allowing attackers to use expired tokens to reset account passwords indefinitely. |
| CVE-2026-84481 | Deferred | 未確認 | CWE-200 | WWBN AVideo through 30.0 contains an information disclosure vulnerability in the MobileManager plugin getConfiguration endpoint that returns sensitive configuration data to unauthe |
| CVE-2026-84482 | Deferred | 未確認 | CWE-346 | WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in the get_domain() and isSameDomain() functions that fail to properly validate referer orig |
| CVE-2026-84483 | Deferred | 未確認 | CWE-321 | WWBN AVideo through commit 9c39d8c8 contains an incomplete authentication bypass in encryptPass.json.php that allows unauthenticated attackers to compute valid HMAC tokens using th |
| CVE-2026-84484 | Deferred | 未確認 | CWE-125 | ION-DTN versions before 4.2.0 contain an out-of-bounds read vulnerability in the decodeSdnv function that allows unauthenticated remote attackers to read memory by sending truncate |
| CVE-2026-84485 | Deferred | 未確認 | CWE-306 | APITable through 1.13.0-beta.1 exposes the internal organization loadOrSearch endpoint without authentication, allowing unauthenticated attackers to retrieve member names, email ad |
| CVE-2026-84486 | Awaiting Analysis | 未確認 | CWE-489 | A flaw was found in Red Hat Ansible Automation Platform's automation- controller. Four debug views that trigger the internal task, dependency, and workflow schedulers are configure |
| CVE-2026-84487 | Analyzed | 未確認 | CWE-190 | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, m |
| CVE-2026-84489 | Analyzed | 未確認 | CWE-120 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.7 |
| CVE-2026-84491 | Analyzed | 未確認 | CWE-284 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, w |
| CVE-2026-84492 | Analyzed | 未確認 | CWE-362 | A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS |
| CVE-2026-84497 | Analyzed | 未確認 | CWE-120 | A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macO |
| CVE-2026-84499 | Awaiting Analysis | 未確認 | CWE-209 | A flaw was found in Red Hat Ansible Automation Platform's automation- controller. Survey questions of type password are write-only and stored encrypted, displayed only as a placeho |
| CVE-2026-84501 | Analyzed | 未確認 | CWE-117 | An unauthenticated attacker can inject arbitrary fake log lines into Apache ZooKeeper's operational log by sending a crafted add_auth("ensemble", ...) request containing newline ch |
| CVE-2026-84502 | Awaiting Analysis | 未確認 | CWE-88 | A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The Project scm_url field is not validated against values that begin with a dash and is stored and |
| CVE-2026-84504 | Analyzed | 未確認 | CWE-20 | fastify versions before 5.12.2 treat the object resolved by a successful Ajv async validator as the value result protocol used by custom validator compilers. If a request that pass |
| CVE-2026-84505 | Analyzed | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to g |
| CVE-2026-84506 | Modified | 未確認 | CWE-416 | A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause |
| CVE-2026-84507 | Analyzed | 未確認 | CWE-362 | A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS |
| CVE-2026-84509 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious SMB |
| CVE-2026-84510 | Analyzed | 未確認 | CWE-122 | A heap buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, |
| CVE-2026-84511 | Analyzed | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, t |
| CVE-2026-84512 | Analyzed | 未確認 | CWE-120 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a maliciously crafted dis |
| CVE-2026-84513 | Analyzed | 未確認 | CWE-532 | A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, mac |
| CVE-2026-84514 | Analyzed | 未確認 | CWE-862 | This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to modify protect |
| CVE-2026-84515 | Analyzed | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicio |
| CVE-2026-84516 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously craft |
| CVE-2026-84517 | Analyzed | 未確認 | CWE-190 | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause une |
| CVE-2026-84518 | Analyzed | 未確認 | CWE-642 | This issue was addressed through improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious website may be able to determi |
| CVE-2026-84519 | Analyzed | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia |
| CVE-2026-84520 | Analyzed | 未確認 | CWE-120 | A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27. A local attacker may be able to cause unexpected system termination or c |
| CVE-2026-84521 | Analyzed | 未確認 | CWE-416 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15. |
| CVE-2026-84522 | Modified | 未確認 | CWE-362 | A race condition was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data. |
| CVE-2026-84523 | Analyzed | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia |
| CVE-2026-84524 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, |
| CVE-2026-84525 | Analyzed | 未確認 | CWE-532 | A logging issue was addressed with improved data redaction. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access user-sen |
| CVE-2026-84526 | Analyzed | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia |
| CVE-2026-84527 | Analyzed | 未確認 | CWE-532 | A logging issue was addressed with improved data redaction. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, vision |
| CVE-2026-84530 | Analyzed | 未確認 | CWE-200 | An information disclosure issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Ta |
| CVE-2026-84531 | Analyzed | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. Processing maliciously crafted NTLM inp |
| CVE-2026-84532 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia |
| CVE-2026-84533 | Modified | 未確認 | CWE-353 | A cryptographic issue was addressed with improved integrity checks. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, watchOS 27. An attacker in a privile |
| CVE-2026-84534 | Analyzed | 未確認 | CWE-22 | A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS |
| CVE-2026-84535 | Analyzed | 未確認 | CWE-284 | An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to break |
| CVE-2026-84536 | Analyzed | 未確認 | CWE-190 | An integer underflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious SMB |
| CVE-2026-84537 | Analyzed | 未確認 | CWE-119 | The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected sys |
| CVE-2026-84538 | Analyzed | 未確認 | CWE-20 | A denial-of-service issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote attacker may be |
| CVE-2026-84540 | Modified | 未確認 | CWE-863 | An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access |
| CVE-2026-84541 | Analyzed | 未確認 | CWE-22 | An input validation issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An application may be abl |
| CVE-2026-84543 | Analyzed | 未確認 | CWE-125 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malici |
| CVE-2026-84544 | Modified | 未確認 | CWE-190 | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious NFS s |
| CVE-2026-84546 | Analyzed | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia |
| CVE-2026-84548 | Modified | 未確認 | CWE-190 | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafte |
| CVE-2026-84549 | Modified | 未確認 | CWE-125 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious NFS |
| CVE-2026-84550 | Modified | 未確認 | CWE-362 | A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected |
| CVE-2026-84551 | Modified | 未確認 | CWE-862 | A logic issue was addressed with improved validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27, watchOS 27. An app may be able to bypass netwo |
| CVE-2026-84552 | Modified | 未確認 | CWE-125, CWE-416, CWE-787 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe |
| CVE-2026-84553 | Analyzed | 未確認 | CWE-400 | A resource exhaustion issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote attacker may b |
| CVE-2026-84554 | Analyzed | 未確認 | CWE-190 | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in a privileged net |
| CVE-2026-84555 | Analyzed | 未確認 | CWE-284 | An authorization issue was addressed with improved access control. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8. An app may be able to access sensitive user data |
| CVE-2026-84556 | Modified | 未確認 | CWE-285 | An authorization issue was addressed with improved access control. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access s |
| CVE-2026-84558 | Modified | 未確認 | CWE-415 | A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27. An app may be able to cause unexpected system termination. |
| CVE-2026-84559 | Analyzed | 未確認 | CWE-693 | A permissions issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious application may be able t |
| CVE-2026-84560 | Analyzed | 未確認 | CWE-863 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may |
| CVE-2026-84561 | Analyzed | 未確認 | CWE-415 | A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, |
| CVE-2026-84562 | Analyzed | 未確認 | CWE-362 | A race condition was addressed with additional validation. This issue is fixed in macOS Tahoe 26.6. An app may be able to access protected user data. |
| CVE-2026-84563 | Analyzed | 未確認 | CWE-843 | A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system t |
| CVE-2026-84564 | Analyzed | 未確認 | CWE-457 | An uninitialized memory issue was addressed with improved memory initialization. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS |
| CVE-2026-84565 | Modified | 未確認 | CWE-125 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously craft |
| CVE-2026-84566 | Analyzed | 未確認 | CWE-119 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe |
| CVE-2026-84567 | Analyzed | 未確認 | CWE-119, CWE-416, CWE-787 | The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected sys |
| CVE-2026-84568 | Analyzed | 未確認 | CWE-22 | A path traversal issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker with control of a |
| CVE-2026-84569 | Modified | 未確認 | CWE-862 | An access issue was addressed with additional sandbox restrictions on the system pasteboards. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive us |
| CVE-2026-84570 | Analyzed | 未確認 | CWE-693 | A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to bypass Gatekeeper checks. |
| CVE-2026-84571 | Analyzed | 未確認 | CWE-120 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a mal |
| CVE-2026-84572 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause un |
| CVE-2026-84573 | Analyzed | 未確認 | CWE-284 | This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data. |
| CVE-2026-84574 | Analyzed | 未確認 | CWE-284 | A permissions issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to bypass Pr |
| CVE-2026-84575 | Analyzed | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, t |
| CVE-2026-84576 | Analyzed | 未確認 | CWE-200 | This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data. |
| CVE-2026-84577 | Analyzed | 未確認 | CWE-120 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27, macOS Tahoe 26.7. An app may be able to bypass sandbox restrictions |
| CVE-2026-84578 | Analyzed | 未確認 | CWE-693 | A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to break out of its sandbox. |
| CVE-2026-84580 | Modified | 未確認 | CWE-862 | The issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to break out of its sandbox. |
| CVE-2026-84581 | Analyzed | 未確認 | CWE-120 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a maliciously crafted dis |
| CVE-2026-84583 | Analyzed | 未確認 | CWE-200 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, mac |
| CVE-2026-84584 | Modified | 未確認 | CWE-59 | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Golden Gate 27. An app may be able to break out of its sandbox. |
| CVE-2026-84585 | Analyzed | 未確認 | CWE-284 | A permissions issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access local network devices without user conse |
| CVE-2026-84586 | Analyzed | 未確認 | CWE-200 | An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, watchOS 27. A malicious application may be able to leak s |
| CVE-2026-84587 | Analyzed | 未確認 | CWE-269 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access prot |
| CVE-2026-84588 | Analyzed | 未確認 | CWE-787 | A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted disk image may cause unexpected |
| CVE-2026-84589 | Modified | 未確認 | CWE-863 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27. An app may be able to modify Privacy preferences. |
| CVE-2026-84593 | Analyzed | 未確認 | CWE-416 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to cause unexpected system termination. |
| CVE-2026-84596 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a |
| CVE-2026-84597 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Proce |
| CVE-2026-84598 | Analyzed | 未確認 | CWE-22 | A path traversal issue was addressed with improved path validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker with physical access to a tru |
| CVE-2026-84600 | Analyzed | 未確認 | CWE-285 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A maliciou |
| CVE-2026-84601 | Modified | 未確認 | CWE-863 | A permissions issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to bypass Apple Intelligence security prompts. |
| CVE-2026-84602 | Analyzed | 未確認 | CWE-843 | A type confusion issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Ta |
| CVE-2026-84603 | Analyzed | 未確認 | CWE-269 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user da |
| CVE-2026-84606 | Analyzed | 未確認 | CWE-287, CWE-330, CWE-359 | A privacy issue was addressed with improved handling of identifiers. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to identify |
| CVE-2026-84607 | Analyzed | 未確認 | CWE-362 | A race condition was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macO |
| CVE-2026-84609 | Analyzed | 未確認 | CWE-120 | A permissions issue was addressed with improved path validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, v |
| CVE-2026-84611 | Analyzed | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia |
| CVE-2026-84612 | Analyzed | 未確認 | CWE-863 | An authorization issue was addressed with improved access control. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, |
| CVE-2026-84615 | Analyzed | 未確認 | CWE-285 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, tvOS 27, visionOS 27. An app may be able |
| CVE-2026-84616 | Analyzed | 未確認 | CWE-441 | A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, |
| CVE-2026-84617 | Analyzed | 未確認 | CWE-863 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8 |
| CVE-2026-84618 | Analyzed | 未確認 | CWE-863 | A permissions issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitiv |
| CVE-2026-84619 | Analyzed | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to c |
| CVE-2026-8462 | Awaiting Analysis | 未確認 | CWE-89 | SQL injection in ClickHouse-backed meter definitions in OpenMeter OpenMeter before v1.0.0-beta.228 on all platforms allows a remote unauthenticated attacker to access or modify met |
| CVE-2026-84620 | Analyzed | 未確認 | CWE-190 | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, m |
| CVE-2026-84621 | Analyzed | 未確認 | CWE-285 | An authorization issue was addressed with improved access control. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, |
| CVE-2026-84622 | Analyzed | 未確認 | CWE-908 | A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoi |
| CVE-2026-84623 | Analyzed | 未確認 | CWE-287 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An app may be able to fingerprint the de |
| CVE-2026-84624 | Analyzed | 未確認 | CWE-22 | A permissions issue was addressed with improved path validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, ma |
| CVE-2026-84625 | Analyzed | 未確認 | CWE-200 | A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27, watchOS 27. An app may be ab |
| CVE-2026-84626 | Analyzed | 未確認 | CWE-200 | An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Seq |
| CVE-2026-84628 | Analyzed | 未確認 | CWE-863 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A sandboxe |
| CVE-2026-84629 | Analyzed | 未確認 | CWE-862 | This issue was addressed with additional entitlement checks. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to fingerprint the us |
| CVE-2026-84630 | Analyzed | 未確認 | CWE-362 | A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS |
| CVE-2026-84631 | Analyzed | 未確認 | CWE-280 | This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27. An app may be able to gain root privileges. |
| CVE-2026-84632 | Analyzed | 未確認 | CWE-120 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe |
| CVE-2026-84635 | Analyzed | 未確認 | CWE-843 | A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processi |
| CVE-2026-84636 | Analyzed | 未確認 | CWE-285 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sen |
| CVE-2026-84637 | Analyzed | 未確認 | CWE-434 | Malicious calendar invitations could use file URI attachments to launch local or network-hosted executables on Windows, bypassing Thunderbird's normal executable attachment protect |
| CVE-2026-84639 | Analyzed | 未確認 | CWE-457 | Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbi |
| CVE-2026-84640 | Analyzed | 未確認 | CWE-126 | A maliciously constructed mail header could lead to a one byte read past the end of a buffer. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 1 |
| CVE-2026-84641 | Analyzed | 未確認 | CWE-416 | A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerab |
| CVE-2026-84642 | Analyzed | 未確認 | CWE-1333 | The values of the mail.allowed_attachment_hostnames advanced config setting were used in a regular expression without escaping. For some possible valid hostnames, this could allow |
| CVE-2026-84645 | Analyzed | 未確認 | CWE-915, CWE-94 | In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, objects of types marked as storing their configuration in independent top-level configuration files in Jenkins (such as the g |
| CVE-2026-84646 | Analyzed | 未確認 | CWE-502 | In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permis |
| CVE-2026-84647 | Awaiting Analysis | 未確認 | CWE-502 | In Stapler 2107.v8dfcb_e8ed317 and earlier, except 2088.2093.vd7c3e58008a_6, included in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, Stapler does not restrict the types of |
| CVE-2026-84648 | Analyzed | 未確認 | CWE-79 | In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata (source, level, and timestamp) resulting in a stored cross-site scr |
| CVE-2026-84649 | Awaiting Analysis | 未確認 | CWE-352 | In Stapler 1839.ved17667b_a_eb_5 through 2107.v8dfcb_e8ed317 (both inclusive), except 2088.2093.vd7c3e58008a_6, included in Jenkins 2.447 through 2.579 (both inclusive), LTS 2.452. |
| CVE-2026-84650 | Analyzed | 未確認 | CWE-502, CWE-566 | In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, transient fields cannot be excluded from deserialization, allowing attackers able to submit configuration updates to specify |
| CVE-2026-84651 | Analyzed | 未確認 | CWE-284 | In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the REST API and CLI endpoints for updating agent configuration do not prevent a submitted configuration from overwriting a d |
| CVE-2026-84652 | Analyzed | 未確認 | CWE-384 | In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, Jenkins does not rotate the session when a user is authenticated via the "remember me" cookie, allowing attackers able to ser |
| CVE-2026-84653 | Analyzed | 未確認 | CWE-862 | Jenkins 2.421 through 2.579 (both inclusive), LTS 2.426.1 through 2.568.2 (both inclusive) does not correctly perform permission checks in the Appearance configuration page, allowi |
| CVE-2026-84654 | Awaiting Analysis | 未確認 | CWE-472 | In Stapler 2107.v8dfcb_e8ed317 and earlier, except 2088.2093.vd7c3e58008a_6, included in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, form data binding allows setting public |
| CVE-2026-84655 | Analyzed | 未確認 | CWE-116 | Jenkins 2.579 and earlier, LTS 2.568.2 and earlier does not escape map keys when serializing objects as JSON and Python through its REST API, allowing attackers able to control map |
| CVE-2026-84656 | Analyzed | 未確認 | CWE-862 | A missing permission check in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier allows attackers with Item/Read permission on at least one job to read build parameter names and va |
| CVE-2026-84657 | Analyzed | 未確認 | CWE-862 | In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the build CLI command does not check the Item/Cancel permission when using the -s flag to cancel a build triggered to wait fo |
| CVE-2026-84658 | Analyzed | 未確認 | CWE-200 | Jenkins Script Security Plugin 1412.v7737b_3405f86 and earlier uses the `@DataBoundConstructor` annotation on a constructor that loads script approval configuration, allowing attac |
| CVE-2026-84659 | Analyzed | 未確認 | CWE-862 | Jenkins Script Security Plugin 1412.v7737b_3405f86 and earlier does not enforce a permission check in the method that controls the "Force the use of the sandbox globally in the sys |
| CVE-2026-84660 | Awaiting Analysis | 未確認 | CWE-862 | A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b_67ea_11b_152 and earlier causes downstream builds triggered by the `build` step to be canceled even when t |
| CVE-2026-84661 | Awaiting Analysis | 未確認 | CWE-862 | A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b_67ea_11b_152 and earlier causes downstream builds awaited by the `waitForBuild` step when the `propagateAb |
| CVE-2026-84662 | Awaiting Analysis | 未確認 | CWE-601 | Jenkins LDAP Plugin 807.809.vd3a_4e5e4ec98 and earlier allows connecting to a specified URL through Stapler data binding, allowing attackers to connect to an attacker-specified URL |
| CVE-2026-84663 | Awaiting Analysis | 未確認 | CWE-352 | A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 798.v5cc688825312 and earlier allows attackers to delete shared library caches. |
| CVE-2026-84664 | Awaiting Analysis | 未確認 | CWE-471, CWE-494 | Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection configuration through Stapler data binding, allowing attackers to connect to an attacker-sp |
| CVE-2026-84665 | Awaiting Analysis | 未確認 | CWE-79 | Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based on SonarQube scanner results, allowing the `javascript:` sch |
| CVE-2026-84666 | Awaiting Analysis | 未確認 | CWE-20, CWE-494 | Jenkins Job Configuration History Plugin 1367.vc8fa_b_15101dc and earlier allows overwriting the plugin's history recording configuration through Stapler data binding, allowing att |
| CVE-2026-84667 | Awaiting Analysis | 未確認 | CWE-22 | Jenkins ThinBackup Plugin 2.1.4 and earlier allows overwriting the plugin's backup configuration through Stapler data binding, allowing attackers to redirect backup writes to an at |
| CVE-2026-84668 | Awaiting Analysis | 未確認 | CWE-284 | Jenkins SAML Plugin 4.618.v441a_27fa_46d2 and earlier allows overwriting the SAML identity provider metadata file through Stapler data binding, allowing attackers to replace it wit |
| CVE-2026-84669 | Awaiting Analysis | 未確認 | CWE-22 | A path traversal vulnerability in Jenkins Allure Plugin 2.35.2 and earlier allows attackers with Item/Read permission on jobs that publish Allure report results to read arbitrary f |
| CVE-2026-84670 | Awaiting Analysis | 未確認 | CWE-502 | Jenkins Performance Plugin 1015.v09ca_52b_3370e and earlier does not restrict the classes that can be instantiated when deserializing cached performance reports stored in the build |
| CVE-2026-84671 | Awaiting Analysis | 未確認 | CWE-22 | Jenkins File Parameter Plugin 425.v3fa_801681b_5e and earlier allows writing files to arbitrary locations on the Jenkins controller file system through Stapler data binding, which |
| CVE-2026-84672 | Awaiting Analysis | 未確認 | CWE-639 | Jenkins Microsoft Entra ID (previously Azure AD) Plugin 710.v0b_ff8e9cc2d2 and earlier grants Entra group permissions using both the group's unique object ID and its display name, |
| CVE-2026-84673 | Awaiting Analysis | 未確認 | CWE-79 | Jenkins Customizable Header Plugin 295.v2544b_ca_19b_97 and earlier allows overwriting the plugin's appearance configuration through Stapler data binding, allowing attackers to con |
| CVE-2026-84674 | Awaiting Analysis | 未確認 | CWE-862 | Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored i |
| CVE-2026-84675 | Awaiting Analysis | 未確認 | CWE-78 | OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers able to control build environment variable values to execute arbitrary commands on t |
| CVE-2026-84676 | Awaiting Analysis | 未確認 | CWE-311 | Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier stores tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Ite |
| CVE-2026-84677 | Awaiting Analysis | 未確認 | CWE-79 | Jenkins update-center2 3.18.3 and earlier does not escape plugin-provided values (plugin names, descriptions, and version metadata) on plugin download index pages, resulting in a s |
| CVE-2026-84683 | Awaiting Analysis | 未確認 | CWE-79 | A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The HTML view of job, ad hoc command, project update, and inventory update standard output escapes |
| CVE-2026-84685 | Deferred | 未確認 | CWE-488 | The react-native-auth0 SDK's web platform implementation does not scope its in-memory token cache to individual user sessions when operating in a server-side rendering (SSR) enviro |
| CVE-2026-84691 | Awaiting Analysis | 未確認 | CWE-134 | A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The setting that formats the log message emitted for API 4XX errors is an administrator-controlled |
| CVE-2026-84694 | Deferred | 未確認 | CWE-78 | Coolify before 4.2.0 fails to properly escape environment variable key names in Docker commands executed over SSH on managed servers. Authenticated attackers can inject shell metac |
| CVE-2026-84695 | Deferred | 未確認 | CWE-79 | BookStack before 26.05.4 contains a stored cross-site scripting vulnerability in the drawing upload endpoint that accepts unvalidated base64 content and stores it without content i |
| CVE-2026-84696 | Awaiting Analysis | 未確認 | CWE-306 | Phison PS3111-S11 controller firmware versions through SBFQT1.3 expose privileged vendor unique commands over the ATA interface with absent or defeatable authentication mechanisms. |
| CVE-2026-84697 | Deferred | 未確認 | CWE-918 | Mailpit's IsInternalIP deny list function fails to block the Azure WireServer address 168.63.129.16 and the RFC 2765/6145 IPv4-translated IPv6 prefix, allowing server-side request |
| CVE-2026-84698 | Awaiting Analysis | 未確認 | CWE-787 | PX4 Autopilot contains a heap buffer overflow vulnerability in the sd_bench command that writes a four-byte block number into a user-supplied sized allocation. Attackers can invoke |
| CVE-2026-84699 | Deferred | 未確認 | CWE-640 | Team Password Manager before 14.184.308 fails to enforce authentication requirements in the local account password reset flow. Unauthenticated attackers can reset local account pas |
| CVE-2026-84700 | Deferred | 未確認 | CWE-306 | PikiwiDB (Pika) v3.5.7 exposes an internal protobuf replication server on a port derived from the client port plus 2000 (e.g. 11221 when the default client port 9221 is used) that |
| CVE-2026-84701 | Deferred | 未確認 | CWE-79 | NocoBase fails to sanitize rich text field values in the read renderer, allowing users with create permissions to store malicious HTML with event handlers. Attackers can write arbi |
| CVE-2026-84702 | Deferred | 未確認 | CWE-22 | facefusion through 3.6.1 fails to normalize job identifiers in get_job_file_name, allowing attackers to write files outside the jobs directory. Attackers can supply traversal seque |
| CVE-2026-84706 | Awaiting Analysis | 未確認 | CWE-184 | A flaw was found in Ansible Automation Platform's automation-controller. The custom Credential Type environment-variable injector validates variable names against a deny-list (an A |
| CVE-2026-84712 | Awaiting Analysis | 未確認 | CWE-497 | A flaw was found in the automation-controller API. The unauthenticated health-check endpoint /api/v2/ping/ (ApiV2PingView, AllowAny) over-serial |
| CVE-2026-84713 | Awaiting Analysis | 未確認 | CWE-639 | A flaw was found in the automation-controller notification subsystem. Although NotificationTemplate.notification_ configuration is protected fro |
| CVE-2026-84714 | Awaiting Analysis | 未確認 | CWE-184 | A flaw was found in the automation-controller input-validation guard sanitize_jinja(). The function uses two regular expressions to reject user- |
| CVE-2026-84715 | Deferred | 未確認 | CWE-862 | FeatherPanel versions before 1.3.7.10 fail to validate permissions in the SubuserController updateSubuser handler, allowing authenticated subusers to modify their own permission re |
| CVE-2026-84716 | Awaiting Analysis | 未確認 | CWE-266 | A flaw was found in the automation-controller instance install-bundle endpoint. When a System Administrator downloads an execution/hop node's in |
| CVE-2026-84717 | Awaiting Analysis | 未確認 | CWE-204 | A flaw was found in the Ansible Automation Platform automation-controller. The unauthenticated Bitbucket Data Center webhook receiver skips HMAC signature verification for diagnost |
| CVE-2026-84718 | Awaiting Analysis | 未確認 | CWE-348 | A flaw was found in the Ansible Automation Platform automation-controller. In the shipped production configuration, the Controller trusts the client-supplied X-Forwarded-For header |
| CVE-2026-84719 | Awaiting Analysis | 未確認 | CWE-862 | A flaw was found in the Ansible Automation Platform automation-controller. When a WorkflowJobTemplate is copied, the deep-copy permission sanitizer validates only the inventory, un |
| CVE-2026-84720 | Awaiting Analysis | 未確認 | CWE-639 | A flaw was found in the Ansible Automation Platform automation-controller. The WorkflowJobNode.ancestor_artifacts database column, which stores the raw merged set_stats artifacts p |
| CVE-2026-84721 | Awaiting Analysis | 未確認 | CWE-918 | A server-side request forgery flaw was found in the Ansible Automation Platform automation-controller email notification backend. The email backend passes the user-supplied SMTP ho |
| CVE-2026-84724 | Awaiting Analysis | 未確認 | CWE-88 | An argument-injection flaw was found in the Ansible Automation Platform automation-controller system-job subsystem. The system-job template launch endpoint stores a user-supplied " |
| CVE-2026-84732 | Awaiting Analysis | 未確認 | CWE-190 | Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow remote unauthenticated attackers to cause a denial of service via crafted inputs that trigger a timeout i |
| CVE-2026-84736 | Deferred | 未確認 | CWE-295 | In the current development version of Eclipse aeriOS, for which no official release has yet been published, the Federator component disables TLS certificate validation for outbound |
| CVE-2026-84738 | Deferred | 未確認 | CWE-94 | The AF Companion WordPress plugin before 2.2.0 does not validate the type of files uploaded through one of its import features, allowing users with a low-privileged store-manageme |
| CVE-2026-84739 | Analyzed | 未確認 | CWE-79 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have |
| CVE-2026-84741 | Deferred | 未確認 | CWE-200 | The Events Calendar WordPress plugin before 6.17.5 does not check the post status of linked records before embedding their stored details into a public REST API response, allowing |
| CVE-2026-84742 | Deferred | 未確認 | CWE-863 | The Events Calendar WordPress plugin before 6.17.5 does not check the capability required to publish content before creating or updating it through its REST API, allowing users wit |
| CVE-2026-84743 | Deferred | 未確認 | CWE-863 | The Events Calendar WordPress plugin before 6.17.5 does not perform a per-object capability check on one family of its REST write routes, allowing users with a low-privilege role s |
| CVE-2026-84744 | Deferred | 未確認 | CWE-94 | The WPForms Lite WordPress plugin from 1.5.0.1 to 2.0.2 does not remove shortcode delimiters from submitted field values before writing them back into the rendered form, allowing u |
| CVE-2026-84745 | Deferred | 未確認 | CWE-200 | The Events Calendar WordPress plugin before 6.17.3.1 does not restrict non-public content to the users entitled to read it on its public REST archives, allowing users with a low-pr |
| CVE-2026-84750 | Deferred | 未確認 | CWE-434 | The Ultra Addons for Contact Form 7 WordPress plugin before 3.5.51 does not validate the type or extension of files uploaded through one of its form fields, and stores them at a pr |
| CVE-2026-84752 | Deferred | 未確認 | CWE-502 | Contributor PHP Object Injection in RTMKit <= 2.1.5 versions. |
| CVE-2026-84753 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Mail Mint <= 1.31.0 versions. |
| CVE-2026-84754 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in WPFunnels <= 3.12.13 versions. |
| CVE-2026-84755 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Mail Mint <= 1.31.0 versions. |
| CVE-2026-84756 | Deferred | 未確認 | CWE-266 | Subscriber Privilege Escalation in WCFM Membership <= 2.11.11 versions. |
| CVE-2026-84757 | Deferred | 未確認 | CWE-862 | Unauthenticated Settings Change in WP Compress <= 7.21.28 versions. |
| CVE-2026-84758 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Business Directory <= 6.4.26 versions. |
| CVE-2026-84759 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in Activity Log <= 2.13.1 versions. |
| CVE-2026-84760 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Ultimate Gift Cards For WooCommerce <= 3.2.9 versions. |
| CVE-2026-84761 | Deferred | 未確認 | CWE-918 | Unauthenticated Server Side Request Forgery (SSRF) in LiteSpeed Cache <= 7.9 versions. |
| CVE-2026-84762 | Deferred | 未確認 | CWE-472 | Unauthenticated Bypass Vulnerability in WP EasyPay <= 4.5.3 versions. |
| CVE-2026-84763 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in RTMKit <= 2.1.5 versions. |
| CVE-2026-84764 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in Simply Schedule Appointments <= 1.6.12.23 versions. |
| CVE-2026-84765 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Breadcrumb NavXT <= 7.5.1 versions. |
| CVE-2026-84766 | Deferred | 未確認 | CWE-290 | Unauthenticated Bypass Vulnerability in FluentBooking Pro <= 2.2.1 versions. |
| CVE-2026-84767 | Deferred | 未確認 | CWE-345 | Unauthenticated Bypass Vulnerability in BookIt <= 2.6.0.3 versions. |
| CVE-2026-84768 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in VikAppointments Services Booking Calendar <= 1.2.20 versions. |
| CVE-2026-84769 | Deferred | 未確認 | CWE-639 | Unauthenticated Insecure Direct Object References (IDOR) in Business Directory <= 6.4.26 versions. |
| CVE-2026-84770 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in Mang Board WP <= 2.3.8 versions. |
| CVE-2026-84771 | Deferred | 未確認 | CWE-639 | Unauthenticated Insecure Direct Object References (IDOR) in PublishPress Permissions <= 4.8.3 versions. |
| CVE-2026-84772 | Deferred | 未確認 | CWE-918 | Editor Server Side Request Forgery (SSRF) in Broken Link Checker <= 2.4.14 versions. |
| CVE-2026-84773 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in EWWW Image Optimizer <= 8.7.6 versions. |
| CVE-2026-84774 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WP Statistics <= 14.16.11 versions. |
| CVE-2026-84775 | Deferred | 未確認 | CWE-770 | Unauthenticated Denial of Service Attack in Really Simple SSL <= 9.8.0 versions. |
| CVE-2026-84776 | Deferred | 未確認 | CWE-770 | Unauthenticated Denial of Service Attack in MalCare Security <= 6.69 versions. |
| CVE-2026-84777 | Deferred | 未確認 | CWE-288 | Unauthenticated Broken Authentication in Really Simple SSL <= 9.8.0 versions. |
| CVE-2026-84778 | Deferred | 未確認 | CWE-770 | Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration & Cloning <= 6.65 versions. |
| CVE-2026-84779 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Agentimus – AI SEO, llms.txt & MCP for AI Agents <= 1.51.0 versions. |
| CVE-2026-84780 | Deferred | 未確認 | CWE-770 | Unauthenticated Denial of Service Attack in WP Go Maps <= 10.1.08 versions. |
| CVE-2026-84781 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Gallery PhotoBlocks <= 1.3.4 versions. |
| CVE-2026-84782 | Analyzed | 未確認 | CWE-125 | Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the |
| CVE-2026-84783 | Analyzed | 未確認 | CWE-416 | Issue summary: The first concurrent use of the same X.509 certificate by several threads may cause its cached extension data to be freed while another thread is still using it. Im |
| CVE-2026-84784 | Analyzed | 未確認 | CWE-770 | Issue summary: A malicious remote peer may flood the local QUIC stack with NEW_CONNECTION_ID frames by avoiding a limit check on how many connection IDs the remote QUIC stack can u |
| CVE-2026-84787 | Awaiting Analysis | 未確認 | CWE-250 | ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Privilege Escalation vulnerability that allowed an authenticated low-privileg |
| CVE-2026-84789 | Awaiting Analysis | 未確認 | CWE-639 | ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Broken Access Control vulnerability that allowed an authenticated low-privile |
| CVE-2026-84791 | Awaiting Analysis | 未確認 | CWE-639 | ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Broken Access Control vulnerability that allowed an authenticated low-privile |
| CVE-2026-84792 | Deferred | 未確認 | CWE-862 | Craft CMS versions before 5.10.11 contain a broken access control vulnerability in the element-indexes/save-elements endpoint that allows control panel users to move entries into s |
| CVE-2026-84793 | Deferred | 未確認 | CWE-79 | Craft CMS versions from 5.0.0-RC1 before 5.10.11 contain a stored cross-site scripting vulnerability in the site name field that fails to sanitize input. Administrators can inject |
| CVE-2026-84794 | Deferred | 未確認 | CWE-862 | Craft CMS versions before 5.10.11 lack authorization checks in the assets/move-asset endpoint when force=1 is supplied. Authenticated users without peer asset permissions can move |
| CVE-2026-84795 | Deferred | 未確認 | CWE-269 | Craft CMS before 5.10.11 fails to validate the admin flag during user registration, allowing it to persist from deactivated admin accounts. Attackers can register with a deactivate |
| CVE-2026-84796 | Deferred | 未確認 | CWE-639 | Craft CMS versions before 5.10.11 contain a site scope bypass vulnerability in GraphQL entry mutation resolvers that fail to validate siteId through ArgumentManager::prepareArgumen |
| CVE-2026-84797 | Deferred | 未確認 | CWE-862 | Craft CMS versions before 5.10.11 contain an authorization bypass vulnerability in ElementsController::actionDuplicate() that allows authenticated users with createEntries permissi |
| CVE-2026-84798 | Deferred | 未確認 | CWE-862 | Craft CMS versions >= 5.0.0-RC1 and < 5.10.11 fail to perform an independent authorization check in ElementsController::actionDeleteForSite(). The method loads an element with chec |
| CVE-2026-84799 | Deferred | 未確認 | CWE-285 | Craft CMS before 5.11.0 fails to enforce user-group scope filters on native GraphQL user relations including author, authors, uploader, draftCreator, and revisionCreator fields. At |
| CVE-2026-84800 | Deferred | 未確認 | CWE-862 | Craft CMS versions >= 5.0.0-RC1 and < 5.10.11 contain a missing authorization vulnerability in AssetsController::actionReplaceFile. When a request supplies sourceAssetId and target |
| CVE-2026-84801 | Deferred | 未確認 | CWE-862 | Craft CMS versions before 5.10.11 fail to validate admin status in the actionGetPasswordResetUrl endpoint, allowing non-admin users with administrateUsers permission to mint passwo |
| CVE-2026-84802 | Deferred | 未確認 | CWE-862 | Craft CMS versions from 5.7.0 before 5.10.12 contain an information disclosure vulnerability in AssetsController::actionMoveInfo that fails to enforce volume permissions. Authentic |
| CVE-2026-84803 | Deferred | 未確認 | CWE-79 | SiYuan before v3.8.2 contains a stored cross-site scripting vulnerability in asset serving due to an incomplete extension blocklist that misses script-capable file types. Attackers |
| CVE-2026-84804 | Deferred | 未確認 | CWE-284 | Kimai before 2.65.0 fails to properly validate permissions when removing team access to activities, projects, and customers via API endpoints. Authenticated users with edit_team pe |
| CVE-2026-84805 | Deferred | 未確認 | CWE-862 | Kimai versions from 2.61.0 before 2.63.0 fail to disable admin-only work-contract preferences for low-privilege users in the PATCH /api/users/{id}/preferences endpoint. Although th |
| CVE-2026-84806 | Deferred | 未確認 | CWE-732 | Kimai before 2.63.0 contains an improper authorization vulnerability in team access endpoints that allows authenticated users with team edit permissions and read-only access to gra |
| CVE-2026-84807 | Deferred | 未確認 | CWE-266 | Kimai (kimai/kimai) through 2.65.0 contains a business logic / improper authorization vulnerability in the default team creation endpoints. An authenticated user with project permi |
| CVE-2026-84808 | Deferred | 未確認 | CWE-863 | Kimai versions before 2.65.0 contain an authorization bypass vulnerability in the REST API timesheet collection endpoint that fails to enforce activity-team access controls. Users |
| CVE-2026-84809 | Deferred | 未確認 | CWE-693 | Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding __pycache__ directories and .pyc/.pyo/.pyd extensions into skip li |
| CVE-2026-84810 | Deferred | 未確認 | CWE-693 | claude-skill-antivirus fails to analyze executable files when scanning local skill directories, reading only SKILL.md while ignoring Python source, bytecode, and other artifacts in |
| CVE-2026-84811 | Deferred | 未確認 | CWE-693 | agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories, allowing attackers to bypass security scanning by shipping malicious __pycache__ e |
| CVE-2026-84812 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in BP Better Messages <= 2.15.27 versions. |
| CVE-2026-84813 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in GeoDirectory <= 2.8.174 versions. |
| CVE-2026-84814 | Deferred | 未確認 | CWE-266 | Subscriber Privilege Escalation in Bricksforge <= 3.1.8.8 versions. |
| CVE-2026-84815 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kriesi Enfold allows Reflected XSS. This issue affects Enfold: from n/a throu |
| CVE-2026-84816 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WPCS <= 1.3.2 versions. |
| CVE-2026-84817 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder <= 3.6.5.1 versions. |
| CVE-2026-84818 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Open User Map <= 1.4.50 versions. |
| CVE-2026-84819 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WPAdverts <= 2.3.3 versions. |
| CVE-2026-84820 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 2.0.17 versions. |
| CVE-2026-84821 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in WP Fast Total Search <= 1.82.284 versions. |
| CVE-2026-84828 | Awaiting Analysis | 未確認 | CWE-732 | A flaw was found in PCS (Pacemaker Configuration System). A local attacker with membership in the 'haclient' group can exploit the 'pcs host auth --token' command to read the conte |
| CVE-2026-84829 | Deferred | 未確認 | CWE-79 | The Optimole WordPress plugin before 4.2.12 does not properly escape a user supplied value before using it to build an image tag attribute, allowing unauthenticated users to injec |
| CVE-2026-84830 | Deferred | 未確認 | CWE-269, CWE-78 | SEPPmail Secure Email Gateway before 15.0.7 contains a command injection vulnerability that allows authenticated administrators to execute commands with elevated privileges. |
| CVE-2026-84831 | Deferred | 未確認 | CWE-287, CWE-306 | SEPPmail Secure Email Gateway before 15.0.7 creates a fully privileged session before required multi-factor authentication enrollment is completed. An attacker with the password fo |
| CVE-2026-84832 | Deferred | 未確認 | CWE-502, CWE-78 | SEPPmail Secure Email Gateway before 15.0.6 deserializes attacker-controlled data in a privileged REST import workflow without adequate validation. An attacker with a privileged AP |
| CVE-2026-84833 | Deferred | 未確認 | CWE-400, CWE-404 | A vulnerability was found in ntegrals openbrowser up to 067fc45d649baa961750da8e2f4a75d87c5c75c8. Affected by this vulnerability is an unknown functionality of the file packages/co |
| CVE-2026-84834 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in JobSearch <= 3.2.0 versions. |
| CVE-2026-84835 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in DimaFreund Rentsyst rentsyst allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rentsyst: from n/a th |
| CVE-2026-84836 | Deferred | 未確認 | CWE-639 | Subscriber Insecure Direct Object References (IDOR) in WC Ukraine Shipping <= 1.22.3 versions. |
| CVE-2026-84837 | Awaiting Analysis | 未確認 | CWE-78 | A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by `rpmbuild -t*` to include shell met |
| CVE-2026-84838 | Awaiting Analysis | 未確認 | CWE-78 | A flaw was found in rpmuncompress. This command injection vulnerability allows a local attacker to execute arbitrary commands. This occurs when rpmuncompress processes a specially |
| CVE-2026-84839 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was determined in tsi-coop tsi-dpdp-cms up to 0.5.0. Affected by this issue is some unknown functionality of the file web.xml of the component Admin Console/DPO Com |
| CVE-2026-84840 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was identified in tsi-coop tsi-dpdp-cms up to 0.5.0. This affects an unknown part of the file InterceptingFilter.java of the component Bootstrap Setup Endpoint. The |
| CVE-2026-84841 | Deferred | 未確認 | CWE-602 | A security flaw has been discovered in tsi-coop tsi-dpdp-cms up to 0.5.0. This vulnerability affects unknown code. The manipulation results in client-side enforcement of server-sid |
| CVE-2026-84842 | Analyzed | 未確認 | CWE-22 | IBM Guardium Data Protection 12.2 is vulnerable to path traversal and arbitrary file deletion in the Datasource REST component. An authenticated remote attacker could exploit this |
| CVE-2026-84847 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Quick Event Manager <= 9.17 versions. |
| CVE-2026-84848 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Quick Event Manager <= 9.17 versions. |
| CVE-2026-84849 | Deferred | 未確認 | CWE-290 | Unauthenticated Bypass Vulnerability in Pre-Orders for WooCommerce <= 2.3 versions. |
| CVE-2026-84850 | Awaiting Analysis | 未確認 | CWE-295 | Improper certificate validation in the shared HTTP client used by synchronization and integration features in Devolutions Server 2026.2.16 and earlier allows a network-positioned a |
| CVE-2026-84851 | Awaiting Analysis | 未確認 | CWE-674 | An uncontrolled recursion issue exists in Amazon Ion-C versions before 1.1.6 that might allow a remote unauthenticated actor to craft Ion data that exhausts the native call stack a |
| CVE-2026-84852 | Deferred | 未確認 | CWE-22 | A security vulnerability has been detected in Reader Tools PDF Reader App 98.8 on Android. The affected element is the function ActSplashNew.handleDeeplink of the component File Ha |
| CVE-2026-84856 | Deferred | 未確認 | CWE-404 | A vulnerability was detected in rowboatlabs rowboat up to 0.9.1. The impacted element is the function request.text/req.json of the file apps/rowboat/app/api/composio/webhook/route. |
| CVE-2026-84857 | Deferred | 未確認 | CWE-400, CWE-789 | A flaw has been found in sigoden aichat up to 0.30.4. This affects an unknown function of the file src/serve.rs of the component API Endpoint. This manipulation causes uncontrolled |
| CVE-2026-84858 | Deferred | 未確認 | CWE-94 | ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authenticated Remote Code Execution via Scripting Sandbox Bypass The DWR "DataSourceEditDwr" class exposes the "valida |
| CVE-2026-84859 | Deferred | 未確認 | CWE-89 | ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authenticated Blind SQL Injection The /api/events/search endpoint accepts a JSON body containing a sortBy array. The v |
| CVE-2026-84860 | Deferred | 未確認 | CWE-639 | ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authorization Bypass Spring Security gates DWR endpoints by URL path pattern, but DWR itself dispatches method calls b |
| CVE-2026-84862 | Analyzed | 未確認 | CWE-502 | IBM Guardium Data Protection 12.2 is vulnerable to insecure deserialization in the Quartz JDBC job store. An authenticated attacker could exploit this vulnerability to execute arbi |
| CVE-2026-84869 | Analyzed | 掲載 | CWE-269, CWE-862 | A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circum |
| CVE-2026-84882 | Analyzed | 未確認 | CWE-22 | IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the Universal Connector Oracle Wallet upload component. An authenticated remote attacker could exploit this vul |
| CVE-2026-84884 | Analyzed | 未確認 | CWE-256 | IBM Guardium Data Protection 12.2 stores internal REST service-account passwords in a reversible plaintext-equivalent format. An authenticated attacker who gains access to the stor |
| CVE-2026-84885 | Deferred | 未確認 | CWE-404 | A vulnerability has been found in simular-ai Agent-S 0.3.1/0.3.2. This impacts an unknown function of the file code_agent.py of the component CodeAgent. Such manipulation leads to |
| CVE-2026-84886 | Deferred | 未確認 | CWE-400, CWE-404 | A vulnerability was determined in simular-ai Agent-S up to 0.3.2. Affected by this vulnerability is the function ImageData of the file gui_agents/s1/utils/ocr_server.py of the comp |
| CVE-2026-84887 | Deferred | 未確認 | CWE-404 | A vulnerability was identified in simular-ai Agent-S up to 0.3.2. Affected by this issue is some unknown functionality of the file grounding.py of the component Model-generated GUI |
| CVE-2026-84888 | Deferred | 未確認 | CWE-400, CWE-789 | A weakness has been identified in RightNow-AI OpenFang up to 0.6.9. This vulnerability affects the function shell_exec of the file crates/openfang-runtime/src/tool_runner.rs. This |
| CVE-2026-84889 | Analyzed | 未確認 | CWE-22 | IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper limitation of a pathname to a restricted directory. |
| CVE-2026-84890 | Analyzed | 未確認 | CWE-770 | undici's decompress interceptor decompresses response bodies according to the untrusted Content-Encoding header. While the number of content-encoding layers is capped, the total de |
| CVE-2026-84893 | Analyzed | 未確認 | CWE-89 | IBM Guardium Data Protection 12.2 is vulnerable to SQL injection in the PESI service. An authenticated attacker could exploit this vulnerability to access sensitive information in |
| CVE-2026-84894 | Deferred | 未確認 | CWE-416 | In moxygen before commit 004123dd24c3, MoQSession::dataStreamReadLoop keeps using a stream read handle after reading a FIN, which invalidates the handle under proxygen's WebTranspo |
| CVE-2026-84895 | Deferred | 未確認 | CWE-416 | In proxygen from v2026.04.06.00 until v2026.09.28.00, QuicWtSession::closeSession accesses its member fields after calling the base QuicWtSessionBase::closeSession method. The base |
| CVE-2026-84896 | Deferred | 未確認 | CWE-79 | The King Addons for Elementor WordPress plugin before 51.1.77 does not escape a widget display-style setting before outputting it in an HTML attribute, allowing users with Contrib |
| CVE-2026-84898 | Deferred | 未確認 | CWE-22 | The Eventin WordPress plugin before 4.1.21 does not properly validate a template path value before using it to include a local file, allowing users with contributor-level access a |
| CVE-2026-84899 | Deferred | 未確認 | CWE-79 | The VikWidgetsLoader WordPress plugin before 1.12.0 does not sanitise or escape a block attribute before outputting it inside an inline script, allowing users with the Contributor |
| CVE-2026-84901 | Deferred | 未確認 | CWE-862 | The Eventin WordPress plugin before 4.1.22 does not properly check authorization on several of its event-management REST routes, allowing users with contributor-level access and a |
| CVE-2026-84902 | Deferred | 未確認 | CWE-79 | The King Addons for Elementor WordPress plugin before 51.1.81 does not perform an object-level authorization check when importing template content into a page, allowing users with |
| CVE-2026-84903 | Deferred | 未確認 | CWE-200 | The King Addons for Elementor WordPress plugin before 51.1.81 does not perform any capability, post-status, or password check before rendering the content of a user-supplied post, |
| CVE-2026-84904 | Deferred | 未確認 | CWE-862 | The King Addons for Elementor WordPress plugin before 51.1.81 does not perform per-object authorization checks on a group of image-optimization actions, gating them only on a coar |
| CVE-2026-84905 | Deferred | 未確認 | CWE-862 | The Eventin WordPress plugin before 4.1.24 does not verify a user's capability to create accounts when adding a speaker, allowing users with contributor-level access and above to |
| CVE-2026-84906 | Deferred | 未確認 | CWE-345 | The Eventin WordPress plugin before 4.1.24 does not verify that a completed payment corresponds to the order it is applied to, confirming only that the payment gateway reports the |
| CVE-2026-84907 | Deferred | 未確認 | CWE-862 | The Eventin WordPress plugin before 4.1.24 does not properly authorise order finalisation when its offline (local) payment method is enabled, relying on a nonce that is exposed to |
| CVE-2026-84908 | Deferred | 未確認 | CWE-862 | The WPFunnels plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 3.12.13. This is due to the plugin registering the 'wpfnl_load_payment' |
| CVE-2026-84909 | Deferred | 未確認 | CWE-79 | The Custom Twitter Feeds – A Tweets Widget or X Feed Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'buttoncolor' Shortcode Attribute in all versions |
| CVE-2026-84926 | Deferred | 未確認 | CWE-200 | The EmbedPress WordPress plugin before 4.6.4 does not correctly restrict access to one of its Google Reviews REST routes to administrators, allowing any authenticated user with co |
| CVE-2026-84927 | Deferred | 未確認 | CWE-862 | The EmbedPress WordPress plugin before 4.6.4 does not perform a sufficient authorization check on one of its Google Reviews REST API routes, allowing users with the Contributor ro |
| CVE-2026-84930 | Deferred | 未確認 | CWE-79 | The CatFolders Document Gallery & PDF Library WordPress plugin before 2.0.7 does not properly validate a block attribute before using it as an HTML tag name in its gallery output, |
| CVE-2026-84931 | Deferred | 未確認 | CWE-79 | The Joli Table Of Contents WordPress plugin before 3.0.3 does not sanitise or escape a shortcode attribute value before outputting it inside an HTML element's attribute, allowing u |
| CVE-2026-84933 | Analyzed | 未確認 | CWE-200, CWE-524 | undici's cache interceptor does not handle the Set-Cookie response header anywhere in its cache path, so it neither refuses to store nor strips that header. In shared cache mode, w |
| CVE-2026-84934 | Deferred | 未確認 | CWE-79 | The JCH Optimize WordPress plugin before 6.0.1 does not perform a capability check on one of its authenticated AJAX actions and lets the request choose which internal action runs, |
| CVE-2026-84935 | Deferred | 未確認 | CWE-79 | The HT Menu WordPress plugin before 1.2.7 does not perform any capability or object-ownership check when saving navigation menu-item settings, and does not escape those stored set |
| CVE-2026-84936 | Deferred | 未確認 | CWE-284 | The EmbedPress WordPress plugin before 4.6.4 does not have proper authorization on a public review-loading action, allowing unauthenticated users to force the site to make repeate |
| CVE-2026-84937 | Deferred | 未確認 | CWE-89 | The Video Player for YouTube WordPress plugin before 2.1.0 does not properly sanitise and escape user-supplied input before using it in a SQL statement, allowing users with the Co |
| CVE-2026-84939 | Analyzed | 未確認 | CWE-23 | Path traversal vulnerability in Apache FreeMarker template loading mechanism, if the attacker can specify an arbitrary malformed locale identifier to FreeMarker, and the localized |
| CVE-2026-84941 | Deferred | 未確認 | CWE-611 | An information disclosure vulnerability in the SAML Single Sign-On (SSO) functionality of Omada Controller allows an authenticated user with SAML configuration privileges to access |
| CVE-2026-84942 | Awaiting Analysis | 未確認 | CWE-79 | Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute ar |
| CVE-2026-84947 | Analyzed | 未確認 | CWE-20, CWE-248 | undici's dump interceptor reads and discards a response body up to a configurable maximum size. When a response declares a Content-Length that exceeds the maximum, the interceptor |
| CVE-2026-84960 | Deferred | 未確認 | CWE-79 | The WP-Members Membership Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL Query String in all versions up to, and including, 3.5.6 due to insuff |
| CVE-2026-84961 | Analyzed | 未確認 | CWE-295 | undici's BalancedPool constructor passes its entire options object through an internal deep-clone that serializes and reparses the value as JSON. Because JSON cannot represent func |
| CVE-2026-84962 | Analyzed | 未確認 | CWE-93 | An unauthorized user with key vault write access may cause an authorized client to issue arbitrary authenticated Google Cloud KMS API calls under the authorized user's identity, es |
| CVE-2026-84963 | Analyzed | 未確認 | CWE-681 | An incorrect numeric conversion in the JSON parsing component of the MongoDB C Driver's BSON library may cause an unusually large text value to be silently shortened, or the corres |
| CVE-2026-84964 | Analyzed | 未確認 | CWE-415 | A double free in the OpenSSL-based TLS certificate revocation checking path of the MongoDB C Driver can be reached by a TLS endpoint that the client already trusts. During the hand |
| CVE-2026-84965 | Analyzed | 未確認 | CWE-190 | An integer wraparound in an allocation size calculation in the BSON library's JSON parsing code can cause a buffer to be released while a following copy operation still writes thro |
| CVE-2026-84966 | Analyzed | 未確認 | CWE-681 | An incorrect numeric type conversion in the BSON document building component of the MongoDB C++ Driver may cause a length value to be interpreted incorrectly. When an application s |
| CVE-2026-84967 | Analyzed | 未確認 | CWE-78 | A component of the MongoDB extension for Visual Studio Code does not neutralize special characters in a connection string before that value is placed into a command line the extens |
| CVE-2026-84968 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read in the BSON decoding component of the MongoDB PHP driver may allow an unauthenticated party who supplies specially formed input to have a small amount of adja |
| CVE-2026-84969 | Analyzed | 未確認 | CWE-787 | A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a binary field is encode |
| CVE-2026-84970 | Analyzed | 未確認 | CWE-681 | A numeric truncation weakness exists in the JSON parsing component of the MongoDB C++ Driver's BSON library. An actor who controls the text that an embedding application hands to t |
| CVE-2026-84971 | Analyzed | 未確認 | CWE-617 | Improper handling of an unexpected value size in the decryption path of a client-side encryption library can cause a failed internal check that terminates the process using the lib |
| CVE-2026-84975 | Analyzed | 未確認 | CWE-295, CWE-297 | PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the OpenSSL and GnuTLS backends in pjlib/src/pj/ssl_sock_ossl.c and pjlib/src/pj |
| CVE-2026-84989 | Deferred | 未確認 | CWE-862 | ntopng is a web-based network traffic monitoring application. In versions 6.7.0 through 6.7.260717, two REST v2 endpoints that manage ntopng's tag/badge feature — `POST /lua/rest/v |
| CVE-2026-84990 | Deferred | 未確認 | CWE-200, CWE-862 | ntopng is a web-based network traffic monitoring application. Prior to 6.7.260718, scripts/lua/rest/v2/get/system/configurations/list_available_backups.lua and scripts/lua/rest/v2/ |
| CVE-2026-84992 | Deferred | 未確認 | CWE-79 | md-editor-v3 is a Markdown editor for Vue 3 developed in JSX and TypeScript. Prior to 6.5.4, MdPreview's useMarkdownIt() highlight callback in packages/MdEditor/layouts/Content/com |
| CVE-2026-84993 | Deferred | 未確認 | CWE-89 | MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns. Prior to 6.6.16 and 7.1.7, the shared SQL layer validates the field key of an |
| CVE-2026-84997 | Awaiting Analysis | 未確認 | CWE-835 | react/http is an event-driven, streaming HTTP client and server implementation for ReactPHP. From 0.6.0 until 1.11.1, React\Http\Io\ChunkedDecoder could enter an infinite loop whil |
| CVE-2026-85001 | Deferred | 未確認 | CWE-79 | The EmbedPress WordPress plugin before 4.6.7 does not sanitise and escape one of its Elementor widget settings before outputting it into an HTML attribute, which could allow users |
| CVE-2026-85002 | Deferred | 未確認 | CWE-79 | The EmbedPress WordPress plugin before 4.6.7 does not escape one of its block attributes before outputting it inside an HTML attribute, which could allow users with the contributo |
| CVE-2026-85006 | Deferred | 未確認 | CWE-79 | The HappyAddons for Elementor WordPress plugin before 3.50.0 does not escape an icon value on one of its button widgets before outputting it inside an HTML attribute, allowing use |
| CVE-2026-85008 | Analyzed | 未確認 | CWE-345 | undici's cache interceptor documents that only safe HTTP methods are cached, but its logic to skip caching is built by subtracting the configured methods from the set of safe metho |
| CVE-2026-85009 | Deferred | 未確認 | CWE-639 | The RestroPress WordPress plugin through 3.4.6 does not verify ownership in its payment-recovery flow before acting on a request-supplied order identifier, allowing unauthenticate |
| CVE-2026-85010 | Deferred | 未確認 | CWE-472 | The RestroPress WordPress plugin before 3.4.6 does not validate a client-supplied item add-on price on the server side when items are added to or updated in the cart, allowing unau |
| CVE-2026-85012 | Awaiting Analysis | 未確認 | CWE-78 | Improper neutralization of special elements used in an OS command (CWE-78) in the blueprint resynthesis framework in Amazon Web Services codecatalyst-blueprints before 0.3.156 migh |
| CVE-2026-85013 | Awaiting Analysis | 未確認 | CWE-78 | A flaw was found in environment-modules. A local attacker can exploit this vulnerability by placing a maliciously named modulefile in a location visible to the victim's `MODULEPATH |
| CVE-2026-85014 | Analyzed | 未確認 | CWE-248, CWE-754 | undici's experimental WebSocketStream client crashes the whole Node.js process when a remote peer closes the TCP connection without a WebSocket close handshake. On an unclean close |
| CVE-2026-85017 | Deferred | 未確認 | CWE-502 | The Unlimited Elements For Elementor WordPress plugin before 2.0.20 does not perform a capability check on an AJAX action and deserializes attacker-controlled stored data through i |
| CVE-2026-85021 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in langgenius dify 1.13.0. Affected is the function router.replace of the file web/app/(shareLayout)/components/splash.tsx of the component Splash La |
| CVE-2026-85022 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in langgenius dify 1.13.0. Affected by this vulnerability is the function router.replace of the file web/app/(shareLayout)/webapp-signin/components/m |
| CVE-2026-85024 | Analyzed | 未確認 | CWE-248 | undici bundles a WebSocket client whose permessage-deflate size-limit cleanup removes all listeners from the internal zlib inflate stream, including its error listener, while that |
| CVE-2026-85025 | Analyzed | 未確認 | CWE-863 | IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an unauthenticated attacker to execute arbitrary code and access or modify chat sessions through publicly shared MCP proj |
| CVE-2026-85028 | Awaiting Analysis | 未確認 | CWE-379 | Creation of a temporary file in a directory with insecure permissions in the FPGA management tool installation component in AWS FPGA Development Kit (aws-fpga) before 2.3.4 might a |
| CVE-2026-85029 | Analyzed | 未確認 | CWE-22 | IBM Guardium Data Protection 12.2 could allow a remote attacker to obtain sensitive information, delete arbitrary files, or execute arbitrary code due to improper limitation of a p |
| CVE-2026-85030 | Deferred | 未確認 | CWE-840 | A vulnerability has been found in HKUDS AI-Trader up to d03ff6c056b32ced735adf7c19ed8175adb1c8df. The affected element is an unknown function of the file service/server/routes_agen |
| CVE-2026-85031 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was found in TOTOLINK CP450 4.1.0. The impacted element is an unknown function of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument topicurl |
| CVE-2026-85037 | Deferred | 未確認 | CWE-639 | The Sunshine Photo Cart WordPress plugin before 3.7 does not validate that a client-supplied price identifier belongs to the item being purchased when it is added to the cart, all |
| CVE-2026-85038 | Deferred | 未確認 | CWE-862 | The B2BKing — Ultimate WooCommerce B2B and Wholesale Plugin — Wholesale Prices, Bulk Order Form & More WordPress plugin before 5.2.40 does not verify that a role selected during re |
| CVE-2026-85040 | Deferred | 未確認 | CWE-77, CWE-78 | A weakness has been identified in ZhongBangKeJi CRMEB up to 6.0.0. Affected by this vulnerability is the function eval of the file /adminapi/system/crontab/save of the component Cu |
| CVE-2026-85042 | Analyzed | 未確認 | CWE-416 | Use after free in DevTools in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium securi |
| CVE-2026-85043 | Analyzed | 未確認 | CWE-459 | Incomplete cleanup in Network in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to bypass system access restrictions via crafted network traffic. (Chromium security |
| CVE-2026-85044 | Analyzed | 未確認 | CWE-672 | Use of released resource in Mobile in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker leveraging social engineering to bypass web origin policy via a c |
| CVE-2026-85045 | Analyzed | 未確認 | CWE-367 | Race condition in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-85046 | Analyzed | 掲載 | CWE-843 | Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-85047 | Analyzed | 未確認 | CWE-20 | Improper input validation in Transactions Platform in Google Chrome on on iOS prior to 152.0.7977.82 allowed a remote attacker to potentially execute arbitrary code outside the san |
| CVE-2026-85048 | Analyzed | 未確認 | CWE-416 | Use after free in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandb |
| CVE-2026-85049 | Analyzed | 未確認 | CWE-416 | Use after free in Skia in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-85050 | Analyzed | 未確認 | CWE-787 | Out of bounds write in WebGL in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. |
| CVE-2026-85051 | Analyzed | 未確認 | CWE-843 | Type confusion in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secu |
| CVE-2026-85052 | Analyzed | 未確認 | CWE-125 | Out of bounds read in CrashReporting in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox v |
| CVE-2026-85053 | Analyzed | 未確認 | CWE-668 | Improper resource exposure in CacheStorage in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. ( |
| CVE-2026-85055 | Deferred | 未確認 | CWE-200, CWE-285 | Twenty is an open-source CRM (customer relationship management) platform. Prior to 2.22.0, field-level read permission is enforced on selected output fields but not on GraphQL or R |
| CVE-2026-85056 | Deferred | 未確認 | CWE-287 | ZITADEL is an open source identity management platform. From 4.0.0 until 4.16.1, ZITADEL Login V2 creates a browser session after password verification and can reuse that session f |
| CVE-2026-85057 | Deferred | 未確認 | CWE-284 | ZITADEL is an open source identity management platform. From 3.0.0 until 3.4.13 and 4.16.1, ZITADEL Actions V1 enables the goja Node-compatible require() registry without restricti |
| CVE-2026-85058 | Deferred | 未確認 | CWE-862 | Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, PostOffice.publishWill publishes a client-controlled Last Will message through publish2Subscribers without invoking the |
| CVE-2026-85061 | Deferred | 未確認 | CWE-79 | MapLibre GL JS is an interactive vector tile map library for web browsers. Prior to 6.4.1, DOM.sanitize() in src/util/dom.ts iterates elem.attributes as a live NamedNodeMap while r |
| CVE-2026-85062 | Deferred | 未確認 | CWE-1333 | Colord is a tiny yet powerful tool for high-performance color manipulations and conversions. Prior to 2.9.4, synchronous CSS color string matchers in src/colorModels/rgbString.ts, |
| CVE-2026-85063 | Deferred | 未確認 | CWE-1321 | node-csv is a full-featured CSV parser with a simple API that is tested against large datasets. Prior to 7.0.2, csv-parse with the columns and group_columns_by_name options enabled |
| CVE-2026-85077 | Awaiting Analysis | 未確認 | CWE-113 | Sanic is an opensource python web server/framework. Prior to version 24.12.1, and in version 25.12.0, the HTTP/1.1 response pipeline in sanic/response/types.py serializes response |
| CVE-2026-85078 | Awaiting Analysis | 未確認 | CWE-444 | Sanic is an opensource python web server/framework. In version 25.12.0, Sanic's core HTTP/1.1 chunked-body handling does not fully consume the trailer-part after the terminating ze |
| CVE-2026-85081 | Deferred | 未確認 | CWE-79 | The File Manager WordPress plugin before 8.0.5, FileOrganizer WordPress plugin before 1.2.1, File Manager Pro WordPress plugin before 2.1.3 do not correctly validate the origin o |
| CVE-2026-85082 | Deferred | 未確認 | CWE-78 | Root Browser Classic 3.3.0 passes the path of a selected SQLite database to an operating-system shell without safely separating the filename from the command. |
| CVE-2026-85083 | Awaiting Analysis | 未確認 | CWE-798 | The ANJIA AJL33PC0801 IP camera uses a hard-coded credential for bootloader authentication. An attacker with physical access to the device may leverage this weakness to gain privil |
| CVE-2026-85084 | Deferred | 未確認 | CWE-129, CWE-787 | Out-of-bounds Write and Improper Validation of Array Index vulnerability in Samsung Open Source TizenFX Samsung/TizenFX allows Overflow Buffers. |
| CVE-2026-85085 | Deferred | 未確認 | CWE-940 | The Canva Android App before 2.376.0 allowed an external origin to be loaded in a privileged WebView. A threat actor who controls the page loaded by the user is able to communicate |
| CVE-2026-85089 | Analyzed | 未確認 | CWE-908 | FreeRDP versions 3.0.0 through 3.30.0 (before 3.31.0) transmit uninitialized heap memory in Save Session Info PDU reserved padding fields. Three PDU writers in libfreerdp/core/info |
| CVE-2026-85090 | Analyzed | 未確認 | CWE-125 | FreeRDP before 3.31.0 contains a heap out-of-bounds read vulnerability in the general_ChromaV1ToYUV444 function during AVC444 chroma plane reconstruction. A malicious RDP server ca |
| CVE-2026-85091 | Awaiting Analysis | 未確認 | CWE-787 | zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale external b |
| CVE-2026-85092 | Deferred | 未確認 | CWE-59 | LiME through 1.12.0 fails to validate the disk acquisition output path and does not use O_NOFOLLOW when opening the operator-supplied path parameter, allowing unprivileged local us |
| CVE-2026-85093 | Deferred | 未確認 | CWE-863 | Cheshire Cat AI's GET /memory/collections/{collection_id}/points endpoint fails to apply per-user filtering when retrieving episodic memory points. Authenticated attackers with MEM |
| CVE-2026-85094 | Deferred | 未確認 | CWE-212 | The Canva Android App before 2.376.0 did not restrict the headers returned to an external origin running in a privileged WebView. A threat actor with control of the WebView could |
| CVE-2026-85100 | Deferred | 未確認 | CWE-400, CWE-404 | A vulnerability was detected in 2FastLabs agent-squad up to 1.1.4. Affected by this vulnerability is the function AgentSquad.routeRequest of the file agent-squad/typescript/src/orc |
| CVE-2026-85102 | Analyzed | 掲載 | CWE-295 | Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the G |
| CVE-2026-85103 | Awaiting Analysis | 未確認 | CWE-122 | A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and |
| CVE-2026-85104 | Deferred | 未確認 | CWE-924 | In Sooma 2GEN brain stimulator, an attacker within Bluetooth range can make unauthenticated changes to brain stimulation parameters. |
| CVE-2026-85105 | Deferred | 未確認 | CWE-285, CWE-639 | A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is the function _sess_nowait of the file s71.py of the component Session Management. This manipula |
| CVE-2026-85106 | Deferred | 未確認 | CWE-918 | A vulnerability has been found in NousResearch hermes-agent 0.18.0. This affects the function fetchLinkTitle of the file apps/desktop/src/app/artifacts/index.tsx of the component L |
| CVE-2026-85107 | Deferred | 未確認 | CWE-400, CWE-770 | A vulnerability was found in NousResearch hermes-agent 0.18.0. This vulnerability affects the function resourceBufferFromUrl of the file apps/desktop/electron/main.ts of the compon |
| CVE-2026-85109 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the component Boa Web Server. Executing a manipu |
| CVE-2026-85110 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formWlanSetup of the file /boaform/formWlanSetup of the component Boa Web Server. The manipulation |
| CVE-2026-85113 | Deferred | 未確認 | CWE-74 | The GiveWP WordPress plugin before 4.16.9 does not remove shortcode delimiters from donor-supplied values before rendering them on public pages, and the shortcode stripping it appl |
| CVE-2026-85116 | Deferred | 未確認 | CWE-74 | The Simple CAPTCHA with Cloudflare Turnstile WordPress plugin from 1.2.2 before 1.42.3 runs the shortcode parser over the whole rendered Contact Form 7 form, including the values a |
| CVE-2026-85117 | Deferred | 未確認 | CWE-74 | The Contact Form 7 Captcha WordPress plugin before 0.1.9 runs the shortcode parser over the whole rendered Contact Form 7 form, including the values a visitor submitted, allowing u |
| CVE-2026-85122 | Deferred | 未確認 | CWE-79 | The Easy Form Builder by WhiteStudio WordPress plugin before 4.2.0 does not validate a submitted value against the stored configuration for some of its form types, allowing unauth |
| CVE-2026-85123 | Deferred | 未確認 | CWE-284 | The Easy Form Builder by WhiteStudio WordPress plugin before 4.2.0 does not validate a submitted value against the stored configuration for some of its form types, allowing unauth |
| CVE-2026-85124 | Analyzed | 未確認 | CWE-22 | @fastify/http-proxy versions before 11.6.2 do not validate proxied HTTP request paths for backslash based dot-segments before forwarding them to the configured upstream. The plain |
| CVE-2026-85125 | Deferred | 未確認 | CWE-940 | The Android application "YAMAP -Social Trekking GPS App" contains an improper access control vulnerability in its WebView implementation. The in-app browser may cause information l |
| CVE-2026-85127 | Deferred | 未確認 | CWE-79 | The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.8.15 does not restrict the type of files unauthenticated visitors may attach to its live chat, nor sanitize thei |
| CVE-2026-85128 | Deferred | 未確認 | CWE-269 | The Choose User Role at Registration WordPress plugin before 1.3.3 does not validate the role requested at registration against the roles an administrator chose to offer, allowing |
| CVE-2026-85129 | Deferred | 未確認 | CWE-79 | The Hoo Companion WordPress plugin 1.0.2 does not have any authorisation or validation checks in one of its import features, and does not sanitise the data submitted to it before s |
| CVE-2026-85130 | Deferred | 未確認 | CWE-79 | The WPLP Cookie Consent WordPress plugin before 4.4.4 does not escape a value submitted through a public endpoint for the JavaScript context it is later output in on an administra |
| CVE-2026-85131 | Deferred | 未確認 | CWE-352 | The WPLP Cookie Consent WordPress plugin before 4.4.4 does not perform CSRF or capability checks when processing bulk actions on its administration screens, and does not restrict |
| CVE-2026-85132 | Deferred | 未確認 | CWE-862 | The WPLP Cookie Consent WordPress plugin before 4.4.2 does not perform nonce or capability checks on one of its cookie scanner AJAX actions, allowing any authenticated user, such |
| CVE-2026-85133 | Deferred | 未確認 | CWE-862 | The WPLP Cookie Consent WordPress plugin before 4.4.2 does not perform nonce or capability checks on several of its settings AJAX actions, allowing any authenticated user, such as |
| CVE-2026-85134 | Deferred | 未確認 | CWE-434 | Unrestricted upload of file with dangerous type vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Upload a Web Shell to a |
| CVE-2026-85135 | Deferred | 未確認 | CWE-284, CWE-434 | A security flaw has been discovered in ILIAS up to 9.21/10.9/11.2. This affects the function ilObjMediaObjectGUI::uploadMultipleSubtitleFileObject of the file Services/Repository/S |
| CVE-2026-85137 | Deferred | 未確認 | CWE-74, CWE-94 | A security vulnerability has been detected in SeaCMS up to 13.6. This impacts the function parseIf of the file seacms_locoy_news.php of the component Locoy Collector. The manipulat |
| CVE-2026-85138 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in SeaCMS up to 13.6. Affected is the function addslashes of the file weixin/index.php of the component WeChat Module. The manipulation of the argument |
| CVE-2026-85146 | Deferred | 未確認 | CWE-798 | SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the SSH service account credentials an |
| CVE-2026-85147 | Deferred | 未確認 | CWE-284 | SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain a specific password from the source co |
| CVE-2026-85148 | Deferred | 未確認 | CWE-798 | SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can exploit a fixed password to remotely access u |
| CVE-2026-85149 | Deferred | 未確認 | CWE-798 | SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the SFTP service credentials of the Sm |
| CVE-2026-85150 | Awaiting Analysis | 未確認 | CWE-476 | A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest a |
| CVE-2026-85152 | Analyzed | 未確認 | CWE-346 | undici 8.10.0 omits the destination origin from the cache and request-deduplication keys when the cache or deduplicate interceptor is composed directly onto a Client or Pool. Becau |
| CVE-2026-85154 | Deferred | 未確認 | CWE-269 | WWBN AVideo contains an authentication failure vulnerability where the video_id_hash credential is a non-expiring, non-revocable bearer token that grants full administrator session |
| CVE-2026-85155 | Deferred | 未確認 | CWE-89 | WWBN AVideo contains a SQL injection vulnerability in the sort column parameter of the get.json.php endpoint with APIName=channels that allows unauthenticated attackers to order re |
| CVE-2026-85156 | Deferred | 未確認 | CWE-200 | WWBN AVideo fails to properly validate access controls on the public channel page, allowing unauthenticated visitors to view unlisted and group-restricted videos through hardcoded |
| CVE-2026-85157 | Deferred | 未確認 | CWE-200 | WWBN AVideo contains a broken access control vulnerability in the unauthenticated feed/index.php endpoint that disables per-video visibility checks when a program_id parameter is s |
| CVE-2026-85158 | Deferred | 未確認 | CWE-79 | AVideo through commit c91b5975d contains a reflected cross-site scripting vulnerability in videoEmbeded.php that echoes the link parameter inside an HTML comment with zero escaping |
| CVE-2026-85159 | Deferred | 未確認 | CWE-79 | AVideo through commit c91b5975d contains a reflected cross-site scripting vulnerability in userLogin.php where the cancelUri parameter is echoed in an href attribute after isSafeRe |
| CVE-2026-85160 | Deferred | 未確認 | CWE-73 | AVideo through commit c91b5975d contains a cross-site request forgery and path traversal vulnerability in stopLive.php that allows attackers to delete directories by exploiting mis |
| CVE-2026-85161 | Deferred | 未確認 | CWE-352 | AVideo through commit c91b5975d contains a cross-site request forgery vulnerability in removePoster.php that lacks forbidIfNotPost or forbidIfInvalidToken checks. Attackers can cra |
| CVE-2026-85162 | Deferred | 未確認 | CWE-352 | AVideo through commit c91b5975d contains a cross-site request forgery vulnerability in plugin/Live/saveLive.php that lacks forbidIfNotPost and forbidIfInvalidToken protections. Att |
| CVE-2026-85163 | Deferred | 未確認 | CWE-918 | AVideo through commit c91b5975d contains a server-side request forgery vulnerability in the EPG parser that allows authenticated uploaders to fetch arbitrary internal URLs. An atta |
| CVE-2026-85164 | Deferred | 未確認 | CWE-918 | WWBN AVideo through commit c91b5975d contains a server-side request forgery vulnerability in the set_api_userImages API endpoint that fails to validate profileImg and backgroundImg |
| CVE-2026-85165 | Analyzed | 未確認 | CWE-95 | n8n versions before 2.36.2 contain an expression sandbox bypass vulnerability where free identifiers in spread, computed-key, switch-case, or class-extension positions resolve agai |
| CVE-2026-85166 | Analyzed | 未確認 | CWE-863 | n8n before 2.35.4 and 2.36.x before 2.36.2 does not validate credential references in the inline workflow JSON of nodes that execute an inline sub-workflow (e.g., the Workflow Tool |
| CVE-2026-85167 | Analyzed | 未確認 | CWE-943 | n8n before 2.35.4 and 2.36.x before 2.36.2 contain a query injection vulnerability in the Elasticsearch Document Get All and Google Cloud Firestore Document Query operations, which |
| CVE-2026-85168 | Analyzed | 未確認 | CWE-78 | n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain a remote code execution vulnerability in the Git node. The node reset a fixed list of command-bearing configuration keys be |
| CVE-2026-85169 | Analyzed | 未確認 | CWE-94 | n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain an expression sandbox escape in the $fromAI handler. $fromAI resolved a caller-supplied placeholder name without requiring |
| CVE-2026-85170 | Analyzed | 未確認 | CWE-20 | n8n versions before 1.123.73, 2.35.4, and 2.36.2 pass message content in the Gmail (v1) and Brevo nodes to the mail composer without verifying it is a string. An authenticated user |
| CVE-2026-85171 | Analyzed | 未確認 | CWE-532 | n8n before 1.123.73, 2.35.4, and 2.36.2 contains a credential exposure vulnerability in the Strapi, SeaTable, and Mailcheck nodes. These nodes send their decrypted credentials to t |
| CVE-2026-85172 | Analyzed | 未確認 | CWE-918 | n8n versions before 2.34.1 contain a server-side request forgery vulnerability in the legacy request helper function exposed to Code and Function nodes. The validation logic checks |
| CVE-2026-85173 | Analyzed | 未確認 | CWE-639 | n8n versions before 2.36.2 contain a missing per-project authorization vulnerability in the Insights API routes that allows authenticated users with insights scopes to access workf |
| CVE-2026-85174 | Deferred | 未確認 | CWE-532 | SiYuan before v3.8.2 logs API tokens from query parameters in plaintext to an accessible log file when full-text search requests exceed timing thresholds. Authenticated attackers c |
| CVE-2026-85175 | Deferred | 未確認 | CWE-552 | SiYuan versions <= 3.8.1 (fixed in v3.8.2) contain an incomplete blocklist in the IsForbiddenAbsPath() function (kernel/util/path_guard.go), which only blocks conf/conf.json by exa |
| CVE-2026-85176 | Deferred | 未確認 | CWE-73 | DbGate fails to validate jslid parameters in the jsldata controller, allowing authenticated users to read and write arbitrary files via file:// scheme resolution. Attackers can exp |
| CVE-2026-85177 | Deferred | 未確認 | CWE-639 | CRMEB through 6.0.0 fails to validate message ownership in the edit_message handler of MessageSystemController.php, allowing authenticated users to modify arbitrary system inbox me |
| CVE-2026-85178 | Deferred | 未確認 | CWE-639 | Helicone's VaultManager.getDecryptedProviderKeyById() function in the GET /v1/vault/key/{providerKeyId} endpoint fails to validate the requester's organization against the vault ke |
| CVE-2026-85179 | Deferred | 未確認 | CWE-918 | Label Studio through 1.23.0 fails to validate webhook URLs, allowing authenticated users to dispatch requests to internal services including RFC 1918 addresses and cloud metadata e |
| CVE-2026-85180 | Awaiting Analysis | 未確認 | CWE-918 | Ollama fails to validate redirect destinations when pulling tensor-layer models, allowing unauthenticated attackers to redirect blob downloads to arbitrary hosts. An attacker can c |
| CVE-2026-85181 | Deferred | 未確認 | CWE-565 | CAT uses Java String.hashCode as the sole integrity check for session cookies without server-side keying, allowing attackers to forge valid checksums offline. Attackers can set the |
| CVE-2026-85182 | Deferred | 未確認 | CWE-639 | vhr through commit 03abbd3 fails to verify that the account ID in PUT /hr/pass requests belongs to the authenticated caller. Authenticated attackers can change arbitrary account pa |
| CVE-2026-85183 | Deferred | 未確認 | CWE-1385 | Taipy configures its socket.io server with wildcard CORS origin and credential flag enabled, allowing any web page to establish credentialed WebSocket connections to victim applica |
| CVE-2026-85184 | Analyzed | 未確認 | CWE-436 | @fastify/middie versions >= 9.1.0 and before 9.3.4 decide whether to run path-scoped middleware by matching against the raw request target, while the Fastify router resolves an abs |
| CVE-2026-85185 | Deferred | 未確認 | CWE-22 | Path traversal in the btrfs storage driver in Canonical LXD versions 4.0.2 and later (fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10) on Linux allows an authenticated client with permiss |
| CVE-2026-85186 | Deferred | 未確認 | CWE-284, CWE-434 | A weakness has been identified in itsourcecode Online Medicine Delivery System 1.0. Affected by this vulnerability is the function doupdateimage of the file /customer/controller.ph |
| CVE-2026-85187 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue is the function Order::pupdate of the file /rider/orders/cont |
| CVE-2026-85188 | Deferred | 未確認 | CWE-200 | Joomla Extension - regularlabs.com - Database data disclosure in Advanced Module Manager (Free, Pro) < 12.1.0, Conditional Content (Free, Pro) < 8.0.0, Content Templater (Pro) < 14 |
| CVE-2026-85189 | Deferred | 未確認 | CWE-79 | Joomla Extension - regularlabs.com - Privileged stored XSS via executable URL schemes in Modals extension for Joomla < 17.0.0 - Modals treats a destination using an executable brow |
| CVE-2026-85190 | Deferred | 未確認 | CWE-79 | Joomla Extension - regularlabs.com - Privileged stored XSS via class option in Quick Index extension for Joomla < 5.0.5 - Quick Index inserts configurable class values into generat |
| CVE-2026-85191 | Deferred | 未確認 | CWE-79 | Joomla Extension - regularlabs.com - Privileged stored XSS via rtla-alias option in Tabs & Accordions extension for Joomla < 3.1.0 - Tabs & Accordions rewrites links matching an it |
| CVE-2026-85192 | Deferred | 未確認 | CWE-94 | Joomla Extension - regularlabs.com - Authenticated, privileged remote code execution in Conditional Content extension for Joomla < 8.0.0 - Conditional Content Pro accepts inline PH |
| CVE-2026-85195 | Deferred | 未確認 | CWE-79 | Joomla Extension - regularlabs.com - Privileged stored XSS via link option in Articles Anywhere extension for Joomla < 20.0.0 - Articles Anywhere accepts link options such as oncli |
| CVE-2026-85196 | Deferred | 未確認 | CWE-79 | Joomla Extension - regularlabs.com - Reflected XSS in Articles Anywhere extension for Joomla < 20.0.0, Users Anywhere extension for Joomla < 2.1.0 - Articles Anywhere Pro and Users |
| CVE-2026-85197 | Awaiting Analysis | 未確認 | CWE-416 | A flaw was found in libsoup. A malicious HTTP/2 server or a Man-in-the-Middle (MITM) attacker can exploit a heap use-after-free vulnerability in the HTTP/2 client implementation. T |
| CVE-2026-85198 | Deferred | 未確認 | CWE-89 | The MPG – Multiple Page Generator, Bulk Landing Pages & Programmatic SEO plugin for WordPress is vulnerable to generic SQL Injection via URL Path in all versions up to, and includi |
| CVE-2026-85199 | Deferred | 未確認 | CWE-206, CWE-22, CWE-23 | Eclipse aeriOS Self-orchestrator versions prior to 1.2.1 contain a path traversal vulnerability in the REST API. User-controlled identifiers used to create, update, or delete Self- |
| CVE-2026-85200 | Deferred | 未確認 | CWE-98 | The GEO my WP plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.5.5.3 via the gmw_posts_locator_ajax_info_window_loader function. T |
| CVE-2026-85201 | Deferred | 未確認 | CWE-1284, CWE-789 | In Eclipse Ankaios versions 0.1.0 through 1.0.1, the agent does not limit the length declared by a workload in a length-delimited protobuf message received through the Control Inte |
| CVE-2026-85205 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in itsourcecode Online Medicine Delivery System 1.0. This issue affects the function addwishlist of the file /customer/controller.php?action=addwish |
| CVE-2026-85207 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in itsourcecode Online Medicine Delivery System 1.0. Impacted is an unknown function of the file /index.php?q=orderdetails. Such manipulation of the |
| CVE-2026-85208 | Deferred | 未確認 | CWE-284, CWE-434 | A security flaw has been discovered in itsourcecode Online Medicine Delivery System 1.0. The affected element is the function doInsert of the file /rider/orders/controller.php?acti |
| CVE-2026-85210 | Deferred | 未確認 | CWE-862 | Oppia's AdminRoleHandler GET endpoint in core/controllers/admin.py is decorated with open_access, allowing any registered user to enumerate privileged accounts and roles. Attackers |
| CVE-2026-85211 | Deferred | 未確認 | CWE-639 | Label Studio fails to apply organization filters when resolving storage URIs for tasks and projects in proxy_api.py endpoints. Attackers can access other tenants' cloud storage obj |
| CVE-2026-85212 | Deferred | 未確認 | CWE-862 | CRMEB contains an authentication bypass vulnerability in the verifyAuth() method of SystemRoleServices.php that returns true from both conditional branches. Sub-administrators and |
| CVE-2026-85213 | Deferred | 未確認 | CWE-862 | Kill Bill through 0.24.21 fails to enforce permission annotations on several AdminResource endpoints including getQueueEntries, invalidatesCache, and putOutOfRotation. Authenticate |
| CVE-2026-85214 | Deferred | 未確認 | CWE-639 | vhr fails to validate user authorization in the PUT /hr/info endpoint, allowing authenticated users to modify arbitrary HR profiles by supplying any profile ID in the request body. |
| CVE-2026-85216 | Analyzed | 未確認 | CWE-521 | MISP contains an authentication bypass vulnerability in its LDAP and LinOTP authentication components due to insufficient validation of user-supplied credentials. The custom LdapA |
| CVE-2026-85217 | Deferred | 未確認 | CWE-15 | A maliciously crafted add-in, when installed and executed in Autodesk Fusion Desktop, can modify persistent network proxy settings without user notification or consent. A successfu |
| CVE-2026-85219 | Deferred | 未確認 | CWE-770 | Denial-of-Service in Redis module in Thinkst Canary's OpenCanary 0.9.9 allows an unauthenticated remote attacker cause unconstrained memory usage. |
| CVE-2026-85220 | Deferred | 未確認 | CWE-770 | A vulnerability in the Thinkst Canary honeypot Redis service allows an unauthenticated remote attacker to execute a Denial-of-Service attack against the honeypot. The vulnerabilit |
| CVE-2026-85221 | Analyzed | 未確認 | CWE-295 | MISP contains an improper TLS certificate validation vulnerability in CurlClient. The CurlClient::$verifyPeer property was not explicitly initialized and therefore defaulted to nul |
| CVE-2026-85222 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability has been found in D-Link DNS-340L 1.01B04. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/addon_center.cgi of the component Add-On |
| CVE-2026-85223 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was found in D-Link DNS-340L 1.01B04. Affected by this issue is some unknown functionality of the file /cgi-bin/dropbox.cgi of the component CGI Handler. Performing |
| CVE-2026-85224 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was determined in D-Link DNS-320 ShareCenter 2.06B01. This affects an unknown part of the file /cgi/file_sharing.cgi of the component File Sharing. Executing a mani |
| CVE-2026-85225 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patient_login.php. The manipulation of the argum |
| CVE-2026-85226 | Analyzed | 未確認 | CWE-862 | MISP contains an authorization flaw in the OnDemand correlation engine where correlations were calculated solely from matching attribute values without applying the distribution, s |
| CVE-2026-85227 | Analyzed | 未確認 | CWE-79 | MISP contains a reflected Cross-Site Scripting (XSS) vulnerability in the event attribute filtering query builder. The taggedAttributes and galaxyAttachedAttributes URL parameters |
| CVE-2026-85228 | Awaiting Analysis | 未確認 | CWE-190 | An integer overflow in the tensor buffer validation component in Amazon Deep Java Library (DJL) from 0.13.0 through 0.36.0 on all platforms might allow a remote unauthenticated act |
| CVE-2026-85229 | Deferred | 未確認 | CWE-79 | ** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache SkyWalking Booster UI. This issue af |
| CVE-2026-85230 | Analyzed | 未確認 | CWE-20, CWE-79 | A persistent unsafe URL injection vulnerability exists in the MISP dashboard ButtonWidget configuration. Dashboard widget URLs were validated only when the widget was rendered and |
| CVE-2026-85234 | Awaiting Analysis | 未確認 | CWE-125 | A flaw was found in tftp-hpa. When the `in.tftpd` remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass invalid match off |
| CVE-2026-85236 | Analyzed | 未確認 | CWE-352 | A cross-site request forgery (CSRF) vulnerability existed in the cullEmptyEvents action of MISP. The endpoint performed a state-changing and irreversible operation while accepting |
| CVE-2026-85237 | Analyzed | 未確認 | CWE-307 | A vulnerability in MISP's email-based one-time password (OTP) authentication flow allowed an attacker to perform an unrestricted number of OTP verification attempts. The email_ot |
| CVE-2026-85238 | Analyzed | 未確認 | CWE-384 | MISP contains a session fixation vulnerability in the CustomAuth authentication (a custom configuration) flow. When a user was successfully authenticated through CustomAuth, MISP s |
| CVE-2026-85239 | Analyzed | 未確認 | CWE-20 | A vulnerability in MISP's event template handling allowed an authenticated user with permission to create or modify event templates to bypass validation of the template definition |
| CVE-2026-85241 | Deferred | 未確認 | CWE-266, CWE-285 | A weakness has been identified in SpecterOps BloodHound up to 9.5.1. The affected element is the function NewV2API of the file cmd/api/src/api/registration/v2.go of the component G |
| CVE-2026-85242 | Deferred | 未確認 | CWE-918 | PlaywrightCapture contains a server-side request forgery (SSRF) vulnerability in its favicon retrieval functionality. When only_global_lookup is enabled, the application validates |
| CVE-2026-85271 | Deferred | 未確認 | CWE-79 | Open edX Platform enables the authoring and delivery of online learning at any scale. From Redwood until Ulmo and Verawood.1, the add_additional_attributes_to_notifications functio |
| CVE-2026-85272 | Awaiting Analysis | 未確認 | CWE-22 | Open edX Platform enables the authoring and delivery of online learning at any scale. From Aspen.1 until Ulmo and Verawood.1, openedx/core/lib/extract_archive.py uses _is_bad_path |
| CVE-2026-85274 | Deferred | 未確認 | CWE-352 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane exposes Recurring::stop() as a state-changing GET r |
| CVE-2026-85279 | Awaiting Analysis | 未確認 | CWE-121 | Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ contains a stack buffer overflow in PluginsManager::loadPluginFromPath in PowerEditor/src/MISC/Plu |
| CVE-2026-85288 | Awaiting Analysis | 未確認 | CWE-345, CWE-693, CWE-78 | Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ incompletely enforces shortcuts.xml HMAC validation because WM_MACRODLGRUNMACRO, the Run a Macro M |
| CVE-2026-85289 | Deferred | 未確認 | CWE-352 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane omits ensure_valid_post_request() from delete metho |
| CVE-2026-85290 | Deferred | 未確認 | CWE-117 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane's Cron::recur() method writes an invalid cron key f |
| CVE-2026-85291 | Deferred | 未確認 | CWE-639 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane's Users::change_password() method accepts a user_id |
| CVE-2026-85292 | Deferred | 未確認 | CWE-697 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane's User_Controller compares the session user_type va |
| CVE-2026-85293 | Deferred | 未確認 | CWE-79, CWE-87 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. In version 1.7.2-beta-1, InvoicePlane stores client_email values without enforci |
| CVE-2026-85302 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPKoi WordPress Themes WPKoi Templates for Elementor allows DOM-Based XSS. Th |
| CVE-2026-85303 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magepeople inc. Booking and Rental Manager allows Stored XSS. This issue affe |
| CVE-2026-85304 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Exploiting Incorrectly Configured Access Control |
| CVE-2026-85305 | Deferred | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in SEOPress allows Server Side Request Forgery. This issue affects SEOPress: from n/a through 10.1. |
| CVE-2026-85306 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Cascadia Web Services MountDev AI MCP Connector for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels. This |
| CVE-2026-85307 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in Kevin Pirnie KP Agent Ready allows Retrieve Embedded Sensitive Data. This issue affects KP Agent Ready: from n/a |
| CVE-2026-85308 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in Brainstorm Force SureForms allows Exploiting Incorrectly Configured Access Control Security Levels. This issue af |
| CVE-2026-85309 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Supsystic Ultimate Maps by Supsystic allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Ultimate Ma |
| CVE-2026-85310 | Deferred | 未確認 | CWE-35 | import_contacts Path Traversal in Groundhogg <= 4.7.1 versions. |
| CVE-2026-85311 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Kings Plugins MarketKing allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MarketKing: from n/a th |
| CVE-2026-85349 | Deferred | 未確認 | CWE-200 | The FluentBoards WordPress plugin before 2.0.15 does not properly verify authorization when returning the list of boards a user belongs to, allowing any authenticated user, includ |
| CVE-2026-85350 | Deferred | 未確認 | CWE-287 | The UpsellWP WordPress plugin before 2.2.10 does not check that products added to the cart through a Frequently Bought Together campaign belong to that campaign, allowing unauthen |
| CVE-2026-85360 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85378 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this issue is the function AuthContro |
| CVE-2026-85379 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This affects the function ChapterModel::sear |
| CVE-2026-85380 | Deferred | 未確認 | CWE-918 | A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This vulnerability affects the function catchimag |
| CVE-2026-85381 | Deferred | 未確認 | CWE-285, CWE-639 | A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This issue affects some unknown proce |
| CVE-2026-85382 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Impacted is the function htmlspecialchars_decode of |
| CVE-2026-85383 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/inv_del.php. Executing a manipulation of the ar |
| CVE-2026-85384 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability exists in the httpd component of RE210 AC750 due to improper bounds checking in the splitString function when processing an uploaded con |
| CVE-2026-85385 | Analyzed | 未確認 | CWE-79 | Concrete CMS below 9.5.4 did not validate the user timezone value (uTimezone) on write and rendered it without output encoding on the Dashboard user management page, where Date::ge |
| CVE-2026-85386 | Analyzed | 未確認 | CWE-79 | Concrete CMS before 9.5.4 did not sanitize XML and XSLT documents uploaded through a public Form Block file-upload question. Plain XML uploads were validated by file extension only |
| CVE-2026-85387 | Analyzed | 未確認 | CWE-613 | Concrete CMS before 9.5.4 re-authorized OAuth REST API requests from the bearer token alone and did not re-check the state of the account the token had been issued to. The resource |
| CVE-2026-85388 | Deferred | 未確認 | CWE-89 | Worklenz through 3.0.0 fails to properly validate the sort-field query parameter in pagination helper functions, allowing authenticated users to inject arbitrary PostgreSQL express |
| CVE-2026-85389 | Deferred | 未確認 | CWE-639 | Worklenz before 3.0.0 fails to verify task ownership by organization when resolving task-scoped API endpoints, allowing authenticated users to access another tenant's task data. At |
| CVE-2026-85390 | Deferred | 未確認 | CWE-862 | Checkmate through 3.11.0 omits the isAllowed role guard middleware on maintenance-window, notification, and check-deletion routes, allowing read-only users to perform administrativ |
| CVE-2026-85391 | Deferred | 未確認 | CWE-798 | Peppermint through 0.5.5 contains a hardcoded JWT signing secret in docker-compose.yml that allows unauthenticated attackers to forge session tokens for any account. Attackers can |
| CVE-2026-85392 | Deferred | 未確認 | CWE-639 | Peppermint through 0.5.5 contains an authorization bypass vulnerability in the GET /api/v1/auth/user/:id/logout endpoint that allows authenticated attackers to delete sessions for |
| CVE-2026-85393 | Deferred | 未確認 | CWE-347 | node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS#1 v1.5 signature verification. Attackers can embed garbage bytes inside |
| CVE-2026-85394 | Deferred | 未確認 | CWE-347 | python-jose through 3.5.0 fails to properly validate asymmetric keys in HMAC initialization, accepting DER-encoded public keys that lack PEM armor or SSH prefixes. Attackers holdin |
| CVE-2026-85395 | Deferred | 未確認 | CWE-862 | UnoPim before 2.1.3 fails to include integration store, update, and key-generation routes in its ACL map, allowing any admin user to bypass permission checks. Attackers with minima |
| CVE-2026-85396 | Awaiting Analysis | 未確認 | CWE-22 | rubyzip versions before 3.4.0 contain a path traversal vulnerability in Zip::Entry#extract that fails to properly validate extraction paths using prefix comparison without trailing |
| CVE-2026-85397 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in code-projects Hospital Information System 1.0. This impacts the function findBySearch of the file addReq.php. This manipulation of the argument Se |
| CVE-2026-85398 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in code-projects Hospital Information System 1.0. Affected is the function viewReq of the file viewReq.php. Such manipulation of the argument ID lead |
| CVE-2026-85399 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in code-projects Hospital Information System 1.0. Affected by this vulnerability is the function getSinglePresp of the file includes/presp/Presp |
| CVE-2026-85400 | Deferred | 未確認 | CWE-266, CWE-862 | Backend administrators without system maintainer privileges were able to schedule any of the configuration:read, configuration:set, and configuration:show commands. This allowed th |
| CVE-2026-85401 | Deferred | 未確認 | CWE-266, CWE-284 | A weakness has been identified in Dolibarr up to 21.0.4/22.0.5/23.0.3. Affected by this issue is some unknown functionality of the file htdocs/core/filemanagerdol/connectors/php/co |
| CVE-2026-85402 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patient/booking.php. The manipulation of the argum |
| CVE-2026-85403 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in code-projects Doctor Appointment System 1.0. This issue affects some unknown processing of the file /contactus.php. This manipulation of the argument first |
| CVE-2026-85405 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/roleAddAction.do. Executing a manipulation of the argument name/use |
| CVE-2026-85406 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in Eleveo Quality Management 9.7.0. This vulnerability affects unknown code of the component Conversation Review. The manipulation leads to cross sit |
| CVE-2026-85407 | Deferred | 未確認 | CWE-404 | A vulnerability was found in Eleveo Quality Management 9.7.0. This issue affects some unknown processing of the file /enc-fwk-data/api/v3/conversations/<ID>/events of the component |
| CVE-2026-85408 | Deferred | 未確認 | CWE-913, CWE-915 | A vulnerability was determined in Eleveo Quality Management 9.7.0. Impacted is an unknown function of the file /enc-fwk-data/api/v3/conversations/<ID>/events of the component Conve |
| CVE-2026-85409 | Deferred | 未確認 | CWE-22 | A vulnerability was identified in Eleveo Quality Management 9.7.0. The affected element is the function QuestionnaireService.runDataExportNow of the component Questionnaire Service |
| CVE-2026-85410 | Deferred | 未確認 | CWE-862 | The Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits plugin for WordPress is vulnerable to authorization by |
| CVE-2026-85414 | Deferred | 未確認 | CWE-79 | The Gallery : FooGallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'custom_settings' Shortcode Attribute in all versions up to, and including, 3.3.2 due |
| CVE-2026-85415 | Deferred | 未確認 | CWE-79 | The Audio Player Block WordPress plugin before 1.6.3 does not validate the scheme of a user-supplied URL before using it as a link target, allowing users with the Contributor role |
| CVE-2026-85417 | Awaiting Analysis | 未確認 | CWE-532 | Incomplete property masking in the SANnav logging subsystem permits SNMP authentication and privacy passwords to be recorded in application logs under specific configuration condit |
| CVE-2026-85418 | Deferred | 未確認 | CWE-79 | The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.9 does not validate a user-supplied HTML tag name in one of i |
| CVE-2026-85424 | Analyzed | 未確認 | CWE-306 | MOOS core-moos through 10.4.0 lacks authentication in the wire protocol, allowing unauthenticated clients to connect with full publish, subscribe, and database clear privileges. At |
| CVE-2026-85425 | Analyzed | 未確認 | CWE-78 | MOOS-IvP iSay through 24.8.1 contains a remote code execution vulnerability in the SAY_MOOS variable handler that passes unsanitized text to a shell command. Attackers can publish |
| CVE-2026-85426 | Awaiting Analysis | 未確認 | CWE-78 | MOOS-IvP uMemWatch through 24.8.1 constructs shell commands from attacker-chosen MOOS client names without sanitization. Attackers can inject shell metacharacters into client names |
| CVE-2026-85427 | Analyzed | 未確認 | CWE-494 | MOOS essential-moos pAntler through 10.0.1 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary programs by publishing a crafte |
| CVE-2026-85428 | Analyzed | 未確認 | CWE-306 | MOOS core-moos through 10.4.0 contains an authentication bypass vulnerability in the optional MOOSDB HTTP server that allows unauthenticated clients to write variables. Attackers c |
| CVE-2026-85429 | Analyzed | 未確認 | CWE-345 | MOOS-IvP uFldNodeComms through 24.8.1 trusts the source node identity from the message body rather than validating it from the connection source. Attackers can craft NODE_MESSAGE p |
| CVE-2026-85430 | Analyzed | 未確認 | CWE-345 | MOOS essential-moos through 10.0.1 contains an authentication bypass vulnerability in pShare that accepts UDP datagrams from any source and republishes them with the attacker-claim |
| CVE-2026-85431 | Analyzed | 未確認 | CWE-345 | MOOS essential-moos through version 10.0.1 contains an unauthenticated UDP packet injection vulnerability in pMOOSBridge when configured with UDPListen. Attackers can send crafted |
| CVE-2026-85432 | Analyzed | 未確認 | CWE-290 | MOOS core-moos through 10.4.0 fails to validate client identity in MOOSDB message processing, allowing authenticated attackers to attribute writes to other clients by supplying arb |
| CVE-2026-85433 | Analyzed | 未確認 | CWE-862 | MOOS essential-moos pShare through 10.0.1 fails to properly authorize PSHARE_CMD messages, allowing any publisher to reconfigure network routes and listeners at runtime. Attackers |
| CVE-2026-85434 | Analyzed | 未確認 | CWE-345 | MOOS-IvP uFldShoreBroker through 24.8.1 fails to verify node ping authenticity before creating outbound bridge routes. Attackers can publish NODE_BROKER_PING messages with crafted |
| CVE-2026-85435 | Analyzed | 未確認 | CWE-345 | MOOS-IvP uFldNodeBroker through 24.8.1 fails to validate the source of TRY_SHORE_HOST messages on the vehicle bus, allowing any publisher to enroll attacker-controlled shore routes |
| CVE-2026-85436 | Analyzed | 未確認 | CWE-191 | MOOS essential-moos through 10.0.1 contains a buffer overflow vulnerability in CMOOSUDPLink::ReadPktFromArray() that allows remote attackers to corrupt heap memory by sending UDP d |
| CVE-2026-85437 | Analyzed | 未確認 | CWE-787 | MOOS-IvP through 24.8.1 contains multiple buffer overflow vulnerabilities in IvP function string decoders that trust attacker-controlled length fields without validation. Attackers |
| CVE-2026-85438 | Analyzed | 未確認 | CWE-190 | MOOS-IvP through 24.8.1 contains a buffer overflow vulnerability in StringToIvPFunction() where dimension, piece, and degree counts from encoded BHV_IPF payloads are used as alloca |
| CVE-2026-85439 | Analyzed | 未確認 | CWE-78 | MOOS-IvP through 24.8.1 contains a remote code execution vulnerability in alogsplit's SplitHandler::handlePreCheckSplitDir() function that fails to sanitize shell metacharacters in |
| CVE-2026-85440 | Analyzed | 未確認 | CWE-787 | MOOS core-moos through 10.4.0 contains a pre-authentication heap overflow vulnerability in MOOSCommPkt packet handling that allows remote attackers to write arbitrary data by decla |
| CVE-2026-85441 | Analyzed | 未確認 | CWE-195 | MOOS core-moos through 10.4.0 fails to validate that serialized string lengths are non-negative in CMOOSMsg::operator>>. Unauthenticated attackers can send a crafted message with a |
| CVE-2026-85442 | Analyzed | 未確認 | CWE-789 | MOOS core-moos through 10.4.0 fails to validate packet length declarations in CMOOSCommPkt::OnBytesWritten(), allowing unauthenticated attackers to trigger unbounded buffer allocat |
| CVE-2026-85443 | Analyzed | 未確認 | CWE-400 | MOOS core-moos through 10.4.0 contains a denial of service vulnerability in MOOSCommServer::ListenLoop() where the accept thread performs a blocking receive without timeout during |
| CVE-2026-85444 | Analyzed | 未確認 | CWE-125 | MOOS-IvP through 24.8.1 contains a buffer over-read vulnerability in isQuoted(), isBraced(), and isChevroned() functions that strip whitespace but index using the original string l |
| CVE-2026-85445 | Analyzed | 未確認 | CWE-789 | MOOS-IvP through 24.8.1 contains a denial of service vulnerability in the Demuxer::addMuxPacket() function that trusts the packet count declared in mux headers without validation. |
| CVE-2026-85446 | Analyzed | 未確認 | CWE-407 | MOOS-IvP versions through 24.8.1 contain a quadratic processing vulnerability in uFldNodeComms where each new node identity creates a ledger entry and triggers all-pairs distributi |
| CVE-2026-85447 | Analyzed | 未確認 | CWE-770 | MOOS-IvP pRealm through version 24.8.1 accepts unbounded REALMCAST_REQ subscriptions without validating duration or variable list limits. Attackers can register long-lived pipeways |
| CVE-2026-85448 | Analyzed | 未確認 | CWE-770 | MOOS-IvP uFldShoreBroker through 24.8.1 fails to limit the number of claimed communities stored in parallel vectors within ShoreBroker::handleMailNodePing(). A single publisher can |
| CVE-2026-85449 | Analyzed | 未確認 | CWE-770 | MOOS-IvP pMarineViewer through 24.8.1 fails to limit the number of tracked node identities from NODE_REPORT messages, allowing attackers to exhaust memory by supplying unbounded di |
| CVE-2026-85450 | Analyzed | 未確認 | CWE-770 | MOOS core-moos through 10.4.0 contains a denial of service vulnerability in the MOOSDB HTTP server that creates unbounded connections and threads without limits. Attackers can open |
| CVE-2026-85451 | Analyzed | 未確認 | CWE-798 | MOOS core-moos through 10.4.0 contains a remote process termination vulnerability in the SuicidalSleeper component that uses a hard-coded passphrase for multicast command authoriza |
| CVE-2026-85452 | Undergoing Analysis | 未確認 | CWE-787 | MOOS ui-moos through 50b9c6c contains a buffer overflow vulnerability in ScopeTabPane.cpp and ScopeGrid.cpp where client and variable names are formatted into fixed 1024-byte buffe |
| CVE-2026-85453 | Analyzed | 未確認 | CWE-79 | MOOS core-moos through 10.4.0 fails to escape database contents when rendering MOOSDB HTTP pages, allowing attackers to inject malicious scripts. Any MOOS publisher can set variabl |
| CVE-2026-85454 | Analyzed | 未確認 | CWE-193 | MOOS core-moos through 10.4.0 contains a buffer overflow vulnerability in CMOOSSerialPort::GetTelegram() that writes a NUL terminator one byte past the serial telegram stack buffer |
| CVE-2026-85455 | Analyzed | 未確認 | CWE-125 | MOOS core-moos through 10.4.0 contains a buffer over-read vulnerability in CMOOSCommPkt where a four-byte packet triggers out-of-bounds memory access during deserialization. Attack |
| CVE-2026-85456 | Analyzed | 未確認 | CWE-22 | MOOS-IvP through 24.8.1 fails to properly validate variable names extracted from alog files in the SplitHandler, allowing attackers to write files outside the split directory. Atta |
| CVE-2026-85458 | Deferred | 未確認 | CWE-369 | Divide-by-zero in Xpdf 4.06 (and earlier), when a glyph in a Type 3 font has a zero height. |
| CVE-2026-85469 | Awaiting Analysis | 未確認 | CWE-1357 | A flaw was found in quay-builder-qemu. A remote attacker could exploit this by compromising the upstream `Noelware/docker-manifest-action` used in the release workflow, which is pi |
| CVE-2026-85475 | Awaiting Analysis | 未確認 | CWE-96 | A flaw was found in the Ansible Automation Platform automation controller. The external logging (rsyslog) configuration is generated by interpolating user-controlled settings — LOG |
| CVE-2026-85478 | Deferred | 未確認 | CWE-306 | A CM2507 IP camera running firmware version HMT.CM2507 v251211.1507 exposes an interactive bootloader through a physical debug interface without requiring authentication. An attack |
| CVE-2026-85484 | Deferred | 未確認 | CWE-79 | HTML::FormHandler versions before 0.410002 for Perl render option group labels and radio button labels into HTML without escaping. The Select, RadioGroup, CheckboxGroup and HorizC |
| CVE-2026-85485 | Deferred | 未確認 | CWE-79 | HTML::FormHandler versions before 0.410002 for Perl render some error messages into HTML without escaping. The Table form layout and the Bootstrap 2 and 3 wrappers splice each err |
| CVE-2026-85491 | Deferred | 未確認 | CWE-1023, CWE-706 | Catalyst::Seal versions before 0.03 for Perl allow one request to disable a path or route a later one past an authorization check via a dispatch memo keyed on the request path alon |
| CVE-2026-85496 | Deferred | 未確認 | CWE-340 | The Botslab G980H dash camera firmware generates session identifiers using a small sequential value space rather than a suitably unpredictable source. An unauthenticated attacker w |
| CVE-2026-85497 | Deferred | 未確認 | CWE-916 | CareCam CM2507 IP cameras store the device's root-account password using a fixed legacy password hash that provides insufficient resistance to offline cracking. An attacker who obt |
| CVE-2026-85500 | Deferred | 未確認 | CWE-305 | Authentication Bypass by Primary Weakness vulnerability in team-alembic AshAuthentication allows an unconfirmed user to obtain a session, defeating a mandatory email confirmation r |
| CVE-2026-85501 | Analyzed | 未確認 | CWE-770 | Novel vulnerabilities to launch algorithmic complexity attacks on DNSSEC have been researched under the term 'ReTrap'. These result in degradation of service when malicious zones a |
| CVE-2026-85504 | Deferred | 未確認 | CWE-121 | FreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipmi_sel_oem_fujitsu_get_sel_entry_long_text in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via malformed Fuj |
| CVE-2026-85505 | Awaiting Analysis | 未確認 | CWE-125 | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmi_oem_fujitsu_get_sel_entry_long_text in ipmi-oem/ipmi-oem-fujitsu.c when a BMC provides a short respons |
| CVE-2026-85506 | Awaiting Analysis | 未確認 | CWE-121 | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _get_dell_system_info_idrac_info in ipmi-oem/ipmi-oem-dell.c (idrac-info subcommand to dell get-system-info) |
| CVE-2026-85507 | Awaiting Analysis | 未確認 | CWE-121 | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_info in ipmi-oem/ipmi-oem-dell.c (cmc-info subcommand to dell get-system-info). |
| CVE-2026-85508 | Deferred | 未確認 | CWE-121 | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_ipv6_info in ipmi-oem/ipmi-oem-dell.c (cmc-ipv6-info subcommand to dell get-sys |
| CVE-2026-85509 | Deferred | 未確認 | CWE-121 | FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than requested. |
| CVE-2026-85511 | Awaiting Analysis | 未確認 | CWE-290 | A flaw was found in EAP's Elytron. An EAP application whose security domain is backed by an Elytron token-realm with oauth2-introspection would allow parameter substitution due to |
| CVE-2026-85512 | Deferred | 未確認 | CWE-862, CWE-863 | A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /admin/session.php. The manipulatio |
| CVE-2026-85513 | Deferred | 未確認 | CWE-266, CWE-269 | A weakness has been identified in StackStorm st2 up to 3.9.0. This issue affects the function assert_user_is_admin_if_user_query_param_is_provided of the file st2api/st2api/control |
| CVE-2026-85514 | Deferred | 未確認 | CWE-266, CWE-269 | A security vulnerability has been detected in StackStorm st2 up to 3.9.0. Impacted is an unknown function of the file st2api/st2api/controllers/v1/auth.py of the component API Key |
| CVE-2026-85516 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in code-projects Vehicle Management System 1.0. The affected element is an unknown function of the file /busprofile.php. Performing a manipulation of t |
| CVE-2026-85517 | Deferred | 未確認 | CWE-200, CWE-284 | A flaw has been found in code-projects Vehicle Management System 1.0. The impacted element is an unknown function of the file /vehicle_management.sql of the component SQL Database |
| CVE-2026-85520 | Deferred | 未確認 | CWE-73 | Google Merchant Center Feed (gmfeed) module for PrestaShop is vulnerable to unauthenticated arbitrary file write in the feed.php endpoint. An unauthenticated attacker can send a cr |
| CVE-2026-85522 | Deferred | 未確認 | CWE-119, CWE-125 | A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function createSlotImportJob of the file src/cluster_migrateslots.c of the |
| CVE-2026-85525 | Awaiting Analysis | 未確認 | CWE-295, CWE-347 | Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node.js drivers allowed a revoked TLS certificate to be accepted as valid, because OCSP responses were not |
| CVE-2026-85526 | Deferred | 未確認 | CWE-22 | Path traversal in the Btrfs storage driver (unpackVolume) in Canonical LXD on Linux allows an authenticated user with instance creation privileges to delete or replace arbitrary fi |
| CVE-2026-85528 | Awaiting Analysis | 未確認 | CWE-20, CWE-918 | Improper input validation of the auto-configuration account identifier in Snowflake JDBC Driver versions 4.2.0 through 4.3.3 allowed a credential-bearing login request to be redire |
| CVE-2026-85530 | Deferred | 未確認 | CWE-269 | The GiveWP WordPress plugin before 4.16.8.1 does not consistently normalise a donor's e-mail address between the value it stores and the value it later uses to look that donor up, |
| CVE-2026-85532 | Analyzed | 未確認 | CWE-20 | Apache WSS4J accepted attacker-controlled derived-key lengths and offsets without adequate bounds. This could permit cryptographically weak keys or excessive CPU and memory consump |
| CVE-2026-85533 | Awaiting Analysis | 未確認 | CWE-862 | An authorization flaw in MISP allowed an authenticated user to submit a sharing_group_id without verifying that the user was authorized to use the referenced Sharing Group. In sev |
| CVE-2026-85534 | Awaiting Analysis | 未確認 | CWE-617 | A flaw was found in libsoup. When a client sends an HTTP/2 request body from a non-pollable input stream, the library can buffer more data than the current flow-control window late |
| CVE-2026-85538 | Awaiting Analysis | 未確認 | CWE-863 | An incorrect authorization vulnerability in MISP allowed authenticated users to delete attributes from events despite lacking the required perm_modify or perm_modify_org permission |
| CVE-2026-85540 | Deferred | 未確認 | CWE-89 | DreamMaker developed by Interinfo has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL commands to read, modify, and delete database contents. |
| CVE-2026-85541 | Deferred | 未確認 | CWE-79 | DreamMaker developed by Interinfo has a Reflected Cross-site Scripting vulnerability. Authenticated remote attackers can execute arbitrary JavaScript codes in user's browser via a |
| CVE-2026-85542 | Analyzed | 未確認 | CWE-78 | IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the GIM bundle import functionality. An authenticated attacker can provide a crafted GIM bundl |
| CVE-2026-85543 | Deferred | 未確認 | CWE-285 | Some Wi-Fi series camera products have insufficient permission validation on certain interfaces, allowing authenticated low-privileged users to obtain device Wi-Fi configuration in |
| CVE-2026-85544 | Deferred | 未確認 | CWE-1310, CWE-798 | Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction with the device within their main card, whic |
| CVE-2026-85545 | Deferred | 未確認 | CWE-284 | There is an Vulnerability in some HikCentral Access Control versions. Authenticated low-privilege users can invoke API interfaces that their role is not authorized to access. |
| CVE-2026-85546 | Awaiting Analysis | 未確認 | CWE-352 | MISP contains a cross-site request forgery (CSRF) vulnerability in the sharing group quick-edit functionality. The addOrg, removeOrg, addServer, and removeServer actions share the |
| CVE-2026-85547 | Awaiting Analysis | 未確認 | CWE-352 | A cross-site request forgery (CSRF) vulnerability exists in MISP due to form-security and CSRF protections being disabled based on whether an incoming request was identified as a R |
| CVE-2026-85569 | Deferred | 未確認 | CWE-269 | The Tutor LMS WordPress plugin before 4.0.8 does not correctly determine whether an incoming request is addressed to its own REST API, and does not enforce the permission recorded |
| CVE-2026-85572 | Deferred | 未確認 | CWE-200 | The Tutor LMS WordPress plugin before 4.0.8 does not check that a user has access to a course before returning its lesson discussion content, allowing any authenticated user, such |
| CVE-2026-85573 | Deferred | 未確認 | CWE-79 | The All in One Files Upload WordPress plugin before 2.0.17 adds SVG to the site's allowed upload types and does not sanitise uploaded files or verify the authenticity of its public |
| CVE-2026-85574 | Deferred | 未確認 | CWE-862 | The Unbounce Landing Pages WordPress plugin before 1.1.5 does not perform any authorisation check when updating the configuration its front-end proxy relies on, allowing any authen |
| CVE-2026-85575 | Deferred | 未確認 | CWE-79 | The ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution with eCommerce Templates & Woo Widgets plugin for WordPress is vulnerable to Stored Cross-Site |
| CVE-2026-85576 | Deferred | 未確認 | CWE-862 | The All in One Files Upload WordPress plugin before 2.0.17 does not have any capability check, and does not verify the authenticity of the request, when saving its settings, allowi |
| CVE-2026-85577 | Deferred | 未確認 | CWE-79 | AVideo through commit c91b5975d contains a reflected cross-site scripting vulnerability in userLogin.php that allows unauthenticated attackers to inject arbitrary JavaScript by clo |
| CVE-2026-85578 | Deferred | 未確認 | CWE-862 | SiYuan through 3.8.1 contains an authorization bypass vulnerability in the /api/file/getFile endpoint that allows readers to retrieve files from notebooks explicitly configured as |
| CVE-2026-85579 | Deferred | 未確認 | CWE-639 | SiYuan is affected by an information disclosure vulnerability (confirmed in v3.8.1, fixed in v3.8.2) in the reader-accessible POST /api/transactions/undoState endpoint. The endpoin |
| CVE-2026-85580 | Deferred | 未確認 | CWE-22 | SiYuan versions before v3.8.2 contain a path guard bypass vulnerability in the MCP file-access handler that uses case-sensitive matching on Linux filesystems. Attackers can read th |
| CVE-2026-85581 | Deferred | 未確認 | CWE-770 | SiYuan before v3.8.2 contains a denial of service vulnerability in the unauthenticated /api/system/uiproc endpoint that accepts and retains attacker-controlled process identifiers |
| CVE-2026-85582 | Deferred | 未確認 | CWE-770 | SiYuan versions before v3.8.2 contain an unbounded session creation vulnerability in the publish-service Basic Auth handler that allows authenticated attackers to exhaust memory. A |
| CVE-2026-85583 | Deferred | 未確認 | CWE-59 | SiYuan versions before v3.8.2 contain a path traversal vulnerability in the reader-accessible file-read endpoint that follows symlinks when opening authorized asset paths. Attacker |
| CVE-2026-85584 | Deferred | 未確認 | CWE-770 | SiYuan versions before v3.8.2 contain a denial of service vulnerability in the publish-service Basic Auth throttle that stores failed-attempt state using attacker-controlled userna |
| CVE-2026-85585 | Deferred | 未確認 | CWE-400 | SiYuan before v3.8.2 contains an unbounded resource consumption vulnerability in the request-concurrency middleware that retains mutex entries for every unique request path without |
| CVE-2026-85586 | Deferred | 未確認 | CWE-799 | phpMyFAQ versions before 4.1.8 fail to validate CAPTCHA when the store parameter is set to 'now' in question submission requests. Unauthenticated attackers can bypass CAPTCHA prote |
| CVE-2026-85587 | Deferred | 未確認 | CWE-863 | phpMyFAQ before 4.1.8 enforces incorrect permission checks on admin content pages, allowing lesser-privileged editors to read draft and inactive content. Attackers with only add pe |
| CVE-2026-85588 | Deferred | 未確認 | CWE-200 | phpMyFAQ versions before 4.1.8 include live TOTP shared secrets in plaintext within user data export ZIP files. Attackers obtaining exported archives can extract the TOTP seed and |
| CVE-2026-85589 | Deferred | 未確認 | CWE-862 | phpMyFAQ before 4.2.0-alpha.2 contains a missing authorization vulnerability in the admin dashboard API endpoints searches and content-health that enforce only authentication witho |
| CVE-2026-85590 | Deferred | 未確認 | CWE-308 | phpMyFAQ before 4.1.8 contains an authentication bypass vulnerability in its two-factor authentication (TOTP) disable functionality. The removeTwofactorConfig() handler (reachable |
| CVE-2026-85591 | Deferred | 未確認 | CWE-620 | phpMyFAQ versions before 4.1.8 contain an authentication bypass vulnerability in the user control panel API endpoint that allows authenticated attackers to change account passwords |
| CVE-2026-85592 | Deferred | 未確認 | CWE-863 | phpMyFAQ before 4.1.8 contains an authorization bypass vulnerability in the question creation endpoint where the isAddingQuestionsAllowed() method grants access to all callers when |
| CVE-2026-85593 | Deferred | 未確認 | CWE-79 | phpMyFAQ versions before 4.1.8 contain a stored cross-site scripting vulnerability in FaqHelper::convertOldInternalLinks() that calls html_entity_decode() on sanitized FAQ content, |
| CVE-2026-85594 | Analyzed | 未確認 | CWE-639 | Traefik versions from v3.7.1 fail to enforce crossProviderNamespaces restrictions on the traefik.ingress.kubernetes.io/service.middlewares Service annotation in the Kubernetes Ingr |
| CVE-2026-85595 | Analyzed | 未確認 | CWE-287 | Traefik versions before v2.11.55 and versions v3.0.0 through v3.7.10 contain an authentication bypass vulnerability in the digestAuth middleware where unknown usernames receive an |
| CVE-2026-85596 | Analyzed | 未確認 | CWE-287 | Traefik versions >= v3.7.0 and <= v3.7.10 contain an authentication bypass in the Kubernetes Ingress NGINX provider. The TLS option generated for an Ingress carrying the nginx.ingr |
| CVE-2026-85597 | Analyzed | 未確認 | CWE-863 | Traefik before v2.11.55 and v3.0.0 through v3.7.10 contain a TLS option conflict resolution vulnerability that allows unauthenticated attackers to bypass client-certificate authent |
| CVE-2026-85598 | Deferred | 未確認 | CWE-79 | Grav versions 2.0.0 through 2.0.17 fail to apply save-time XSS detection to modular pages, allowing authenticated page editors to store Twig-assembled XSS payloads. Attackers with |
| CVE-2026-85599 | Deferred | 未確認 | CWE-79 | Grav Shortcode Core before 6.2.5 contains stored cross-site scripting vulnerabilities in the [lorem] tag parameter and [details] summary parameter that are written to rendered page |
| CVE-2026-85600 | Deferred | 未確認 | CWE-79 | Grav Admin (getgrav/grav-plugin-admin2) versions <= 2.0.19 contain a stored cross-site scripting vulnerability in the tHtml() function (src/lib/stores/i18n.svelte.ts), which substi |
| CVE-2026-85601 | Deferred | 未確認 | CWE-79 | Grav Admin before 2.0.20 fails to sanitize output from marked.parse() before injecting it into the DOM via Svelte's {@html} directive in MarkdownEditor and MarkdownModal components |
| CVE-2026-85602 | Deferred | 未確認 | CWE-807 | The Grav Form plugin (getgrav/grav-plugin-form) versions 8.0.6 through 9.1.19 select the reCAPTCHA version to validate based solely on which response field key is present in the su |
| CVE-2026-85603 | Deferred | 未確認 | CWE-73 | Grav versions before 1.10.55 contain a path traversal vulnerability in the admin plugin's Save As action that fails to validate the language code parameter. An authenticated admin |
| CVE-2026-85604 | Deferred | 未確認 | CWE-94 | Grav before 2.0.18 (affected versions <= 2.0.17) contains a remote code execution vulnerability in the Twig sort filter. The sortFunc wrapper in GravExtension.php hardcodes Twig's |
| CVE-2026-85605 | Deferred | 未確認 | CWE-862 | Slink before 1.12.3 fails to properly authorize access to image comment endpoints, allowing unauthenticated attackers to read comment threads via GET /api/image/{imageId}/comments |
| CVE-2026-85606 | Deferred | 未確認 | CWE-22 | firecrawl-mcp-server 3.20.2 contains an arbitrary local file read vulnerability in the firecrawl_parse tool that accepts unconstrained filePath arguments without directory containm |
| CVE-2026-85607 | Deferred | 未確認 | CWE-639 | Blinko 1.8.7 contains an authorization bypass (IDOR) vulnerability in multiple tRPC procedures (message.list, message.update, message.delete, message.clearAfter in server/routerTrp |
| CVE-2026-85608 | Deferred | 未確認 | CWE-918 | Douyin_TikTok_Download_API through 4.1.2 contains a server-side request forgery vulnerability in the /api/download and /api/hybrid/video_data endpoints that allows unauthenticated |
| CVE-2026-85609 | Deferred | 未確認 | CWE-918 | Openpanel before 2.3.0 contains an unauthenticated full-read server-side request forgery (SSRF) vulnerability in the GET /tools/site-checker endpoint (apps/api/src/controllers/tool |
| CVE-2026-85610 | Deferred | 未確認 | CWE-94 | OpenPanel before 2.3.0 fails to properly validate chart formula expressions, allowing authenticated project members with read access to execute arbitrary code by recovering the nat |
| CVE-2026-85611 | Deferred | 未確認 | CWE-639 | OpenPanel before 2.3.0 contains a cross-tenant broken object level authorization vulnerability in the report.getLayouts and report.resetLayout tRPC procedures that fail to scope da |
| CVE-2026-85612 | Deferred | 未確認 | CWE-918 | OpenPanel before 2.3.0 contains an unauthenticated server-side request forgery vulnerability in the /misc/favicon and /misc/og endpoints that accept an attacker-supplied url parame |
| CVE-2026-85613 | Deferred | 未確認 | CWE-79 | OpenPanel before 2.3.0 contains a cross-site scripting vulnerability in the unauthenticated favicon proxy endpoint GET /misc/favicon that allows remote attackers to execute scripts |
| CVE-2026-85614 | Deferred | 未確認 | CWE-918 | OpenPanel before 2.3.0 contains an unauthenticated server-side request forgery vulnerability in the GET /tools/site-checker endpoint that accepts a fully client-controlled URL para |
| CVE-2026-85615 | Deferred | 未確認 | CWE-639 | Openpanel before 2.3.0 contains an insecure direct object reference vulnerability in the report.getLayouts and report.resetLayout tRPC procedures that fail to bind dashboardId to t |
| CVE-2026-85616 | Analyzed | 未確認 | CWE-639 | Snipe-IT versions before 8.6.2 contain an authorization bypass vulnerability in checkout-acceptance report actions when Full Multiple Company Support is enabled. Authenticated user |
| CVE-2026-85617 | Analyzed | 未確認 | CWE-639 | snipe-it versions before 8.6.3 contain an authorization bypass vulnerability in the bulk delete functionality that allows restricted users to soft-delete users outside their author |
| CVE-2026-85618 | Deferred | 未確認 | CWE-22 | ConvertX 0.17.0 contains an arbitrary file read vulnerability in the xelatex converter that allows authenticated users to read files by uploading LaTeX files with input directives. |
| CVE-2026-85619 | Deferred | 未確認 | CWE-863 | AppFlowy-Cloud 0.9.64 fails to verify that requested collab objects belong to the workspace in authorization checks, allowing attackers to access documents and database rows across |
| CVE-2026-85620 | Awaiting Analysis | 未確認 | CWE-863 | Postgres MCP Pro 0.3.0 contains a restricted-mode bypass vulnerability where function-name validation is not applied to RangeFunction nodes in FROM clauses. Attackers can execute f |
| CVE-2026-85621 | Deferred | 未確認 | CWE-345 | LobeChat (LobeHub) 2.2.1 does not properly verify inbound chat-platform webhook signatures in the QQ and Feishu adapters. The webhook route (/api/agent/webhooks/:platform) is unaut |
| CVE-2026-85622 | Deferred | 未確認 | CWE-863 | AppFlowy-Cloud through 0.9.64 fails to validate workspace membership when establishing WebSocket connections in the establish_ws_connection_v2 handler, allowing authenticated users |
| CVE-2026-85623 | Deferred | 未確認 | CWE-94 | goose 1.37.0 executes arbitrary commands from recipe stdio extensions and retry.checks without security inspection. Attackers can distribute malicious recipes that execute shell co |
| CVE-2026-85624 | Deferred | 未確認 | CWE-639 | Blinko 1.8.7 contains a cross-user private note disclosure vulnerability in the noteReferenceList procedure that performs no ownership verification on supplied note identifiers. Au |
| CVE-2026-85625 | Deferred | 未確認 | CWE-1321 | sift (sift.js) 17.1.3 enumerates query keys with for...in, which walks the object prototype chain, and dispatches any matched operator key including $where. The $where operation co |
| CVE-2026-85626 | Deferred | 未確認 | CWE-88 | git-mcp-server 2.15.1 contains an argument injection vulnerability in the ref and object parameters of git_log, git_diff, and git_show tools that lack leading-dash validation. Atta |
| CVE-2026-85628 | Deferred | 未確認 | CWE-319 | Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3. |
| CVE-2026-85630 | Deferred | 未確認 | CWE-79 | HTML::FormHandler versions before 0.410002 for Perl render field attributes into HTML without escaping using the process_attrs method. Any application with fields or field labels |
| CVE-2026-85636 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was identified in jofpin trape 1.0.0. Affected by this vulnerability is an unknown functionality of the file core/stats.py of the component Login Endpoint. The mani |
| CVE-2026-85637 | Deferred | 未確認 | CWE-287, CWE-306 | A security flaw has been discovered in jofpin trape 1.0.0/2.0. Affected by this issue is the function join_room of the file core/sockets.py of the component Admin Endpoint. The man |
| CVE-2026-85638 | Deferred | 未確認 | CWE-285, CWE-639 | A weakness has been identified in jofpin trape 2.0. This affects an unknown part of the file core/user.py. This manipulation of the argument vId/id causes authorization bypass. Rem |
| CVE-2026-85639 | Deferred | 未確認 | CWE-362 | A security vulnerability has been detected in jofpin trape 2.0. This vulnerability affects unknown code of the file core/user.py of the component Telemetry Endpoint. Such manipulat |
| CVE-2026-85640 | Awaiting Analysis | 未確認 | CWE-269 | Zohocorp ManageEngine Endpoint Central versions below 11.5.2600.15 are vulnerable to Privilege Escalation Due to Outdated Component |
| CVE-2026-85641 | Deferred | 未確認 | CWE-345 | The Formidable Forms WordPress plugin before 6.35 does not restrict who can set the identifier recording which user last edited a form entry, and relies on that identifier when de |
| CVE-2026-85643 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in code-projects Online Shopping System 1.0. Impacted is the function mysqli_query of the file admin/adduser.php. Executing a manipulation of the argument mob |
| CVE-2026-85644 | Deferred | 未確認 | CWE-125, CWE-843 | XS::Parse::Infix versions from 0.40 through 0.49 for Perl treat a number as an array reference. The wrapper function XS::Parse::Infix generates for a list-associative infix operat |
| CVE-2026-85645 | Deferred | 未確認 | CWE-79 | The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the bulk_action parameter in all |
| CVE-2026-85649 | Awaiting Analysis | 未確認 | CWE-252, CWE-636 | (Holloway) Chew, Kean Ho's Actualizer v1.2.0 and earlier contains a fail-open password validation vulnerability in the Alpha user and root user password loops of Shell/debian-minba |
| CVE-2026-85650 | Deferred | 未確認 | CWE-918 | Trigger.dev before 4.5.2 contains a server-side request forgery vulnerability in webhook alert channel delivery URLs that are fetched without validation or SSRF protection. Authent |
| CVE-2026-85651 | Deferred | 未確認 | CWE-862 | Trigger.dev versions before 4.5.2 fail to validate environment membership during run replay operations, allowing authenticated attackers to inject task runs into arbitrary environm |
| CVE-2026-85652 | Deferred | 未確認 | CWE-89 | The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to time-based SQL Injection via 'album_id' Shortcode Attribute in all versions up to, |
| CVE-2026-85653 | Deferred | 未確認 | CWE-79 | The Contextual Related Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'other_attributes' Block Parameter in all versions up to, and including, 4.4.1 du |
| CVE-2026-85654 | Awaiting Analysis | 未確認 | CWE-1336 | Improper neutralization of special elements used in a template engine in the CDK generator in Amazon awslabs.dynamodb-mcp-server before 2.1.6 might allow a context-dependent actor |
| CVE-2026-85656 | Awaiting Analysis | 未確認 | CWE-78 | An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might allow a local user to execute arbitrary commands with root privileges |
| CVE-2026-85657 | Deferred | 未確認 | CWE-79 | The Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘profile_fie |
| CVE-2026-85658 | Deferred | 未確認 | CWE-94 | The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to arbitrary shortcode |
| CVE-2026-85660 | Deferred | 未確認 | CWE-78 | cli-mcp-server 0.2.5 contains a command allowlist bypass vulnerability in the _validate_command_with_operators function when ALLOW_SHELL_OPERATORS is enabled. Attackers can use she |
| CVE-2026-85661 | Deferred | 未確認 | CWE-22 | excel-mcp-server 0.1.8 fails to enforce path confinement in stdio mode when EXCEL_FILES_PATH is unset, allowing attackers to read and write arbitrary files. Attackers can supply un |
| CVE-2026-85662 | Deferred | 未確認 | CWE-918 | Marqo 2.26.0 contains a server-side request forgery vulnerability in the add_documents endpoint that allows unauthenticated attackers to trigger requests to arbitrary URLs by suppl |
| CVE-2026-85663 | Deferred | 未確認 | CWE-306 | Aim 3.29.1 remote tracking server fails to authenticate requests and dispatches arbitrary methods through getattr without allowlist validation. Unauthenticated attackers can regist |
| CVE-2026-85664 | Deferred | 未確認 | CWE-770 | Chroma 1.5.9 fails to validate maximum bounds on HNSW index parameters max_neighbors, ef_construction, and ef_search in collection-create requests. Unauthenticated attackers can su |
| CVE-2026-85665 | Deferred | 未確認 | CWE-22 | Bruno versions through 4.1.0 fail to validate file paths in request body declarations, allowing attackers to read arbitrary local files by using parent-directory traversal segments |
| CVE-2026-85666 | Deferred | 未確認 | CWE-918 | OGX (formerly Llama Stack, affected at commit fbe8e0f) contains an unauthenticated server-side request forgery vulnerability in the OpenAI-compatible POST /v1/responses endpoint. M |
| CVE-2026-85667 | Deferred | 未確認 | CWE-306 | xiaobei through 5.5.2 fails to implement authentication or signature validation on webhook endpoints, allowing unauthenticated attackers to inject arbitrary messages into the agent |
| CVE-2026-85668 | Deferred | 未確認 | CWE-73 | Xinference (affected commit 4a94832, v3.x) contains an unauthenticated arbitrary-path file read vulnerability in the POST /v1/models/llm/auto-register endpoint, which accepts a cal |
| CVE-2026-85669 | Deferred | 未確認 | CWE-862 | potpie through 2.0.0 fails to verify user ownership on the POST /conversations/{conversation_id}/code-changes/sync endpoint. Authenticated attackers can write arbitrary file change |
| CVE-2026-85670 | Awaiting Analysis | 未確認 | CWE-787 | tokenizers (Hugging Face) is affected by an out-of-bounds buffer access in BpeBuilder::build (tokenizers/src/models/bpe/model.rs). When loading a tokenizer.json via Tokenizer::from |
| CVE-2026-85671 | Deferred | 未確認 | CWE-306 | QAnything 2.0.0 contains an authentication bypass vulnerability in the /api/local_doc_qa/get_file_base64 and /api/local_doc_qa/get_doc endpoints that allows unauthenticated attacke |
| CVE-2026-85672 | Deferred | 未確認 | CWE-78 | zerox 1.1.20 contains an OS command injection vulnerability in the file download mechanism where the temporary file extension derived from document URLs is interpolated unsanitized |
| CVE-2026-85673 | Deferred | 未確認 | CWE-918 | LLaMA-Factory contains a server-side request forgery vulnerability in the OpenAI-compatible API multimodal media URL handler that allows unauthenticated attackers to bypass SSRF va |
| CVE-2026-85674 | Deferred | 未確認 | CWE-94 | aider (aider-chat) automatically loads a .aider.conf.yml configuration file from the root of the git repository it is launched in. A crafted repository can set test-cmd (executed a |
| CVE-2026-85675 | Deferred | 未確認 | CWE-918 | OWL's DocumentProcessingToolkit contains a server-side request forgery vulnerability in the extract_document_content tool that fetches caller-supplied URLs with no scheme, host, or |
| CVE-2026-85676 | Deferred | 未確認 | CWE-601 | Dub contains an open redirect vulnerability in the redir_url query parameter that is accepted on every short link without validation or domain allowlist enforcement. Attackers can |
| CVE-2026-85677 | Deferred | 未確認 | CWE-79 | The Gutenverse News WordPress plugin before 3.3.3 does not restrict the extra HTML it adds to WordPress's allowed elements to the context it is meant for, applying the same relaxe |
| CVE-2026-85678 | Deferred | 未確認 | CWE-79 | The AI Builder WordPress plugin before 2.7.8 does not sanitise custom JavaScript saved against a post before echoing it inside a script tag on the front end, allowing users with c |
| CVE-2026-85680 | Deferred | 未確認 | CWE-79 | The Ultimate Member WordPress plugin before 2.13.1 does not escape a value derived from user supplied profile names before outputting it in the page title, and decodes HTML entiti |
| CVE-2026-85681 | Deferred | 未確認 | CWE-269 | The WP Component WordPress plugin through 2.2.4 does not have any capability or nonce checks on one of the actions it makes available to unauthenticated users, and it takes both th |
| CVE-2026-85682 | Deferred | 未確認 | CWE-346 | The YOP Poll plugin for WordPress is vulnerable to Origin Validation Error in all versions up to, and including, 7.0.10. This is due to the plugin transmitting a wp_rest nonce to w |
| CVE-2026-85684 | Deferred | 未確認 | CWE-73 | marker through 2.0.0 contains a path traversal vulnerability in the FastAPI /marker/upload handler that fails to sanitize the file.filename parameter. Unauthenticated attackers can |
| CVE-2026-85685 | Deferred | 未確認 | CWE-22 | AgentScope through 2.0.7.post1 contains a path traversal vulnerability in LocalWorkspace.add_skill that copies arbitrary server directories into the agent workspace via an unconfin |
| CVE-2026-85686 | Deferred | 未確認 | CWE-918 | ms-swift 4.5.2 contains a server-side request forgery vulnerability in the swift deploy OpenAI-compatible API that fetches multimodal media URLs without validation or redirect filt |
| CVE-2026-85687 | Deferred | 未確認 | CWE-73 | surya 0.22.1 screenshot server contains an unauthenticated arbitrary file read vulnerability in the /info, /page, and /process routes that accept raw file_path parameters. Attacker |
| CVE-2026-85688 | Deferred | 未確認 | CWE-306 | TEN Framework 0.11.71 contains unauthenticated arbitrary file read and write vulnerabilities in the TMAN Designer file-content API endpoints. Attackers can submit POST and PUT requ |
| CVE-2026-85689 | Deferred | 未確認 | CWE-89 | llmware 0.4.6 contains an SQL injection vulnerability in the collection-database layer (llmware/resources.py) where filter and lookup values are directly string-interpolated into S |
| CVE-2026-85690 | Deferred | 未確認 | CWE-22 | Plandex 2.2.1 contains a path traversal vulnerability in the ApplyFiles function that allows attackers to write files outside the project directory. Attackers can influence model o |
| CVE-2026-85691 | Deferred | 未確認 | CWE-918 | MegaParse 0.0.55 contains an unauthenticated server-side request forgery vulnerability in the POST /v1/url endpoint that fetches caller-supplied URLs server-side. Attackers can sup |
| CVE-2026-85692 | Deferred | 未確認 | CWE-918 | Nightingale (n9e), as of commit 8362cbe (main branch, confirmed 2026-08-27), contains a server-side request forgery vulnerability in the isPublicIP function in aiagent/tools/http.g |
| CVE-2026-85693 | Deferred | 未確認 | CWE-639 | Chatbot UI contains an authorization bypass vulnerability in the retrieval endpoint that allows authenticated attackers to access private file content belonging to other users by s |
| CVE-2026-85694 | Deferred | 未確認 | CWE-94 | LaVague 0.2.35 contains a remote code execution vulnerability in PythonFromMarkdownExtractor.extract_as_object that evaluates untrusted language model output derived from web page |
| CVE-2026-85695 | Deferred | 未確認 | CWE-306 | FastChat contains an authentication bypass vulnerability in the /register_worker endpoint that allows unauthenticated attackers to register arbitrary worker addresses and perform s |
| CVE-2026-85696 | Deferred | 未確認 | CWE-78 | SadTalker contains an OS command injection vulnerability in the video muxing process where uploaded audio filenames are interpolated into ffmpeg commands without proper escaping. A |
| CVE-2026-85697 | Deferred | 未確認 | CWE-863 | Documenso 2.17.0 contains an access control vulnerability in the PDF-serving endpoint that fails to validate document visibility settings. Attackers with low privileges can read re |
| CVE-2026-85698 | Deferred | 未確認 | CWE-125 | Turso through 0.8.0-pre.8 contains an out-of-bounds read vulnerability in the table-leaf page reader that uses an attacker-controlled cell-count field without bounds validation. At |
| CVE-2026-85699 | Deferred | 未確認 | CWE-918 | jina-ai reader contains a server-side request forgery vulnerability where URL validation is performed only on the initial request but not re-applied to subsequent redirect hops. At |
| CVE-2026-85700 | Deferred | 未確認 | CWE-522 | Onyx 4.6.6 fails to properly restrict access to custom tool credentials stored in custom_headers, allowing any authenticated user to read admin-defined API keys. Attackers with bas |
| CVE-2026-85701 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. This issue affects the function ChatCompletion.create of the file g4f/_ |
| CVE-2026-85702 | Deferred | 未確認 | CWE-287, CWE-306 | A security vulnerability has been detected in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. Affected is the function _conversation of the file server/b |
| CVE-2026-85703 | Deferred | 未確認 | CWE-400, CWE-770 | A flaw has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. Affected by this issue is the function getJailbreak of the file server/backend.p |
| CVE-2026-85704 | Deferred | 未確認 | CWE-362 | A security flaw has been discovered in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. This issue affects the function getJailbreak of the file server/co |
| CVE-2026-85705 | Deferred | 未確認 | CWE-89 | The Location Manager plugin for WordPress is vulnerable to generic SQL Injection via 'latitude' and 'longitude' REST API Parameters in all versions up to, and including, 2.3.38 due |
| CVE-2026-85706 | Analyzed | 掲載 | CWE-22 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 |
| CVE-2026-85709 | Deferred | 未確認 | CWE-209 | LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, the LightRAG API server returns raw Python exception text from error handlers in document_routes.p |
| CVE-2026-85715 | Awaiting Analysis | 未確認 | CWE-789, CWE-835 | ExifReader is a JavaScript Exif information parser. Prior to 4.41.1, ExifReader parses attacker-controlled HEIC or AVIF ISO-BMFF files in getItems() within src/image-header-iso-bmf |
| CVE-2026-85716 | Awaiting Analysis | 未確認 | CWE-287, CWE-390 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 3.0.8 until 3.0.12, processScramAuthentic |
| CVE-2026-85717 | Awaiting Analysis | 未確認 | CWE-200, CWE-522 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.14.5 to 2.16.0 and from 3.0.9 to 3.0.11 |
| CVE-2026-85718 | Awaiting Analysis | 未確認 | CWE-400, CWE-772 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 3.0.8 until 3.0.12, a client with maxConn |
| CVE-2026-85719 | Awaiting Analysis | 未確認 | CWE-319, CWE-522 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.1.0 until 2.16.1 and 3.0.12, requests u |
| CVE-2026-85720 | Awaiting Analysis | 未確認 | CWE-319, CWE-522 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 2.16.1 and 3.0.12, a request |
| CVE-2026-85721 | Awaiting Analysis | 未確認 | CWE-400, CWE-409 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 2.16.1 and 3.0.12, automatic |
| CVE-2026-85724 | Analyzed | 未確認 | CWE-155, CWE-863 | Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, when pattern-based ACL rules are configured, AuthorizationsCollector.canDoOperation substitutes client ID and username |
| CVE-2026-85725 | Deferred | 未確認 | CWE-208 | LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, verify_password in lightrag/api/passwords.py compares plaintext AUTH_ACCOUNTS password values with |
| CVE-2026-85730 | Deferred | 未確認 | CWE-606, CWE-835 | smol-toml is a small, fast, and correct TOML parser and serializer. Prior to 1.7.1, parse() can enter an infinite loop when a value inside an array or inline table is followed by a |
| CVE-2026-85731 | Deferred | 未確認 | CWE-22, CWE-59 | oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, content/file.Store extraction of OCI layers marked with io.deis.oras.content.unpack=true can write outside the s |
| CVE-2026-85732 | Deferred | 未確認 | CWE-918 | oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, the parseLink function in registry/remote/utils.go accepts an absolute URL from a registry-controlled Link respo |
| CVE-2026-85734 | Deferred | 未確認 | CWE-307 | LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, the POST /login endpoint in lightrag/api/lightrag_server.py does not impose a rate limit, account |
| CVE-2026-85738 | Deferred | 未確認 | CWE-918 | TREK is a collaborative travel planner. Prior to 3.4.0, the checkSsrf logic in server/src/utils/ssrfGuard.ts does not recognize NAT64, 6to4, or Teredo IPv6 transition addresses tha |
| CVE-2026-85740 | Deferred | 未確認 | CWE-918 | LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, _validated_addresses in lightrag/parser/markdown/parser.py evaluates the literal resolved address |
| CVE-2026-85750 | Deferred | 未確認 | CWE-20 | Piwigo before v16.4.0 is vulnerable to arbitrary file read and remote code execution in image upload handling when using the Imagick library due to insufficient validation and unsa |
| CVE-2026-85751 | Deferred | 未確認 | CWE-290, CWE-807 | Mailu is a mail server distributed as a set of Docker images. From Mailu 2.0 until 2024.06.55 and prior to Mailu helm-charts 2.7.3, deployments with PROXY_AUTH_WHITELIST configured |
| CVE-2026-85756 | Awaiting Analysis | 未確認 | CWE-78 | SSH.NET is a Secure Shell (SSH) library for .NET. Prior to 2026.0.0, ScpClient places caller-supplied remote paths into the command used to run scp on the server, and the default R |
| CVE-2026-85769 | Awaiting Analysis | 未確認 | CWE-125 | A flaw was found in libtpms, a library that provides software TPM 2.0 emulation. When restoring TPM 2.0 state (for example during a virtual machine's power-on or state/migration re |
| CVE-2026-85781 | Awaiting Analysis | 未確認 | CWE-283 | Unverified ownership of a storage access point in the volume deletion component of the Amazon EFS CSI Driver before v3.4.1 might allow an authenticated Kubernetes user with Persist |
| CVE-2026-85786 | Awaiting Analysis | 未確認 | CWE-409 | Improper handling of highly compressed data in Amazon ion-java before 1.12.1 might allow remote attackers to cause a denial of service via a crafted compressed Ion document that ex |
| CVE-2026-85787 | Awaiting Analysis | 未確認 | CWE-184 | An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server before version 1.1.7 might allow an unauthenticated actor to modify d |
| CVE-2026-85788 | Awaiting Analysis | 未確認 | CWE-184 | Incomplete list of disallowed inputs in the mutable SQL detector component in Amazon awslabs mysql-mcp-server might allow context-dependent actors to bypass the read-only enforceme |
| CVE-2026-85789 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-85875 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-85877 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to execute code over a network. |
| CVE-2026-85878 | Analyzed | 未確認 | CWE-285 | Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-85880 | Analyzed | 掲載 | CWE-122, CWE-908 | Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85885 | Analyzed | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-85887 | Analyzed | 未確認 | CWE-732 | Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network. |
| CVE-2026-85889 | Analyzed | 未確認 | CWE-306 | Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-85892 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges l |
| CVE-2026-85893 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-85917 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-85921 | Analyzed | 未確認 | CWE-415 | Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85978 | Deferred | 未確認 | CWE-41, CWE-863, CWE-94 | An unauthenticated remote code execution vulnerability exists in the Policy Manager console of Akana API Platform. A path normalization discrepancy between the authentication filte |
| CVE-2026-85979 | Awaiting Analysis | 未確認 | CWE-20, CWE-269, CWE-78 | Affected versions of Puppet Enterprise contain a command injection vulnerability. An authenticated user with Puppet administrative privileges can inject arbitrary shell commands by |
| CVE-2026-85981 | Awaiting Analysis | 未確認 | CWE-306 | The administrative panel of the Auth0 AD/LDAP Connector (versions 6.5.0 and earlier) listens on the local loopback interface without requiring authentication. This allows a local, |
| CVE-2026-85982 | Awaiting Analysis | 未確認 | CWE-79 | The Auth0 AD/LDAP Connector is vulnerable to stored Cross-Site Scripting (XSS) issues due to improper HTML encoding of data in search results and updater log content displayed in t |
| CVE-2026-85983 | Awaiting Analysis | 未確認 | CWE-94 | The Auth0 AD/LDAP Connector improperly processes a configuration value during service startup. This allows a low-privileged user on the host system to modify the connector's config |
| CVE-2026-85984 | Deferred | 未確認 | CWE-287 | The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass via the mo_wp_login_intent parameter in all versions up to, |
| CVE-2026-85995 | Awaiting Analysis | 未確認 | CWE-347 | Notepad++ is a free and open-source source code editor. From 8.9.7 until 8.9.8, the Notepad++ updater and signature verification path can accept a modified GUP.exe file whose embed |
| CVE-2026-85999 | Awaiting Analysis | 未確認 | CWE-1333, CWE-400 | Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.9, selector_iter in src/soupsieve/css_parser.py trims the raw selector with RE_WS_END, an |
| CVE-2026-86000 | Awaiting Analysis | 未確認 | CWE-1333, CWE-400 | Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.9, the selector parser in src/soupsieve/css_parser.py defines IDENTIFIER with adjacent qu |
| CVE-2026-86003 | Awaiting Analysis | 未確認 | CWE-441 | CoreDNS is a DNS server written in Go. Prior to 1.14.7, the DNS-over-HTTPS, DNS-over-HTTP/3, DNS-over-QUIC, and DNS-over-gRPC listeners in plugin/pkg/doh/doh.go, core/dnsserver/ser |
| CVE-2026-86035 | Deferred | 未確認 | CWE-78, CWE-88 | Weblate is a web-based continuous localization platform used to manage software translations. Weblate 4.11.1 through 2026.7.1 contains an argument-injection vulnerability in its Me |
| CVE-2026-86038 | Awaiting Analysis | 未確認 | CWE-345, CWE-347 | libp2p is a JavaScript implementation of the libp2p networking stack. From 15.0.0 until 16.0.5, @libp2p/gossipsub uses the default StrictSign policy in packages/gossipsub/src/utils |
| CVE-2026-86039 | Awaiting Analysis | 未確認 | CWE-290, CWE-345 | libp2p is a JavaScript implementation of the libp2p networking stack. From 8.0.0 until 12.0.24, @libp2p/peer-store in packages/peer-store/src/index.ts uses consumePeerRecord to ver |
| CVE-2026-86040 | Awaiting Analysis | 未確認 | CWE-400, CWE-401, CWE-770 | libp2p is a JavaScript implementation of the libp2p networking stack. Prior to 11.0.26, @libp2p/floodsub accepts unauthenticated RPC frames on /floodsub/1.0.0 through PeerStreams.a |
| CVE-2026-86043 | Deferred | 未確認 | CWE-863 | Skipper is an HTTP router and reverse proxy for service composition. Prior to version 0.27.37, the opaAuthorizeRequestWithBody filter can authorize an oversized request after Skipp |
| CVE-2026-86049 | Awaiting Analysis | 未確認 | CWE-532 | Jupyter Server is the backend for Jupyter web applications. Prior to version 2.21.0, the 5xx request logging path in jupyter_server/log.py copies the Referer header into a JSON hea |
| CVE-2026-86054 | Awaiting Analysis | 未確認 | CWE-121 | Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ contains a stack buffer overflow in NppParameters::writeSession in PowerEditor/src/Parameters.cpp |
| CVE-2026-86056 | Awaiting Analysis | 未確認 | CWE-476 | Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the NPPM_SAVESESSION handler in PowerEditor/src/NppBigSwitch.cpp converts lParam to a sessionInfo pointer an |
| CVE-2026-86059 | Deferred | 未確認 | CWE-200, CWE-862 | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, Dokploy organization members without Git provider access can retrieve plaintext provider credential |
| CVE-2026-86060 | Analyzed | 掲載 | CWE-88 | RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited character, allowing for the trusted RouterOS policy mask to be ch |
| CVE-2026-86062 | Deferred | 未確認 | CWE-79 | LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, lightrag_webui/src/components/retrieval/ChatMessage.tsx renders answer and thinking content with r |
| CVE-2026-86064 | Deferred | 未確認 | CWE-200, CWE-306 | Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, the default-open GET /log WebSocket route configured in config/node/api.yaml and registered b |
| CVE-2026-86065 | Deferred | 未確認 | CWE-770 | Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, the default-open GET /subscribe endpoint in network/api/websocket/routes.go accepts unauthent |
| CVE-2026-86066 | Deferred | 未確認 | CWE-352 | Horilla is an HR and CRM software. Prior to 2.0.0, approve_validate_attendance_request at /attendance/approve-validate-attendance-request/ changes attendance_validated, is_validate |
| CVE-2026-86071 | Deferred | 未確認 | CWE-22 | Junrar is an open source Java RAR archive library. Prior to version 7.6.1, LocalFolderExtractor in src/main/java/com/github/junrar/LocalFolderExtractor.java can create directories |
| CVE-2026-86073 | Analyzed | 未確認 | CWE-863 | n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.1, the OAuth token endpoint bound an authorization code's first access token to the consented resource |
| CVE-2026-86074 | Analyzed | 未確認 | CWE-918 | n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the Instance AI credential setup flow accepted a credential test or verification URL without checkin |
| CVE-2026-86075 | Analyzed | 未確認 | CWE-770 | n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the OAuth Dynamic Client Registration endpoint bounded redirect_uris but accepted arbitrarily large |
| CVE-2026-86076 | Analyzed | 未確認 | CWE-94 | n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the expression compiler sanitizer resolved through dynamically scoped this and did not re |
| CVE-2026-86077 | Analyzed | 未確認 | CWE-862 | n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the /chat WebSocket route accepted a resumeToken and resumed a paused execution without checking tha |
| CVE-2026-86078 | Analyzed | 未確認 | CWE-1321 | n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the Instance AI workflow summary used node names and connection keys from stored workflows as ordina |
| CVE-2026-86079 | Analyzed | 未確認 | CWE-22 | n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Elasticsearch and ElasticSecurity nodes interpolated workflow-controlled index and do |
| CVE-2026-86080 | Analyzed | 未確認 | CWE-347 | n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the GitHub Trigger generated a webhook secret but discarded it when GitHub returned HTTP |
| CVE-2026-86081 | Undergoing Analysis | 未確認 | CWE-1333 | n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Git node clone operation matched an attacker-controlled destination path against the |
| CVE-2026-86082 | Analyzed | 未確認 | CWE-918 | n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the OpenAI Chat Model node enforced credential allowed-domain restrictions for normal cal |
| CVE-2026-86083 | Analyzed | 未確認 | CWE-94 | n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the legacy expression engine generated source text by calling the mutable global JSON.str |
| CVE-2026-86084 | Analyzed | 未確認 | CWE-288 | n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the public OIDC login and callback endpoints completed authentication even when OIDC was |
| CVE-2026-86085 | Analyzed | 未確認 | CWE-862 | n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the /rest/roles/:slug/assignments and /rest/roles/:slug/assignments/:projectId/members endpoints che |
| CVE-2026-86087 | Analyzed | 未確認 | CWE-22 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an authenticated user to send a specially crafted request to write arbitrary files on the system. |
| CVE-2026-86089 | Analyzed | 未確認 | CWE-862 | Apache NiFi 2.11.0 supports migrating the contents of a version-controlled Process Group into a Connector using REST API methods that list eligible migration sources and submit mig |
| CVE-2026-86090 | Deferred | 未確認 | CWE-862 | ntopng before 6.7.260717 fails to perform authorization checks in the delete endpoints and recipients REST v2 handlers. Authenticated non-administrator users can issue POST request |
| CVE-2026-86091 | Deferred | 未確認 | CWE-862 | ntopng before 6.7.260717 fails to check user privileges in the pools bulk-delete endpoint, allowing authenticated non-administrators to delete all host pools and member bindings. A |
| CVE-2026-86093 | Analyzed | 未確認 | CWE-121 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an attacker with the ability to control or impersonate a DRDA server endpoint to execute arbitrary commands on |
| CVE-2026-86095 | Deferred | 未確認 | CWE-787 | Unidata netcdf-c through 4.10.1 contains an out-of-bounds write vulnerability in NC4_HDF5_inq_attname() that copies HDF5 attribute names into a fixed 256-byte buffer without length |
| CVE-2026-86096 | Awaiting Analysis | 未確認 | CWE-416 | PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in TemperatureCalibration::start() due to a race condition between task spawning and object deletion. Attackers |
| CVE-2026-86097 | Awaiting Analysis | 未確認 | CWE-476 | PX4 Autopilot through 1.17.0 contains a null pointer dereference vulnerability in param_set_default_file() and param_set_backup_file() functions that allows attackers to crash the |
| CVE-2026-86098 | Deferred | 未確認 | CWE-787 | ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpi_json_string_escape function that writes beyond caller-supplied buffer boundaries. Attackers c |
| CVE-2026-86099 | Deferred | 未確認 | CWE-22 | Chainlit through 2.12.0 fails to validate the client-supplied socket.io sessionId parameter, allowing unauthenticated attackers to traverse filesystem paths by injecting absolute o |
| CVE-2026-86100 | Deferred | 未確認 | CWE-918 | Camaleon CMS versions 2.7.5 through 2.9.1 fail to validate redirect targets when fetching remote files in the Upload from URL media feature. Authenticated attackers can supply URLs |
| CVE-2026-86101 | Analyzed | 未確認 | CWE-285, CWE-863 | An improper authorization vulnerability in WatchGuard Fireware OS's SAML login process allows a remote, authenticated SAML user with access only to the Access Portal to obtain unau |
| CVE-2026-86102 | Deferred | 未確認 | CWE-78, CWE-863 | An OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access to the AP to execute arbitrary shell commands on the underlyi |
| CVE-2026-86104 | Analyzed | 未確認 | CWE-400, CWE-409, CWE-770 | An uncontrolled resource consumption vulnerability in the Fireware OS login process (wgagent) allows a remote, unauthenticated attacker to cause a denial of service by sending a sp |
| CVE-2026-86105 | Analyzed | 未確認 | CWE-176, CWE-22, CWE-285 | An improper authorization vulnerability in Fireware OS's Access Portal reverse proxy allows an authenticated, low-privileged Access Portal user to access other web applications the |
| CVE-2026-86106 | Awaiting Analysis | 未確認 | CWE-306 | An unauthenticated actor with network access to the private HA interconnect may trigger sensitive HA peer functions without verification. This could result in elevated command exec |
| CVE-2026-86107 | Awaiting Analysis | 未確認 | CWE-787 | The VeloCloud Edge and Gateway exhibit an out-of-bounds write vulnerability when processing tunneled IP fragments between authenticated overlay neighbors. This vulnerability impact |
| CVE-2026-86108 | Awaiting Analysis | 未確認 | CWE-78 | Insufficient validation of inputs supplied through affected VeloCloud Edge management and configuration workflows may allow an authorized management request or configuration value |
| CVE-2026-86109 | Awaiting Analysis | 未確認 | CWE-347 | The VeloCloud Edge software update workflow may accept update bundles without properly validating their signatures because the workflow does not restrict the digest algorithm used |
| CVE-2026-86111 | Deferred | 未確認 | CWE-639 | BookWyrm through 0.9.1 fails to validate user visibility permissions in the status edit endpoint, allowing authenticated attackers to read followers-only and direct-message reviews |
| CVE-2026-86112 | Deferred | 未確認 | CWE-639 | BookWyrm through 0.9.1 fails to validate user visibility permissions in the Favorite and Unfavorite views, allowing authenticated attackers to favorite or unfavorite followers-only |
| CVE-2026-86113 | Deferred | 未確認 | CWE-639 | BookWyrm through 0.9.1 contains an authorization bypass vulnerability in the edit_readthrough function that allows authenticated users to modify other users' reading records. Attac |
| CVE-2026-86114 | Deferred | 未確認 | CWE-862 | Arcane versions before 2.0.0 fail to properly restrict template operations, allowing default user role accounts to create, modify, and delete compose templates including instance-w |
| CVE-2026-86115 | Deferred | 未確認 | CWE-441 | Sim before 0.8.14 classifies tool requests as internal based on URL prefix matching without scheme normalization, skipping SSRF validation and minting internal authentication token |
| CVE-2026-86116 | Deferred | 未確認 | CWE-862 | Metabase versions before 0.63.1 fail to enforce data analyst permission checks on glossary API endpoints, allowing any authenticated user to create, modify, and delete glossary ent |
| CVE-2026-86117 | Deferred | 未確認 | CWE-287 | Coolify through 4.3.17 contains an authentication bypass vulnerability in the OAuth callback handler that signs users into existing accounts based solely on email address without v |
| CVE-2026-86118 | Deferred | 未確認 | CWE-862 | gonic versions before 0.22.0 fail to validate administrator privileges in the startScan endpoint, allowing any authenticated user to trigger media library rescans. Attackers can re |
| CVE-2026-86119 | Deferred | 未確認 | CWE-918 | Webstudio through 0.296.0 contains an unauthenticated server-side request forgery vulnerability in the /cgi/image, /cgi/video, and /cgi/asset proxy routes when RESIZE_ORIGIN enviro |
| CVE-2026-86120 | Deferred | 未確認 | CWE-636 | APITable through 1.13.0-beta.1 contains an incorrect authorization vulnerability in NodePermissionGuard that fails to enforce node-level access control when permission lookups thro |
| CVE-2026-86121 | Deferred | 未確認 | CWE-306 | Cua computer-server versions before 0.3.42 skip authentication when the CONTAINER_NAME environment variable is unset and bind to all interfaces by default, allowing unauthenticated |
| CVE-2026-86122 | Deferred | 未確認 | CWE-918 | Rowboat through 0.9.1 fails to validate custom MCP server and webhook URLs, allowing authenticated users to configure arbitrary destinations. Attackers can point these URLs at inte |
| CVE-2026-86123 | Deferred | 未確認 | CWE-918 | SQL Chat contains four unauthenticated API endpoints that accept client-supplied database connection parameters and execute arbitrary SQL queries against attacker-specified hosts. |
| CVE-2026-86124 | Deferred | 未確認 | CWE-306 | AutoAgent contains an unauthenticated remote code execution vulnerability in the TCP server that binds to all interfaces and executes attacker-supplied commands as root. Attackers |
| CVE-2026-86128 | Analyzed | 未確認 | CWE-476 | A NULL pointer dereference vulnerability in Fireware OS's NetFlow packet-processing feature allows a remote, unauthenticated attacker to cause a denial of service by sending a spec |
| CVE-2026-86131 | Analyzed | 未確認 | CWE-295, CWE-829, CWE-94 | A code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling allows an attacker who controls the remote VPN server to execute arbitrary c |
| CVE-2026-86132 | Analyzed | 未確認 | CWE-191 | An integer underflow vulnerability in the WatchGuard Fireware OS IKEv2 daemon (iked) allows a remote, unauthenticated attacker to crash the process by sending a specially crafted e |
| CVE-2026-86133 | Analyzed | 未確認 | CWE-1284, CWE-191 | An integer underflow vulnerability in the WatchGuard Fireware OS IKE daemon (iked) allows a remote attacker who has completed the initial IKEv2 handshake to crash the iked process |
| CVE-2026-86134 | Analyzed | 未確認 | CWE-476 | A NULL pointer dereference vulnerability in the WatchGuard Fireware OS authentication process allows a remote, unauthenticated attacker to crash the management daemon by sending a |
| CVE-2026-86135 | Deferred | 未確認 | CWE-352, CWE-400 | A Cross-Site Request Forgery (CSRF) vulnerability in WatchGuard Dimension's database snapshot creation feature allows a remote attacker to trigger unauthorized snapshot creation by |
| CVE-2026-86136 | Analyzed | 未確認 | CWE-22, CWE-476, CWE-862 | A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authenticated, low-privileged user (including a read-only or gues |
| CVE-2026-86137 | Analyzed | 未確認 | CWE-125 | In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp. |
| CVE-2026-86138 | Analyzed | 未確認 | CWE-190 | In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow. |
| CVE-2026-86139 | Analyzed | 未確認 | CWE-190 | In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow. |
| CVE-2026-86140 | Analyzed | 未確認 | CWE-121 | In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow. |
| CVE-2026-86141 | Analyzed | 未確認 | CWE-252 | xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking. |
| CVE-2026-86142 | Analyzed | 未確認 | CWE-122 | In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation. |
| CVE-2026-86143 | Analyzed | 未確認 | CWE-192 | In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a check for integer over |
| CVE-2026-86144 | Analyzed | 未確認 | CWE-669 | In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXIncludeProcessTree do not propagate parseFlags. This has security relevance for, for example, the XML_PARSE_NONET f |
| CVE-2026-86145 | Deferred | 未確認 | CWE-424 | PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a |
| CVE-2026-86148 | Deferred | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the function SystemAsh of the file Apis/system.c of the component Kylin. The manipulation o |
| CVE-2026-86149 | Deferred | 未確認 | CWE-77, CWE-78 | A weakness has been identified in Tenda CP3 27.5.57.101. This issue affects some unknown processing of the file Net/NetCheckPing.cpp. This manipulation of the argument interface_na |
| CVE-2026-8615 | Deferred | 未確認 | CWE-862 | The Reviso Exporter for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check and missing nonce verification on the |
| CVE-2026-86150 | Deferred | 未確認 | CWE-259, CWE-798 | A security vulnerability has been detected in Tenda CP3 27.5.57.101. Impacted is an unknown function of the file custom-x/softap/hostapd. Such manipulation of the argument wpa_pass |
| CVE-2026-86151 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function sub_2F77E8 of the file Apis/system.c of the component Network Configuration Management. |
| CVE-2026-86152 | Deferred | 未確認 | CWE-77, CWE-78 | A flaw has been found in Tenda CP3 27.5.57.101. The impacted element is the function CAutoAddWifi::ThreadProc of the file Functions/AutoAddWifi.cpp of the component Kylin. Executin |
| CVE-2026-86153 | Deferred | 未確認 | CWE-266, CWE-269 | A vulnerability has been found in Tenda CP3 27.5.57.101. This affects the function CRedirServer::SetRedirectEnable of the file Functions/Redirect.cpp. The manipulation leads to imp |
| CVE-2026-86157 | Awaiting Analysis | 未確認 | CWE-749 | Exposure of privileged IPC functionality in Progress Telerik Fiddler Everywhere before version 8.2.0 allows a local, low-privileged attacker who can modify application launch param |
| CVE-2026-86158 | Awaiting Analysis | 未確認 | CWE-306 | Missing authentication in the local .NET backend (Fiddler.WebUi) of Progress Software Fiddler Everywhere 8.0.2 allows a local unauthenticated attacker to mint OAuth tokens and read |
| CVE-2026-86159 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in SourceCodester Online Voting System 1.0. Impacted is an unknown function of the file /ajax.php?action=save_user. This manipulation of the argument ID cause |
| CVE-2026-86160 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in SourceCodester Online Voting System 1.0. The affected element is an unknown function of the file /ajax.php?action=delete_voting. Such manipulation |
| CVE-2026-86161 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in SourceCodester Online Voting System 1.0. The impacted element is an unknown function of the file /ajax.php?action=delete_category. Performing a manipul |
| CVE-2026-86162 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in SourceCodester Online Voting System 1.0. This affects an unknown function of the file /ajax.php?action=login. Executing a manipulation of the argu |
| CVE-2026-86163 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/pro_del.php. The manipulation of the argument ID |
| CVE-2026-86164 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/trans_view.php. The manipulation of the argum |
| CVE-2026-86165 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was found in Tenda HG10 300001138. This vulnerability affects the function formURL of the file /boaform/admin/formURL. Performing a manipulation of the argument Key |
| CVE-2026-86166 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formWanRedirect of the file /boaform/formWanRedirect of the component Boa Web Server. Execut |
| CVE-2026-86167 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formgponConf of the file /boaform/admin/formgponConf of the component Boa. The manipulation of the |
| CVE-2026-86168 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in code-projects Content Management System 1.0. The affected element is an unknown function of the file /login.php. The manipulation of the argu |
| CVE-2026-86169 | Deferred | 未確認 | CWE-829 | Axolotl before 0.19.0 contains a remote code execution vulnerability in the multipack patch path where trust_remote_code defaults to None instead of False, causing the security gua |
| CVE-2026-86170 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in DefaultFuction CRM 1.0.0. The impacted element is an unknown function of the file /modules/orders/edit.php. This manipulation of the argument ID c |
| CVE-2026-86171 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in DefaultFuction CRM 1.0.0. This affects an unknown function of the file /modules/orders/delete.php. Such manipulation of the argument I |
| CVE-2026-86172 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in DefaultFuction CRM 1.0.0. This impacts an unknown function of the file /modules/customers/delete.php. Performing a manipulation of the argument ID r |
| CVE-2026-86173 | Deferred | 未確認 | CWE-918 | MindsDB through 26.1.0 contains a server-side request forgery vulnerability in the web crawler handler that allows unauthenticated attackers to fetch arbitrary URLs by supplying ca |
| CVE-2026-86174 | Deferred | 未確認 | CWE-639 | Plane through 1.4.2 fails to validate that issues belong to the deploy board's project in the public comment endpoint. Authenticated attackers can post comments to arbitrary issues |
| CVE-2026-86175 | Awaiting Analysis | 未確認 | CWE-522 | NetBox through 4.7.0 fails to redact sensitive data source backend credentials in REST and GraphQL API responses. Authenticated users with only view permission can retrieve plainte |
| CVE-2026-86176 | Awaiting Analysis | 未確認 | CWE-639 | NetBox through 4.7.0 fails to properly scope user-private records in REST and GraphQL API endpoints for Notifications, Subscriptions, and Bookmarks. Authenticated users with view p |
| CVE-2026-86177 | Deferred | 未確認 | CWE-862 | Pterodactyl Panel before 1.14.1 fails to validate action-specific permissions in scheduled task creation, allowing subusers with only schedule.update permission to execute arbitrar |
| CVE-2026-86178 | Deferred | 未確認 | CWE-862 | Pixelfed through 0.12.9 fails to validate follower status in StoryComposeController react and comment endpoints, allowing authenticated users to access follower-only stories. Attac |
| CVE-2026-86179 | Deferred | 未確認 | CWE-200, CWE-284 | A flaw has been found in code-projects Daily Expense Manager 1.0. Affected is an unknown function of the file /Daily-Expense-Manager/exp_ak.sql of the component Database Backup Han |
| CVE-2026-86180 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in code-projects Task Management System In PHP 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php of the componen |
| CVE-2026-86181 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in code-projects Task Management System 1.0. Affected by this issue is some unknown functionality of the file /user/UpdateUserProfile.php of the component |
| CVE-2026-86182 | Deferred | 未確認 | CWE-352, CWE-862 | A vulnerability was determined in diem-project diem up to 5.1.3. This affects the function executeCommand of the file dmAdminPlugin/modules/dmConsole/actions/actions.class.php of t |
| CVE-2026-86183 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was identified in diem-project diem up to 5.1.3. This vulnerability affects unknown code of the file dmFrontPlugin/modules/dmWidget/lib/BasedmWidgetActions.class.ph |
| CVE-2026-86184 | Deferred | 未確認 | CWE-306 | Lara Dashboard before 1.3.0 contains an authentication bypass vulnerability in the screenshot-login route that allows unauthenticated attackers to authenticate as any user by email |
| CVE-2026-86185 | Deferred | 未確認 | CWE-295 | Bilibili Desktop through 1.18.0 disables TLS certificate verification process-wide and executes unsigned remote JavaScript configuration without integrity checks. An attacker in an |
| CVE-2026-86186 | Deferred | 未確認 | CWE-307 | AVideo API fails to enforce rate limits when clients send a bot User-Agent header, allowing attackers to bypass all eight protected operations including login brute-force protectio |
| CVE-2026-86187 | Deferred | 未確認 | CWE-330 | WWBN AVideo generates passwords for external-login accounts using rand() instead of a cryptographic generator, producing only 31-bit integers. Attackers with access to password has |
| CVE-2026-86188 | Deferred | 未確認 | CWE-79 | AVideo with YPTSocket plugin enabled contains a cross-site scripting vulnerability allowing unauthenticated attackers to execute arbitrary JavaScript in other users' browsers via t |
| CVE-2026-86189 | Deferred | 未確認 | CWE-73 | WWBN AVideo contains a path traversal vulnerability in notify.ffmpeg.json.php that allows unauthenticated attackers to write files to arbitrary locations by supplying a caller-chos |
| CVE-2026-86190 | Deferred | 未確認 | CWE-200 | WWBN AVideo contains a broken access control vulnerability in videoViewsInfo endpoints that returns complete user records including password hashes, recovery tokens, and live sessi |
| CVE-2026-86191 | Deferred | 未確認 | CWE-639 | SiYuan versions before v3.8.2 contain an information disclosure vulnerability in the getAttributeViewKeysByID endpoint that allows publish readers to enumerate private attribute vi |
| CVE-2026-86192 | Deferred | 未確認 | CWE-639 | SiYuan versions before v3.8.2 fail to properly filter private attribute-view cell values in the getAttributeViewKeys endpoint. Publish readers can retrieve hidden KeyValues payload |
| CVE-2026-86193 | Deferred | 未確認 | CWE-863 | grav-plugin-api before 1.0.20 fails to validate group-inherited super permissions in user-management guards, allowing non-super user managers to modify super-admin accounts. Attack |
| CVE-2026-86194 | Deferred | 未確認 | CWE-862 | Grav Form Plugin before 9.1.22 fails to verify page authorization when resolving forms by name across pages, allowing anonymous visitors to execute form actions defined on login-re |
| CVE-2026-86195 | Deferred | 未確認 | CWE-269 | grav-plugin-api versions before 1.0.20 contain a privilege escalation vulnerability in the InvitationsController where the stripSuperFlags() method only removes nested super flags |
| CVE-2026-86196 | Deferred | 未確認 | CWE-290 | Grav API plugin versions before 1.0.20 build password reset links from the untrusted Host header in the forgot-password endpoint, allowing unauthenticated attackers to redirect res |
| CVE-2026-86197 | Deferred | 未確認 | CWE-79 | Grav before 2.0.20 contains a cross-site scripting vulnerability in the Twig sandbox policy that allowlists addJs and addCss methods on Grav\Common\Assets without proper output esc |
| CVE-2026-86198 | Deferred | 未確認 | CWE-837 | PocketMine-MP versions before 5.44.2 fail to properly validate multiple ResourcePackClientResponsePacket packets with STATUS_COMPLETED status during resource pack handling. Malicio |
| CVE-2026-86199 | Deferred | 未確認 | CWE-184 | PocketMine-MP versions before 5.43.1 fail to properly validate the Certificate field during offline login authentication. Unauthenticated players can trigger an uninitialized prope |
| CVE-2026-86200 | Deferred | 未確認 | CWE-779 | PocketMine-MP versions before 5.42.1 contain a denial of service vulnerability in the LoginPacket handler that allows remote attackers to flood warning messages by injecting numero |
| CVE-2026-86201 | Deferred | 未確認 | CWE-400 | PocketMine-MP before 5.41.1 contains a denial of service vulnerability in LoginPacket processing where large or complex structures in unknown clientData JWT properties cause excess |
| CVE-2026-86202 | Deferred | 未確認 | CWE-406 | PocketMine-MP versions before 5.39.2 contain a network amplification vulnerability in ActorEventPacket handling that allows clients to trigger consuming animations for all visible |
| CVE-2026-86203 | Deferred | 未確認 | CWE-664 | PocketMine-MP versions before 5.39.2 fail to validate entity despawn state when processing attack packets from clients. Attackers can exploit a race condition by attacking a discon |
| CVE-2026-86204 | Deferred | 未確認 | CWE-400 | PocketMine-MP versions before 5.39.2 fail to limit JSON payload size in ModalFormResponsePacket handling, allowing authenticated players to cause denial of service. Attackers can s |
| CVE-2026-86205 | Awaiting Analysis | 未確認 | CWE-601 | h3 versions before 2.0.1-rc.18 contain an open redirect vulnerability in the redirectBack() utility that fails to sanitize protocol-relative paths in the Referer header pathname. A |
| CVE-2026-86206 | Awaiting Analysis | 未確認 | CWE-791 | A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4 |
| CVE-2026-86207 | Awaiting Analysis | 未確認 | CWE-305 | An authentication bypass in N-central < 2026.3 HF 3 leads to authentication bypass in internal only APIs |
| CVE-2026-86208 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This impacts an unknown function of the file /delete_teacher.php. The manipulation of t |
| CVE-2026-86209 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /delete_user.php. This manipulation of the argum |
| CVE-2026-86210 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /delete_u |
| CVE-2026-86211 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in rabindralamsal inventory-management-system 1.0.0. This affects an unknown part of the file index.php of the component Login. Executing a manipulation of th |
| CVE-2026-86212 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability has been found in Open5GS 2.7.7/2.8.0. This vulnerability affects unknown code of the component AMF/MME. The manipulation leads to improper authorization. The attac |
| CVE-2026-86213 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in Mstfakts College-Management-System. This issue affects the function mysqli_query of the file Front-end/university.php of the component Search Handler. |
| CVE-2026-86214 | Deferred | 未確認 | CWE-287 | A vulnerability was determined in Mstfakts College-Management-System. Impacted is an unknown function of the file Front-end/login.php. This manipulation of the argument email cause |
| CVE-2026-86215 | Deferred | 未確認 | CWE-613 | A vulnerability was identified in Mstfakts College-Management-System. The affected element is an unknown function of the file Front-end/server.php of the component Logout Handler. |
| CVE-2026-86216 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in code-projects Hotel and Tourism Reservation in PHP 1.0. This impacts an unknown function of the file /ht/details.php. The manipulation |
| CVE-2026-86217 | Deferred | 未確認 | CWE-200, CWE-284 | A vulnerability was detected in code-projects Hotel and Tourism Reservation in PHP 1.0. Affected is an unknown function of the file /ht/hotel_db%20(1).sql of the component Database |
| CVE-2026-86218 | Analyzed | 掲載 | CWE-96 | N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14. |
| CVE-2026-86219 | Deferred | 未確認 | CWE-294 | Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_step. server_start generates a fresh nonce a |
| CVE-2026-86220 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. The affected element is the function mysqli_query of the file /admin/modal_add_course.php. The |
| CVE-2026-86221 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is the function mysqli_query of the file /admin/modal_add_course1.php. This mani |
| CVE-2026-86222 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. This affects the function mysqli_query of the file /admin/modal_add_course2.php. Such manipu |
| CVE-2026-86223 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This impacts the function mysqli_query of the file /admin/modal_add_coursea.php. Performing a man |
| CVE-2026-86224 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected is the function mysqli_query of the file /admin/modal_add_product.php. Executing a |
| CVE-2026-86225 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is the function mysqli_query of the file /admin/modal_add_roo |
| CVE-2026-86226 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in Projectwolds Online Attendance System 1.0. Affected by this issue is some unknown functionality of the file profile.php. The manipulation of |
| CVE-2026-86227 | Deferred | 未確認 | CWE-119, CWE-125 | A weakness has been identified in valkey-io valkey up to 9.0.5/9.1.1. This affects the function kvstoreGetHashtable of the file src/kvstore.c. This manipulation of the argument did |
| CVE-2026-86228 | Deferred | 未確認 | CWE-266, CWE-284 | A security vulnerability has been detected in JeecgBoot up to 3.9.3. This vulnerability affects the function exportXls of the file jeecg-boot/jeecg-boot-module/jeecg-boot-module-ai |
| CVE-2026-8623 | Deferred | 未確認 | CWE-79 | The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_content (class attribute of .dv |
| CVE-2026-86231 | Deferred | 未確認 | CWE-298, CWE-299 | A security flaw has been discovered in mwiede jsch up to 2.28.5. Affected is the function getRevokedKeys of the file src/main/java/com/jcraft/jsch/KnownHosts.java. Performing a man |
| CVE-2026-86232 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/sup_del.php?type=suppli |
| CVE-2026-86233 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file /pages/us_del.php?type=u |
| CVE-2026-86234 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/cust_transac.php?action=add. The manipulation of the ar |
| CVE-2026-86235 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in itsourcecode Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/pos_transac.php?action=add. This manipulation of th |
| CVE-2026-86236 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/pro_transac.php?action=add. Such manipu |
| CVE-2026-86237 | Deferred | 未確認 | CWE-918 | A vulnerability was found in openagents-org openagents up to 0.8.19/0.9.3.post20. Impacted is the function test_default_model of the file sdk/src/openagents/sdk/transports/http.py. |
| CVE-2026-86238 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in projectworlds Online Examination System 1.0. The affected element is an unknown function of the file feedback.php of the component Feedback Form. |
| CVE-2026-86239 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was identified in liufee FeehiCMS up to 2.1.1. The impacted element is the function UeditorAction::init of the file backend/widgets/ueditor/UeditorAction.php of the |
| CVE-2026-86240 | Deferred | 未確認 | CWE-918 | A security flaw has been discovered in liufee FeehiCMS up to 2.1.1. This affects the function catchImage of the file backend/widgets/ueditor/Uploader.php of the component UEditor. |
| CVE-2026-86241 | Deferred | 未確認 | CWE-320, CWE-321 | A weakness has been identified in liufee FeehiCMS up to 2.1.1. This impacts an unknown function of the file environments/prod/backend/config/main-local.php of the component Cookie |
| CVE-2026-86242 | Awaiting Analysis | 未確認 | CWE-284, CWE-306, CWE-94 | Bifrost HTTP transport before 2.0.0 accepts an enabled custom plugin whose path is an HTTP URL through unauthenticated POST /api/plugins when management authentication is disabled |
| CVE-2026-86243 | Analyzed | 未確認 | CWE-126 | Buffer over-read vulnerability in Apache Tomcat Native during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash. This issue affects Apache Tomcat Nativ |
| CVE-2026-86244 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in FastAdmin up to 1.2.0.20210401_beta. Affected is the function register/login of the file application/index/controller/User.php of the |
| CVE-2026-86245 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/sup_transac.php. Performi |
| CVE-2026-86246 | Analyzed | 未確認 | CWE-1188 | Initialization of a resource with an insecure default vulnerability in Apache Tomcat Native enabled insecure options by default including ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_M |
| CVE-2026-86247 | Analyzed | 未確認 | CWE-366 | Race condition within a thread vulnerability in Apache Tomcat Native allowed client certificate verification requirements to be down-graded for some configurations. This issue a |
| CVE-2026-86248 | Awaiting Analysis | 未確認 | CWE-287 | CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0- |
| CVE-2026-8625 | Deferred | 未確認 | CWE-79 | The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_content (Custom HTML block inne |
| CVE-2026-86250 | Awaiting Analysis | 未確認 | CWE-400 | h3 versions before 2.0.1-rc.18 fail to validate the chunk count parsed from user-controlled cookie values in setChunkedCookie() and deleteChunkedCookie() functions. Attackers can s |
| CVE-2026-86251 | Awaiting Analysis | 未確認 | CWE-22 | h3 versions before 1.15.9 contain a path traversal vulnerability in the serveStatic utility. A double-decoding flaw allows a request path containing double-encoded dot sequences (e |
| CVE-2026-86252 | Awaiting Analysis | 未確認 | CWE-74 | h3 versions before 1.15.9 fail to sanitize carriage return characters in EventStream data and comment fields, allowing attackers to inject arbitrary SSE events by including unsanit |
| CVE-2026-86253 | Awaiting Analysis | 未確認 | CWE-22 | h3 (npm package) versions <= 2.0.1-rc.14 contain a path traversal vulnerability in serveStatic(). On Node.js deployments, event.url.pathname is not normalized, so percent-encoded d |
| CVE-2026-86254 | Deferred | 未確認 | CWE-862 | wger versions through master contain an incomplete authorization bypass in wger/core/views/user.py where three views retain the original gym-scope check using raw integer compariso |
| CVE-2026-86255 | Deferred | 未確認 | CWE-400 | wger before 2.5 fails to validate the maximum duration of routine date ranges, allowing authenticated users to create routines spanning arbitrarily long periods. Attackers can trig |
| CVE-2026-86256 | Deferred | 未確認 | CWE-601 | wger before 2.6 (affected versions <= 2.5.0) contains an open redirect vulnerability in the trainer_login view (wger/core/views/user.py). After a trainer enters impersonation mode, |
| CVE-2026-86257 | Deferred | 未確認 | CWE-1236 | wger before 2.6 fails to sanitize first_name and last_name fields in the gym member TSV export endpoint, allowing any gym member to inject spreadsheet formulas. Attackers can injec |
| CVE-2026-86258 | Awaiting Analysis | 未確認 | CWE-22 | nbviewer through 1.0.1 contains a path traversal vulnerability in LocalFileHandler.can_show() that uses string-prefix comparison instead of proper path validation. Attackers can re |
| CVE-2026-86259 | Deferred | 未確認 | CWE-306, CWE-918 | OpenMAIC before 1.0.1 skips server-side request forgery validation in non-production builds, allowing unauthenticated attackers to reach cloud instance metadata services. Attackers |
| CVE-2026-86260 | Deferred | 未確認 | CWE-620, CWE-640 | A security flaw has been discovered in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. The affected element is the function modifyPassWord of the file ssm_pro/s |
| CVE-2026-86261 | Deferred | 未確認 | CWE-285, CWE-639 | A weakness has been identified in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. The impacted element is an unknown function of the file ssm_pro/src/main/java/ |
| CVE-2026-86262 | Deferred | 未確認 | CWE-285, CWE-639 | A security vulnerability has been detected in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. This affects the function updateOrderSta1/updateOrderdiseaseInfo o |
| CVE-2026-86263 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was detected in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. This impacts the function orderRecordsService.cancelOrder of the file ssm_pro/sr |
| CVE-2026-86264 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in sfturing ssm_pro up to 627f426331da8086ce8fff2017d65b1ddef384f8. Affected is an unknown function of the file ssm_pro/src/main/java/cn/sfturing/web/OrderCon |
| CVE-2026-86265 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/us_transac.php. Such ma |
| CVE-2026-86267 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in itsourcecode Information System Society Membership System 1.0. This issue affects some unknown processing of the file /society/check_s |
| CVE-2026-86268 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in itsourcecode School Management System 1.0. Impacted is an unknown function of the file User_Login.php. The manipulation of the argument email result |
| CVE-2026-86269 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/emp_edit1.php. This manipulation of the argumen |
| CVE-2026-86270 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/settings_edit.php. Such manipulation o |
| CVE-2026-86271 | Deferred | 未確認 | CWE-862, CWE-863 | A vulnerability was found in FluentCMS up to 0.0.5. This affects the function GetAccessible of the file src/Backend/FluentCMS.Services/Permissions/PermissionManager.cs. Performing |
| CVE-2026-86272 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was determined in Beijing Meite Software Technology U+Smart Enjoyment WebSite 18.6001.1096.1000. This impacts an unknown function of the file /Report/Upload/UploadF |
| CVE-2026-86273 | Deferred | 未確認 | CWE-918 | A weakness has been identified in projeto-siga siga up to 11.1.1. Affected by this issue is the function DownloadExterno.getUrl of the file sigaex/src/main/java/br/gov/jfrj/siga/vr |
| CVE-2026-86274 | Deferred | 未確認 | CWE-862, CWE-863 | A security vulnerability has been detected in projeto-siga siga up to 11.0.2.10/11.0.2.13/11.1.1. This affects the function ExAutenticacaoController.autenticar of the file sigaex/s |
| CVE-2026-86275 | Deferred | 未確認 | CWE-266, CWE-269 | A vulnerability was detected in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This vulnerability affects the function register of the file auth.php. |
| CVE-2026-86276 | Deferred | 未確認 | CWE-259, CWE-798 | A flaw has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This issue affects some unknown processing of the file db.php. Executing a ma |
| CVE-2026-86277 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. Impacted is an unknown function of the file delete_exam.php. The man |
| CVE-2026-86278 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The affected element is an unknown function of the file manage_subjects.p |
| CVE-2026-86279 | Deferred | 未確認 | CWE-384 | A vulnerability was determined in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The impacted element is an unknown function of the file auth_process |
| CVE-2026-86280 | Deferred | 未確認 | CWE-310, CWE-312 | A vulnerability was identified in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This affects an unknown function of the file cict_portal.sql. Such m |
| CVE-2026-86281 | Deferred | 未確認 | CWE-352, CWE-862 | A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This impacts an unknown function. Performing a manipulation res |
| CVE-2026-86282 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. Affected is an unknown function of the file travel/src/ma |
| CVE-2026-86283 | Awaiting Analysis | 未確認 | CWE-285, CWE-862 | MISP's UiBeta theme collection view (app/View/Themed/UiBeta/Collections/view.ctp) performed a secondary query of member events by UUID without applying the caller's access control |
| CVE-2026-86284 | Deferred | 未確認 | CWE-200, CWE-284 | A security vulnerability has been detected in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. Affected by this vulnerability is the functio |
| CVE-2026-86285 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability was detected in BookStack up to 26.05.2. Affected by this issue is the function AttachmentController::getUpdateForm of the file app/Uploads/Controllers/AttachmentCo |
| CVE-2026-86287 | Deferred | 未確認 | CWE-1287 | Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths. Non-numeric and non-ASCII prefix lengths are accepted and treated as 0. Integers over 31 bits are silen |
| CVE-2026-86288 | Deferred | 未確認 | CWE-119, CWE-125 | A vulnerability has been found in ModelCloud GPTQModel up to 7.2.0. This vulnerability affects unknown code of the file gptqmodel/nn_modules/qlinear/tritonv2.py of the component Tr |
| CVE-2026-86289 | Deferred | 未確認 | CWE-189, CWE-190 | A vulnerability was found in Ollama up to 0.31.1. This issue affects the function readGGUFV1String of the file fs/ggml/gguf.go of the component GGUF Decoder. Performing a manipulat |
| CVE-2026-86290 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in SourceCodester Online Voting System 1.0. This affects an unknown function of the file /voting/ajax.php?action=save_category. This manipulation of |
| CVE-2026-86291 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/us_edit1.php. Such manipulation of th |
| CVE-2026-86292 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was detected in SourceCodester Simple Traffic Offense System 1.0. Affected is an unknown function of the file saveuser.php of the component User Creation. Performin |
| CVE-2026-86293 | Deferred | 未確認 | CWE-287, CWE-306 | A flaw has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this vulnerability is an unknown functionality of the file delete-user.php of the component D |
| CVE-2026-86294 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this issue is some unknown functionality of the file save-settings.php of the compon |
| CVE-2026-86295 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was found in D-Link DIR-895L A1_102b07. This affects the function sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. The manipulation of the argum |
| CVE-2026-86296 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was determined in D-Link DIR-822A A_101. This vulnerability affects the function strcpy of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulati |
| CVE-2026-86297 | Deferred | 未確認 | CWE-189, CWE-193 | A vulnerability was identified in D-Link DIR-605 B1v202WWB03. This issue affects the function tunnel_set_params of the file progs.gpl/pppd.alpha/l2tp/tunnel.c of the component L2TP |
| CVE-2026-86298 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /delete_subject.php. Performing a manipulat |
| CVE-2026-86299 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was detected in Linksys RE7000 2.0.15. This affects the function platform_event_pingTest of the file /cgi-bin/json.cgi?PingTest of the component PingTest Handler. T |
| CVE-2026-86300 | Deferred | 未確認 | CWE-287 | A flaw has been found in Tenda AC9 15.03.05.14. This impacts the function R7WebsSecurityHandler of the component Web Management. This manipulation causes improper authentication. T |
| CVE-2026-86301 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in code-projects Hospital Information System 1.0. Affected is an unknown function of the file /HIS/src/patients/editPatient.php of the component Pati |
| CVE-2026-86302 | Deferred | 未確認 | CWE-200, CWE-284 | A vulnerability was found in code-projects Hospital Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /HIS/his.sql of the component SQL |
| CVE-2026-86303 | Deferred | 未確認 | CWE-119, CWE-125 | A vulnerability was determined in 92181 markdown up to 058cab0cb7fb245a0ccc6b8446963ff8d573558f. Affected by this issue is the function lds of the file md.c. Executing a manipulati |
| CVE-2026-86304 | Deferred | 未確認 | CWE-347 | MojoX::Authentication versions before 0.006 for Perl allow SAML authentication bypass because parse_assertion builds Net::SAML2::Binding::POST without a trust anchor. parse_assert |
| CVE-2026-86305 | Deferred | 未確認 | CWE-284, CWE-434 | A security flaw has been discovered in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this issue is the function Uploa |
| CVE-2026-86306 | Deferred | 未確認 | CWE-287 | A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This affects an unknown part of the file App/Home |
| CVE-2026-86307 | Deferred | 未確認 | CWE-352, CWE-862 | A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This vulnerability affects unknown co |
| CVE-2026-86308 | Deferred | 未確認 | CWE-200, CWE-284 | A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This issue affects some unknown processing of the f |
| CVE-2026-86309 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/pro_searchfrm.php. This manipulation of the argument ID cau |
| CVE-2026-86310 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/cust_edit1.php. Such manipulation of t |
| CVE-2026-86311 | Deferred | 未確認 | CWE-79 | The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Shortcode Attributes in all versions up to, and |
| CVE-2026-86313 | Deferred | 未確認 | CWE-787 | Out-of-bounds write vulnerability in Samsung Opensource Walrus allows Overflow Buffers. This issue affects Walrus: af80e665ea49d9003695a66502f841ed1d8397e7. |
| CVE-2026-86314 | Deferred | 未確認 | CWE-190 | Integer overflow in the source-bounds check in Memory::init() (src/runtime/Memory.cpp) in Samsung walrus on all platforms allows a remote attacker to cause an out-of-bounds heap re |
| CVE-2026-86315 | Deferred | 未確認 | CWE-197 | An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to corrupt native memor |
| CVE-2026-86317 | Deferred | 未確認 | CWE-617 | A vulnerability was detected in ggml-org llama.cpp up to 0.4.0. This impacts the function rpc_server::deserialize_tensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component |
| CVE-2026-86318 | Deferred | 未確認 | CWE-119, CWE-121 | A flaw has been found in java-json-tools json-patch up to 1.13. Affected is the function JsonMergePatch.fromJson of the file JsonMergePatchDeserializer.java. Executing a manipulati |
| CVE-2026-86319 | Deferred | 未確認 | CWE-400, CWE-404 | A vulnerability has been found in java-json-tools json-patch up to 1.13. Affected by this vulnerability is the function JsonPatch.apply of the file src/main/java/com/github/fge/jso |
| CVE-2026-86320 | Awaiting Analysis | 未確認 | CWE-94 | A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a |
| CVE-2026-86321 | Deferred | 未確認 | CWE-918 | A vulnerability was found in java-json-tools jackson-coreutils 2.0. Affected by this issue is the function JsonLoader.fromURL of the file src/main/java/com/github/fge/jackson/JsonL |
| CVE-2026-86330 | Awaiting Analysis | 未確認 | CWE-78 | An OS command injection flaw was found in the set_hostname_internal function of NooBaa's cluster_internal_api. This component is responsible for managing the Multi-Cloud Object Gat |
| CVE-2026-86332 | Awaiting Analysis | 未確認 | CWE-862 | A flaw was found in odh-dashboard in Red Hat OpenShift AI. The backend-for-frontend route GET /api/nim-serving/:nimResource reads Kubernetes Secrets using the dashboard service acc |
| CVE-2026-86334 | Deferred | 未確認 | CWE-22 | Path traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms allows a remote malicious |
| CVE-2026-86335 | Deferred | 未確認 | CWE-862 | Missing Authorization in imageDownload in Canonical LXD before 5.0.10, 5.21.8, and 6.10 on Linux allows a project-restricted client to access private images from other projects via |
| CVE-2026-86338 | Awaiting Analysis | 未確認 | CWE-1220 | Ash field_policies are documented to protect against filter-based information disclosure: when a field the actor may not see is referenced in a filter, it is replaced with an expre |
| CVE-2026-86341 | Analyzed | 未確認 | CWE-1280 | GitLab has remediated an issue in GitLab EE affecting all versions from 17.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an authentica |
| CVE-2026-86342 | Analyzed | 未確認 | CWE-862 | Affected versions of MISP contain improper authorization checks in the freetext feed preview functionality. The preview performed correlation lookups against attributes from events |
| CVE-2026-86347 | Analyzed | 未確認 | CWE-400, CWE-862 | Affected versions of MISP allow any authenticated user to access TemplatesController::uploadFile() because the ACL entry for templates/uploadFile used the wildcard *. This bypasses |
| CVE-2026-86348 | Analyzed | 未確認 | CWE-704 | Mattermost versions <=11.9 11.0.9 11.4.8 11.7.7 10.22.11.0 fail to recover from handler panics, which allows an authenticated user to crash the plugin via a post-action request wit |
| CVE-2026-86349 | Analyzed | 未確認 | CWE-407 | Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.8, 10.11.x <= 10.11.22 fail to limit the nesting depth in the server-side Markdown parser which allows an aut |
| CVE-2026-86350 | Awaiting Analysis | 未確認 | CWE-444 | Inconsistent interpretation of HTTP/2 requests ('HTTP Request/Response smuggling') vulnerability in Apache Tomcat caused by a regression in fix for CVE-2026-41293 can trigger reque |
| CVE-2026-86351 | Analyzed | 未確認 | CWE-20, CWE-601 | Affected versions of MISP validate the user-configurable homepage by checking only whether the supplied path begins with /. That check is insufficient because protocol-relative URL |
| CVE-2026-86358 | Analyzed | 未確認 | CWE-121 | Dell Update Package Framework, versions prior to 26.07.03, contains a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with adjacent network access could pote |
| CVE-2026-86359 | Awaiting Analysis | 未確認 | CWE-276 | Dell Repository Manager, versions prior to 3.5.2, contains an Incorrect Default Permissions vulnerability. A low privileged attacker with remote access could potentially exploit th |
| CVE-2026-86404 | Awaiting Analysis | 未確認 | CWE-502 | EAP's Artemis deserialization configuration permits deserialization by default. ObjectMessage.getObject() uses ObjectInputStreamWithClassLoader, which implements allow-list/block-l |
| CVE-2026-86406 | Deferred | 未確認 | CWE-269 | The User Registration & Membership WordPress plugin before 5.2.8 does not check the capability of the user making a membership purchase, and does not validate the payment method o |
| CVE-2026-86407 | Deferred | 未確認 | CWE-200 | The User Registration & Membership WordPress plugin before 5.2.8 does not verify that the visitor requesting its membership confirmation page owns the account named in the request |
| CVE-2026-86408 | Analyzed | 未確認 | CWE-639, CWE-862 | Affected versions of MISP do not enforce parent-event visibility when serving cryptographic keys through CryptographicKeysController::view(). The vulnerable handler queried Crypt |
| CVE-2026-86416 | Deferred | 未確認 | CWE-862 | ILIAS versions before 9.23, 10.11, and 11.4 contain an authorization bypass vulnerability in ilObjGroupGUI where saveMapSettingsObject() and updateGroupTypeObject() perform state-c |
| CVE-2026-86417 | Analyzed | 未確認 | CWE-200, CWE-862 | Affected versions of MISP inconsistently enforced email-address visibility in DashboardsController::listTemplates(). The query always fetched User.email, while redaction happened |
| CVE-2026-86418 | Modified | 未確認 | CWE-200, CWE-862 | Affected versions of MISP expose organisation metadata through the dashboard organisation picker without applying the same visibility restrictions enforced by the normal organisati |
| CVE-2026-86419 | Analyzed | 未確認 | CWE-200, CWE-918 | Affected versions of MISP contain insufficient validation of server-side outbound HTTP destinations in feed retrieval and TAXII discovery functionality. In feed processing, redir |
| CVE-2026-86420 | Analyzed | 未確認 | CWE-400 | ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation inside OpenPixelCache fails. Repeated triggering of such failures can exhaust |
| CVE-2026-86421 | Analyzed | 未確認 | CWE-400 | ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder. A crafted MSL image triggers memory allocation without proper deallocation, allowing an a |
| CVE-2026-86422 | Analyzed | 未確認 | CWE-59 | ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on Windows that allows attackers to bypass read or write restrictions by e |
| CVE-2026-86423 | Analyzed | 未確認 | CWE-416 | ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the GetList method of PerlMagick. A crafted call to the GetList method can tr |
| CVE-2026-86424 | Analyzed | 未確認 | CWE-59 | ImageMagick before 7.1.2-30 and 6.9.13-55 contains a time-of-check-time-of-use (TOCTOU) vulnerability in the video decoder that allows attackers to bypass path policy write restric |
| CVE-2026-86425 | Analyzed | 未確認 | CWE-416 | ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the Layer method of PerlMagick. An attacker who supplies a crafted list of im |
| CVE-2026-86426 | Analyzed | 未確認 | CWE-287 | LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to access protected endpoints by sending numeric values |
| CVE-2026-86427 | Analyzed | 未確認 | CWE-77 | LibreNMS before 26.8.0 contains an argument injection vulnerability in the graph_title parameter that allows authenticated attackers to inject arbitrary rrdtool arguments by breaki |
| CVE-2026-86428 | Analyzed | 未確認 | CWE-407 | commonmark versions from 1.5.0 before 2.10.0 contain a denial of service vulnerability in the AttributesExtension when processing distinctly-named attributes. Attackers can submit |
| CVE-2026-86429 | Analyzed | 未確認 | CWE-407 | The league/commonmark (thephpleague/commonmark) library in versions >= 1.5.0 and < 2.9.1 contains quadratic parsing complexity in its SmartPunctExtension and AttributesExtension. W |
| CVE-2026-86430 | Analyzed | 未確認 | CWE-407 | league/commonmark versions before 2.9.1 contain multiple denial of service vulnerabilities in fenced code block detection, reference link label lookup, and emphasis delimiter proce |
| CVE-2026-86431 | Analyzed | 未確認 | CWE-79 | league/commonmark (thephpleague/commonmark) versions >= 2.7.0 and < 2.9.1 contain a cross-site scripting vulnerability in the AttributesExtension. Prefixing an attribute name with |
| CVE-2026-86432 | Awaiting Analysis | 未確認 | CWE-405 | commonmark versions from 2.0.0 before 2.8.4 contain a denial of service vulnerability in XmlRenderer that emits depth-proportional indentation for every XML tag. Attackers can prov |
| CVE-2026-86433 | Awaiting Analysis | 未確認 | CWE-407 | commonmark versions from 1.5.0 before 2.8.4 contain a denial of service vulnerability in the Attributes extension where AttributesListener::findTargetAndDirection() performs quadra |
| CVE-2026-86434 | Awaiting Analysis | 未確認 | CWE-407 | league/commonmark versions >= 2.0.0 and < 2.8.4 (patched in 2.9.0) contain a denial of service vulnerability in UniqueSlugNormalizer::normalize(), which restarts its numeric-suffix |
| CVE-2026-86435 | Awaiting Analysis | 未確認 | CWE-407 | commonmark versions from 1.5.0 before 2.8.4 contain a denial of service vulnerability in the Footnote extension that fails to deduplicate footnote definitions. Attackers can craft |
| CVE-2026-86436 | Deferred | 未確認 | CWE-862 | Lara Dashboard before 1.3.2 fails to authorize access to the post-builder image and video upload endpoints, allowing authenticated accounts without content permissions to upload fi |
| CVE-2026-86437 | Deferred | 未確認 | CWE-863 | Lara Dashboard before 1.3.2 authorizes the POST /admin/settings/core-upgrades/upload endpoint with only the settings.edit permission, allowing non-Superadmin administrators to uplo |
| CVE-2026-86438 | Deferred | 未確認 | CWE-862 | Lara Dashboard before 1.3.2 fails to authorize the MarketplaceModuleBrowser installModule Livewire action, allowing non-Superadmin administrators to install modules. Attackers can |
| CVE-2026-86439 | Deferred | 未確認 | CWE-22 | knowns versions before 0.30.0 fail to validate filesystem paths in MCP tool arguments, allowing attackers to read, create, overwrite and delete files outside the project directory. |
| CVE-2026-86440 | Analyzed | 未確認 | CWE-20, CWE-79 | Affected versions of MISP insufficiently validate URLs used by dashboard widgets, particularly the Button widget. The widget's URL is stored configuration controlled by a user. T |
| CVE-2026-86441 | Analyzed | 未確認 | CWE-200, CWE-862 | Affected versions of MISP contain inconsistent authorization checks across dashboard widgets that display organisation information. Several organisation-related widgets did not h |
| CVE-2026-86443 | Deferred | 未確認 | CWE-312 | Cleartext storage of sensitive information in the DuoxMe application for Android, in versions prior to 4.3.4, allows an attacker with local access to the device to retrieve the cre |
| CVE-2026-86444 | Deferred | 未確認 | CWE-79 | The LearnPress WordPress plugin before 4.4.7 does not escape a user supplied value before using it in an HTML attribute on a public page, allowing unauthenticated attackers to exe |
| CVE-2026-86445 | Deferred | 未確認 | CWE-200 | The LearnPress WordPress plugin before 4.4.7 does not check the user's capabilities in one of its administrative template handlers, allowing unauthenticated attackers to retrieve |
| CVE-2026-86446 | Deferred | 未確認 | CWE-200 | The LearnPress WordPress plugin before 4.4.7 does not restrict the correctness flags it returns when a quiz answer is checked, allowing unauthenticated attackers to obtain the cor |
| CVE-2026-86447 | Deferred | 未確認 | CWE-200 | The LearnPress WordPress plugin before 4.4.7 does not check the user's capabilities in one of its administrative course tools, allowing unauthenticated attackers to list every enr |
| CVE-2026-86448 | Deferred | 未確認 | CWE-200 | The LearnPress WordPress plugin before 4.4.7 does not perform any authentication, capability or nonce check before serving a previously generated order export file, allowing unaut |
| CVE-2026-86449 | Deferred | 未確認 | CWE-200 | The LearnPress WordPress plugin before 4.4.7 does not check the user's capabilities before applying a user supplied post status filter in one of its REST routes, allowing unauthen |
| CVE-2026-86450 | Deferred | 未確認 | CWE-201 | Insertion of sensitive information into sent data vulnerability in Parla Auto Automotive Trading Limited Company DetaWix Mobile Web Portal allows Accessing Functionality Not Proper |
| CVE-2026-86451 | Analyzed | 未確認 | CWE-639, CWE-862 | Affected versions of MISP allow authenticated users to retrieve object-reference records by UUID through EventGraphTool::get_reference_data() without first checking whether the req |
| CVE-2026-86452 | Modified | 未確認 | CWE-400, CWE-770 | Affected versions of MISP permit unauthenticated or weakly constrained request paths to perform persistent work without adequate input bounds or rate limiting. The users/forgot p |
| CVE-2026-86460 | Deferred | 未確認 | CWE-89 | Cypher injection vulnerability in the Neo4j persistence layer when processing some FIQL search conditions. This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, from |
| CVE-2026-86462 | Analyzed | 未確認 | CWE-613 | Apache Airflow FAB provider: changing a user's password through the Admin user-edit PATCH endpoint does not invalidate that user's existing database-backed sessions. An attacker wh |
| CVE-2026-86464 | Deferred | 未確認 | CWE-1188, CWE-1392, CWE-200, CWE-306, CWE-798 | In the current development version of Eclipse aeriOS, for which no official release has yet been published, the Identity Manager (IdM) deployment included insecure default configur |
| CVE-2026-86465 | Modified | 未確認 | CWE-639 | Apache Airflow Akeyless provider: the Akeyless secrets backend's team-scope guard can be bypassed with a user-controlled key. In a multi-team deployment, a Dag author scoped to one |
| CVE-2026-86466 | Analyzed | 未確認 | CWE-346 | Apache Airflow FAB provider: the Authentik OAuth path in the FAB auth manager does not validate the issuer or audience claims of the id_token it accepts. An attacker holding a toke |
| CVE-2026-86469 | Awaiting Analysis | 未確認 | CWE-59 | A flaw was found in GLib2. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION and creating the .goutputstream-XXXXXX temporary file fails, the library unlinks the |
| CVE-2026-86472 | Awaiting Analysis | 未確認 | CWE-178 | fast-uri is a dependency-free RFC 3986 URI parser for Node.js, used by Fastify and ajv. In versions before 2.4.7, from 3.0.0 through 3.1.7, and from 4.0.0 through 4.1.4, fast-uri f |
| CVE-2026-86473 | Analyzed | 未確認 | CWE-613 | Apache Airflow: the Core API logout endpoint revokes only a session token presented as the _token cookie. When a client logs out presenting its credential as an Authorization beare |
| CVE-2026-86474 | Deferred | 未確認 | CWE-295 | The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the- |
| CVE-2026-86475 | Deferred | 未確認 | CWE-20 | The Appointment Hour Booking WordPress plugin before 1.5.95 does not check every appointment in a booking submission against the capacity configured for its own slot, allowing unau |
| CVE-2026-86477 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-86478 | Deferred | 未確認 | CWE-290 | In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthenticated account takeover via a self-asserted email address |
| CVE-2026-86479 | Deferred | 未確認 | CWE-862 | In JetBrains YouTrack before 2026.2.18788, 2026.1.14055, 2025.3.161254 missing authorisation allowed access to restricted REST API resources via IDOR |
| CVE-2026-86480 | Deferred | 未確認 | CWE-306 | In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser privileges |
| CVE-2026-86481 | Deferred | 未確認 | CWE-639 | In JetBrains YouTrack before 2026.2.18634 signed URL reuse allowed disclosure of restricted project icons |
| CVE-2026-86482 | Deferred | 未確認 | CWE-266 | In JetBrains YouTrack before 2026.2.18634, insufficient validation of role assignments allowed privilege escalation |
| CVE-2026-86483 | Deferred | 未確認 | CWE-79 | In JetBrains YouTrack before 2026.2.18634 stored XSS via a custom field on Agile board cards was possible |
| CVE-2026-86484 | Deferred | 未確認 | CWE-79 | In JetBrains YouTrack before 2026.2.18634 angularJS template injection in assignee names led to stored XSS |
| CVE-2026-86485 | Deferred | 未確認 | CWE-291 | In JetBrains YouTrack before 2026.2.18634 iP spoofing via HTTP headers allowed forged Bitbucket webhooks |
| CVE-2026-86486 | Deferred | 未確認 | CWE-306 | In JetBrains YouTrack before 2026.2.18634 the generic VCS webhook handler failed open when its secret was blank |
| CVE-2026-86487 | Deferred | 未確認 | CWE-863 | In JetBrains YouTrack before 2026.2.18634 a crafted WebSocket message allowed read-only whiteboard users to modify canvas content |
| CVE-2026-86488 | Deferred | 未確認 | CWE-639 | In JetBrains YouTrack before 2026.2.18634 iDOR via the watchRules and issueListConfig endpoints exposed private saved searches |
| CVE-2026-86489 | Deferred | 未確認 | CWE-639 | In JetBrains YouTrack before 2026.2.18634 an IDOR in the user profile API disclosed private issues and starred folders across organizations |
| CVE-2026-86490 | Deferred | 未確認 | CWE-863 | In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed overwriting of bundled apps via the app import endpoint |
| CVE-2026-86491 | Deferred | 未確認 | CWE-79 | In JetBrains YouTrack before 2026.2.18634 stored XSS was possible via project and organization icon uploads |
| CVE-2026-86492 | Deferred | 未確認 | CWE-488 | In JetBrains YouTrack before 2026.2.18634 a shared token cache allowed cross-tenant theft of GitHub App installation tokens |
| CVE-2026-86493 | Deferred | 未確認 | CWE-863 | In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed read-only users to create and modify whiteboard cards |
| CVE-2026-86494 | Deferred | 未確認 | CWE-862 | In JetBrains YouTrack before 2026.2.18634 cloning a whiteboard allowed unauthorized changes to links on inaccessible issues |
| CVE-2026-86495 | Deferred | 未確認 | CWE-862 | In JetBrains YouTrack before 2026.2.18687 missing permission checks allowed creating knowledge base articles in inaccessible projects |
| CVE-2026-86496 | Deferred | 未確認 | CWE-862 | In JetBrains YouTrack before 2026.2.18769 missing access control on Helpdesk authorized reporters exposed reporter email addresses |
| CVE-2026-86497 | Deferred | 未確認 | CWE-201 | In JetBrains YouTrack before 2026.2.18769 changing a mailbox host without re-authentication allowed a project administrator to exfiltrate stored mailbox credentials |
| CVE-2026-86498 | Deferred | 未確認 | CWE-863 | In JetBrains YouTrack before 2025.3.160480, 2026.1.14047 pUT requests on link sub-resources allowed modification linked entities without update permission |
| CVE-2026-86499 | Deferred | 未確認 | CWE-862 | In JetBrains YouTrack before 2026.1.14047 predefined search fields leaked all group names to any user, regardless of visibility permission |
| CVE-2026-86500 | Deferred | 未確認 | CWE-266 | In JetBrains YouTrack before 2026.1.14047 a missing escalation check let a user with project update permissions grant themselves Project Admin |
| CVE-2026-86501 | Awaiting Analysis | 未確認 | CWE-532 | In JetBrains IntelliJ IDEA before 2026.2.2 terminal command input could be written to idea.log |
| CVE-2026-86502 | Awaiting Analysis | 未確認 | CWE-306 | In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote Development hosts |
| CVE-2026-86503 | Awaiting Analysis | 未確認 | CWE-918 | In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via Kubernetes spec-source URL fetching |
| CVE-2026-86504 | Awaiting Analysis | 未確認 | CWE-829 | In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container allowed host-level code execution |
| CVE-2026-86505 | Awaiting Analysis | 未確認 | CWE-201 | In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to JetBrains Marketplace |
| CVE-2026-86506 | Awaiting Analysis | 未確認 | CWE-306 | In JetBrains GoLand before 2026.2.2.1 missing authentication on the GoLand profiler's injected pprof server exposed profiling data |
| CVE-2026-86507 | Deferred | 未確認 | CWE-79 | Improper neutralization of input in Apache Roller 6.1.5 allows an anonymous remote attacker to store a crafted comment-author URL that can execute script in the session of a weblog |
| CVE-2026-86509 | Deferred | 未確認 | CWE-119, CWE-121 | A flaw has been found in D-Link DIR-895L A1_102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation cause |
| CVE-2026-86510 | Deferred | 未確認 | CWE-119, CWE-787 | A vulnerability has been found in D-Link DIR-822A A_101. Affected is the function tunnel_set_params of the component L2TP Control Message Parser. Such manipulation leads to out-of- |
| CVE-2026-86511 | Deferred | 未確認 | CWE-400, CWE-404 | A vulnerability was found in java-json-tools jackson-coreutils 2.0. Affected by this vulnerability is the function BigDecimal.toPlainString of the file src/main/java/com/github/fge |
| CVE-2026-86512 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability was identified in java-json-tools json-patch up to 1.13. This affects the function CopyOperation.apply/MoveOperation.apply of the file src/main/java/com/github/fge/ |
| CVE-2026-86513 | Deferred | 未確認 | CWE-400, CWE-770 | A security flaw has been discovered in java-json-tools jackson-coreutils 2.0. This vulnerability affects the function TreePointer.tokensFromInput of the file src/main/java/com/gith |
| CVE-2026-86514 | Deferred | 未確認 | CWE-119, CWE-121 | A weakness has been identified in vgmstream up to r2117. This issue affects the function sscanf of the file src/meta/txth.c of the component txth-txtp. This manipulation causes sta |
| CVE-2026-86515 | Deferred | 未確認 | CWE-400, CWE-404 | A security vulnerability has been detected in vgmstream up to r2117. Impacted is the function add_entry of the file src/meta/txtp_parser.c of the component txtp. Such manipulation |
| CVE-2026-86516 | Deferred | 未確認 | CWE-266, CWE-269 | A vulnerability was detected in elenavanengelenmaslova mocknest-serverless 0.9.0. The affected element is an unknown function of the file deployment/aws/shared/github-oidc-role.yam |
| CVE-2026-86517 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in itsourcecode Sales and Inventory System 1.0. The impacted element is the function mysqli_query of the file /pages/us_searchfrm.php. Executing a manipulatio |
| CVE-2026-86518 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in code-projects Student Crud Operation 1.0. This affects an unknown function of the file /edit.php. The manipulation of the argument ID leads to sql |
| CVE-2026-86519 | Deferred | 未確認 | CWE-200, CWE-284 | A vulnerability was found in code-projects Student Crud Operation 1.0. This impacts an unknown function of the file /card_activation.sql of the component Backup File Handler. The m |
| CVE-2026-86520 | Deferred | 未確認 | CWE-798 | Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to th |
| CVE-2026-86522 | Deferred | 未確認 | CWE-117 | Improper Output Neutralization for Logs vulnerability in team-alembic AshAuthentication allows an unauthenticated attacker to forge application log entries by submitting a password |
| CVE-2026-86530 | Awaiting Analysis | 未確認 | CWE-78 | BUFFALO Wi-Fi products handle some web form input improperly to assemble command line strings internally. An administrative user may send a crafted HTTP request and execute an arbi |
| CVE-2026-86533 | Deferred | 未確認 | CWE-613 | Insufficient Session Expiration vulnerability in team-alembic AshAuthentication and AshAuthentication Phoenix allows a revoked session to remain fully authenticated. A resource co |
| CVE-2026-86538 | Deferred | 未確認 | CWE-22 | knowns versions before 0.30.0 contain a path traversal vulnerability in the POST /api/templates/preview endpoint that allows unauthenticated attackers to read arbitrary files. Atta |
| CVE-2026-86539 | Deferred | 未確認 | CWE-918 | knowns through 0.33.0 contains a server-side request forgery vulnerability in the POST /api/embedding-models/test endpoint that issues outbound requests to caller-supplied destinat |
| CVE-2026-86540 | Deferred | 未確認 | CWE-78 | knowns versions before 0.30.0 fail to validate the settings.lsp.languages binary field in project configuration files, allowing attackers to execute arbitrary binaries by crafting |
| CVE-2026-86541 | Deferred | 未確認 | CWE-22 | knowns versions before 0.30.0 contain a path traversal vulnerability in the handleCodeReplace() function that allows attackers to overwrite arbitrary files outside the project root |
| CVE-2026-86542 | Deferred | 未確認 | CWE-22 | knowns before 0.30.0 fails to validate import names in the import routes, allowing unauthenticated attackers to write files outside the imports directory. Attackers can supply trav |
| CVE-2026-86543 | Deferred | 未確認 | CWE-306 | knowns versions before 0.30.0 serve the management API without authentication on all network interfaces by default, with no password required on fresh installations. Attackers can |
| CVE-2026-86544 | Deferred | 未確認 | CWE-863 | knowns versions before 0.30.0 contain an authorization bypass vulnerability where mutating code actions are incorrectly classified as read-only operations. Attackers with read-rest |
| CVE-2026-86547 | Deferred | 未確認 | CWE-476 | mrubyc through 4.0.0 contains a null pointer dereference vulnerability in the op_enter() handler in src/vm.c when processing untrusted bytecode. Attackers can craft malicious .mrb |
| CVE-2026-86550 | Deferred | 未確認 | CWE-79 | NuBrowser lacks protocol whitelist validation for the S.browser_fallback_url field of intent://, allowing attackers to inject javascript: URLs via 302 redirects. This results in a |
| CVE-2026-86551 | Deferred | 未確認 | CWE-668 | The Z80Ultra (NX741J) product contains a vulnerability where non-privileged programs can retrieve the Wi-Fi MAC address by querying the read-only field factory_mac_address in the S |
| CVE-2026-86552 | Deferred | 未確認 | CWE-269 | SmartLife app dynamically generates brand‑new SmartLife application authentication parameters at runtime. With the acquired SmartLife application authentication credentials, an att |
| CVE-2026-86553 | Deferred | 未確認 | CWE-269 | SmartLife app dynamically generates fresh SmartLife application authentication parameters inside its runtime process. Using the acquired SmartLife application authentication parame |
| CVE-2026-86554 | Deferred | 未確認 | CWE-269 | SmartLife app dynamically generates brand‑new SmartLife application authentication parameters within its runtime process. With the obtained SmartLife application authentication par |
| CVE-2026-86555 | Deferred | 未確認 | CWE-798 | The ZTE SmartLife application has a hardcoded key. The key used to decrypt account server information is stored in plaintext in the code. Once the key is obtained, the server infor |
| CVE-2026-86556 | Deferred | 未確認 | CWE-269 | There is an information disclosure vulnerability in ZTE U30 Air. Due to improper permission control, attackers can exploit the vulnerability to obtain relevant information. |
| CVE-2026-86564 | Awaiting Analysis | 未確認 | CWE-125 | A flaw was found in DPDK lib/vhost. Missing length validation before reading command_data in the virtio-net control-queue handler can cause an out-of-bounds read and a host process |
| CVE-2026-86583 | Deferred | 未確認 | CWE-266 | The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.4.17 via the plugin's own export and re |
| CVE-2026-86585 | Deferred | 未確認 | CWE-347 | The lack of signature verification of firmware update packages in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker who controls the delivery of an |
| CVE-2026-86590 | Deferred | 未確認 | CWE-918 | In Eclipse Che versions 7.79.0 through 7.121.0, the dashboard backend's POST /dashboard/api/data/resolver endpoint passes a caller-supplied URL directly to an outbound HTTP GET req |
| CVE-2026-86591 | Deferred | 未確認 | CWE-862 | The Botiga Pro WordPress plugin before 1.6.5 does not perform any authorisation checks on one of its REST routes, allowing unauthenticated users to update arbitrary WordPress optio |
| CVE-2026-86595 | Deferred | 未確認 | CWE-89 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Iron Mountain Archiving Services Inc. EnVision allows SQL Injection. This iss |
| CVE-2026-86597 | Awaiting Analysis | 未確認 | CWE-532 | Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authentication tokens, query-result encryption keys, |
| CVE-2026-86600 | Awaiting Analysis | 未確認 | CWE-441, CWE-522 | In affected Snowflake drivers, WORKLOAD_IDENTITY authentication requests a cloud workload-identity token and attaches it to the login request without verifying that the configured |
| CVE-2026-86601 | Deferred | 未確認 | CWE-74 | The WP Recipe Maker WordPress plugin before 10.8.2 does not remove shortcodes from comment content before expanding it while building a page's structured metadata, allowing unauthe |
| CVE-2026-86602 | Deferred | 未確認 | CWE-200 | The WP Recipe Maker WordPress plugin before 10.8.2 does not perform any capability check in one of its AJAX actions, allowing any authenticated user, such as a subscriber, to read |
| CVE-2026-86603 | Deferred | 未確認 | CWE-200 | The WP Recipe Maker WordPress plugin before 10.8.2 does not have any authorisation check in one of its AJAX actions, allowing any authenticated user, such as a subscriber, to retri |
| CVE-2026-86604 | Deferred | 未確認 | CWE-74 | The GTranslate WordPress plugin before 5.0.1 does not remove shortcodes from the content of outgoing emails before expanding them which, in a non-default configuration, allows unau |
| CVE-2026-86608 | Deferred | 未確認 | CWE-400 | The WP Recipe Maker WordPress plugin before 10.8.2 does not have any authorisation check in one of its REST routes, nor does it bound what that route stores, allowing unauthenticat |
| CVE-2026-86609 | Deferred | 未確認 | CWE-79 | The Download Manager WordPress plugin before 7.5.6 does not sanitise and escape data submitted through its email-locked download subscription form before outputting it back in an a |
| CVE-2026-86612 | Deferred | 未確認 | CWE-74 | The Ninja Tables WordPress plugin before 5.2.17 does not restrict shortcode expansion to administrator-authored table rows which, in a non-default configuration, allows unauthentic |
| CVE-2026-86644 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in star7th showdoc up to 3.9.1. This vulnerability affects unknown code of the file web_src/public/editor.md/editormd.js of the component API Page Sa |
| CVE-2026-86665 | Deferred | 未確認 | CWE-862, CWE-863 | A vulnerability was identified in aircheng-org iWebShop-5 up to 5.15. This issue affects the function Update::index of the file controllers/update.php. The manipulation leads to mi |
| CVE-2026-86666 | Deferred | 未確認 | CWE-284, CWE-434 | A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.15. Impacted is the function upload_json/uploadFile of the file controllers/pic.php. The manipulation results |
| CVE-2026-86667 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in aircheng-org iWebShop-5 up to 5.15. The affected element is the function member_list of the file controllers/member.php. This manipulation of the |
| CVE-2026-86668 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.15. The impacted element is the function uploadFile of the file controllers/pic.php. Such manipulation |
| CVE-2026-86669 | Deferred | 未確認 | CWE-287 | A vulnerability was detected in aircheng-org iWebShop-5 up to 5.15. This affects the function Login of the file controllers/systemseller.php. Performing a manipulation of the argum |
| CVE-2026-86670 | Deferred | 未確認 | CWE-326, CWE-916 | A flaw has been found in aircheng-org iWebShop-5 up to 5.15. This impacts an unknown function of the file controllers/admin.php of the component Authentication Storage. Executing a |
| CVE-2026-86672 | Deferred | 未確認 | CWE-200, CWE-284 | A vulnerability has been found in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected is an unknown function of the file example.7z of the |
| CVE-2026-86673 | Deferred | 未確認 | CWE-259, CWE-798 | A vulnerability was determined in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this issue is the function mysqli_connect of the |
| CVE-2026-86674 | Deferred | 未確認 | CWE-384 | A vulnerability was found in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this vulnerability is the function session_start of th |
| CVE-2026-86675 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/us_edit.php. Such manipulation of the argument ID lea |
| CVE-2026-86677 | Awaiting Analysis | 未確認 | CWE-89 | ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to run unauthorized SQL commands, potentially gaining administrator access and re |
| CVE-2026-86678 | Awaiting Analysis | 未確認 | CWE-639 | ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to obtain an administrator’s API key and use it to perform administrator-level ac |
| CVE-2026-86679 | Awaiting Analysis | 未確認 | CWE-20 | ZohoCorp ManageEngine Applications Manager versions 182000 and below were vulnerable to a permissions validation issue that allowed a low-privileged user to delete service monitors |
| CVE-2026-86681 | Awaiting Analysis | 未確認 | CWE-306 | ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to a permissions validation issue that allowed low-privileged users to execute administrator-co |
| CVE-2026-86683 | Awaiting Analysis | 未確認 | CWE-20 | ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to change the proxy settings. |
| CVE-2026-86688 | Deferred | 未確認 | CWE-384 | Session Fixation vulnerability in team-alembic ash_authentication allows an attacker who can plant a session identifier in a victim's browser to hold an authenticated session once |
| CVE-2026-86689 | Deferred | 未確認 | CWE-319 | Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to th |
| CVE-2026-86698 | Deferred | 未確認 | CWE-613 | Insufficient Session Expiration vulnerability in OAuth token issuance in hexpm hexpm allows a user whose organization membership or session has ended to keep reading the organizati |
| CVE-2026-86701 | Deferred | 未確認 | CWE-926 | Android application "ManabiPocket for Parents" contains an improper access control vulnerability in one of its components. A malicious application installed on the user's Android d |
| CVE-2026-86707 | Deferred | 未確認 | CWE-287 | The Private Feed Key WordPress plugin through 0.1 does not verify that the key used to authenticate a feed request is one it issued, matching any stored user metadata value instead |
| CVE-2026-86708 | Awaiting Analysis | 未確認 | CWE-321 | ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to exposure of a Google Cloud service-account private key in the Applications Manager installer |
| CVE-2026-86709 | Deferred | 未確認 | CWE-287 | The Pressengine WordPress plugin through 1.0 does not stop its login handler from issuing a session when authentication fails, allowing unauthenticated attackers to log in as any u |
| CVE-2026-86710 | Deferred | 未確認 | CWE-287 | The Login with QR WordPress plugin through 1.0.0 does not verify that the code used to log a user in is one it issued, matching any stored user metadata value instead, which allows |
| CVE-2026-86711 | Deferred | 未確認 | CWE-749 | electerm before 5.3.15 exposes 40+ main-process functions through an unvalidated Electron IPC handler with no function-name allowlist or sender validation. Renderer-side script exe |
| CVE-2026-86712 | Deferred | 未確認 | CWE-79 | SiYuan before 3.8.2 trusts the attacker-writable text/siyuan clipboard MIME type and skips sanitization in the paste handler, allowing code execution in the Node-enabled desktop re |
| CVE-2026-86713 | Awaiting Analysis | 未確認 | CWE-416 | PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in the load_mon module's stop path where exit_and_cleanup() deletes the LoadMon object and frees the performanc |
| CVE-2026-86714 | Awaiting Analysis | 未確認 | CWE-125 | PX4 Autopilot through 1.17.0 contains a stack buffer over-read vulnerability in the netman system command that fails to validate interface name length. Attackers can supply interfa |
| CVE-2026-86716 | Deferred | 未確認 | CWE-119, CWE-122 | A vulnerability was determined in Cesanta mJS up to 1.26. Affected is the function skip_spaces_and_comments of the file src/mjs_tok.c. Executing a manipulation can lead to heap-bas |
| CVE-2026-86718 | Deferred | 未確認 | CWE-352 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in deleteHistory.json.php and finishAll.json.php that allows |
| CVE-2026-86719 | Deferred | 未確認 | CWE-352 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 (master) contains a cross-site request forgery vulnerability in the CustomizeUser plugin endpoint plugin/Customi |
| CVE-2026-86720 | Deferred | 未確認 | CWE-639 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate ownership of live_restreams_id in resendRestreamer.json.php, allowing authenticated users with |
| CVE-2026-86721 | Deferred | 未確認 | CWE-287 | AVideo through commit c3edcc274c contains an authorization bypass vulnerability where a session cookie named 'key' with value 'value' overrides the $_REQUEST['key'] parameter in sa |
| CVE-2026-86722 | Deferred | 未確認 | CWE-287 | AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an authentication bypass vulnerability where sqlDAL caches empty result sets that writeSql never invalidates |
| CVE-2026-86723 | Deferred | 未確認 | CWE-287 | AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 contains an authentication bypass vulnerability in LoginControl::verifyChallenge() that uses loose comparison (==) instead o |
| CVE-2026-86724 | Deferred | 未確認 | CWE-352 | AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in plugin/YPTWallet/view/saveBalance.php that allows attackers to |
| CVE-2026-86725 | Deferred | 未確認 | CWE-639 | AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization vulnerability in the SocialMediaPublisher plugin's add.json.php endpoint that allows authen |
| CVE-2026-86726 | Deferred | 未確認 | CWE-522 | AVideo through 29.0 contains an information disclosure vulnerability in restreamsActive.json.php that allows authenticated streamers to enumerate source stream keys and identities |
| CVE-2026-86727 | Deferred | 未確認 | CWE-306 | AVideo through 29.0 contains an information disclosure vulnerability in plugin/Live/stats.json.php that allows unauthenticated attackers to retrieve stream keys and m3u8 URLs by ac |
| CVE-2026-86728 | Deferred | 未確認 | CWE-306 | AVideo through 29.0 contains an authentication bypass vulnerability in plugin/PlayLists/epg.json.php that exposes live-stream keys and private EPG schedules to unauthenticated user |
| CVE-2026-86729 | Deferred | 未確認 | CWE-307 | WWBN AVideo through commit e01e41ecc (no patched version available) exposes get_api_preauthorize in plugin/API/API.php as a second, undocumented login path. Unlike get_api_signIn, |
| CVE-2026-86730 | Deferred | 未確認 | CWE-94 | Craft CMS versions before 5.10.12 fail to properly cleanse string-typed field-layout elements, allowing authenticated control-panel users to inject Yii2 behavior attachments and ev |
| CVE-2026-86731 | Deferred | 未確認 | CWE-862 | Craft CMS versions 5.0.0-RC1 through 5.10.11 are missing an admin-target guard in UsersController::actionActivateUser (the users/activate-user action). While the action requires th |
| CVE-2026-86732 | Deferred | 未確認 | CWE-94 | Craft CMS versions before 5.10.12 contain a remote code execution vulnerability in the element-index endpoint that allows authenticated content editors to instantiate arbitrary cla |
| CVE-2026-86733 | Analyzed | 未確認 | CWE-78 | Snipe-IT before 8.7.0 streams the SQL entry from an uploaded backup archive directly into the MySQL/MariaDB command-line client (`mysql`) without the --binary-mode flag, so the cli |
| CVE-2026-86734 | Analyzed | 未確認 | CWE-400 | Snipe-IT before 8.7.1 fails to validate the length of the note field in the POST /account/accept/{acceptance} endpoint, allowing authenticated users to submit unbounded input that |
| CVE-2026-86735 | Analyzed | 未確認 | CWE-918 | snipe-it versions before 8.7.0 contain a server-side request forgery vulnerability in the ExternalUrl validation rule that fails to detect IPv6 transition addresses encoding privat |
| CVE-2026-86736 | Analyzed | 未確認 | CWE-682 | snipe-it before 8.7.0 contains an incorrect calculation vulnerability in checkout request handling that allows authenticated users to corrupt the assets.requests_counter through du |
| CVE-2026-86737 | Analyzed | 未確認 | CWE-862 | snipe-it versions before 8.7.0 fail to enforce asset view authorization in the GET /hardware/{asset}/barcode endpoint. Authenticated attackers can iterate asset IDs to retrieve bar |
| CVE-2026-86738 | Analyzed | 未確認 | CWE-79 | Snipe-IT versions before 8.7.0 contain a CSS injection vulnerability in the Custom CSS field due to incomplete sanitization that reverses HTML encoding on greater-than and double-q |
| CVE-2026-86739 | Analyzed | 未確認 | CWE-252 | Snipe-IT 8.6.3 and earlier do not check the return value of Storage::put() when writing the signature PNG and the generated acceptance PDF in Account\AcceptanceController::store(). |
| CVE-2026-8674 | Awaiting Analysis | 未確認 | CWE-617 | Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable, whose search list contains a domain of roughly 200 characters or more in th |
| CVE-2026-86740 | Analyzed | 未確認 | CWE-212 | Snipe-IT before 8.7.0 fails to check the return value of Storage::delete() in UploadedFilesController::destroy() and Api\\UploadedFilesController::destroy(), allowing deletion requ |
| CVE-2026-86741 | Analyzed | 未確認 | CWE-73 | Snipe-IT versions before 8.7.0 fail to sanitize the category EULA text field before rendering it in checkout confirmation emails. Attackers with low-privilege permissions can injec |
| CVE-2026-86742 | Analyzed | 未確認 | CWE-1236 | Snipe-IT through 8.6.3 does not neutralize formula elements in the "unaccepted assets" acceptance report CSV export. ReportsController::postAssetAcceptanceReport builds the CSV by |
| CVE-2026-86743 | Analyzed | 未確認 | CWE-639 | Snipe-IT versions before 8.7.0 fail to properly scope asset acceptance report queries by company, allowing authenticated reports.view users to read pending acceptances across all c |
| CVE-2026-86744 | Analyzed | 未確認 | CWE-362 | Snipe-IT 8.6.3 and earlier (and develop pre-release commits prior to the fix) contain a race condition in the asset checkout paths. Api\AssetsController::checkout() and Assets\Asse |
| CVE-2026-86745 | Analyzed | 未確認 | CWE-1236 | Snipe-IT is an IT asset management application. In Snipe-IT master-branch builds after 8.6.3 (the code was never included in a tagged release), SettingsController::downloadLocation |
| CVE-2026-86746 | Analyzed | 未確認 | CWE-269 | Snipe-IT before 8.7.0 contains an authorization bypass vulnerability in Livewire components that enforce authorization only at the route level, not within component lifecycle metho |
| CVE-2026-86747 | Analyzed | 未確認 | CWE-863 | Snipe-IT is an open source IT asset management system. In versions up to and including 8.6.3, the report acceptance endpoints POST /reports/unaccepted_assets/sent_reminder (Reports |
| CVE-2026-86748 | Analyzed | 未確認 | CWE-460 | Snipe-IT versions before 8.7.0 wipe the database before validating the uploaded backup archive in the restore endpoint. Superusers uploading corrupted or invalid zip files trigger |
| CVE-2026-86749 | Analyzed | 未確認 | CWE-252 | Snipe-IT versions <= 8.6.3 (fixed in 8.7.0) do not check the return value of storage write operations in ImageUploadRequest::handleImages(). Because Laravel's default disk mode doe |
| CVE-2026-86750 | Analyzed | 未確認 | CWE-863 | Snipe-IT versions <= 8.6.3 (fixed in 8.7.0) do not validate company assignment authorization before persisting user records via the REST API. In Api\UsersController::store() and :: |
| CVE-2026-86751 | Analyzed | 未確認 | CWE-73 | Snipe-IT before 8.7.0 fails to properly sanitize markdown image syntax in note fields, allowing authenticated users to read arbitrary server files and issue server-side HTTP reques |
| CVE-2026-86752 | Analyzed | 未確認 | CWE-863 | snipe-it versions before 8.7.0 fail to enforce per-instance FMCS scoping in asset audit endpoints, relying solely on query-layer filtering instead of policy-layer authorization che |
| CVE-2026-86753 | Analyzed | 未確認 | CWE-863 | snipe-it versions before 8.7.0 fail to validate the requestable flag for asset models in the POST /account/request/asset_model/{modelId} endpoint. Authenticated users can bypass ad |
| CVE-2026-86754 | Analyzed | 未確認 | CWE-863 | Snipe-IT before 8.7.0 fails to properly gate Laravel Passport's OAuth client management routes, allowing any authenticated user to register OAuth clients with attacker-controlled r |
| CVE-2026-86755 | Analyzed | 未確認 | CWE-863 | Snipe-IT versions 4.2.0 through 8.6.3 expose Laravel Passport's auto-registered personal-access-token routes (GET, POST, DELETE /oauth/personal-access-tokens*) with only 'web' and |
| CVE-2026-86756 | Analyzed | 未確認 | CWE-601 | Snipe-IT 8.5.0 through 8.6.3 contains an open redirect vulnerability in its SAML assertion-consumer endpoint (SamlController::acs, POST /saml/acs). The endpoint wrote the RelayStat |
| CVE-2026-86757 | Analyzed | 未確認 | CWE-862 | Snipe-IT before 8.7.0 fails to properly gate access to encrypted custom-field values in asset form templates for listbox, textarea, markdown-textarea, and date/datetime picker elem |
| CVE-2026-86758 | Analyzed | 未確認 | CWE-204 | Snipe-IT before 8.7.0 fails to properly enforce the viewKeys authorization gate in CSV export and API index endpoints, allowing authenticated users with only licenses.view permissi |
| CVE-2026-86759 | Analyzed | 未確認 | CWE-862 | Snipe-IT versions before 8.7.0 fail to authorize the POST /hardware/history endpoint, allowing any authenticated user to reassign arbitrary assets and modify audit logs. Attackers |
| CVE-2026-86760 | Analyzed | 未確認 | CWE-863 | Snipe-IT versions 8.2.0 through 8.6.x (fixed in 8.7.0) contain an incorrect authorization flaw in app/Http/Controllers/Users/UsersController::update(). The single-user edit route a |
| CVE-2026-86761 | Analyzed | 未確認 | CWE-639 | snipe-it versions before 8.7.0 contain an authorization bypass vulnerability in location print endpoints that fails to enforce per-model authorization checks. Authenticated attacke |
| CVE-2026-86762 | Analyzed | 未確認 | CWE-862 | Snipe-IT before 8.7.0 does not apply the CheckUserIsActivated middleware to the `api` middleware group in app/Http/Kernel.php, and deactivating a user does not revoke that user's P |
| CVE-2026-86763 | Analyzed | 未確認 | CWE-639 | Snipe-IT versions >= 7.0.12 and <= 8.6.3 contain an authorization bypass in the Livewire importer component (App\Livewire\Importer, mounted at the imports.index route). The compone |
| CVE-2026-86764 | Analyzed | 未確認 | CWE-862 | Snipe-IT through 8.6.4 (fixed in 8.7.0) does not enforce the components.view permission on the authenticated endpoint GET /api/v1/hardware/<asset-id>/assigned/components. The endpo |
| CVE-2026-86765 | Analyzed | 未確認 | CWE-862 | Snipe-IT versions before 8.7.0 fail to enforce checkout authorization when assignment fields are submitted to the asset update endpoint. Authenticated users with edit permission bu |
| CVE-2026-86766 | Analyzed | 未確認 | CWE-362 | Snipe-IT versions up to and including 8.6.3 contain a race condition (TOCTOU) in the consumable checkout API endpoint (POST /api/v1/consumables/{consumable_id}/checkout). The reque |
| CVE-2026-86767 | Analyzed | 未確認 | CWE-200 | Snipe-IT versions before 8.7.0 fail to apply company scope filtering to the GET /hardware/requested endpoint when Full Multiple Company Support is enabled, allowing authenticated u |
| CVE-2026-86768 | Analyzed | 未確認 | CWE-20 | Snipe-IT before 8.7.0 fails to validate soft-deleted state in API checkout endpoints, allowing authenticated users with checkout permissions to bind live inventory to trashed targe |
| CVE-2026-86769 | Analyzed | 未確認 | CWE-282 | Snipe-IT versions before 8.7.0 contain an improper ownership management vulnerability in the consumables checkout API endpoint that records the checkout target user's id in the cre |
| CVE-2026-86770 | Analyzed | 未確認 | CWE-178 | Snipe-IT before 8.7.0 fails to validate username case sensitivity during SAML authentication, allowing attackers to authenticate as different users by registering IdP accounts with |
| CVE-2026-86771 | Analyzed | 未確認 | CWE-918 | Snipe-IT versions before 8.7.0 fail to HTML-escape the employee_num field in the acceptance PDF generator, allowing attackers with users.edit permission to inject img tags into TCP |
| CVE-2026-86772 | Analyzed | 未確認 | CWE-79 | Snipe-IT versions before 8.7.0 contain a stored cross-site scripting vulnerability in DepartmentPresenter::formattedNameLink() where department names are rendered unescaped in the |
| CVE-2026-86773 | Analyzed | 未確認 | CWE-863 | Snipe-IT through version 8.6.3 fails to perform object-level authorization in the updateLicense, updateConsumable, updateAccessory, and updateModel endpoints and in the storeModel |
| CVE-2026-86774 | Analyzed | 未確認 | CWE-284 | Snipe-IT versions before 8.7.0 contain a broken access control vulnerability in AssetModelPolicy where the files() method cascades from assets.files permission, allowing authentica |
| CVE-2026-86775 | Awaiting Analysis | 未確認 | CWE-22 | knowns (npm package) versions <= 0.29.1 contain a path traversal vulnerability in the Document API. The HTTP handler in internal/server/routes/docs.go normalizes the user-supplied |
| CVE-2026-86776 | Deferred | 未確認 | CWE-789 | KeePass versions 2.35 through 2.61.1 fail to validate KDBX header field sizes before memory allocation in the ReadHeaderField function. Attackers can craft a malicious KDBX file de |
| CVE-2026-86777 | Deferred | 未確認 | CWE-862 | AlchemyCMS versions before 7.4.16 and 8.x before 8.3.6 fail to authorize access to the GET /api/nodes endpoint, allowing unauthenticated attackers to retrieve all navigation nodes. |
| CVE-2026-86778 | Deferred | 未確認 | CWE-204 | Observable response discrepancy vulnerability in Maksisoft Technology, IT, and Software Industry and Trade Inc. Maksisoft Gym allows Account Footprinting. This issue affects Maksi |
| CVE-2026-86779 | Deferred | 未確認 | CWE-862 | The Visualizer WordPress plugin before 4.0.6 does not properly authorise chart-deletion requests, performing only a site-wide capability check with no per-object ownership verific |
| CVE-2026-86780 | Deferred | 未確認 | CWE-79 | The Featured Image with URL WordPress plugin before 1.0.6 does not sanitise and escape a stored image attribute value before outputting it, which could allow users with a role as l |
| CVE-2026-86781 | Deferred | 未確認 | CWE-287 | The SSL Zen — SSL Certificate Installer & HTTPS Redirects WordPress plugin before 4.7.40 does not perform capability or nonce checks on a certificate-file download routine that run |
| CVE-2026-86782 | Deferred | 未確認 | CWE-639 | The Visualizer WordPress plugin before 4.0.6 does not properly authorise access to its chart-building actions, allowing users with the Contributor role and above to publish, renam |
| CVE-2026-86783 | Deferred | 未確認 | CWE-200 | The Post Grid Gutenberg Blocks WordPress plugin before 5.0.41 does not perform an authorization or post-visibility check on a REST API route that returns the custom field keys of |
| CVE-2026-86784 | Deferred | 未確認 | CWE-79 | The Visualizer WordPress plugin before 4.0.8 does not sanitise and escape a chart's JSON data source configuration before outputting it back in the chart editor, allowing users wi |
| CVE-2026-86785 | Deferred | 未確認 | CWE-862 | The Social Commerce for WooCommerce WordPress plugin through 2.5.4 does not have authorisation checks on some of its REST API endpoints, allowing unauthenticated users to update So |
| CVE-2026-86788 | Deferred | 未確認 | CWE-79 | The HT Mega Addons for Elementor WordPress plugin before 3.2.6 does not restrict the HTML tag name used to render the section headline in several of its widgets and blocks to a sa |
| CVE-2026-86789 | Deferred | 未確認 | CWE-200 | The Connections Business Directory WordPress plugin through 10.4.67 does not apply its visibility and moderation-status restrictions on certain REST API read endpoints, allowing un |
| CVE-2026-86790 | Deferred | 未確認 | CWE-79 | The WP Highlight Box WordPress plugin through 1.0 does not escape some shortcode attributes before outputting them in a page where the shortcode is embedded, which could allow user |
| CVE-2026-86792 | Analyzed | 未確認 | CWE-470 | Apache Airflow Apache Kafka provider versions 1.15.0 before 2.0.0 resolve dotted-path strings found in a Kafka connection's `extra` field into Python callables via `import_string`, |
| CVE-2026-86793 | Deferred | 未確認 | CWE-94 | SGLang allows unauthenticated pickle deserialization through /update_weights_from_tensor when no auth keys are configured, and the SafeUnpickler policy can be bypassed because buil |
| CVE-2026-86796 | Deferred | 未確認 | CWE-693 | The Hide My WP Ghost WordPress plugin before 7.0.11 does not verify that a request is a genuine WooCommerce request before disabling its firewall, threat-detection and login/URL-hi |
| CVE-2026-86800 | Deferred | 未確認 | CWE-693 | The Hide My WP Ghost WordPress plugin before 7.0.11 does not properly validate a loopback security-check request before disabling its login and URL hiding protection, dropping that |
| CVE-2026-86801 | Deferred | 未確認 | CWE-306 | The To Do List Member WordPress plugin from 1.4 through 1.6 ships a file upload endpoint that does not load WordPress and therefore applies no authentication, capability or nonce c |
| CVE-2026-86802 | Deferred | 未確認 | CWE-862 | The To Do List Member WordPress plugin through 1.6 does not have authorisation or nonce checks in an import routine, and does not validate the location it fetches the imported data |
| CVE-2026-86804 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was identified in seakee CPA-Manager-Plus up to 1.11.10. This vulnerability affects the function CPAResource of the file apps/manager-server/internal/http/controlle |
| CVE-2026-86805 | Awaiting Analysis | 未確認 | CWE-367 | A time-of-check to time-of-use (TOCTOU) race condition in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allows a local attacker to escalate pri |
| CVE-2026-86806 | Deferred | 未確認 | CWE-918 | A weakness has been identified in opengeos GeoLibre up to 2.3.0. Impacted is the function _is_within_roots. This manipulation causes server-side request forgery. The attack can be |
| CVE-2026-86808 | Deferred | 未確認 | CWE-287, CWE-306 | A security vulnerability has been detected in moltis-org moltis up to 20260818.10. The affected element is the function vault_unlock_handler/vault_recovery_handler of the file vaul |
| CVE-2026-86809 | Deferred | 未確認 | CWE-345 | The Persian Elementor WordPress plugin from 2.7.10 before 2.8.2 does not verify that the payment authority returned to its ZarinPal payment callback belongs to the transaction bein |
| CVE-2026-86810 | Deferred | 未確認 | CWE-287 | A vulnerability was detected in Open-Web-Analytics up to 1.9.1. The impacted element is the function checkCapabilityAndAuthenticateUser of the file Core/Controller.php of the compo |
| CVE-2026-86812 | Deferred | 未確認 | CWE-284 | The WPCafe WordPress plugin before 3.0.18 does not correctly restrict access to a set of order-management REST endpoints because their permission callbacks return an incorrect typ |
| CVE-2026-86813 | Deferred | 未確認 | CWE-93 | The MetForm WordPress plugin before 4.1.9 does not properly neutralize newline characters in user-submitted values that are placed into notification email headers, allowing unauthe |
| CVE-2026-86814 | Deferred | 未確認 | CWE-269 | The UsersWP WordPress plugin before 1.5.10 does not verify that a social login provider has confirmed ownership of an email address before using it to resolve an existing account, |
| CVE-2026-86815 | Deferred | 未確認 | CWE-862 | The BackWPup WordPress plugin before 5.7.5 does not properly restrict access to several of its REST API routes for job, backup-destination, and backup-execution management, allowi |
| CVE-2026-86818 | Awaiting Analysis | 未確認 | CWE-172, CWE-436 | fast-uri is a dependency-free RFC 3986 URI parser for Node.js, used by Fastify and ajv, that added a mailto scheme parser in version 4.1.3. In versions 4.1.3 and 4.1.4, the mailto |
| CVE-2026-86819 | Awaiting Analysis | 未確認 | CWE-862 | Waves Central for macOS contains a local privilege escalation in the privileged helper service. The helper authorizes connecting XPC clients by comparing the caller's code-signing |
| CVE-2026-86823 | Deferred | 未確認 | CWE-601 | The Newsletter WordPress plugin before 9.3.7 does not validate the destination of the redirect performed after a public subscription action, allowing unauthenticated attackers to |
| CVE-2026-86824 | Deferred | 未確認 | CWE-326 | The Newsletter WordPress plugin before 9.3.8 does not generate its email tracking signing key with sufficient entropy and signs its tracking links with an unkeyed hash, allowing a |
| CVE-2026-86830 | Awaiting Analysis | 未確認 | CWE-1220, CWE-266 | Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center solution before version 1.5.1 might allow an authenticated remote user wit |
| CVE-2026-86831 | Awaiting Analysis | 未確認 | CWE-1289 | Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS Network Policy Agent before v1.4.0 might allow an authenticated remote user to bypass Net |
| CVE-2026-86836 | Awaiting Analysis | 未確認 | CWE-276, CWE-367, CWE-379 | In Eclipse Ankaios versions 0.1.0 through 1.0.2, the agent creates workload files and Control Interface named pipes (FIFOs) under a predictable path derived from the agent name and |
| CVE-2026-86837 | Deferred | 未確認 | CWE-639 | The Bookly WordPress plugin before 28.3 does not properly verify a customer's identity before updating their stored details, allowing unauthenticated attackers who know a customer' |
| CVE-2026-86838 | Deferred | 未確認 | CWE-472 | The Bookly WordPress plugin before 28.3 does not validate client-supplied booking quantity values on the server before computing the appointment total, allowing unauthenticated use |
| CVE-2026-86839 | Deferred | 未確認 | CWE-639 | The Online Scheduling and Appointment Booking System WordPress plugin before 28.3 does not verify that appointment and payment records requested through its staff-role AJAX action |
| CVE-2026-86840 | Deferred | 未確認 | CWE-639, CWE-862 | The `vtoken-minting` and `slpx` pallets in Bifrost contain an improper authorization vulnerability in channel commission attribution. A signed account can supply an arbitrary regis |
| CVE-2026-86841 | Deferred | 未確認 | CWE-502 | The Online Scheduling and Appointment Booking System WordPress plugin before 28.3 does not prevent deserialization of untrusted input and does not correctly restrict a privileged |
| CVE-2026-86842 | Deferred | 未確認 | CWE-862 | The Real3D Flipbook WordPress plugin before 5.4 does not perform capability checks on several of its authenticated flipbook management actions, allowing users with Author-level ac |
| CVE-2026-86843 | Analyzed | 未確認 | CWE-89 | The Apache Airflow Teradata provider's compute-cluster example Dag declared every one of its Dag Params as unconstrained free text and templated them straight into the compute-clus |
| CVE-2026-86853 | Analyzed | 未確認 | CWE-451 | A malicious webpage could repeatedly trigger external URL schemes, causing system prompts or external application launches. This could make Firefox for iOS temporarily unusable unt |
| CVE-2026-86857 | Awaiting Analysis | 未確認 | CWE-862 | ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This security issue, if exploited, could enable an authenticated |
| CVE-2026-86858 | Awaiting Analysis | 未確認 | CWE-284 | ServiceNow has remediated an improper access control security issue that was identified in the ServiceNow AI Platform. This security issue could enable an unauthenticated user, in |
| CVE-2026-86859 | Awaiting Analysis | 未確認 | CWE-284 | ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This security issue, if exploited, could enable an unauthenticat |
| CVE-2026-86860 | Awaiting Analysis | 未確認 | CWE-862 | ServiceNow has remediated a missing authorization vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could enable an unauthenticated user, in certa |
| CVE-2026-86861 | Analyzed | 未確認 | CWE-367, CWE-59 | pgAdmin 4's File Manager save_file endpoint, which backs saving from the Query Tool and ERD, validated the requested path with Filemanager.check_access_permission() and then opened |
| CVE-2026-86862 | Analyzed | 未確認 | CWE-522, CWE-88, CWE-918 | pgAdmin 4's Restore and Maintenance tools passed the client-supplied 'database' field directly as the value of the --dbname option given to pg_restore and psql. libpq expands a dat |
| CVE-2026-86863 | Analyzed | 未確認 | CWE-290, CWE-807 | pgAdmin 4's Webserver authentication source is intended to accept an identity asserted by the web server or reverse proxy in front of pgAdmin, delivered through the WSGI/CGI enviro |
| CVE-2026-86864 | Analyzed | 未確認 | CWE-22, CWE-88 | pgAdmin 4's Backup tool appended the client-supplied 'database' field from the /backup/job/<sid>/object request to the pg_dump argument vector as a bare trailing positional argumen |
| CVE-2026-86865 | Awaiting Analysis | 未確認 | CWE-89 | Tanium addressed a SQL injection vulnerability in Asset. |
| CVE-2026-86867 | Deferred | 未確認 | CWE-200, CWE-639, CWE-862 | Cinnamon's Kotaemon (all versions up to and including v0.12.0) multi-user chat interface contains multiple vulnerabilities due to incorrect authorization and improper access contro |
| CVE-2026-86869 | Analyzed | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Golden Gate 27. Processing a maliciously crafted im |
| CVE-2026-86870 | Analyzed | 未確認 | CWE-122 | A heap buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27, watchO |
| CVE-2026-86876 | Analyzed | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia |
| CVE-2026-86878 | Analyzed | 未確認 | CWE-200 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to access sensitive user data. |
| CVE-2026-86879 | Analyzed | 未確認 | CWE-20 | A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. A remote attacker may be able to cause a denial-of-service. |
| CVE-2026-86881 | Analyzed | 未確認 | CWE-295 | A certificate validation issue was addressed with improved certificate validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macO |
| CVE-2026-86882 | Analyzed | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia |
| CVE-2026-86883 | Analyzed | 未確認 | CWE-200 | A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 27 and iPadOS 27, visionOS 27. An app may be able to access sensitive user data. |
| CVE-2026-86884 | Analyzed | 未確認 | CWE-269 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, watchOS 27. An app may be able to access |
| CVE-2026-86885 | Analyzed | 未確認 | CWE-20 | An input validation issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. An attacker in radio range may be able to cause unexpected syst |
| CVE-2026-86886 | Analyzed | 未確認 | CWE-22 | A path traversal issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to modify |
| CVE-2026-86887 | Analyzed | 未確認 | CWE-200 | A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to bypass certain P |
| CVE-2026-86888 | Analyzed | 未確認 | CWE-269 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 2 |
| CVE-2026-86889 | Analyzed | 未確認 | CWE-295 | A certificate validation issue was addressed with improved certificate validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in |
| CVE-2026-86890 | Analyzed | 未確認 | CWE-287 | A logic issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker with physical access to a locked device may be |
| CVE-2026-86891 | Analyzed | 未確認 | CWE-285 | An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, watchOS 27. An app may be ab |
| CVE-2026-86892 | Analyzed | 未確認 | CWE-770 | This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to cause a denia |
| CVE-2026-86893 | Analyzed | 未確認 | CWE-269 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to read device nam |
| CVE-2026-86894 | Analyzed | 未確認 | CWE-693 | A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to break out of its sandbox. |
| CVE-2026-86895 | Analyzed | 未確認 | CWE-200 | An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. A local app may be able |
| CVE-2026-86897 | Analyzed | 未確認 | CWE-862 | This issue was addressed with additional entitlement checks. This issue is fixed in Safari 27, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An |
| CVE-2026-86898 | Analyzed | 未確認 | CWE-79 | A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Opening a maliciously crafted |
| CVE-2026-86900 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted exFAT volume may cause unexpec |
| CVE-2026-86901 | Analyzed | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted exFAT volume may cause unexpec |
| CVE-2026-86902 | Analyzed | 未確認 | CWE-22 | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS Sonoma 14.8.8. An app may be able |
| CVE-2026-86903 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may |
| CVE-2026-86904 | Analyzed | 未確認 | CWE-359 | A privacy issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to track users a |
| CVE-2026-86905 | Analyzed | 未確認 | CWE-284 | This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to delete credentials s |
| CVE-2026-86909 | Analyzed | 未確認 | CWE-693 | A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to bypass Gatekeeper checks. |
| CVE-2026-86910 | Analyzed | 未確認 | CWE-22 | A permissions issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An application may be able to ac |
| CVE-2026-86911 | Analyzed | 未確認 | CWE-1021 | This issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. A malicious app may be able to bypass clickjacking protections for secure prom |
| CVE-2026-86917 | Analyzed | 未確認 | CWE-280 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root p |
| CVE-2026-86924 | Analyzed | 未確認 | CWE-20 | A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26. |
| CVE-2026-86926 | Analyzed | 未確認 | CWE-122 | A heap buffer overflow vulnerability in the FileMaker Server database engine block parsing routine allowed a maliciously crafted .fmp12 database file to cause memory corruption, po |
| CVE-2026-86930 | Analyzed | 未確認 | CWE-125 | An out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a specially crafted image file to a container field to disclose process memory durin |
| CVE-2026-86934 | Analyzed | 未確認 | CWE-639 | An authorization bypass vulnerability in the FileMaker Server Web Publishing Engine allowed requests containing an extended privilege header to bypass the disabled Custom Web Publi |
| CVE-2026-86938 | Analyzed | 未確認 | CWE-639 | A DLL hijacking vulnerability in the FileMaker Pro installer for Windows allowed a local user to execute arbitrary code with elevated administrator privileges by placing a maliciou |
| CVE-2026-86950 | Analyzed | 掲載 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing |
| CVE-2026-86993 | Analyzed | 未確認 | CWE-862 | n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, a Log Streaming event destination could reference a generic HTTP credential and decrypt w |
| CVE-2026-86994 | Analyzed | 未確認 | CWE-862 | n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the /rest/active-workflows endpoint returned every active workflow ID on the instance to |
| CVE-2026-86995 | Analyzed | 未確認 | CWE-22, CWE-73 | n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Git node validated the repository parameter for fetch or pull, but setUpstream wrote |
| CVE-2026-86996 | Analyzed | 未確認 | CWE-862 | n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the workflow setting named This workflow can be called by was enforced by the Execute Workflow node |
| CVE-2026-87004 | Deferred | 未確認 | CWE-347 | Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.31.3, when the OIDC login flow completes, backend/modules/auth/providers/auth_oidc_pr |
| CVE-2026-87011 | Analyzed | 未確認 | CWE-405, CWE-770 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.1, the unauthenticated POST /oauth/backchannel-logout handler in backend |
| CVE-2026-87012 | Analyzed | 未確認 | CWE-1287, CWE-754 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.1, backend/open_webui/models/calendar.py stored the calendar event meta. |
| CVE-2026-87013 | Analyzed | 未確認 | CWE-835 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, POST /api/v1/folders/{id}/update/parent allowed a user to place a fo |
| CVE-2026-87014 | Analyzed | 未確認 | CWE-613, CWE-863 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.1, role synchronization in backend/open_webui/routers/auths.py and backe |
| CVE-2026-87015 | Analyzed | 未確認 | CWE-201 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.27 until 0.11.1, backend/open_webui/utils/tools.py captured a cookie jar from the enc |
| CVE-2026-87016 | Analyzed | 未確認 | CWE-155, CWE-287 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.41 until 0.11.1, get_user_by_oauth_sub and get_user_by_scim_external_id in backend/op |
| CVE-2026-87017 | Analyzed | 未確認 | CWE-200, CWE-863 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.7.0 until 0.11.1, the built-in knowledge search tool passed the caller's readable knowl |
| CVE-2026-87019 | Analyzed | 未確認 | CWE-639 | Tanium addressed an improper access controls vulnerability in Comply. |
| CVE-2026-87020 | Awaiting Analysis | 未確認 | CWE-190 | An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds write when Orthanc DICOM Server decodes an attacker-supplied PNG. |
| CVE-2026-87021 | Analyzed | 未確認 | CWE-1336 | Tanium addressed an unauthorized code execution vulnerability in Comply. |
| CVE-2026-87022 | Awaiting Analysis | 未確認 | CWE-130 | Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling when per-message-deflate is used. This issue affects Apache |
| CVE-2026-87023 | Analyzed | 未確認 | CWE-22 | Tanium addressed a path traversal vulnerability in Comply. |
| CVE-2026-87024 | Awaiting Analysis | 未確認 | CWE-89 | Tanium addressed a SQL injection vulnerability in Asset. |
| CVE-2026-87025 | Analyzed | 未確認 | CWE-639 | Tanium addressed an improper access controls vulnerability in Comply. |
| CVE-2026-87026 | Awaiting Analysis | 未確認 | CWE-862 | Tanium addressed an improper access controls vulnerability in Threat Response. |
| CVE-2026-87028 | Analyzed | 未確認 | CWE-862 | Concrete CMS 9 through 9.5.3 did not confirm that a board InstanceItem submitted to the custom-slot preview endpoint belonged to the board instance the requesting user was authoriz |
| CVE-2026-87030 | Analyzed | 未確認 | CWE-22 | Tanium addressed a path traversal vulnerability in Comply. |
| CVE-2026-87031 | Analyzed | 未確認 | CWE-862 | n Concrete CMS 9.2.0 through 9.5.3, the REST API user creation endpoint (POST /ccm/api/1.0/users, the add() method of concrete/src/Api/Controller/Users.php) did not perform a permi |
| CVE-2026-87032 | Awaiting Analysis | 未確認 | CWE-200 | Tanium addressed an information disclosure vulnerability in Tanium Server. |
| CVE-2026-87033 | Analyzed | 未確認 | CWE-639 | Tanium addressed an improper access controls vulnerability in Comply. |
| CVE-2026-87034 | Analyzed | 未確認 | CWE-89 | Tanium addressed a SQL injection vulnerability in Comply. |
| CVE-2026-87035 | Analyzed | 未確認 | CWE-200 | Tanium addressed an information disclosure vulnerability in Comply. |
| CVE-2026-87036 | Analyzed | 未確認 | CWE-862 | Tanium addressed an improper access controls vulnerability in Comply. |
| CVE-2026-87037 | Analyzed | 未確認 | CWE-862 | Tanium addressed an improper access controls vulnerability in Comply. |
| CVE-2026-87046 | Analyzed | 未確認 | CWE-863 | Tanium addressed an improper access controls vulnerability in Comply. |
| CVE-2026-87047 | Analyzed | 未確認 | CWE-639 | Tanium addressed an improper access controls vulnerability in Comply. |
| CVE-2026-87048 | Analyzed | 未確認 | CWE-862 | Tanium addressed an improper access controls vulnerability in Comply. |
| CVE-2026-87067 | Deferred | 未確認 | CWE-94 | The Forminator Forms WordPress plugin before 1.57.2.1 does not restrict which classes may be instantiated when it deserialises a value taken from an XML-RPC request, allowing user |
| CVE-2026-87068 | Deferred | 未確認 | CWE-269 | The Forminator Forms WordPress plugin before 1.57.2.1 does not apply the role validation it enforces elsewhere when a registration form is nested inside an imported quiz, allowing |
| CVE-2026-87069 | Deferred | 未確認 | CWE-862 | The Forminator Forms WordPress plugin before 1.57.2.1 does not perform a nonce, capability or ownership check before running a one-time payment-field migration during the construc |
| CVE-2026-87070 | Deferred | 未確認 | CWE-348 | The Forminator Forms WordPress plugin before 1.57.2.1 does not verify that a request came from a trusted proxy before preferring client-supplied forwarding headers over the connect |
| CVE-2026-87071 | Deferred | 未確認 | CWE-20 | The Forminator Forms WordPress plugin before 1.57.2.1 does not restrict which metadata keys a form submission may supply, and does not exclude the keys WordPress reserves for its o |
| CVE-2026-87072 | Analyzed | 未確認 | CWE-862 | Tanium addressed an improper access controls vulnerability in Comply. |
| CVE-2026-87073 | Analyzed | 未確認 | CWE-862 | Tanium addressed an improper access controls vulnerability in Comply. |
| CVE-2026-87074 | Deferred | 未確認 | CWE-862 | The Forminator Forms WordPress plugin before 1.57.2.1 does not bind its saved-draft notification to the visitor who created the draft, and takes both the recipient address and the |
| CVE-2026-87075 | Analyzed | 未確認 | CWE-863 | Tanium addressed an improper access controls vulnerability in Comply. |
| CVE-2026-87076 | Awaiting Analysis | 未確認 | CWE-200 | Tanium addressed an information disclosure vulnerability in Discover. |
| CVE-2026-87078 | Deferred | 未確認 | CWE-401 | Net::IDN::Punycode versions from 2.302 before 2.590 for Perl leak the output buffer on every rejected label in decode_punycode. The XS backend allocates the scalar it returns befo |
| CVE-2026-87079 | Deferred | 未確認 | CWE-407 | Net::IDN::Punycode versions before 2.590 for Perl allow CPU exhaustion via quadratic insertion cost when decoding a long label in decode_punycode. The XS backend inserts each deco |
| CVE-2026-87080 | Deferred | 未確認 | CWE-1286 | Net::IDN::Punycode::PP versions before 2.590 for Perl decode a truncated label to a name containing a character it never encoded in decode_punycode. The pure-Perl decoder reads on |
| CVE-2026-87081 | Deferred | 未確認 | CWE-407 | Net::IDN::UTS46 versions before 2.590 for Perl allow CPU exhaustion via quadratic punycode encoding of an overlong label before the length check in to_ascii. to_ascii punycode enc |
| CVE-2026-87082 | Deferred | 未確認 | CWE-1286, CWE-835 | Net::IDN::Punycode versions before 2.590 for Perl hang, crash or return a wrong label via unvalidated malformed UTF-8 in encode_punycode. Neither backend checks that its input is |
| CVE-2026-87083 | Deferred | 未確認 | CWE-20, CWE-502 | A weakness has been identified in tile-ai tilelang up to 0.1.14. This impacts the function KernelCache._load_kernel_from_disk of the file tilelang/cache/kernel_cache.py of the comp |
| CVE-2026-87084 | Analyzed | 未確認 | CWE-918 | Tanium addressed a server-side request forgery vulnerability in Enforce. |
| CVE-2026-87087 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-87088 | Analyzed | 未確認 | CWE-78 | Tanium addressed an unauthorized code execution vulnerability in Enforce. |
| CVE-2026-87090 | Awaiting Analysis | 未確認 | CWE-863 | Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog node-write path that may allow an authenticated attacker to delete another node's catalog regi |
| CVE-2026-87105 | Awaiting Analysis | 未確認 | CWE-89 | Tanium addressed a SQL injection vulnerability in Threat Response. |
| CVE-2026-87106 | Awaiting Analysis | 未確認 | CWE-400 | Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an authenticated client to exhaust server memory before ACL authorizati |
| CVE-2026-87107 | Awaiting Analysis | 未確認 | CWE-863 | Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog deregistration path that may allow a local ACL token to delete peer-imported catalog objects. |
| CVE-2026-87113 | Awaiting Analysis | 未確認 | CWE-639 | Tanium addressed an improper access controls vulnerability in Threat Response. |
| CVE-2026-87114 | Awaiting Analysis | 未確認 | CWE-829 | A flaw was found in kube-compare. When processing a 'container://' reference path, the tool incorrectly executes an untrusted container image's entrypoint instead of merely extract |
| CVE-2026-87116 | Awaiting Analysis | 未確認 | CWE-918 | Tanium addressed a server-side request forgery vulnerability in Threat Response. |
| CVE-2026-87118 | Deferred | 未確認 | CWE-787 | The Botslab G980H dash camera firmware contains an out of bounds write vulnerability in its command processing functionality. An authenticated attacker with adjacent network access |
| CVE-2026-87119 | Deferred | 未確認 | CWE-294 | Authentication Bypass by Capture-replay in ZenHive mpp allows an attacker holding a captured subscription activation credential to charge the payer repeatedly. The payer signs a T |
| CVE-2026-8712 | Deferred | 未確認 | CWE-918 | Wyoming before 1.10.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers with network access to force outbound connections to arbitrary targ |
| CVE-2026-87121 | Awaiting Analysis | 未確認 | CWE-787 | lwIP TCP/IP Stack MQTT is vulnerable to an out-of-bounds write, which may allow an attacker to gain full code execution on the device. |
| CVE-2026-87122 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-85984. Reason: This candidate is a reservation duplicate of CVE-2026-85984. Notes: All CVE user | |
| CVE-2026-87123 | Awaiting Analysis | 未確認 | CWE-248 | hbs is an Express view engine wrapper for Handlebars. Version 4.3.0 can crash the Node.js process during output escaping when an async helper, registered with registerAsyncHelper, |
| CVE-2026-87124 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily explo |
| CVE-2026-87125 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Financials for Asia/Pacific product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.8-12.2.1 |
| CVE-2026-87126 | Awaiting Analysis | 未確認 | CWE-400 | Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Reports Security). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi |
| CVE-2026-87127 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing). Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vu |
| CVE-2026-87128 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0 |
| CVE-2026-87129 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0 |
| CVE-2026-87130 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0 |
| CVE-2026-87131 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0 |
| CVE-2026-87132 | Analyzed | 未確認 | CWE-352 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0 |
| CVE-2026-87133 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0 |
| CVE-2026-87134 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0 |
| CVE-2026-87135 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0 |
| CVE-2026-87136 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0 |
| CVE-2026-87137 | Analyzed | 未確認 | CWE-284, CWE-863 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0 |
| CVE-2026-87138 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0 |
| CVE-2026-87139 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0 |
| CVE-2026-87140 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0 |
| CVE-2026-87141 | Analyzed | 未確認 | CWE-284, CWE-863 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0 |
| CVE-2026-87142 | Analyzed | 未確認 | CWE-284, CWE-306 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0 |
| CVE-2026-87143 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0 |
| CVE-2026-87144 | Analyzed | 未確認 | CWE-284, CWE-863 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0 |
| CVE-2026-87145 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0 |
| CVE-2026-87146 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0 |
| CVE-2026-87147 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0 |
| CVE-2026-87148 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0 |
| CVE-2026-87149 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO). Supported versions that are affected are 12.2 |
| CVE-2026-87150 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Setup Workbench). Supported versions that are affected are 12.2.3-12.2.15. Easily expl |
| CVE-2026-87151 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Setup Workbench). Supported versions that are affected are 12.2.3-12.2.15. Easily expl |
| CVE-2026-87152 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Supported versions that are affected are 12.2.3-12.2.15. Easily ex |
| CVE-2026-87153 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi |
| CVE-2026-87154 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi |
| CVE-2026-87155 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi |
| CVE-2026-87156 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi |
| CVE-2026-87157 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.4-12.2.15. Eas |
| CVE-2026-87158 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Enterprise Command Center). The supported version that is affected is V16. Easily expl |
| CVE-2026-87159 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily explo |
| CVE-2026-87160 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily explo |
| CVE-2026-87161 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily explo |
| CVE-2026-87162 | Awaiting Analysis | 未確認 | CWE-269 | Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO). Supported versions that are affected are 12.2 |
| CVE-2026-87163 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vul |
| CVE-2026-87164 | Awaiting Analysis | 未確認 | CWE-269 | Vulnerability in the Oracle Banking Branch product of Oracle Financial Services Applications (component: Reports). Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. |
| CVE-2026-87165 | Awaiting Analysis | 未確認 | CWE-269 | Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: ECC For Award and IDV). The supported version that is a |
| CVE-2026-87166 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vul |
| CVE-2026-87167 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing). Supported versions that are affected are 12.2.11-12.2.15. Easily exploitable vu |
| CVE-2026-87168 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing). Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vu |
| CVE-2026-87169 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Wage Determination Online). Supported versions that are |
| CVE-2026-87170 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87171 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to |
| CVE-2026-87172 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87173 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87174 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87175 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87176 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87177 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87178 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87179 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87180 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87181 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87182 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87183 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87184 | Analyzed | 未確認 | CWE-89 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87185 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87186 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87187 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87188 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87189 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87190 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to |
| CVE-2026-87191 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87192 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87193 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87194 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87195 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to |
| CVE-2026-87196 | Modified | 未確認 | CWE-306 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87197 | Modified | 未確認 | CWE-306 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87198 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to |
| CVE-2026-87199 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87200 | Modified | 未確認 | CWE-306 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87201 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87202 | Modified | 未確認 | CWE-89 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87203 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to |
| CVE-2026-87204 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87205 | Modified | 未確認 | CWE-306 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87206 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to |
| CVE-2026-87207 | Modified | 未確認 | CWE-89 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87208 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87209 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87210 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87211 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87212 | Analyzed | 未確認 | CWE-89 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to |
| CVE-2026-87213 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to |
| CVE-2026-87214 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87215 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87216 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87217 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87218 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87219 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87220 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87221 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87222 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87223 | Analyzed | 未確認 | CWE-306 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87224 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87225 | Analyzed | 未確認 | CWE-200 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87226 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87227 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87228 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87229 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87230 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87231 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to |
| CVE-2026-87232 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87233 | Analyzed | 未確認 | CWE-20, CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87234 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87235 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to |
| CVE-2026-87236 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87237 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to |
| CVE-2026-87238 | Modified | 未確認 | CWE-89 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87239 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87240 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to |
| CVE-2026-87241 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87242 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to |
| CVE-2026-87243 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to |
| CVE-2026-87244 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87245 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87246 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87247 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to |
| CVE-2026-87248 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87249 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87250 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploi |
| CVE-2026-87252 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version that is affected is 9.3.6. Difficult to exploit vulner |
| CVE-2026-87253 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Web Client). The supported version that is affected is 9.3.6. Easily exploitable vulnerability al |
| CVE-2026-87254 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Folders, Files & Attachments). The supported version that is affected is 9.3.6. Difficult to expl |
| CVE-2026-87256 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version that is affected is 9.3.6. Easily exploitable vulnerab |
| CVE-2026-87257 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: SDK). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows lo |
| CVE-2026-87258 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Folders, Files & Attachments). The supported version that is affected is 9.3.6. Easily exploitabl |
| CVE-2026-87259 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affec |
| CVE-2026-87260 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affec |
| CVE-2026-87261 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affec |
| CVE-2026-87262 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affec |
| CVE-2026-87264 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). Supported versions that are affected are 8.61-8.63. Easily exp |
| CVE-2026-87265 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vul |
| CVE-2026-87266 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version that is affected is 9.3.6. Easily exploitable vulnerab |
| CVE-2026-87267 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Difficult to exploit vulnerability |
| CVE-2026-87268 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability a |
| CVE-2026-87269 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability a |
| CVE-2026-87270 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability a |
| CVE-2026-87271 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability a |
| CVE-2026-87272 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability a |
| CVE-2026-87273 | Analyzed | 未確認 | CWE-269 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability a |
| CVE-2026-87274 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Difficult to exploit vulnerability |
| CVE-2026-87275 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability a |
| CVE-2026-87276 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Difficult to exploit vulnerability |
| CVE-2026-87277 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability a |
| CVE-2026-87278 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability a |
| CVE-2026-87279 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability a |
| CVE-2026-87280 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability a |
| CVE-2026-87281 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability a |
| CVE-2026-87282 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability a |
| CVE-2026-87283 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability a |
| CVE-2026-87284 | Analyzed | 未確認 | CWE-284 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability a |
| CVE-2026-87285 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability a |
| CVE-2026-87286 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to exploit vuln |
| CVE-2026-87287 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to exploit vuln |
| CVE-2026-87288 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to exploit vuln |
| CVE-2026-87289 | Analyzed | 未確認 | CWE-400 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-static-content). Supported versions that are affected are 4.0.0-4.5.4. Easily exploi |
| CVE-2026-87429 | Modified | 未確認 | CWE-862 | Missing authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictio |
| CVE-2026-87430 | Analyzed | 未確認 | CWE-122 | Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chrom |
| CVE-2026-87431 | Modified | 未確認 | CWE-862 | Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted Chrome extension. (Chromium secu |
| CVE-2026-87432 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted |
| CVE-2026-87433 | Modified | 未確認 | CWE-367 | Race condition in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML pag |
| CVE-2026-87434 | Analyzed | 未確認 | CWE-862 | Missing authorization in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted H |
| CVE-2026-87435 | Analyzed | 未確認 | CWE-200 | Information leak in ControlledFrame in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a |
| CVE-2026-87436 | Analyzed | 未確認 | CWE-459 | Incomplete cleanup in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome exten |
| CVE-2026-87437 | Analyzed | 未確認 | CWE-200 | Information leak in Frames in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Low |
| CVE-2026-87438 | Analyzed | 未確認 | CWE-787 | Out of bounds write in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. |
| CVE-2026-87439 | Analyzed | 未確認 | CWE-200 | Information leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a c |
| CVE-2026-87440 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securi |
| CVE-2026-87441 | Analyzed | 未確認 | CWE-862 | Missing authorization in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. (Chromium |
| CVE-2026-87442 | Analyzed | 未確認 | CWE-441 | Confused deputy in Prerender in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially bypass web origin policy via |
| CVE-2026-87443 | Analyzed | 未確認 | CWE-862 | Missing authorization in Actor in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severit |
| CVE-2026-87444 | Analyzed | 未確認 | CWE-119 | Memory corruption in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securi |
| CVE-2026-87445 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in Session in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-87446 | Analyzed | 未確認 | CWE-459 | Incomplete cleanup in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted |
| CVE-2026-87447 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome |
| CVE-2026-87448 | Analyzed | 未確認 | CWE-416 | Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium securi |
| CVE-2026-87449 | Analyzed | 未確認 | CWE-352 | Cross-site request forgery in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. ( |
| CVE-2026-87450 | Modified | 未確認 | CWE-863 | Incorrect authorization in Permissions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted |
| CVE-2026-87451 | Analyzed | 未確認 | CWE-200 | Information leak in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted H |
| CVE-2026-87452 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in GPU in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-orig |
| CVE-2026-87453 | Analyzed | 未確認 | CWE-441 | Confused deputy in BackgroundFetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to leak sensitive information via a cr |
| CVE-2026-87454 | Analyzed | 未確認 | CWE-200 | Information leak in Enterprise in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium se |
| CVE-2026-87455 | Analyzed | 未確認 | CWE-416 | Use after free in Aura in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromiu |
| CVE-2026-87456 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a |
| CVE-2026-87457 | Analyzed | 未確認 | CWE-367 | Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromiu |
| CVE-2026-87458 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chro |
| CVE-2026-87459 | Analyzed | 未確認 | CWE-203 | Observable discrepancy in Select in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security sever |
| CVE-2026-87460 | Analyzed | 未確認 | CWE-416 | Use after free in Platform in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securit |
| CVE-2026-87461 | Analyzed | 未確認 | CWE-200 | Information leak in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted Chrome extension. (Chromium security severity: Lo |
| CVE-2026-87462 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromiu |
| CVE-2026-87463 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Certificate in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially spoof address bar via crafted network traffic. |
| CVE-2026-87464 | Modified | 未確認 | CWE-416 | Use after free in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-87465 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted H |
| CVE-2026-87466 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Workers in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severit |
| CVE-2026-87467 | Analyzed | 未確認 | CWE-362 | Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local progr |
| CVE-2026-87468 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: |
| CVE-2026-87469 | Analyzed | 未確認 | CWE-20 | Improper input validation in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy into a privileged page via crafted network tra |
| CVE-2026-87470 | Analyzed | 未確認 | CWE-1284 | Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a cra |
| CVE-2026-87471 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a c |
| CVE-2026-87472 | Analyzed | 未確認 | CWE-20 | Improper input validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTM |
| CVE-2026-87473 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in FileHandling in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a c |
| CVE-2026-87474 | Analyzed | 未確認 | CWE-416 | Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chr |
| CVE-2026-87475 | Analyzed | 未確認 | CWE-862 | Missing authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions into a privile |
| CVE-2026-87476 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security seve |
| CVE-2026-87477 | Analyzed | 未確認 | CWE-200 | Information leak in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Low) |
| CVE-2026-87478 | Analyzed | 未確認 | CWE-203 | Observable discrepancy in Autofill in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security sev |
| CVE-2026-87479 | Analyzed | 未確認 | CWE-807 | Insufficient policy enforcement in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engine |
| CVE-2026-87480 | Analyzed | 未確認 | CWE-416 | Use after free in Printing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside |
| CVE-2026-87481 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute a |
| CVE-2026-87482 | Analyzed | 未確認 | CWE-319 | Cleartext transmission of sensitive data in HttpsUpgrades in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via crafted netw |
| CVE-2026-87483 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Browser in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Ch |
| CVE-2026-87484 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chro |
| CVE-2026-87485 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted |
| CVE-2026-87486 | Analyzed | 未確認 | CWE-1021 | Clickjacking in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to spoof address bar via a co-installed app. (Chromium security |
| CVE-2026-87487 | Analyzed | 未確認 | CWE-862 | Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to p |
| CVE-2026-87488 | Analyzed | 未確認 | CWE-416 | Use after free in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chro |
| CVE-2026-87489 | Analyzed | 未確認 | CWE-119 | Memory corruption in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted Chrome extension. ( |
| CVE-2026-87490 | Analyzed | 未確認 | CWE-200 | Information leak in Transactions Platform in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium secur |
| CVE-2026-87491 | Analyzed | 掲載 | CWE-787 | Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-87492 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML p |
| CVE-2026-87493 | Analyzed | 未確認 | CWE-862 | Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a craft |
| CVE-2026-87494 | Analyzed | 未確認 | CWE-416 | Use after free in Browser in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbo |
| CVE-2026-87495 | Analyzed | 未確認 | CWE-200 | Information leak in Scroll in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML p |
| CVE-2026-87496 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chrom |
| CVE-2026-87497 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-87498 | Analyzed | 未確認 | CWE-862 | Missing authorization in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted |
| CVE-2026-87499 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted |
| CVE-2026-87500 | Analyzed | 未確認 | CWE-129 | Improper validation of array index in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafte |
| CVE-2026-87501 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Mediu |
| CVE-2026-87502 | Analyzed | 未確認 | CWE-441 | Confused deputy in Fullscreen in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof U |
| CVE-2026-87503 | Analyzed | 未確認 | CWE-841 | Inappropriate implementation in Downloads in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access rest |
| CVE-2026-87504 | Analyzed | 未確認 | CWE-416 | Use after free in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted C |
| CVE-2026-87505 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a craf |
| CVE-2026-87506 | Analyzed | 未確認 | CWE-250 | Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outsid |
| CVE-2026-87507 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chr |
| CVE-2026-87508 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity |
| CVE-2026-87509 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. |
| CVE-2026-87510 | Analyzed | 未確認 | CWE-20 | Improper input validation in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary cod |
| CVE-2026-87511 | Analyzed | 未確認 | CWE-862 | Missing authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. (Chromium security s |
| CVE-2026-87512 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chro |
| CVE-2026-87513 | Analyzed | 未確認 | CWE-862 | Missing authorization in ControlledFrame in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a |
| CVE-2026-87514 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security sever |
| CVE-2026-87515 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafte |
| CVE-2026-87516 | Analyzed | 未確認 | CWE-203 | Observable discrepancy in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severit |
| CVE-2026-87517 | Analyzed | 未確認 | CWE-367 | Race condition in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML pa |
| CVE-2026-87518 | Analyzed | 未確認 | CWE-203 | Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially obtain se |
| CVE-2026-87519 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a c |
| CVE-2026-87520 | Analyzed | 未確認 | CWE-416 | Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chrom |
| CVE-2026-87521 | Analyzed | 未確認 | CWE-200 | Information leak in WebMCP in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML |
| CVE-2026-87522 | Analyzed | 未確認 | CWE-862 | Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially bypass system access r |
| CVE-2026-87523 | Analyzed | 未確認 | CWE-367 | Race condition in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML pa |
| CVE-2026-87524 | Analyzed | 未確認 | CWE-416 | Use after free in Core in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary cod |
| CVE-2026-87525 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to read memory outside the sandbox via a local program. (Chromium se |
| CVE-2026-87526 | Analyzed | 未確認 | CWE-416 | Use after free in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbo |
| CVE-2026-87527 | Analyzed | 未確認 | CWE-122 | Buffer overflow in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-87528 | Analyzed | 未確認 | CWE-843 | Type confusion in Rust in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML |
| CVE-2026-87529 | Analyzed | 未確認 | CWE-197 | Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML pag |
| CVE-2026-87530 | Analyzed | 未確認 | CWE-427 | Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox |
| CVE-2026-87531 | Analyzed | 未確認 | CWE-200 | Information leak in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML p |
| CVE-2026-87532 | Analyzed | 未確認 | CWE-754 | Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium |
| CVE-2026-87533 | Analyzed | 未確認 | CWE-416 | Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security se |
| CVE-2026-87534 | Modified | 未確認 | CWE-862 | Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions |
| CVE-2026-87535 | Analyzed | 未確認 | CWE-221 | Information loss or omission in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML pag |
| CVE-2026-87536 | Analyzed | 未確認 | CWE-416 | Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-87537 | Analyzed | 未確認 | CWE-862 | Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code |
| CVE-2026-87538 | Analyzed | 未確認 | CWE-1021 | Clickjacking in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elemen |
| CVE-2026-87539 | Analyzed | 未確認 | CWE-203 | Observable discrepancy in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity |
| CVE-2026-87540 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Med |
| CVE-2026-87541 | Analyzed | 未確認 | CWE-200 | Information leak in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTM |
| CVE-2026-87542 | Analyzed | 未確認 | CWE-416 | Use after free in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-87543 | Modified | 未確認 | CWE-862 | Missing authorization in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML |
| CVE-2026-87544 | Modified | 未確認 | CWE-863 | Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HT |
| CVE-2026-87545 | Analyzed | 未確認 | CWE-200 | Information leak in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTM |
| CVE-2026-87546 | Modified | 未確認 | CWE-704 | Incorrect type conversion or cast in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted fil |
| CVE-2026-87547 | Analyzed | 未確認 | CWE-706 | Incorrect reference resolution in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code o |
| CVE-2026-87548 | Modified | 未確認 | CWE-754 | Improper state validation in Installer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium sec |
| CVE-2026-87549 | Modified | 未確認 | CWE-459 | Incomplete cleanup in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted H |
| CVE-2026-87550 | Analyzed | 未確認 | CWE-116 | Improper encoding or escaping of output in CSS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (C |
| CVE-2026-87551 | Modified | 未確認 | CWE-295 | Improper certificate validation in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted netw |
| CVE-2026-87552 | Modified | 未確認 | CWE-862 | Missing authorization in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to obtain sensitive information via a co-installed app. |
| CVE-2026-87553 | Analyzed | 未確認 | CWE-20 | Improper input validation in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitra |
| CVE-2026-87554 | Analyzed | 未確認 | CWE-367 | Race condition in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chro |
| CVE-2026-87555 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium |
| CVE-2026-87556 | Modified | 未確認 | CWE-862 | Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security |
| CVE-2026-87557 | Modified | 未確認 | CWE-862 | Missing authorization in LocalNetworkAccess in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restr |
| CVE-2026-87558 | Analyzed | 未確認 | CWE-416 | Use after free in Payments in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chrom |
| CVE-2026-87559 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in UI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium s |
| CVE-2026-87560 | Modified | 未確認 | CWE-862 | Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security |
| CVE-2026-87561 | Modified | 未確認 | CWE-863 | Incorrect authorization in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted Chrome extension. (Chromiu |
| CVE-2026-87562 | Analyzed | 未確認 | CWE-706 | Incorrect reference resolution in Accessibility in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially spoof UI elements via a crafted HTML page |
| CVE-2026-87563 | Analyzed | 未確認 | CWE-346 | Origin validation error in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: |
| CVE-2026-87564 | Modified | 未確認 | CWE-843 | Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-87565 | Analyzed | 未確認 | CWE-200 | Information leak in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium secur |
| CVE-2026-87566 | Analyzed | 未確認 | CWE-203 | Observable discrepancy in Layout in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severit |
| CVE-2026-87567 | Modified | 未確認 | CWE-451 | UI misrepresentation in UrlFormatting in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted domain name |
| CVE-2026-87568 | Modified | 未確認 | CWE-20 | Improper input validation in Chromium in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via crafted ne |
| CVE-2026-87569 | Modified | 未確認 | CWE-862 | Missing authorization in Views in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HT |
| CVE-2026-87570 | Modified | 未確認 | CWE-863 | Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering |
| CVE-2026-87571 | Modified | 未確認 | CWE-295 | Improper certificate validation in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted ne |
| CVE-2026-87572 | Analyzed | 未確認 | CWE-74 | Injection in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the s |
| CVE-2026-87573 | Analyzed | 未確認 | CWE-20 | Improper input validation in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security sever |
| CVE-2026-87574 | Analyzed | 未確認 | CWE-200 | Information leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity |
| CVE-2026-87575 | Modified | 未確認 | CWE-863 | Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted |
| CVE-2026-87576 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sa |
| CVE-2026-87577 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. (C |
| CVE-2026-87578 | Analyzed | 未確認 | CWE-416 | Use after free in Receiver in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium |
| CVE-2026-87579 | Analyzed | 未確認 | CWE-122 | Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-87580 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in WebAppInstalls in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineerin |
| CVE-2026-87581 | Analyzed | 未確認 | CWE-416 | Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox |
| CVE-2026-87582 | Analyzed | 未確認 | CWE-441 | Confused deputy in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code out |
| CVE-2026-87583 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security s |
| CVE-2026-87584 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML pa |
| CVE-2026-87585 | Analyzed | 未確認 | CWE-415 | Double free in PDFium in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted PDF fil |
| CVE-2026-87586 | Analyzed | 未確認 | CWE-125 | Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severit |
| CVE-2026-87587 | Analyzed | 未確認 | CWE-416 | Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-87588 | Analyzed | 未確認 | CWE-416 | Use after free in Chromecast in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secur |
| CVE-2026-87589 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrict |
| CVE-2026-87590 | Analyzed | 未確認 | CWE-20 | Improper input validation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensitive information via crafted network traffic. (Chr |
| CVE-2026-87591 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. (Chromi |
| CVE-2026-87592 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Tint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium securi |
| CVE-2026-87593 | Analyzed | 未確認 | CWE-200 | Information leak in Editing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: |
| CVE-2026-87594 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information v |
| CVE-2026-87595 | Analyzed | 未確認 | CWE-918 | Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a cra |
| CVE-2026-87596 | Analyzed | 未確認 | CWE-125 | Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severit |
| CVE-2026-87597 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. (Chromium security s |
| CVE-2026-87598 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security s |
| CVE-2026-87599 | Analyzed | 未確認 | CWE-20 | Improper input validation in Interstitials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severi |
| CVE-2026-87600 | Analyzed | 未確認 | CWE-20 | Improper input validation in Safebrowsing in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access rest |
| CVE-2026-87601 | Analyzed | 未確認 | CWE-362 | Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-87602 | Analyzed | 未確認 | CWE-125 | Out of bounds read in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially read memory outside the sandbox via a crafted HTML page. |
| CVE-2026-87603 | Analyzed | 未確認 | CWE-862 | Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium securi |
| CVE-2026-87604 | Analyzed | 未確認 | CWE-125 | Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside |
| CVE-2026-87605 | Analyzed | 未確認 | CWE-862 | Missing authorization in Contacts in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to pot |
| CVE-2026-87606 | Analyzed | 未確認 | CWE-862 | Missing authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a cra |
| CVE-2026-87607 | Analyzed | 未確認 | CWE-416 | Use after free in Device in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML pa |
| CVE-2026-87608 | Analyzed | 未確認 | CWE-295 | Improper certificate validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted net |
| CVE-2026-87609 | Analyzed | 未確認 | CWE-416 | Use after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Ch |
| CVE-2026-87610 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML |
| CVE-2026-87611 | Analyzed | 未確認 | CWE-862 | Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a cra |
| CVE-2026-87612 | Analyzed | 未確認 | CWE-843 | Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-87613 | Analyzed | 未確認 | CWE-706 | Incorrect reference resolution in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via crafted |
| CVE-2026-87614 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via |
| CVE-2026-87615 | Analyzed | 未確認 | CWE-362 | Race condition in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium s |
| CVE-2026-87616 | Analyzed | 未確認 | CWE-665 | Improper initialization in Views in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engin |
| CVE-2026-87617 | Analyzed | 未確認 | CWE-416 | Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafte |
| CVE-2026-87618 | Analyzed | 未確認 | CWE-706 | Incorrect reference resolution in Storage in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially ex |
| CVE-2026-87619 | Analyzed | 未確認 | CWE-203 | Observable discrepancy in Prefetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: |
| CVE-2026-87620 | Analyzed | 未確認 | CWE-203 | Observable discrepancy in SVG in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity |
| CVE-2026-87621 | Analyzed | 未確認 | CWE-787 | Out of bounds write in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted |
| CVE-2026-87622 | Analyzed | 未確認 | CWE-862 | Missing authorization in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: M |
| CVE-2026-87623 | Analyzed | 未確認 | CWE-203 | Observable discrepancy in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML pag |
| CVE-2026-87624 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via |
| CVE-2026-87625 | Analyzed | 未確認 | CWE-416 | Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chro |
| CVE-2026-87626 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via crafted network traffic. |
| CVE-2026-87627 | Analyzed | 未確認 | CWE-436 | Interpretation conflict in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictio |
| CVE-2026-87628 | Analyzed | 未確認 | CWE-416 | Use after free in Cast in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. ( |
| CVE-2026-87629 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Sources in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML |
| CVE-2026-87630 | Analyzed | 未確認 | CWE-190 | Integer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: |
| CVE-2026-87631 | Analyzed | 未確認 | CWE-862 | Missing authorization in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. (Chromium security |
| CVE-2026-87632 | Analyzed | 未確認 | CWE-79 | Cross-site scripting in SanitizerAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security sever |
| CVE-2026-87633 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via UI Interaction. (Chromium security severi |
| CVE-2026-87634 | Analyzed | 未確認 | CWE-416 | Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. |
| CVE-2026-87635 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium |
| CVE-2026-87636 | Analyzed | 未確認 | CWE-843 | Type confusion in XML in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium |
| CVE-2026-87637 | Analyzed | 未確認 | CWE-416 | Use after free in Extensions in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chr |
| CVE-2026-87638 | Analyzed | 未確認 | CWE-787 | Out of bounds write in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (C |
| CVE-2026-87639 | Analyzed | 未確認 | CWE-416 | Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outs |
| CVE-2026-87640 | Modified | 未確認 | CWE-125 | Out of bounds read in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sa |
| CVE-2026-87641 | Modified | 未確認 | CWE-362 | Race condition in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severit |
| CVE-2026-87642 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Me |
| CVE-2026-87643 | Analyzed | 未確認 | CWE-190 | Integer overflow in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML |
| CVE-2026-87644 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Views in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engin |
| CVE-2026-87645 | Modified | 未確認 | CWE-754 | Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium |
| CVE-2026-87646 | Analyzed | 未確認 | CWE-416 | Use after free in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chrom |
| CVE-2026-87647 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in GPU in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a cr |
| CVE-2026-87648 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary co |
| CVE-2026-87649 | Modified | 未確認 | CWE-451 | UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted |
| CVE-2026-87650 | Analyzed | 未確認 | CWE-125 | Out of bounds read in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Ch |
| CVE-2026-87651 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: |
| CVE-2026-87652 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in PushAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a craf |
| CVE-2026-87653 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in FullScreen in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security |
| CVE-2026-87654 | Analyzed | 未確認 | CWE-122 | Buffer overflow in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chr |
| CVE-2026-87655 | Analyzed | 未確認 | CWE-1021 | Clickjacking in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium se |
| CVE-2026-87656 | Modified | 未確認 | CWE-754 | Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium |
| CVE-2026-87657 | Analyzed | 未確認 | CWE-416 | Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML |
| CVE-2026-87658 | Analyzed | 未確認 | CWE-200 | Information leak in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted Chrome exte |
| CVE-2026-87701 | Analyzed | 未確認 | CWE-74 | Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Cosmos DB allows an authorized attacker to elevate privileges over a net |
| CVE-2026-87719 | Analyzed | 未確認 | CWE-502 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 tha |
| CVE-2026-87720 | Awaiting Analysis | 未確認 | CWE-613, CWE-706, CWE-863 | Incorrect Authorization (CWE-863) in project name normalization (ProjectUtil.stripGitSuffix) and ProjectCache eviction logic (ProjectCacheImpl) in Gerrit Code Review versions 2.16. |
| CVE-2026-87721 | Awaiting Analysis | 未確認 | CWE-400, CWE-407, CWE-834 | Uncontrolled Resource Consumption (CWE-400 / CWE-407) in the ANTLR 3 search query parser (QueryParser / Query.g) in Gerrit Code Review versions 2.0.19 through 3.12.9, 3.13.0 throug |
| CVE-2026-87722 | Awaiting Analysis | 未確認 | CWE-1333, CWE-400 | Uncontrolled Resource Consumption (CWE-400 / CWE-1333) in regex search query predicates (such as RegexProjectPredicate, RegexRefPredicate, RegexPathPredicate, and sibling predicate |
| CVE-2026-87723 | Awaiting Analysis | 未確認 | CWE-426 | In Google fuse-archive versions prior to 1.24, an attacker who can prepend a directory to PATH or write a malicious binary to an attacker-controlled or writable directory appearing |
| CVE-2026-87724 | Deferred | 未確認 | CWE-669 | Tor before 0.4.9.12 interprets the CC_RESPONSE extension even when CC_REQUEST was not sent, which allows remote attackers to cause a denial of service (crash) because of corrupted |
| CVE-2026-87727 | Deferred | 未確認 | CWE-22 | a-blog cms Ver. 3.2.33 and earlier contains a path traversal vulnerability, which allows an unauthenticated attacker to read or delete arbitrary files on the affected product. |
| CVE-2026-87730 | Rejected | 未確認 | Rejected reason: this is rejected | |
| CVE-2026-87732 | Deferred | 未確認 | CWE-347 | An issue was discovered in the mirage-crypto package before 2.2.0 for OCaml. The AES.GCM.authenticate_decrypt_into and Chacha20.authenticate_decrypt_into functions write the decryp |
| CVE-2026-87733 | Deferred | 未確認 | CWE-295 | An issue was discovered in the mirage-crypto-ec function before 2.2.0 for OCaml. The ECDSA functions {P256,P384,P521}.Dsa.pub_of_octets accept 0x00, the encoding of the point at in |
| CVE-2026-87734 | Deferred | 未確認 | CWE-923 | An issue was discovered in the utcp package before 0.0.6 for OCaml. Out-of-order segment reassembly allows remote denial of service. |
| CVE-2026-87735 | Deferred | 未確認 | CWE-1284 | An issue was discovered in the mirage-crypto-pk package before 2.3.0 for OCaml. There is an undocumented exception for a small message during RSA decryption or encryption. |
| CVE-2026-87736 | Deferred | 未確認 | CWE-125 | An issue was discovered in the mirage-crypto-ec package before 2.3.0 for OCaml. There is an EC public key out-of-bounds read for compressed points. |
| CVE-2026-87737 | Deferred | 未確認 | CWE-208 | An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing side channel for NIST elliptic-curve scalar multiplication: the time required for |
| CVE-2026-87739 | Awaiting Analysis | 未確認 | CWE-639 | An improper authentication vulnerability in PaperCut MF/NG allows an unauthenticated, remote attacker to trigger report generation. By submitting report generation requests without |
| CVE-2026-87741 | Deferred | 未確認 | CWE-78 | The ConvertPlus plugin for WordPress is vulnerable to Deserialization of Untrusted Data in all versions up to, and including, 3.6.3 via the style parameter of the cp_display_previe |
| CVE-2026-87742 | Awaiting Analysis | 未確認 | CWE-770 | A flaw was found in quarkus-websockets-next. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by streaming messages over a single connection faster th |
| CVE-2026-87743 | Awaiting Analysis | 未確認 | CWE-551 | A flaw was found in Quarkus HTTP security. An unauthenticated attacker can exploit a discrepancy in how paths are normalized between the security matcher and HTTP request dispatche |
| CVE-2026-87747 | Deferred | 未確認 | CWE-23 | The Enterprise Cloud Database developed by Ragic has an Arbitrary File Read vulnerability. Privileged remote attackers can exploit Relative Path Traversal to download arbitrary sys |
| CVE-2026-87748 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Interprobe Information Technologies Inc. Qorela DC allows Privilege Abuse. This issue affects Qorela DC: from 1.6.1-RC29 before v1.6.2. |
| CVE-2026-87752 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. Agentis |
| CVE-2026-87759 | Deferred | 未確認 | CWE-269 | The Add User Autocomplete WordPress plugin before 1.2 does not perform any capability or nonce check before creating a pending site-membership invitation carrying a caller-supplied |
| CVE-2026-87766 | Awaiting Analysis | 未確認 | CWE-59 | A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing attacker-chos |
| CVE-2026-87767 | Deferred | 未確認 | CWE-89 | The wp shortcut link and advertisement baner WordPress plugin through 1.2.0 does not sanitize and escape a parameter before using it in a SQL query on an AJAX action available to u |
| CVE-2026-87770 | Deferred | 未確認 | CWE-89 | The Price Drop Alert for Woo Commerce WordPress plugin through 1.1 does not sanitize and escape parameters before using them in a SQL query on an AJAX action available to unauthent |
| CVE-2026-87771 | Deferred | 未確認 | CWE-89 | The Product Question and Answer WordPress plugin through 1.1.0 does not sanitize and escape parameters before using them in SQL queries on AJAX actions available to unauthenticated |
| CVE-2026-87774 | Deferred | 未確認 | CWE-89 | The Tz Weekly Radio Schedule WordPress plugin through 1.8.1 does not sanitize and escape a parameter before using it to build a SQL query on an AJAX action available to unauthentic |
| CVE-2026-87775 | Deferred | 未確認 | CWE-89 | The Tz Weekly Radio Schedule WordPress plugin through 1.8.1 does not sanitize and escape a parameter before using it to build a SQL query on an AJAX action available to unauthentic |
| CVE-2026-87776 | Awaiting Analysis | 未確認 | CWE-401, CWE-459 | compression is a Node.js and Express compression middleware. In versions before 1.8.2, when a client aborts the connection while a compressed response is still being sent, the zlib |
| CVE-2026-87777 | Deferred | 未確認 | CWE-79 | The Hostinger Reach WordPress plugin before 1.8.3 does not sanitize and escape a widget setting before outputting it in the editor preview, allowing users with contributor-level a |
| CVE-2026-87779 | Deferred | 未確認 | CWE-532 | Insertion of sensitive information into log file vulnerability in Apache Syncope. When AES key of non-standard length (not 16/24/32 bytes) is configured, Syncope will pad the pr |
| CVE-2026-8778 | Deferred | 未確認 | CWE-434 | The MIPL Grouped Checkout Fields for WooCommerce – Customize & Organize Checkout Fields. plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type valid |
| CVE-2026-87785 | Deferred | 未確認 | CWE-290 | Authentication bypass by spoofing vulnerability in Apache Syncope. When the configured JWKS settings for internal JWT authentication are disclosed (at least protocol and key), a |
| CVE-2026-87786 | Deferred | 未確認 | CWE-79 | The Dewa Kirim WordPress plugin through 1.0.0 does not escape delivery coordinates submitted at checkout before outputting them inside an inline script, allowing unauthenticated u |
| CVE-2026-87791 | Deferred | 未確認 | CWE-22 | A path traversal vulnerability exists in the reserved_file_check function of the functions.php file in the WordPress Design Scuole Italia theme. The vulnerability allows an unauthe |
| CVE-2026-87792 | Deferred | 未確認 | CWE-200, CWE-862 | The "Design Scuole Italia" WordPress theme is affected by multiple Authorization Bypass vulnerabilities in the dsi_pdf_generator and dsi_csv_generator functions, allowing an unauth |
| CVE-2026-87793 | Deferred | 未確認 | CWE-79 | The "Design Scuole Italia" WordPress theme is affected by a Reflected XSS vulnerability in the filters-scheda-didattica.php file, allowing an unauthenticated attacker to execute a |
| CVE-2026-87794 | Deferred | 未確認 | CWE-88 | bestzip versions 2.2.6 and 3.0.2 contain an argument injection vulnerability in the nativeZip function that allows attackers to inject arbitrary arguments to the Info-ZIP backend. |
| CVE-2026-87795 | Awaiting Analysis | 未確認 | CWE-125 | zstd-jni versions before 1.5.7-14 fail to validate offset and length parameters in the ZstdDictCompress constructor, allowing out-of-bounds memory reads. Attackers can supply untru |
| CVE-2026-87796 | Deferred | 未確認 | CWE-434 | The Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.1.9 via the move_file function. This is due |
| CVE-2026-87797 | Deferred | 未確認 | CWE-862 | The Sprout Invoices WordPress plugin before 20.8.16 does not perform a capability or ownership check before allowing a private note to be overwritten through one of its AJAX actio |
| CVE-2026-87798 | Deferred | 未確認 | CWE-59 | Improper link resolution in the recursive file pull feature of the LXD CLI client in Canonical LXD versions 4.0.2 up to 6.9 (fixed in 4.0.14, 5.0.10 and 5.21.8) on Linux allows an |
| CVE-2026-87799 | Deferred | 未確認 | CWE-59 | Improper link resolution in the migration receive path in Canonical LXD versions 4.0 and later (fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10) on Linux allows an authenticated client th |
| CVE-2026-87802 | Deferred | 未確認 | CWE-347 | Improper verification of cryptographic signature vulnerability in Apache Syncope. When SRA is configured for OAuth 2.0 without JWKS set URI assigned, an attacker can forge arbit |
| CVE-2026-87803 | Deferred | 未確認 | CWE-863 | An authorization bypass vulnerability exists in the Countly Server DBViewer due to flawed sub-pipeline detection in the aggregation stage sanitizer. The /o/db aggregation endpoint |
| CVE-2026-87804 | Rejected | 未確認 | Rejected reason: no security impact | |
| CVE-2026-87806 | Deferred | 未確認 | CWE-287 | Parse Server versions <= 8.6.87 and >= 9.0.0 < 9.10.1-alpha.7 contain an authentication bypass in the built-in LDAP authentication adapter. The adapter forwarded the client-supplie |
| CVE-2026-87807 | Deferred | 未確認 | CWE-89 | siyuan versions before v3.8.2 contain an authenticated SQL injection vulnerability in the fullTextSearchBlock endpoint's method=1 query parameter. Attackers can inject UNION SELECT |
| CVE-2026-87808 | Deferred | 未確認 | CWE-693 | SiYuan versions <= 3.8.1 contain an incomplete fix for CVE-2026-32767 (GHSA-j7wh-x834-p3r7). The prior fix (commit d5e2d0bc) added an administrator check for SQL mode (method=2) in |
| CVE-2026-87809 | Deferred | 未確認 | CWE-639 | Siyuan before v3.8.2 fails to apply publish-access filtering to embedded blocks before rendering in the /api/export/preview and /api/lute/copyStdMarkdown endpoints. Attackers with |
| CVE-2026-87810 | Deferred | 未確認 | CWE-200 | Siyuan before v3.8.2 contains an information disclosure vulnerability in the POST /api/search/fullTextSearchBlock endpoint that filters private blocks from results but returns unfi |
| CVE-2026-87811 | Deferred | 未確認 | CWE-79 | SiYuan before v3.8.2 inserts persisted notebook template paths into HTML input value attributes without proper attribute encoding. Attackers can craft malicious template paths that |
| CVE-2026-87812 | Deferred | 未確認 | CWE-79 | SiYuan before v3.8.2 contains a stored cross-site scripting vulnerability in Bazaar package cards where the iconURL metadata is inserted directly into HTML img src attributes witho |
| CVE-2026-87813 | Deferred | 未確認 | CWE-79 | SiYuan before v3.8.2 contains a stored cross-site scripting vulnerability in the Search Assets result list where asset filenames are interpolated into HTML without escaping. Authen |
| CVE-2026-87814 | Deferred | 未確認 | CWE-79 | SiYuan before v3.8.2 contains a stored cross-site scripting vulnerability in the search asset preview feature that fails to escape indexed asset content before inserting it into th |
| CVE-2026-87815 | Deferred | 未確認 | CWE-73 | SiYuan versions before v3.8.2 contain a path traversal vulnerability in the /api/riff/removeRiffDeck endpoint that fails to validate the deckID parameter. An authenticated administ |
| CVE-2026-87816 | Deferred | 未確認 | CWE-362 | PasswordPusher before 2.11.1 contains a time-of-check-to-time-of-use race condition in view limit enforcement that allows unauthenticated attackers to bypass expire_after_views lim |
| CVE-2026-87817 | Analyzed | 未確認 | CWE-94 | GitPython before 3.1.60 fails to properly validate the git directory location, allowing attackers to impersonate the git directory using tracked files like gitdir, commondir, and H |
| CVE-2026-87818 | Analyzed | 未確認 | CWE-88 | GitPython 3.1.59 fails to restrict the --no-index option in the high-level diff API, allowing attackers to read arbitrary filesystem paths as repository operands. Attackers can com |
| CVE-2026-87819 | Analyzed | 未確認 | CWE-1333 | GitPython before 3.1.60 contains a regular expression denial of service vulnerability in Actor.name_email_regex that processes commit author and committer fields. Attackers can cra |
| CVE-2026-87820 | Deferred | 未確認 | CWE-200 | CyberPanel versions 2.4.3 through 2.4.5 expose unauthenticated AI Scanner debugging endpoints that disclose administrator usernames, API-key prefixes, scan identifiers, target doma |
| CVE-2026-87821 | Deferred | 未確認 | CWE-918 | Lara Dashboard through 1.3.1 contains a server-side request forgery vulnerability in the POST /api/admin/builder/markdown/fetch endpoint that allows any authenticated user to fetch |
| CVE-2026-87822 | Awaiting Analysis | 未確認 | CWE-407 | t-digest versions 3.1 through 3.3 fail to validate centroid means during deserialization in MergingDigest.fromBytes, allowing attackers to inject NaN values that bypass validation |
| CVE-2026-87823 | Awaiting Analysis | 未確認 | CWE-190 | zstd-jni before 1.5.7-14 performs 32-bit signed bounds checks on three direct-ByteBuffer frame-size native methods, allowing out-of-bounds memory reads via negative or overflowing |
| CVE-2026-87824 | Awaiting Analysis | 未確認 | CWE-125 | zstd-jni before 1.5.7-14 fails to validate the samples buffer capacity in Zstd.trainFromBufferDirect, allowing attackers to read past buffer boundaries by supplying oversized per-s |
| CVE-2026-87825 | Awaiting Analysis | 未確認 | CWE-416 | zstd-jni before 1.5.7-14 contains a use-after-free vulnerability where streams and contexts hold a dictionary's shared lock only during the load call, allowing the dictionary to be |
| CVE-2026-87827 | Deferred | 未確認 | CWE-1188 | Certain KGUARD DVR devices running vulnerable firmware expose a system command execution service on all network interfaces without requiring authentication. A remote unauthenticate |
| CVE-2026-87828 | Deferred | 未確認 | CWE-400 | The Seraphinite Accelerator WordPress plugin before 2.29.24 does not perform a capability check on one of its state-update AJAX actions, allowing authenticated users such as subscr |
| CVE-2026-87829 | Deferred | 未確認 | CWE-639 | The Checkout Field Manager (Checkout Manager) for WooCommerce WordPress plugin before 7.9.7 does not properly validate the ownership of an attachment before deleting it, allowing a |
| CVE-2026-87830 | Analyzed | 未確認 | CWE-917 | In the StAX streaming WS-SecurityPolicy validator, certain relative or unsupported XPath expressions can be converted into paths that never match the actual XML element path. A rem |
| CVE-2026-87831 | Deferred | 未確認 | CWE-862 | The Checkout Field Manager (Checkout Manager) for WooCommerce WordPress plugin before 7.9.7 does not properly validate the ownership of an attachment before deleting it, allowing a |
| CVE-2026-87836 | Deferred | 未確認 | CWE-200 | The Comments Import & Export WordPress plugin before 2.5.4 does not restrict its comment export to users able to moderate comments, nor scope the export to content owned by the req |
| CVE-2026-87839 | Deferred | 未確認 | CWE-284 | The Tripzzy WordPress plugin before 1.5.1 does not have authorisation checks, and does not validate the identifier of the object being removed, in an AJAX action available to unau |
| CVE-2026-87840 | Deferred | 未確認 | CWE-284 | The Tripzzy WordPress plugin before 1.5.1 does not perform any capability or ownership checks on its administrative booking-management actions, which are additionally exposed to u |
| CVE-2026-87842 | Deferred | 未確認 | CWE-200 | The Zonify WordPress plugin before 1.0.5 does not perform any capability or authentication check before returning the site's stored account login token, allowing unauthenticated a |
| CVE-2026-87848 | Deferred | 未確認 | CWE-862 | The MPCX Lightbox WordPress plugin 1.2.2 through 1.2.5 does not have any authorisation or authentication on one of its AJAX actions available to unauthenticated users, nor does it |
| CVE-2026-87853 | Awaiting Analysis | 未確認 | CWE-187 | A flaw was found in SSSD's IdP authentication provider. The eval_access_token_buf() function compares the OIDC subject identifier using strncmp() with the authenticated user's iden |
| CVE-2026-87854 | Deferred | 未確認 | CWE-200 | The Subscriptions for WooCommerce WordPress plugin before 2.0.3 does not correctly validate the shared secret protecting one of its REST endpoints, allowing unauthenticated users t |
| CVE-2026-87858 | Awaiting Analysis | 未確認 | CWE-807 | Temporal Server decided whether a Workflow completion callback was internal by reading a caller-supplied HTTP header. An authenticated caller holding only write permission in a sin |
| CVE-2026-87859 | Awaiting Analysis | 未確認 | CWE-117 | morgan is an HTTP request logger middleware for Node.js. In versions before 1.12.1, its escapeLogField() function does not escape the double quote character, which delimits the quo |
| CVE-2026-87860 | Deferred | 未確認 | CWE-862 | The Subscriptions for WooCommerce WordPress plugin before 2.0.3 does not verify the security token on the request that cancels a subscription, allowing attackers to make a logged-i |
| CVE-2026-87870 | Deferred | 未確認 | CWE-79 | The Ninja Forms - Scheduled Exports plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API Parameters (interval, format, emailTo) in all versions up to, and |
| CVE-2026-87872 | Awaiting Analysis | 未確認 | CWE-295 | A flaw was found in the OCAPI modules (ocapi_command, ocapi_info) of the community.general Ansible collection. The shared OCAPI request helper disables TLS certificate validation o |
| CVE-2026-87874 | Awaiting Analysis | 未確認 | CWE-502 | A flaw was found in the memcached cache plugin of the community.general Ansible collection. Although its documentation states that records are stored in JSON format, the plugin per |
| CVE-2026-87875 | Awaiting Analysis | 未確認 | CWE-125 | The cupsUTF32ToUTF8() function in CUPS's cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-of-bounds read. This i |
| CVE-2026-87876 | Awaiting Analysis | 未確認 | CWE-178 | Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler (printer ACL validation and private-attribute filtering) could |
| CVE-2026-87877 | Awaiting Analysis | 未確認 | CWE-416 | zstd-jni versions before 1.5.7-14 fail to validate closed state in setDict, setLongMax, setLevel and setRefMultipleDDicts methods of stream classes. Attackers can call these method |
| CVE-2026-87886 | Analyzed | 掲載 | CWE-276 | Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis Ba |
| CVE-2026-87888 | Deferred | 未確認 | CWE-79 | The YayPricing WordPress plugin before 3.5.7 does not perform an authorization check on a REST route that saves its pricing rules, allowing users with the subscriber role and abov |
| CVE-2026-87891 | Deferred | 未確認 | CWE-284 | The Rox Appointment Booking WordPress plugin before 1.2.0 does not perform any capability or authorization check when saving its holiday schedule, allowing unauthenticated attacke |
| CVE-2026-87892 | Deferred | 未確認 | CWE-284 | The Rox Appointment Booking WordPress plugin before 1.2.0 does not verify the order total or the selected payment method against its own server-side pricing when creating a bookin |
| CVE-2026-87894 | Deferred | 未確認 | CWE-639 | The Rox Appointment Booking WordPress plugin before 1.2.3 does not perform any authorization check on the endpoint that returns a booking's confirmation details, and each booking |
| CVE-2026-87896 | Deferred | 未確認 | CWE-200 | The Rox Appointment Booking WordPress plugin before 1.2.8 does not perform any authorization check on the endpoint that returns booking agent (staff) records, allowing unauthentic |
| CVE-2026-87898 | Awaiting Analysis | 未確認 | CWE-78 | OS command injection in Plesk allows remote authenticated users to execute arbitrary code with root privileges. |
| CVE-2026-87899 | Awaiting Analysis | 未確認 | CWE-250 | Execution with unnecessary privileges in cPanel allows remote authenticated users to execute arbitrary code with root privileges. |
| CVE-2026-87900 | Awaiting Analysis | 未確認 | CWE-88 | Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to read arbitrary files and execute arbitrary code across customer accounts. |
| CVE-2026-87902 | Analyzed | 掲載 | CWE-98 | An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.php` file outside the active theme directories. If relevant pr |
| CVE-2026-87907 | Deferred | 未確認 | CWE-200 | The Rox Appointment Booking WordPress plugin before 1.2.8 does not perform any authorization check on the endpoints that return booking service and category records, allowing unau |
| CVE-2026-87908 | Awaiting Analysis | 未確認 | CWE-400, CWE-770 | multiparty is a Node.js library for parsing multipart/form-data request bodies. In versions from 2.1.0 up to but not including 4.3.1, the parser does not bound the amount of memory |
| CVE-2026-87909 | Deferred | 未確認 | CWE-74 | The WP Photo Album Plus plugin for WordPress is vulnerable to Remote Code Execution in all versions via the wppa_image_magick function. This is due to insufficient sanitization of |
| CVE-2026-87910 | Awaiting Analysis | 未確認 | CWE-22, CWE-59 | When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for |
| CVE-2026-87911 | Deferred | 未確認 | CWE-184, CWE-78 | An OS command injection weakness in the read-only enforcement of the SQL validation component in Amazon awslabs postgres-mcp-server before 1.1.7 might allow an unauthenticated acto |
| CVE-2026-87912 | Awaiting Analysis | 未確認 | CWE-283, CWE-341 | A missing S3 bucket ownership verification in the AWS Security Agent plugin in Amazon aws-agents-for-devsecops before 1.1.0 might allow remote attackers to obtain the private sourc |
| CVE-2026-87913 | Awaiting Analysis | 未確認 | CWE-283, CWE-341 | A missing S3 bucket ownership verification in the AWS Security Agent MCP server before 0.2.0 version might allow remote attackers to obtain the private source archive of a scanned |
| CVE-2026-87915 | Deferred | 未確認 | CWE-79 | The Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via values[Name |
| CVE-2026-87916 | Deferred | 未確認 | CWE-200 | The WPBot WordPress plugin before 8.6.0 does not perform any capability or nonce check on the AJAX action that lists stored chat sessions, allowing unauthenticated attackers to re |
| CVE-2026-87917 | Deferred | 未確認 | CWE-79 | The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'data' Dynamic Content Tag in all versions up to, and including, 4.14.0 |
| CVE-2026-87918 | Deferred | 未確認 | CWE-284 | The WPBot WordPress plugin before 8.5.7 does not perform any authorization or nonce check on several AJAX actions that relay prompts to its configured AI providers, allowing unaut |
| CVE-2026-87919 | Deferred | 未確認 | CWE-862 | The Product XML Feed Manager for WooCommerce WordPress plugin before 3.1.1 does not restrict which object method its product shortcode may call, nor check the user's capability ov |
| CVE-2026-87921 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected is the function update_record of the file includes/m |
| CVE-2026-87922 | Deferred | 未確認 | CWE-287, CWE-306 | A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected by this vulnerability is the function DBOperati |
| CVE-2026-87923 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected by this issue is some unknown functionality of the f |
| CVE-2026-87924 | Deferred | 未確認 | CWE-287, CWE-306 | A security vulnerability has been detected in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. This affects an unknown part of the file includes |
| CVE-2026-87925 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. This vulnerability affects the function storeCustomerOrderInvoi |
| CVE-2026-87926 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. This issue affects some unknown processing of the file index.php of th |
| CVE-2026-87927 | Deferred | 未確認 | CWE-98 | MaxSite CMS through 109.6 contains a local file inclusion vulnerability in the ajax and require-maxsite dispatchers that allows unauthenticated attackers to execute privileged hand |
| CVE-2026-87928 | Deferred | 未確認 | CWE-434 | MaxSite CMS versions 0.94 through 109.6 contain a cross-site scripting vulnerability in the admin_page upload handler that allows any logged-in user to upload HTML files. Attackers |
| CVE-2026-87929 | Deferred | 未確認 | CWE-321 | MaxSite CMS through 109.6 ships with a hardcoded session encryption key in application/config/config.php that is never changed during installation, allowing unauthenticated attacke |
| CVE-2026-87930 | Deferred | 未確認 | CWE-502 | MaxSite CMS through 109.6 passes the ci_session cookie to unserialize() without class restrictions, allowing unauthenticated attackers to inject PHP objects. Attackers can forge va |
| CVE-2026-87931 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability has been found in Behavioral Technology Group Pavlok Behavioral Conditioning Wearable up to 20260707. Impacted is an unknown function of the component Apple Notific |
| CVE-2026-87933 | Deferred | 未確認 | CWE-119, CWE-416 | A vulnerability was found in DaveGamble cJSON up to 1.7.19. The affected element is the function cJSONUtils_MergePatch of the file cJSON_Utils.c. The manipulation results in use af |
| CVE-2026-87935 | Deferred | 未確認 | CWE-434 | The Paid Downloads plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.15 via the admin_request_handler function. This is due to mis |
| CVE-2026-87958 | Analyzed | 未確認 | CWE-269 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user un |
| CVE-2026-87959 | Deferred | 未確認 | CWE-284 | The WPBot WordPress plugin before 8.7.6 does not perform a capability check on the AJAX action that saves its Claude AI provider settings, allowing users with subscriber-level acc |
| CVE-2026-87961 | Deferred | 未確認 | CWE-125 | ESP32-audioI2S versions 3.4.4 through 4.0.0 contain a heap-based out-of-bounds read vulnerability in the read_ID3_Header function due to a shadowed length parameter in ID3 synchron |
| CVE-2026-87962 | Deferred | 未確認 | CWE-1284 | t-digest versions 3.1 through 3.3 contain a denial of service vulnerability in MergingDigest.fromBytes that fails to validate length and capacity fields from serialized data. Attac |
| CVE-2026-87963 | Deferred | 未確認 | CWE-89 | The Yo WordPress plugin from 1.1 through 1.3.1 does not sanitize or parameterize the username request parameter before using it in a SQL query, and reads it before WordPress applie |
| CVE-2026-87965 | Deferred | 未確認 | CWE-284 | The Easy Appointments WordPress plugin before 4.0.2.2 does not use an unguessable token to authorize its mail-link appointment cancellation and confirmation action, deriving the to |
| CVE-2026-87966 | Deferred | 未確認 | CWE-639 | The Easy Appointments WordPress plugin before 4.0.2.2 does not perform an ownership or authorization check on its unauthenticated appointment-reservation endpoint before updating a |
| CVE-2026-87969 | Deferred | 未確認 | CWE-78 | An OS command injection vulnerability in the WatchGuard AP diagnostic CLI allows an authenticated administrator to execute arbitrary operating system commands by supplying crafted |
| CVE-2026-87976 | Analyzed | 未確認 | CWE-22 | Apache NiFi Registry 0.4.0 through 2.11.0 are subject to path manipulation when storing extension bundle content using group, artifact, and version coordinates from uploaded NAR ma |
| CVE-2026-87978 | Deferred | 未確認 | CWE-345 | The Paymob for WooCommerce WordPress plugin before 4.1.14 does not verify the request signature on one branch of its payment webhook, allowing unauthenticated attackers to mark arb |
| CVE-2026-87979 | Deferred | 未確認 | CWE-862 | The Paymob for WooCommerce WordPress plugin before 4.1.14 does not verify the request signature on the card-token branch of its payment webhook, allowing unauthenticated attackers |
| CVE-2026-87981 | Deferred | 未確認 | CWE-862 | The Paymob for WooCommerce WordPress plugin before 4.1.14 does not perform a capability check on several admin AJAX actions that manage its payment-gateway configuration, allowing |
| CVE-2026-87983 | Deferred | 未確認 | CWE-22 | An arbitrary file read vulnerability in Mistral Vibe, introduced in version 2.6.0, allows an attacker to bypass workspace restrictions using quoted absolute paths in allowlisted sh |
| CVE-2026-87984 | Deferred | 未確認 | CWE-22 | An arbitrary file write vulnerability in Mistral Vibe, introduced in version 1.3.4, allows an attacker to create or overwrite files outside the active workspace without user approv |
| CVE-2026-87985 | Deferred | 未確認 | CWE-184 | An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using ANSI-C quoted arguments. These arguments are not properly ins |
| CVE-2026-87986 | Deferred | 未確認 | CWE-228 | An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs it's parser cannot interpret. Unparsed porti |
| CVE-2026-87987 | Deferred | 未確認 | CWE-15 | An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using environment variable assignments preceding allowlisted comman |
| CVE-2026-87988 | Deferred | 未確認 | CWE-732 | An arbitrary file access vulnerability in Mistral Vibe allows an attacker to bypass workspace restrictions through commands classified as unconditionally allowed. Missing path vali |
| CVE-2026-87993 | Awaiting Analysis | 未確認 | CWE-532 | The consul-template library is vulnerable to an information disclosure issue in its error handling path that may allow Vault secret values to appear in template error messages, log |
| CVE-2026-87994 | Analyzed | 未確認 | CWE-639, CWE-862 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.5 until 0.11.1, the channel branch of chat_completion in backend/open_webui/main.py c |
| CVE-2026-87995 | Analyzed | 未確認 | CWE-1021, CWE-79 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.11 until 0.11.1, src/lib/components/chat/FileNav/PortPreview.svelte rendered terminal |
| CVE-2026-87996 | Analyzed | 未確認 | CWE-367, CWE-918 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.1, SafePlaywrightURLLoader in backend/open_webui/retrieval/web/utils.py |
| CVE-2026-87997 | Analyzed | 未確認 | CWE-639, CWE-862 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, POST /api/chat/completions and POST /api/v1/chat/completions in back |
| CVE-2026-87998 | Analyzed | 未確認 | CWE-269, CWE-863 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, DELETE /api/v1/knowledge/{id}/delete in backend/open_webui/routers/k |
| CVE-2026-87999 | Analyzed | 未確認 | CWE-918 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.11.1, POST /api/v1/retrieval/process/web and POST /api/v1/retrieval/process/web/sea |
| CVE-2026-88000 | Analyzed | 未確認 | CWE-835 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, DELETE /api/v1/chats/{id}/messages/{message_id} used the chat-histor |
| CVE-2026-88001 | Analyzed | 未確認 | CWE-918 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.5 until 0.11.1, server-side web fetches did not reapply WEB_FETCH_FILTER_LIST or priv |
| CVE-2026-88002 | Analyzed | 未確認 | CWE-835 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.5.0 until 0.11.1, the message-chain reconstruction helper in backend/open_webui/utils/m |
| CVE-2026-88003 | Deferred | 未確認 | CWE-863 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane fails to revoke administrative privileges after a r |
| CVE-2026-88004 | Analyzed | 未確認 | CWE-436, CWE-807 | Traefik is an open source HTTP reverse proxy and load balancer. From 3.2.0 until 3.7.13, Traefik entrypoint defenses aliasHeadersStrategy, underscoreHeadersStrategy, and forwardedH |
| CVE-2026-88005 | Analyzed | 未確認 | CWE-863 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.9.0, Open WebUI's OAuth token exchange endpoint issues a session for a prov |
| CVE-2026-88006 | Analyzed | 未確認 | CWE-863 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.11.1, Open WebUI's OAuth token exchange endpoint issues a session for a pro |
| CVE-2026-88007 | Analyzed | 未確認 | CWE-287, CWE-863 | Traefik is an open source HTTP reverse proxy and load balancer. From 2.11.0 until 2.11.57 and 3.7.13, the HTTP/3 entrypoint ConnContext does not call service.AddTransportOnContext, |
| CVE-2026-88008 | Analyzed | 未確認 | CWE-444, CWE-863 | Traefik is an open source HTTP reverse proxy and load balancer. From 2.11.26 until 2.11.57 and 3.7.13, Traefik forwards a client-supplied Connection header requesting Upgrade, the |
| CVE-2026-88009 | Analyzed | 未確認 | CWE-1286, CWE-444 | Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.57, and 3.7.13, Traefik accepts a rootless HTTP/1 request target that Go stores in URL.Opaque while le |
| CVE-2026-88010 | Awaiting Analysis | 未確認 | CWE-208 | Traefik is an open source HTTP reverse proxy and load balancer. From 3.6.11 until 3.7.13, checkPassword in pkg/middlewares/auth/basic_auth.go constructs the BasicAuth singleflight |
| CVE-2026-88011 | Analyzed | 未確認 | CWE-290 | Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.56, and from 3.0.0 until 3.7.12, a client-supplied dot-form header such as X.Authenticated.User surviv |
| CVE-2026-88012 | Analyzed | 未確認 | CWE-770 | Traefik is an open source HTTP reverse proxy and load balancer. From 2.8.2 until 2.11.56 and 3.7.12, HTTP/3 entrypoints do not apply entryPoints..transport.respondingTimeouts.readT |
| CVE-2026-88013 | Analyzed | 未確認 | CWE-200, CWE-319, CWE-522 | rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.49.0 until 1.75.1, the HTTP backend attaches headers configured |
| CVE-2026-88014 | Analyzed | 未確認 | CWE-22 | rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.72.0 until 1.75.1, the archive ZIP backend method (*Fs).readZip |
| CVE-2026-88015 | Analyzed | 未確認 | CWE-190, CWE-248 | rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, backend/local with --links or links=true exposes syml |
| CVE-2026-88016 | Modified | 未確認 | CWE-281, CWE-59 | rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, when backend/local runs with --links, a source .rclon |
| CVE-2026-88017 | Analyzed | 未確認 | CWE-488 | rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.64.0 until 1.75.1, the FTP auth-proxy driver in cmd/serve/ftp/f |
| CVE-2026-88018 | Analyzed | 未確認 | CWE-287, CWE-306 | rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, rclone serve s3 configured with --auth-proxy but with |
| CVE-2026-88020 | Awaiting Analysis | 未確認 | CWE-79 | Autonomy Logic OpenPLC 3 is susceptible to an improper neutralization of input during web page generation vulnerability when the web interface attempts to route the program based o |
| CVE-2026-88021 | Awaiting Analysis | 未確認 | CWE-185 | Consul and Consul Enterprise are vulnerable to an authorization bypass in the Connect service mesh that may allow a service to reach a destination it is not authorized to access. W |
| CVE-2026-88022 | Analyzed | 未確認 | CWE-943 | Improper neutralization of special elements in data query logic in the MongoDB integration for Laravel can cause an array supplied to an explicit equality filter to be interpreted |
| CVE-2026-88023 | Analyzed | 未確認 | CWE-943 | Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB PHP Library can cause a caller-supplied structured file identifier to be inte |
| CVE-2026-88024 | Analyzed | 未確認 | CWE-943 | Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Rust Driver can cause a caller-supplied structured file identifier to be inte |
| CVE-2026-88025 | Analyzed | 未確認 | CWE-943 | Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C# Driver can cause a caller-supplied structured file identifier to be interp |
| CVE-2026-88026 | Analyzed | 未確認 | CWE-943 | Improper neutralization of regular-expression metacharacters in the LINQ query translation component of the MongoDB C# Driver can cause a caller-supplied character sequence to alte |
| CVE-2026-88027 | Analyzed | 未確認 | CWE-943 | Improper neutralization of special elements in data query logic in the embedded-document relation handling of the MongoDB integration for Laravel can cause a caller-supplied embedd |
| CVE-2026-88028 | Analyzed | 未確認 | CWE-943 | Improper neutralization of special elements in data query logic in the polymorphic relation handling of the MongoDB integration for Laravel can cause a caller-supplied relation ide |
| CVE-2026-88029 | Analyzed | 未確認 | CWE-943 | Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Python Driver can cause a caller-supplied structured file identifier to be in |
| CVE-2026-88030 | Analyzed | 未確認 | CWE-943 | Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Ruby Driver can cause a caller-supplied structured file identifier to be inte |
| CVE-2026-88031 | Analyzed | 未確認 | CWE-943 | Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Go Driver can cause a caller-supplied structured file identifier to be interp |
| CVE-2026-88032 | Analyzed | 未確認 | CWE-416 | A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted operation is still u |
| CVE-2026-88033 | Analyzed | 未確認 | CWE-943 | Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Java Driver can cause a caller-supplied structured file identifier to be inte |
| CVE-2026-88034 | Analyzed | 未確認 | CWE-943 | Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C++ Driver can cause a caller-supplied structured file identifier to be inter |
| CVE-2026-88035 | Analyzed | 未確認 | CWE-190 | A size check in the client-side authentication path of the MongoDB C Driver can wrap around, so an unusually large user-name value is accepted and copied past the end of a small bu |
| CVE-2026-88036 | Analyzed | 未確認 | CWE-943 | Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C Driver can cause a caller-supplied structured file identifier to be interpr |
| CVE-2026-88037 | Deferred | 未確認 | CWE-79 | The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `title` attribute of the `bt_bb_service` shortcode in all versions up to, and includ |
| CVE-2026-88038 | Awaiting Analysis | 未確認 | CWE-74 | cookies is a Node.js library for reading and writing HTTP cookies, used by Koa via ctx.cookies. In versions before 0.9.2 the library validates the cookie name and value against cha |
| CVE-2026-88044 | Awaiting Analysis | 未確認 | CWE-863 | rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.70.0 until 1.75.1, the serve/start RC interface accepts per-ser |
| CVE-2026-88045 | Awaiting Analysis | 未確認 | CWE-789 | rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.75.0 until 1.75.1, the serve S3 streamed multipart path in cmd/ |
| CVE-2026-88046 | Awaiting Analysis | 未確認 | CWE-22 | rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, rclone core does not reject parent-directory segments |
| CVE-2026-88047 | Analyzed | 未確認 | CWE-121 | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos in src/classify/normmatch.cpp parses the NORMPROTO component of a .traineddata file a |
| CVE-2026-88048 | Analyzed | 未確認 | CWE-125, CWE-787 | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, FullyConnected::DeSerialize in src/lstm/fullyconnected.cpp does not validate the deserialized layer scalars ni |
| CVE-2026-88049 | Analyzed | 未確認 | CWE-787 | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, prior .traineddata hardening added bounds checks to NetworkIO::CopyTimeStepGeneral and NetworkIO::Randomize in |
| CVE-2026-88050 | Analyzed | 未確認 | CWE-787 | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, RecodedCharID::DeSerialize in src/ccutil/unicharcompress.h validates length_ but accepts negative code_ values |
| CVE-2026-88051 | Analyzed | 未確認 | CWE-787 | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, the callback form of GenericVector::read in src/ccutil/genericvector.h reads the independent int32 fields rese |
| CVE-2026-88052 | Analyzed | 未確認 | CWE-129, CWE-787 | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, UNICHARSET::load_via_fgets in src/ccutil/unicharset.cpp trusts the declared unichar count as a loop bound and |
| CVE-2026-88053 | Analyzed | 未確認 | CWE-787 | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadIntTemplates in src/classify/intproto.cpp reads NumClassPruners, NumClasses, and NumProtoSets fr |
| CVE-2026-88054 | Analyzed | 未確認 | CWE-125, CWE-824 | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Plumbing::DeSerialize in src/lstm/plumbing.cpp rejects excessively large network stacks but accepts a zero-len |
| CVE-2026-88055 | Awaiting Analysis | 未確認 | CWE-79 | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.16.1 and earlier, the manager role can store meta_p |
| CVE-2026-88056 | Analyzed | 未確認 | CWE-918 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular S |
| CVE-2026-88057 | Analyzed | 未確認 | CWE-79 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.28, 21.2.20, and 22.1.0, Angular's |
| CVE-2026-88058 | Analyzed | 未確認 | CWE-116, CWE-79 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular s |
| CVE-2026-88059 | Analyzed | 未確認 | CWE-200, CWE-524 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.28, 21.2.20, and 22.1.1, Angular's |
| CVE-2026-88060 | Analyzed | 未確認 | CWE-116, CWE-79 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular s |
| CVE-2026-88061 | Deferred | 未確認 | CWE-1385, CWE-352 | career-ops is an open-source AI-assisted job search and application management tool. Prior to 0.8.0, the career-ops local web dashboard web/ exposed command-spawning and user-file- |
| CVE-2026-88062 | Deferred | 未確認 | CWE-306, CWE-94 | OmniRoute is an open-source AI gateway providing a single endpoint for multiple model providers. In 3.8.49 and earlier, the OmniRoute POST /api/acp/agents custom ACP agent endpoint |
| CVE-2026-88064 | Analyzed | 未確認 | CWE-1336, CWE-20 | Backstage is an open framework for building developer portals. Prior to 1.14.6 and from 1.15.0 until 1.15.4, the @backstage/plugin-techdocs-node package insufficiently validates mk |
| CVE-2026-88065 | Deferred | 未確認 | CWE-200, CWE-306, CWE-639 | `tts-be` is a backend for a timetable selector that aims to help students better choose their class schedules. Versions prior to 2.1.0 have a Broken Access Control vulnerability ac |
| CVE-2026-88069 | Awaiting Analysis | 未確認 | CWE-22 | Pandora contains a path traversal vulnerability in its archive extraction worker. When processing a specially crafted archive or disk image, attacker-controlled file paths could be |
| CVE-2026-88097 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges locally. |
| CVE-2026-8821 | Analyzed | 未確認 | CWE-862 | Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 fail to validate channel member-management permission during playbook run creation, al |
| CVE-2026-88255 | Awaiting Analysis | 未確認 | CWE-1289 | Improper Validation of Unsafe Equivalence in Input in ZenHive mpp allows an unauthenticated remote client to pass the Tempo duplicate-submission gate twice with one signed transact |
| CVE-2026-88259 | Deferred | 未確認 | CWE-306 | CareCam CM2507 IP cameras do not require authentication for access to its network video streaming service. An unauthenticated attacker with network access to the affected device co |
| CVE-2026-88260 | Deferred | 未確認 | CWE-1286, CWE-288 | Authentication bypass using an alternate path or channel and Improper validation of syntactic correctness of input vulnerability in Brainzcompany Zenius EMS 8.0 allows Remote Code |
| CVE-2026-88261 | Deferred | 未確認 | CWE-20 | Improper input validation vulnerability in bizwell xClick allows Stored XSS. This issue affects xClick: R2, R3, and R3.1. |
| CVE-2026-88262 | Deferred | 未確認 | CWE-613 | Insufficient session expiration vulnerability in bizwell xClick allows Authentication Bypass. This issue affects xClick: R2, R3, and R3.1. |
| CVE-2026-88263 | Deferred | 未確認 | CWE-306 | XikeStor Layer3 switches miss authentication for downloading configuration data. Unauthenticated attacker may retrieve the configuration data containing network configurations and |
| CVE-2026-88264 | Awaiting Analysis | 未確認 | CWE-59 | A flaw was found in crun. When the container configuration does not give /dev a dedicated mount, terminal setup can redirect /dev/console onto an attacker-controlled path, includin |
| CVE-2026-88265 | Awaiting Analysis | 未確認 | CWE-59 | A flaw was found in crun. After pivot_root, reopening /dev/null for stdio can follow a symlink and attach a host file to container stdio, then change that file's ownership. Affecte |
| CVE-2026-88268 | Deferred | 未確認 | CWE-121 | GeoVision GV-LPC2211 V1.13 contains an authenticated stack buffer overflow in SSVR fragment reassembly that allows a valid user to crash the SSVR service. |
| CVE-2026-88269 | Deferred | 未確認 | CWE-862 | GeoVision GV-LPC2211 V1.13 allows a Guest user to retrieve persistent device configuration containing plaintext administrative and user credentials through SSVR. |
| CVE-2026-88270 | Deferred | 未確認 | CWE-862 | GeoVision GV-LPC2211 V1.13 allows a Guest user to enter SSVR firmware-upgrade mode and disrupt live services before any firmware image is validated. |
| CVE-2026-88271 | Deferred | 未確認 | CWE-862 | GeoVision GV-LPC2211 V1.13 allows a Guest user to overwrite device configuration and replace the administrator password through SSVR. |
| CVE-2026-88272 | Deferred | 未確認 | CWE-78 | GeoVision GV-LPC2211 V1.13 allows an administrator-controlled username containing shell metacharacters to be executed as arbitrary root commands when the stored username is later d |
| CVE-2026-88273 | Deferred | 未確認 | CWE-78 | GeoVision GV-LPC2211 V1.13 allows an administrator-controlled PPPoE username to escape a sourced shell configuration assignment and execute arbitrary commands as root. |
| CVE-2026-88274 | Deferred | 未確認 | CWE-78 | GeoVision GV-LPC2211 V1.13 allows an administrator-controlled wireless SSID containing shell syntax to execute arbitrary commands as root. |
| CVE-2026-88275 | Deferred | 未確認 | CWE-78 | GeoVision GV-LPC2211 V1.13 allows an administrator-controlled WPA-PSK containing shell syntax to execute arbitrary commands as root when wireless configuration is applied. |
| CVE-2026-88276 | Deferred | 未確認 | CWE-78 | GeoVision GV-LPC2211 V1.13 allows administrator-controlled WEP key values containing shell syntax to execute arbitrary commands as root. |
| CVE-2026-88277 | Deferred | 未確認 | CWE-78 | GeoVision GV-LPC2211 V1.13 allows an authenticated ONVIF user to inject shell commands through ConsumerReference.Address and execute arbitrary commands as root. |
| CVE-2026-88278 | Deferred | 未確認 | CWE-294 | GeoVision GV-LPC2211 V1.13 fails to enforce WS-Security UsernameToken freshness or nonce reuse protection, allowing a captured PasswordDigest token to be replayed for subsequent ON |
| CVE-2026-88279 | Deferred | 未確認 | CWE-121 | GeoVision GV-LPC2211 V1.13 copies oversized ONVIF CreateUsers username or password values into fixed stack fields, allowing an authenticated administrator to crash the ONVIF worker |
| CVE-2026-88280 | Deferred | 未確認 | CWE-121 | GeoVision GV-LPC2211 V1.13 copies an oversized ONVIF SetUser password into a fixed stack field, allowing an authenticated administrator to crash the ONVIF worker. |
| CVE-2026-88281 | Deferred | 未確認 | CWE-121 | GeoVision GV-LPC2211 V1.13 fails to limit repeated Username elements in ONVIF DeleteUsers requests, allowing an authenticated administrator to overflow a stack array and crash the |
| CVE-2026-88282 | Deferred | 未確認 | CWE-78 | GeoVision GV-LPC2211 V1.13 allows an administrator-controlled FTP username containing shell metacharacters to be executed as arbitrary root commands during a subsequent FTP-account |
| CVE-2026-88283 | Deferred | 未確認 | CWE-121 | GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF CreateUsers requests, allowing an authenticated administrator to overwrite stack control state and crash t |
| CVE-2026-88284 | Deferred | 未確認 | CWE-121 | GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF SetUser requests, allowing an authenticated administrator to overwrite stack control state and crash the O |
| CVE-2026-88285 | Deferred | 未確認 | CWE-306 | GeoVision GV-LPC2211 V1.13 exposes a network-accessible PTZ control service without authentication, allowing remote clients to retrieve PTZ information and issue PTZ or raw serial |
| CVE-2026-88286 | Deferred | 未確認 | CWE-400 | GeoVision GV-LPC2211 V1.13 improperly manages PTZ connection state, allowing an unauthenticated remote client to block the accept loop and prevent new PTZ connections. |
| CVE-2026-88287 | Deferred | 未確認 | CWE-121 | GeoVision GV-LPC2211 V1.13 fails to bound the number of Scopes tokens in unauthenticated ONVIF WS-Discovery Probe requests, allowing a remote attacker to corrupt stack control stat |
| CVE-2026-88288 | Deferred | 未確認 | CWE-36 | GeoVision GV-LPC2211 V1.13 fails to restrict the filename supplied to BKDownloadLink.cgi, allowing a remote user with valid web credentials to read arbitrary files accessible to th |
| CVE-2026-88289 | Deferred | 未確認 | CWE-121 | GeoVision GV-LPC2211 V1.14 (260903) fails to validate attacker-controlled variable-length fields before copying them into fixed-size stack buffers in multiple VLSVR request handler |
| CVE-2026-88290 | Deferred | 未確認 | CWE-400 | GeoVision GV-LPC2211 V1.14 (260903) allows unauthenticated clients to declare unbounded VLSVR frame lengths and indefinitely delay blocking receives, allowing remote exhaustion of |
| CVE-2026-88339 | Deferred | 未確認 | CWE-476 | A NULL pointer dereference vulnerability exists in the gf_sg_vrml_field_clone() function of GPAC 2d7da22e (26.08-DEV). The vulnerability occurs when cloning a PROTO default SFImage |
| CVE-2026-88340 | Awaiting Analysis | 未確認 | CWE-763 | An invalid pointer release vulnerability exists in YARA 4.5.8 during deserialization of compiled .yrc rule files. The vulnerability is caused by insufficient validation of external |
| CVE-2026-88341 | Awaiting Analysis | 未確認 | CWE-617 | A reachable assertion vulnerability exists in YARA 4.5.8 when loading crafted .yrc compiled rule files. An attacker can provide a malicious file with an invalid arena configuration |
| CVE-2026-88344 | Awaiting Analysis | 未確認 | CWE-22 | An out-of-bounds read vulnerability exists in the schema lexer of flatcc 4c3b999e. When an exact-length FlatBuffers schema buffer ends with a digit, the integer digit-scan loop in |
| CVE-2026-88345 | Deferred | 未確認 | CWE-125 | An out-of-bounds read vulnerability exists in the schema lexer of flatcc 4c3b999e. When an exact-length FlatBuffers schema ends with an unterminated quotation mark, the C-string sc |
| CVE-2026-88350 | Awaiting Analysis | 未確認 | CWE-190 | An integer overflow vulnerability exists in MPack 1.1.1 in mpack_node_cstr_alloc() and mpack_node_utf8_cstr_alloc(). |
| CVE-2026-88351 | Deferred | 未確認 | CWE-190 | An integer overflow vulnerability exists in the MPack Node API in MPack 1.1.1 on 32-bit platforms. When parsing a specially crafted MessagePack array32 or map32 object with an exce |
| CVE-2026-88355 | Deferred | 未確認 | CWE-131 | An incorrect buffer size calculation vulnerability exists in tinyexpr commit 4a7456e in new_expr(). For arity-0 expression nodes, including constants, variables, and zero-argument |
| CVE-2026-88357 | Deferred | 未確認 | CWE-1335 | nDPI 5.1.0 contains a memory access issue in the DNS dissector and serializer deserialization code. Specially crafted network input can cause byte-buffer addresses at odd offsets t |
| CVE-2026-88358 | Awaiting Analysis | 未確認 | CWE-125 | simdjson 4.6.1 contains a one-byte out-of-bounds read vulnerability in dom::parser::parse_unpadded(). A specially crafted truncated JSON document whose final structural token close |
| CVE-2026-88359 | Deferred | 未確認 | CWE-770 | libfyaml 0.9.6 contains a stack exhaustion vulnerability in fy_atom_iter_format(). When processing a specially crafted YAML document containing a very large literal or folded block |
| CVE-2026-88360 | Awaiting Analysis | 未確認 | CWE-1339 | libvips 8.19.0 contains a memory access vulnerability when processing little-endian PFM images. If the PFM text header length is not a multiple of four bytes, the mmap-based loader |
| CVE-2026-88361 | Awaiting Analysis | 未確認 | CWE-190 | SumatraPDF 3.6.1 contains an integer overflow vulnerability in EngineMupdf::BuildPageLabelRec() when parsing PDF PageLabels /Nums entries. |
| CVE-2026-88362 | Deferred | 未確認 | CWE-681 | MuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsR_isindex() in jsrun.c. A specially crafted JavaScript input containing an excessively large numeric arra |
| CVE-2026-88365 | Deferred | 未確認 | CWE-190 | minimp3 commit ea99364f contains an integer overflow vulnerability in mp3dec_skip_id3v1() when parsing the APEv2 tag-size field. |
| CVE-2026-88366 | Deferred | 未確認 | CWE-681 | NanoSVG commit 239e102ec contains an incorrect numeric conversion vulnerability in nsvg__pathArcTo() when parsing SVG arc commands. A specially crafted SVG document containing extr |
| CVE-2026-88367 | Deferred | 未確認 | CWE-681 | NanoSVG 239e102ec contains an incorrect numeric conversion vulnerability in nsvg__curveDivs() during SVG stroke rasterization. A specially crafted SVG document containing an extrem |
| CVE-2026-88368 | Deferred | 未確認 | CWE-681 | NanoSVG commit 239e102ec contains an incorrect numeric conversion vulnerability in the rasterizer's nsvg__addActive() function. A specially crafted SVG document containing sufficie |
| CVE-2026-88369 | Deferred | 未確認 | CWE-125 | zserge jsmn commit 25647e6 is vulnerable to Buffer Overflow in example/jsondump.c dump(). |
| CVE-2026-88370 | Deferred | 未確認 | CWE-122 | libconfini 1.16.4 contains a heap out-of-bounds write condition involving the bundled load_ini_buffer.h utility and strip_ini_cache(). The bundled utility allocates exactly ini_len |
| CVE-2026-88371 | Deferred | 未確認 | CWE-682 | ZBar commit 2ea2ca58 contains an undefined-behavior vulnerability in the Code 128 decode6() function. When processing specially crafted Code 128 input, decode_e() can return -1 for |
| CVE-2026-88372 | Awaiting Analysis | 未確認 | CWE-190 | libsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header() when parsing crafted MAT4 (MATLAB v4) files. |
| CVE-2026-88373 | Deferred | 未確認 | CWE-476 | libde265 commit 4d45a6b contains a NULL pointer dereference vulnerability in the NAL parsing path. When de265_push_NAL() is called with a zero-length NAL unit, the resulting NAL_un |
| CVE-2026-88376 | Deferred | 未確認 | CWE-191 | Bento4 1.6.0.0 contains an integer underflow vulnerability in AP4_AvccAtom::Create() and AP4_HvccAtom::Create(). A specially crafted MP4 file containing an avcC or hvcC atom with a |
| CVE-2026-88377 | Deferred | 未確認 | CWE-191 | Bento4 1.6.0.0 contains an integer underflow vulnerability in the avcC and hvcC configuration atom parsers. A specially crafted MP4 file containing an atom with a declared size sma |
| CVE-2026-88378 | Awaiting Analysis | 未確認 | CWE-787 | QuickJS commit 04be24600 contains a heap out-of-bounds write condition in JS_ReadFunctionTag(). |
| CVE-2026-88382 | Awaiting Analysis | 未確認 | CWE-770, CWE-789 | hiredis commit 29ea279 (post-v1.5.0) contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser. |
| CVE-2026-88383 | Awaiting Analysis | 未確認 | CWE-843 | libical 4.0.6 contains an incompatible function pointer in icalparameter_string_to_kind(). When parsing iCalendar data containing a parameterized property, the function passes ical |
| CVE-2026-88384 | Awaiting Analysis | 未確認 | CWE-476 | OpenEXR 3.4.14 contains a NULL Pointer Dereference in the C++ attribute parsing path. A specially crafted EXR file containing an unknown-type attribute with dataSize set to zero ca |
| CVE-2026-88385 | Deferred | 未確認 | CWE-401 | Mini-XML 4.0.5 contains a memory leak vulnerability in mxml_load_data() during malformed XML parsing. Specially crafted XML input can cause text nodes allocated by mxmlNewText() to |
| CVE-2026-88386 | Deferred | 未確認 | CWE-122 | libsndfile 1.2.2 contains a misaligned memory access issue in psf_binheader_readf() while parsing WAV fmt chunks. A specially crafted WAV file can cause the function to cast an una |
| CVE-2026-88387 | Deferred | 未確認 | CWE-681 | LibRaw 0.22.0 contains an incorrect numeric conversion vulnerability in LibRaw::parse_tiff_ifd() when processing TIFF tag 0x00fe (NewSubfileType). A specially crafted RAW, TIFF, or |
| CVE-2026-88388 | Deferred | 未確認 | CWE-121 | Espruino 2v29 (commit bffc6d0) contains a stack-based buffer overflow vulnerability in the JavaScript error stack-trace handling path on 64-bit builds. A remote attacker can supply |
| CVE-2026-88389 | Deferred | 未確認 | CWE-476 | Espruino 2v29 (commit bffc6d0) contains a NULL pointer dereference vulnerability in jslGetRawString() in src/jslex.c. Crafted raw/binary string input can cause the lexer to pass a |
| CVE-2026-88390 | Deferred | 未確認 | CWE-787 | An out-of-bounds write vulnerability in jslGetTokenValueAsString() in Espruino 2v29 (commit bffc6d0) allows crafted JavaScript input containing an overlong token to trigger a one-b |
| CVE-2026-88402 | Deferred | 未確認 | CWE-89 | A SQL injection vulnerability in the checkSQL function of nocobase v2.1.21 allows attackers to access sesntive database information via injecting crafted SQL statements. |
| CVE-2026-88403 | Deferred | 未確認 | CWE-918 | A Server-Side Request Forgery (SSRF) in the serverRequest function of nocobase v2.1.21 allows authenticated attackers to scan internal resources via a crafted HTTP request. |
| CVE-2026-88404 | Deferred | 未確認 | CWE-94 | A remote code execution (RCE) vulnerability in the UniscriptExecutionService.execute() function (/services/script-execution.service.ts) of Univer v1.0.0-alpha.2 allows attackers to |
| CVE-2026-88405 | Deferred | 未確認 | CWE-94 | A remote code execution (RCE) vulnerability in the RemoteRegisterFunctionService function (/remote/remote-register-function.service.ts) of Univer v1.0.0-alpha.2 allows attackers to |
| CVE-2026-88406 | Deferred | 未確認 | CWE-121 | FalkorDB (Redis module) v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the _ValidateUnion_Clauses function (/ast/ast_validations.c). This vulnerability allows att |
| CVE-2026-88407 | Deferred | 未確認 | CWE-787 | An out-of-bounds read in the node_token_count/relation_token_count component of FalkorDB (Redis module) v4.20.1 to v4.20.4 allows attackers to cause a Denial of Service (DoS) via a |
| CVE-2026-88408 | Deferred | 未確認 | CWE-121 | FalkorDB (Redis module) v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the _GetGroup() function (/ops/op_aggregate.c). This vulnerability allows attackers to caus |
| CVE-2026-88409 | Deferred | 未確認 | CWE-120 | FalkorDB (Redis module) v4.20.1 to v4.20.4 was discovered to contain a buffer overflow in the _Decode_GrB_Matrix function (/v19/decode_matrix.c). This vulnerability allows attacker |
| CVE-2026-88410 | Deferred | 未確認 | CWE-306 | The graph.UDF in FalkorDB (Redis module) v4.20.1 to v4.20.4 is not registered as a write command, leading to unexpected behavior within the application. |
| CVE-2026-88411 | Deferred | 未確認 | CWE-248 | Improper error handling in the GRAPH.EFFECT component (/effects/effects_apply.c) of FalkorDB (Redis module) v4.20.1 leads to a Denial of Service (DoS) within the application. |
| CVE-2026-88412 | Deferred | 未確認 | CWE-190 | An integer overflow in the _BulkInsert_ReadProperty component (/bulk_insert.c) of FalkorDB (Redis module) v4.20.1 allows attackers to cause a Denial of Service (DoS) via a crafted |
| CVE-2026-88414 | Awaiting Analysis | 未確認 | CWE-89 | MCMS 6.1.1 through 6.2.1 contains a SQL injection vulnerability in the PageAction.verify endpoint (GET /ms/mdiy/page/verify.do). |
| CVE-2026-88415 | Awaiting Analysis | 未確認 | CWE-79 | MCMS 6.1.1 through 6.2.1 is vulnerable to stored Cross-Site Scripting (XSS). The article content field `contentDetails` is excluded from the global XSS filter. |
| CVE-2026-88416 | Deferred | 未確認 | CWE-89 | MCMS 6.1.1 through 6.2.1 has a SQL injection vulnerability in the custom model/form import feature. |
| CVE-2026-88418 | Deferred | 未確認 | CWE-352 | CMSimple 5.24 ships with CSRF protection disabled by default, which turns csrfProtection() into a no-op on every state-changing admin request, and it does not send the csrf_token h |
| CVE-2026-88419 | Deferred | 未確認 | CWE-434 | An unrestricted upload of files with a dangerous type in the thumbnail-upload endpoint (/index.php?m=member&f=article&v=thumbUpload) of WuzhiCMS 5.0.0 allows an authenticated low-p |
| CVE-2026-88420 | Deferred | 未確認 | CWE-79 | A reflected cross-site scripting (XSS) vulnerability in the EntryAbstract.save() component of APSL puput v1.2.1 through v2.2.0 allows authenticated attackers with Wagtail Editor pr |
| CVE-2026-88421 | Deferred | 未確認 | CWE-284 | Incorrect access control in the BlogPage.get_entries() component of APSL puput v1.2.1 through v2.2.0 allows unauthenticated attackers to view restricted blog entries via the blog i |
| CVE-2026-88467 | Deferred | 未確認 | CWE-209 | CRMEB Knowledge-Paid System crmeb_zzff_class 1.4.4 has a backend verification function that returns the wrong type of value, causing errors and leaking sensitive information. |
| CVE-2026-8849 | Awaiting Analysis | 未確認 | CWE-416 | Use After Free vulnerability in RTI Connext Professional (Security Plugins) allows File Manipulation. This issue affects Connext Professional: from 7.6.0 before 7.7.0.1. |
| CVE-2026-88592 | Deferred | 未確認 | CWE-345 | kkFileView >= 4.2.0 is vulnerable to Server-Side Request Forgery (SSRF). The cross-origin file proxy endpoint /getCorsFile is protected by TrustHostFilter against the trust.host wh |
| CVE-2026-88593 | Deferred | 未確認 | CWE-79 | kkFileView 5.0.0 through 5.0.2 allows reflected XSS via the /onlinePreview endpoint. The OnlinePreviewController passes the user-controlled page and kkagent request parameters to F |
| CVE-2026-88616 | Deferred | 未確認 | CWE-863 | An issue in RuoYi-Vue-Plus 6.0.0 allows a remote attacker to execute arbitrary code via the FlwTaskController.java component, and the FlwTaskServiceImpl.completeTask, CompleteExecu |
| CVE-2026-88617 | Deferred | 未確認 | CWE-863 | SmartAdmin v3.30.0 contains an authorization flaw in the configuration query endpoint. This allows a remote attacker to escalate privileges. |
| CVE-2026-88618 | Deferred | 未確認 | CWE-79 | 1024-lab SmartAdmin v3.30.0 contains a stored cross-site scripting vulnerability in its file upload functionality. This allows a remote attacker to execute arbitrary code. |
| CVE-2026-88619 | Deferred | 未確認 | CWE-862 | 1024-lab SmartAdmin v3.30.0 contains a missing authorization vulnerability in the scheduled-job management module. The AdminSmartJobController exposes scheduled-job management endp |
| CVE-2026-8862 | Analyzed | 未確認 | CWE-522 | IBM Netezza Software 11.3.0.3 through Interim Fix 002 has credentials that are hardcoded in the application source code, allowing unauthorized access to the container registry. The |
| CVE-2026-88620 | Deferred | 未確認 | CWE-862 | SmartAdmin API Java17 SpringBoot3 version 3.30.0 contains an improper authorization vulnerability in the /employee/queryAll endpoint. The endpoint does not enforce the required fun |
| CVE-2026-88621 | Deferred | 未確認 | CWE-706 | OneNav v1.2.4 contains an authenticated arbitrary file deletion vulnerability in the Api::upload() method in class/Api.php. An authenticated administrator can submit a non-HTML upl |
| CVE-2026-88622 | Deferred | 未確認 | CWE-77 | NUUO Network Video Recorder 2.0.0 is vulnerable to Command Injection in handle_import_privilege.php. |
| CVE-2026-88623 | Deferred | 未確認 | CWE-552 | NUUO Network Video Recorder 2.0.0 is vulnerable to arbitrary file read. In up.php, the url parameter submitted by the user via POST is received, and fopen() is used to open the URL |
| CVE-2026-88624 | Deferred | 未確認 | CWE-22 | Missing path validation in the Worktree.remove component of openCode v1.18.26 allows attackers to execute arbitrary recursive directory deletion via a crafted payload. |
| CVE-2026-88738 | Deferred | 未確認 | CWE-434 | Jazzware RT1000 Edge webUI v. 20.0.1 contains an unrestricted file upload vulnerability in the upgrade package upload functionality. An attacker with administrative privileges can |
| CVE-2026-88742 | Deferred | 未確認 | CWE-79 | Bacularis 1.0.0 - 6.5.0 is vulnerable to Stored cross-site scripting (XSS) in the client address field. |
| CVE-2026-88743 | Deferred | 未確認 | CWE-79 | Bacularis 4.7.0 - 6.5.0 is vulnerable to Stored cross-site scripting (XSS) in director tags. |
| CVE-2026-88745 | Deferred | 未確認 | CWE-434, CWE-79 | EMLOG-Pro 2.6.29 contains a XSS vulnerability that enables attackers to upload a malicious shell. |
| CVE-2026-88746 | Deferred | 未確認 | CWE-79 | idccms V1.70 is vulnerable to Cross Site Scripting (XSS) in /admin/makeDiy_deal.php. |
| CVE-2026-88756 | Deferred | 未確認 | CWE-89 | Pagekit CMS <= 1.0.18 allows an unauthenticated attacker to perform SQL injection through the credentials array submitted to the public login endpoint (POST /user/authenticate). |
| CVE-2026-88761 | Deferred | 未確認 | CWE-1391 | The Botslab G980H dash camera firmware generates the default WiFi password using predictable device information, portions of which are advertised by the product. An unauthenticated |
| CVE-2026-88763 | Awaiting Analysis | 未確認 | CWE-674 | A flaw was found in the skupper-router component of Red Hat Service Interconnect, which is used to provide secure communication between distributed services. The issue occurs when |
| CVE-2026-88764 | Deferred | 未確認 | CWE-269 | The Simple Membership WordPress plugin before 4.7.8 does not validate that the membership level supplied in a PayPal payment notification matches the level configured for the paid |
| CVE-2026-88765 | Analyzed | 未確認 | CWE-77, CWE-787 | GitLab has remediated an issue in GitLab EE affecting all versions from 12.3 to 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 under certain conditions could allow an authentic |
| CVE-2026-88770 | Awaiting Analysis | 未確認 | CWE-307 | A flaw was found in the Device Authorization Grant flow of Keycloak, an identity and access management solution. The issue occurs because the token redemption process fails to chec |
| CVE-2026-88771 | Analyzed | 掲載 | CWE-20 | Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, |
| CVE-2026-88772 | Analyzed | 掲載 | CWE-119 | Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FI |
| CVE-2026-88773 | Analyzed | 未確認 | CWE-444 | Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before |
| CVE-2026-88774 | Modified | 未確認 | CWE-20 | Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FI |
| CVE-2026-88775 | Modified | 未確認 | CWE-120 | Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and befor |
| CVE-2026-88776 | Modified | 未確認 | CWE-119 | Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FI |
| CVE-2026-88777 | Modified | 未確認 | CWE-119 | Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 F |
| CVE-2026-88778 | Analyzed | 未確認 | CWE-342 | Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, befo |
| CVE-2026-88788 | Deferred | 未確認 | CWE-79 | The Text Styler WordPress plugin through 1.1.1 does not sanitise and escape user-supplied styling values before outputting them within a front-end style block, and does not verify |
| CVE-2026-88790 | Deferred | 未確認 | CWE-22 | A security vulnerability has been detected in proma-ai Proma up to 0.19.37. Affected is the function resolveTargetPath of the file apps/electron/src/main/lib/file-preview-service.t |
| CVE-2026-88791 | Deferred | 未確認 | CWE-601 | The Safe Redirect Manager WordPress plugin before 2.3.0 does not properly validate the redirect destination when a wildcard redirect rule to an absolute URL is configured, allowing |
| CVE-2026-88792 | Deferred | 未確認 | CWE-79 | The Dictionary WordPress plugin through 1.0 does not have authorisation, sanitisation or escaping in place when adding or updating dictionary entries, allowing unauthenticated user |
| CVE-2026-88793 | Deferred | 未確認 | CWE-79 | The YouTube Embed WordPress plugin from 10.0 to 10.3 does not perform any authorisation check on one of its AJAX actions, relying only on a nonce it prints on every front-end page, |
| CVE-2026-88795 | Deferred | 未確認 | CWE-94 | The wpShopGermany IT-RECHT KANZLEI WordPress plugin before 2.4 does not generate its API authentication token securely, deriving it from data the requester controls and creating it |
| CVE-2026-88797 | Deferred | 未確認 | CWE-284 | The Vayu X WordPress theme before 1.0.6 does not perform any capability check on one of its AJAX actions and exposes the nonce guarding it to every logged-in user, allowing any aut |
| CVE-2026-88798 | Deferred | 未確認 | CWE-400 | The Really Simple Security WordPress plugin before 9.8.3 does not validate a client-supplied address value before using it as a storage key in one of its own options, allowing una |
| CVE-2026-88802 | Deferred | 未確認 | CWE-862 | The MDJM Event Management WordPress plugin before 1.7.8.5 and the Mobile Events Manager WordPress plugin through 1.4.8.3 do not check a capability, a nonce or the type of the recor |
| CVE-2026-88804 | Awaiting Analysis | 未確認 | CWE-79 | An unauthenticated update of public UI settings could be used by remote attackers to execute a stored cross-site scripting attack in the Rancher UI, in SUSE Rancher 2.15 before 2.1 |
| CVE-2026-88805 | Awaiting Analysis | 未確認 | CWE-613 | Incorrect credential cleaning on logout could be used by remote attackers to keep access credentials even after the account was logged out. Affected is SUSE Rancher 2.15 before 2.1 |
| CVE-2026-88806 | Awaiting Analysis | 未確認 | CWE-122 | A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the key_sym_map. |
| CVE-2026-88807 | Awaiting Analysis | 未確認 | CWE-122 | A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients. |
| CVE-2026-88808 | Analyzed | 未確認 | CWE-250 | A vulnerability has been identified within Rancher Manager where the Fleet agent wrote resources to downstream clusters using its own cluster-admin credentials instead of the Servi |
| CVE-2026-88815 | Deferred | 未確認 | CWE-843 | DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv. When casting to SQL_NUMERIC, sql_type_cast_svpv passes the string pointer and |
| CVE-2026-88816 | Deferred | 未確認 | CWE-843 | DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in FetchHashKeyName. fetchrow_hashref uses the string pointer of the FetchHashKeyName attribute as t |
| CVE-2026-88817 | Deferred | 未確認 | CWE-269, CWE-284 | An authenticated, non-guest user of Curiosity Workspace could enroll themselves as an administrator and member of an existing access group without an invitation or approval. It |
| CVE-2026-88819 | Awaiting Analysis | 未確認 | CWE-290, CWE-345 | In Siglet current and past versions the refresh token handler do not enforce proof of possession of the issuer DID. |
| CVE-2026-88824 | Deferred | 未確認 | CWE-79 | The Master Blocks WordPress plugin before 1.5.0 does not have authorisation on one of its REST routes, allowing unauthenticated users to update its settings, including a value tha |
| CVE-2026-88825 | Deferred | 未確認 | CWE-79 | The iGMS Direct Booking WordPress plugin before 2.0 does not authorise or escape its widget appearance settings, allowing unauthenticated users to store arbitrary web scripts that |
| CVE-2026-88828 | Deferred | 未確認 | CWE-288 | The Blacklist Manager for WooCommerce WordPress plugin from 1.3.0 to 2.3.1 does not enforce its user blocking on every authentication path, allowing the holder of an account the si |
| CVE-2026-88830 | Awaiting Analysis | 未確認 | CWE-131 | A unit confusion in BusyBox TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted ClientKeyExchange message. |
| CVE-2026-88831 | Awaiting Analysis | 未確認 | CWE-636 | BusyBox httpd IP deny rules with invalid CIDR prefix lengths fail open, leaving a parsed IP with a zeroed mask so the rule matches no clients. |
| CVE-2026-88832 | Awaiting Analysis | 未確認 | CWE-787 | BusyBox romfs volume ID parsing uses unbounded strlen on attacker-controlled metadata, causing a heap buffer overflow when processing crafted filesystem images. |
| CVE-2026-88835 | Awaiting Analysis | 未確認 | CWE-125 | BusyBox dpkg read_package_field() steps past a NUL terminator on malformed .deb packages, causing an out-of-bounds heap read. |
| CVE-2026-88837 | Awaiting Analysis | 未確認 | CWE-305 | BusyBox httpd treats yescrypt ($y$) password hashes as plaintext during Basic Authentication, inverting the authentication check. |
| CVE-2026-88839 | Awaiting Analysis | 未確認 | CWE-787 | BusyBox passwd/group tokenize() references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap pointers. |
| CVE-2026-88840 | Awaiting Analysis | 未確認 | CWE-125 | BusyBox TLS get_client_hello() reads past the end of the input buffer when parsing a truncated ClientHello message. |
| CVE-2026-88843 | Deferred | 未確認 | CWE-22 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not validate one of its display-style settings before using it to build a template path, allowing users wi |
| CVE-2026-88844 | Deferred | 未確認 | CWE-639 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not verify that the requesting user owns the course before returning its enrolled-student data, allowing u |
| CVE-2026-88845 | Deferred | 未確認 | CWE-862 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not perform any capability or nonce checks on an administrative maintenance action, allowing any authentic |
| CVE-2026-88846 | Deferred | 未確認 | CWE-862 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not check whether user registration is enabled on the site before creating an account through one of its f |
| CVE-2026-88847 | Deferred | 未確認 | CWE-862 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not verify that a user is enrolled in a course before recording lesson completions against it, allowing an |
| CVE-2026-88848 | Deferred | 未確認 | CWE-863 | The MasterStudy LMS WordPress plugin from 1.9 before 3.7.50 does not verify that a course a member asks to enrol in is covered by their membership plan, nor that the plan identifie |
| CVE-2026-88852 | Deferred | 未確認 | CWE-79 | Joomla Extension - regularlabs.com - Privileged stored XSS via url option in Snippets Free extension for Joomla < 7.0.0, Snippets Pro extension for Joomla < 11.0.0 - Snippets subst |
| CVE-2026-88853 | Deferred | 未確認 | CWE-79 | Joomla Extension - regularlabs.com - Privileged stored XSS via event handler option in Modals Pro extension for Joomla < 17.0.0 - Modals Pro intentionally supports JavaScript Event |
| CVE-2026-88854 | Deferred | 未確認 | CWE-89 | Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions showSearchResult() and showSearchResultAjax |
| CVE-2026-88855 | Deferred | 未確認 | CWE-89 | Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions saveGallery() passes form data th |
| CVE-2026-88856 | Deferred | 未確認 | CWE-94 | Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions updateOSGallery(), reache |
| CVE-2026-88857 | Deferred | 未確認 | CWE-434 | Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions saveWatermark() copied an |
| CVE-2026-88859 | Awaiting Analysis | 未確認 | CWE-84 | A flaw was found in Evolution. A remote attacker can exploit this vulnerability by sending a specially crafted HTML email containing a spoofed vCard control. When a victim clicks o |
| CVE-2026-88860 | Deferred | 未確認 | CWE-863 | Capgo fails to clean up channel permission overrides when a user's last organization role binding is deleted, leaving stale overrides active. Attackers can retain channel-specific |
| CVE-2026-88861 | Deferred | 未確認 | CWE-288 | Capgo (Cap-go/capgo.app) contains an authentication bypass affecting all versions (no patched version available at time of publication). The Edge authorization path allows a passwo |
| CVE-2026-88862 | Deferred | 未確認 | CWE-863 | Capgo (capgo.app) backend through 12.242.4 does not validate parent-child delegation when processing the x-limited-key-id header. checkKeyByIdPg() in supabase/functions/_backend/ut |
| CVE-2026-88863 | Deferred | 未確認 | CWE-269 | capgo.app (npm package `capgo`) through version 12.207.1 does not compare the caller's role rank against the requested role in the validateInvite() function of supabase/functions/_ |
| CVE-2026-88864 | Deferred | 未確認 | CWE-284 | Capgo (capgo.app) fails to restrict direct write access to the public.sso_providers table exposed through Supabase PostgREST. A holder of an ordinary Capgo full API key can insert |
| CVE-2026-88865 | Deferred | 未確認 | CWE-639 | AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate restream ownership in getRestream.json.php, allowing authenticated users with canStream permission |
| CVE-2026-88866 | Deferred | 未確認 | CWE-79 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the LoginControl plugin that fails to encode the User-Ag |
| CVE-2026-88867 | Deferred | 未確認 | CWE-79 | WWBN AVideo, in versions up to and including commit c3edcc274c389816d434acadac07ee78eaf330c1, contains a stored cross-site scripting vulnerability. objects/categoryAddNew.json.php |
| CVE-2026-88868 | Deferred | 未確認 | CWE-79 | AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the LiveLinks plugin where title and description fields are s |
| CVE-2026-88869 | Deferred | 未確認 | CWE-79 | AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the AD_Server plugin's log.php endpoint that fails to escape |
| CVE-2026-88870 | Deferred | 未確認 | CWE-352 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in the LoginControl plugin PGP key endpoints that lack CSRF |
| CVE-2026-88871 | Deferred | 未確認 | CWE-352 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 (master, 2026-08-23) contains a cross-site request forgery vulnerability in the CustomizeUser plugin's plugin/Cu |
| CVE-2026-88872 | Deferred | 未確認 | CWE-352 | AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in the setPassword.json.php endpoint that allows unauthenticated |
| CVE-2026-88873 | Deferred | 未確認 | CWE-352 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in view/logArchive.json.php that allows unauthenticated atta |
| CVE-2026-88874 | Deferred | 未確認 | CWE-200 | AVideo through revision c3edcc274c389816d434acadac07ee78eaf330c1 (master, 2026-08-23) does not enforce the Live stream password check on the stats endpoint or on the HLS origin. Li |
| CVE-2026-88875 | Deferred | 未確認 | CWE-359 | AVideo through revision c3edcc274c389816d434acadac07ee78eaf330c1 (master, 2026-08-23) incompletely sanitizes sensitive user fields in the APIName=video response. Video rows include |
| CVE-2026-88876 | Deferred | 未確認 | CWE-200 | AVideo through revision c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization vulnerability in plugin/PlayerSkins/seo.php that allows unauthenticated attackers |
| CVE-2026-88877 | Analyzed | 未確認 | CWE-639 | Traefik is a HTTP reverse proxy and load balancer. In versions >= v3.7.0 and <= v3.7.11, the Kubernetes ingress-nginx provider mishandles Ingresses that carry both an authenticatio |
| CVE-2026-88878 | Analyzed | 未確認 | CWE-770 | Traefik is an HTTP reverse proxy and load balancer. In versions >= v2.8.2 through <= v2.11.55 and >= v3.0.0 through <= v3.7.11, the entryPoints.<name>.transport.respondingTimeouts |
| CVE-2026-88879 | Analyzed | 未確認 | CWE-290 | Traefik is an HTTP reverse proxy and load balancer. In Traefik v1.x, v2.x through v2.11.55, and v3.0.0 through v3.7.11, header names are canonicalized only on dashes, so X-Auth-Use |
| CVE-2026-88880 | Awaiting Analysis | 未確認 | CWE-601 | Renovate before 44.11.3 fails to validate Link header destinations when following GitLab server pagination, allowing malicious servers to redirect credential-bearing requests. Atta |
| CVE-2026-88881 | Awaiting Analysis | 未確認 | CWE-601 | Renovate, a dependency update tool, follows pagination links supplied by the GitHub server in the HTTP `Link` header when interacting with GitHub.com, GitHub Enterprise Cloud, or G |
| CVE-2026-88882 | Awaiting Analysis | 未確認 | CWE-601 | Renovate is a dependency update automation tool. In versions before 44.11.2 (and Mend Renovate CE/EE images and charts before 15.4.0, and mend-renovate-enterprise-edition helm char |
| CVE-2026-88883 | Awaiting Analysis | 未確認 | CWE-532 | Renovate is an automated dependency update tool. In versions before 44.14.4 (and Mend Renovate CE/EE images before 15.4.0 and the mend-renovate-enterprise-edition Helm chart before |
| CVE-2026-88884 | Awaiting Analysis | 未確認 | CWE-863 | Renovate is a dependency update automation tool. In versions before 44.3.1 (and Mend Renovate CE/EE images before 15.4.0, mend-renovate-ce Helm chart before 15.4.0, mend-renovate-e |
| CVE-2026-88885 | Awaiting Analysis | 未確認 | CWE-78 | Renovate before 44.14.7 contains a command injection vulnerability in the gomod manager when processing unescaped depName parameters in import-path update commands with binarySourc |
| CVE-2026-88886 | Awaiting Analysis | 未確認 | CWE-78 | Renovate is a dependency update automation tool. In versions before 44.14.7 (and in Mend Renovate CE/EE distributions before 15.4.0, and the mend-renovate-enterprise-edition Helm c |
| CVE-2026-88887 | Awaiting Analysis | 未確認 | CWE-601 | Renovate is a dependency update automation tool. When listing tags/digests for a container image, Renovate follows pagination links supplied by the remote registry in the HTTP Link |
| CVE-2026-88888 | Awaiting Analysis | 未確認 | CWE-78 | Renovate before 44.14.7 contains a command injection vulnerability in the Mix manager when processing private dependencies with unescaped organization parameters. Attackers can inj |
| CVE-2026-88889 | Awaiting Analysis | 未確認 | CWE-78 | Renovate before 44.14.7 contains a command injection vulnerability in the Maven Wrapper manager that allows attackers to execute arbitrary commands by specifying a malicious distri |
| CVE-2026-88890 | Deferred | 未確認 | CWE-89 | OpenPanel through 2.3.0 contains an SQL injection vulnerability in the analytics filter builder that fails to validate profile.* filter column identifiers before interpolating them |
| CVE-2026-88891 | Deferred | 未確認 | CWE-269 | OpenPanel through 2.3.0 fails to enforce read-only project access level on 26 of 29 mutating procedures, allowing read-level members to modify, delete, and publish project data. At |
| CVE-2026-88892 | Deferred | 未確認 | CWE-918 | In OpenPanel through 2.3.0, the data importer fetches a caller-supplied URL with plain fetch instead of the project's existing SSRF guard (apps/api/src/utils/safe-fetch.ts). In pac |
| CVE-2026-88893 | Deferred | 未確認 | CWE-200 | OpenPanel through 2.3.0 share lookup procedures fail to validate access controls and return password hashes and protected report definitions to unauthenticated callers. Attackers w |
| CVE-2026-88894 | Analyzed | 未確認 | CWE-863 | Snipe-IT's predefined kit checkout path does not enforce Full Multiple Company Support (FMCS) tenant isolation on the checkout target. Unlike the single, bulk, API, accessory, lice |
| CVE-2026-88895 | Deferred | 未確認 | CWE-287 | CyberPanel before 3.0.5 fails to enforce two-factor authentication on API endpoints, allowing attackers to bypass TOTP requirements using password-derived tokens. Attackers who obt |
| CVE-2026-88896 | Deferred | 未確認 | CWE-918 | EspoCRM before 10.0.4 is vulnerable to server-side request forgery. HostCheck::ipAddressIsNotInternal(), which validates outbound URLs to block requests to internal/private IP addr |
| CVE-2026-88897 | Deferred | 未確認 | CWE-598 | Flextype CMS through 1.0.0-alpha.3 accepts API authentication credentials through URL query string parameters in REST API routes. Attackers with access to web server, proxy, or mon |
| CVE-2026-88898 | Deferred | 未確認 | CWE-862 | AppFlowy-Cloud versions 0.7.2 through 0.9.64 fail to authorize callers against the workspace in the bulk publish endpoint path, allowing authenticated users to publish content into |
| CVE-2026-88899 | Deferred | 未確認 | CWE-73 | knowns versions before 0.31.0 fail to properly validate the x-opencode-directory request header in the /api/opencode proxy endpoint. Remote attackers can supply arbitrary directory |
| CVE-2026-88904 | Deferred | 未確認 | CWE-269 | The PuppyFW WordPress plugin through 0.4.4 does not have proper authorisation on one of its REST routes, which tests the caller against a capability taken from the request itself, |
| CVE-2026-88907 | Deferred | 未確認 | CWE-863 | Incorrect Authorization vulnerability in TÜBİTAK ULAKBİM UlakPDF allows Authentication Bypass. This issue affects UlakPDF: through 09092026. |
| CVE-2026-88910 | Deferred | 未確認 | CWE-639 | The kboard WordPress plugin before 6.7 does not verify ownership or context before deleting board media, allowing unauthenticated attackers to permanently delete its uploaded media |
| CVE-2026-88912 | Deferred | 未確認 | CWE-639 | The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.7.12 does not check ownership before changing the privacy level of an activity and its attached media, r |
| CVE-2026-88914 | Awaiting Analysis | 未確認 | CWE-190 | A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV file containing CEA-608 closed-caption data, an integer overflow in 3 |
| CVE-2026-88915 | Deferred | 未確認 | CWE-862 | Affected versions of MISP do not consistently enforce the acting user's authorization when instantiating event templates. For templates using distribution = 4, the template can s |
| CVE-2026-88916 | Deferred | 未確認 | CWE-863 | Incorrect Authorization vulnerability in TÜBİTAK ULAKBİM UlakPDF allows Privilege Escalation. This issue affects UlakPDF: through 09092026. |
| CVE-2026-88920 | Analyzed | 未確認 | CWE-287 | An authentication bypass in the DOM security processor in Apache WSS4J allows unauthenticated remote attackers to forge authenticated SOAP messages via a crafted unsigned SAML send |
| CVE-2026-88921 | Deferred | 未確認 | CWE-116, CWE-79 | MISP contains an HTML injection vulnerability in the MISPElementHTMLFormatterTool component, which is responsible for rendering MISP element references (attributes, objects, and ta |
| CVE-2026-88922 | Deferred | 未確認 | CWE-281 | The go-getter library up to versions 1.8.8 and 2.2.3 is vulnerable to a privilege escalation issue in its archive decompression handling that may allow a crafted archive to cause e |
| CVE-2026-88924 | Awaiting Analysis | 未確認 | CWE-367 | A flaw was found in the admin backend of gvfs. The privileged gvfsd-admin daemon changes the ownership of newly created private D-Bus sockets by calling the link-following chown() |
| CVE-2026-88926 | Deferred | 未確認 | CWE-89 | The VikRentItems Flexible Rental Management System WordPress plugin before 1.2.4 does not sanitise and escape some of its parameters before using them in SQL statements, allowing u |
| CVE-2026-88929 | Deferred | 未確認 | CWE-200 | The Product Badge, Label, Countdown Timer for WooCommerce WordPress plugin before 7.5.2 does not check whether a product is published before returning its details to unauthenticat |
| CVE-2026-88932 | Awaiting Analysis | 未確認 | CWE-400, CWE-459 | multer is a Node.js middleware for handling multipart/form-data uploads. In versions 2.2.0 through 2.3.0, when a request using disk storage is aborted mid-upload, file writes that |
| CVE-2026-88937 | Deferred | 未確認 | CWE-22 | knowns through 0.33.0 fails to properly validate template destination paths in the code generation template engine, allowing attackers to read and write arbitrary files outside the |
| CVE-2026-88938 | Deferred | 未確認 | CWE-22 | knowns through 0.33.0 fails to confine the path argument of the code.find MCP tool to the project root, allowing AI agent sessions to read source files anywhere on the host. Attack |
| CVE-2026-88939 | Deferred | 未確認 | CWE-863 | knowns through 0.33.0 exempts the project.set action from permission guard checks unconditionally, allowing read-only agent sessions to bypass restrictions. Attackers can invoke pr |
| CVE-2026-88940 | Deferred | 未確認 | CWE-22 | knowns through 0.33.0 fails to validate the path query parameter in the workspace browse endpoint, allowing remote attackers to enumerate arbitrary directories on the host filesyst |
| CVE-2026-88944 | Deferred | 未確認 | CWE-862 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.0.8. This is due to the plug |
| CVE-2026-88952 | Deferred | 未確認 | CWE-287 | Improper Authentication vulnerability in team-alembic AshAuthentication allows an attacker to be signed in as another user by linking an OAuth2 identity to an account that is not t |
| CVE-2026-88956 | Deferred | 未確認 | CWE-306 | The Botslab G980H dash camera firmware contains an authentication vulnerability in the root account exposed through the device's UART interface. The affected account does not requi |
| CVE-2026-88959 | Deferred | 未確認 | CWE-862 | Anchor CMS through 0.12.7 fails to enforce role-based access control in admin user-management endpoints, allowing any authenticated low-privilege user to create administrator accou |
| CVE-2026-88974 | Awaiting Analysis | 未確認 | CWE-863 | WPGraphQL provides a GraphQL API for WordPress sites. Prior to 2.22.2, the updatePost mutation in src/Mutation/PostObjectUpdate.php checks only the collection-level edit_posts capa |
| CVE-2026-88975 | Deferred | 未確認 | CWE-400 | Http4s is a Scala interface for HTTP services. Prior to 0.23.37 and 1.0.0-M48, Ember’s HTTP/2 read loop parses a frame’s 24-bit declared length but waits to buffer the entire paylo |
| CVE-2026-88976 | Deferred | 未確認 | CWE-79 | Plate is a rich-text editor with AI and shadcn/ui. Prior to 53.3.11, and in the discontinued 54.0.0-beta.0 through 54.0.0-beta.1 builds, Plate core HTML deserialization APIs parse |
| CVE-2026-88978 | Deferred | 未確認 | CWE-639, CWE-863 | Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. Prior to 0.106.1, the WorkerStatus gRPC polling path in pkg/repository/durable_ |
| CVE-2026-88993 | Deferred | 未確認 | CWE-79 | The All Bootstrap Blocks WordPress plugin through 1.3.31 does not properly escape a block attribute before outputting it in HTML tag-name position, allowing users with Contributor- |
| CVE-2026-88994 | Deferred | 未確認 | CWE-98 | The All Bootstrap Blocks WordPress plugin through 1.3.31 does not validate a block attribute before using it to build a filesystem path that is included at render time, allowing us |
| CVE-2026-88995 | Deferred | 未確認 | CWE-200 | The Bookit — Booking & Appointment Calendar WordPress plugin before 2.6.0.1 does not properly restrict the data returned by an availability-check request, allowing unauthenticated |
| CVE-2026-88996 | Deferred | 未確認 | CWE-79 | The WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'page_ |
| CVE-2026-88997 | Deferred | 未確認 | CWE-79 | The JSM Show Post Metadata WordPress plugin before 4.9.1 does not properly escape a post meta key before outputting it into an inline event-handler attribute in an admin-facing met |
| CVE-2026-89000 | Deferred | 未確認 | CWE-918 | The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not perform a capability check or validate the destination of a user-supplied feed URL before fetching it server- |
| CVE-2026-89001 | Deferred | 未確認 | CWE-269 | The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not verify that a user running a feed campaign is permitted to publish content or to attribute posts to another a |
| CVE-2026-89002 | Deferred | 未確認 | CWE-79 | The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not sanitize and escape content it retrieves from a user-supplied source before rendering it, which could allow u |
| CVE-2026-89003 | Deferred | 未確認 | CWE-918 | The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not perform a capability check before fetching a user-supplied URL and rendering the response, allowing users wit |
| CVE-2026-89004 | Deferred | 未確認 | CWE-639 | The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not verify ownership or authorization before returning a campaign's stored configuration and run log, allowing us |
| CVE-2026-89005 | Deferred | 未確認 | CWE-79 | The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not sanitise and escape one of its campaign configuration fields when a certain feature is enabled, which allows |
| CVE-2026-89006 | Deferred | 未確認 | CWE-79 | The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not sanitize imported feed content before storing it as post content, allowing users with the Contributor role an |
| CVE-2026-89007 | Deferred | 未確認 | CWE-862 | The Bookit — Booking & Appointment Calendar WordPress plugin before 2.6.0.5 does not perform a capability check in one of its appointment-deletion functions, allowing users with it |
| CVE-2026-89008 | Deferred | 未確認 | CWE-200 | The Bookit — Booking & Appointment Calendar WordPress plugin before 2.6.0.5 does not perform an authorization check on one of its appointment-retrieval actions, allowing users with |
| CVE-2026-89009 | Deferred | 未確認 | CWE-36 | WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1_V250922 contain an unauthenticated arbitrary file write vulnerability that allows remote attackers to overwrite |
| CVE-2026-89010 | Deferred | 未確認 | CWE-78 | WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1_V250922 contain an unauthenticated OS command injection vulnerability that allows remote attackers to execute ar |
| CVE-2026-89011 | Deferred | 未確認 | CWE-1321 | isomorphic-git before 1.42.0 contains a prototype pollution vulnerability in the getRemoteInfo function that allows a malicious Git server operator to pollute Object.prototype by a |
| CVE-2026-89012 | Deferred | 未確認 | CWE-178 | Dolibarr 24.0.0 before 24.0.1 contains a case-sensitive denylist bypass vulnerability in the sqlfilters API query parameter that allows authenticated attackers to recover protected |
| CVE-2026-89013 | Deferred | 未確認 | CWE-863 | Dolibarr 23.0.4 before 24.0.1 contains an authorization bypass vulnerability that allows unauthenticated attackers to read arbitrary files through the document storage endpoints by |
| CVE-2026-89019 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-89020 | Awaiting Analysis | 未確認 | CWE-121 | MikroTik RouterOS before 7.23.4 (long-term) and 7.24.2 (stable) contains a stack-based buffer overflow vulnerability in the mtget binary's TFTP RRQ builder function that allows aut |
| CVE-2026-89021 | Awaiting Analysis | 未確認 | CWE-22, CWE-59 | MikroTik RouterOS before 7.24.2 contains a path traversal vulnerability in the container package OCI/tar image extraction that allows attackers to write files outside the container |
| CVE-2026-89022 | Deferred | 未確認 | CWE-290 | BookStack before 26.05.5 contains an authentication bypass vulnerability in its social login implementation that allows unauthenticated attackers to sign in as arbitrary users by a |
| CVE-2026-89023 | Deferred | 未確認 | CWE-862 | ThemeAtelier Domain For Sale plugin for WordPress before 3.5.2 contains a missing authorization vulnerability in its REST API endpoints that allows unauthenticated attackers to acc |
| CVE-2026-89025 | Awaiting Analysis | 未確認 | CWE-755 | Hirschmann HiOS Switch Platform devices contain a denial-of-service vulnerability in the integrated web server due to missing validation of HTTP(S) content. A remote unauthenticate |
| CVE-2026-89026 | Deferred | 未確認 | CWE-321 | The Issabel Framework, the web framework supporting Issabel PBX software, before commit b97dbaf contains a hard-coded HS256 JWT signing key in the pbxapi index.php file that is ide |
| CVE-2026-89027 | Deferred | 未確認 | CWE-306 | miniOrange JWT Authentication for WP REST APIs plugin for WordPress before 4.8.0 contains an authentication method downgrade vulnerability that allows unauthenticated attackers to |
| CVE-2026-89028 | Awaiting Analysis | 未確認 | CWE-122, CWE-191 | MikroTik RouterOS before 7.24 contains a heap memory corruption vulnerability in the userspace SMB daemon that allows remote attackers to corrupt adjacent heap memory by supplying |
| CVE-2026-89029 | Deferred | 未確認 | CWE-639 | Adenion Blog2Social plugin for WordPress before 9.1.0 allows low-privileged users to enumerate WordPress user accounts. The b2s_get_select_mandant_user AJAX handler in includes/Aja |
| CVE-2026-89030 | Deferred | 未確認 | CWE-862 | Adenion Blog2Social plugin for WordPress before 9.1.0 exposes the email addresses of all registered WordPress users to low-privileged accounts. The b2s_search_user AJAX handler in |
| CVE-2026-89031 | Deferred | 未確認 | CWE-639 | Adenion Blog2Social plugin for WordPress before 9.1.0 allows low-privileged users to modify the scheduled post records of other users. The b2s_calendar_move_post AJAX handler in in |
| CVE-2026-89032 | Awaiting Analysis | 未確認 | CWE-863 | BerriAI LiteLLM before 1.101.0-rc.1 contains a tenant isolation bypass vulnerability in the semantic cache layer that allows authenticated users to read other tenants' cached respo |
| CVE-2026-89034 | Deferred | 未確認 | CWE-306 | TCH QRing smart ring model R20_B006 running firmware RT09R20_1.00.00_250318 contains an unauthenticated Bluetooth Low Energy access vulnerability that allows any nearby attacker to |
| CVE-2026-89036 | Awaiting Analysis | 未確認 | CWE-88 | Appwrite before 2.0.0 contains an argument injection vulnerability that allows authenticated users with functions.write or sites.write permissions to execute arbitrary commands by |
| CVE-2026-89038 | Awaiting Analysis | 未確認 | CWE-22 | Verizon Cloud for Android (com.vcast.mediamanager) before 26.7.10 contains a path traversal vulnerability that allows co-resident malicious applications to write attacker-controlle |
| CVE-2026-89040 | Awaiting Analysis | 未確認 | CWE-22 | Tencent Mass Service Engine in Cluster (MSEC) allows a remote, unauthenticated attacker to send a crafted POST request including ../ and gain root access on the target device. An a |
| CVE-2026-89042 | Deferred | 未確認 | CWE-347 | passport-saml-encrypted through 0.1.13 makes SAML signature verification conditional on an optional cert option, allowing attackers to bypass authentication by submitting unsigned |
| CVE-2026-89043 | Deferred | 未確認 | CWE-347 | passport-saml-encrypted through 0.1.13 contains an XML signature wrapping vulnerability where signature verification and assertion extraction use independent XPath lookups with no |
| CVE-2026-89044 | Analyzed | 未確認 | CWE-444 | Netty versions 4.1.133.Final through 4.1.137.Final and 4.2.13.Final through 4.2.17.Final fail to properly validate the final transfer coding in the Transfer-Encoding header, allowi |
| CVE-2026-89045 | Awaiting Analysis | 未確認 | CWE-835 | zstd-jni versions 1.4.8-4 through 1.5.7-13 fail to validate negative length parameters in ZstdInputStreamNoFinalizer.read(), allowing attackers to trigger infinite loops. Attackers |
| CVE-2026-89046 | Awaiting Analysis | 未確認 | CWE-125 | zstd-jni versions 1.5.5-6 through 1.5.7-13 contain an out-of-bounds read vulnerability in Zstd.getFrameContentSize that fails to validate negative srcPosition arguments. Attackers |
| CVE-2026-89049 | Awaiting Analysis | 未確認 | CWE-1289, CWE-918 | A server-side request forgery issue due to improper validation of equivalent address representations in the port forwarding to remote hosts functionality in Amazon AWS Systems Mana |
| CVE-2026-89050 | Deferred | 未確認 | CWE-345 | The Quads Ads Manager for Google AdSense WordPress plugin before 3.0.5 does not verify payment completion with the configured payment gateway before marking an ad-selling order as |
| CVE-2026-89054 | Awaiting Analysis | 未確認 | CWE-862 | A missing authorization vulnerability in OpenNMS Horizon allows configuration changes without authentication. The Spring Security policy for the /api/v2 REST API defines authorizat |
| CVE-2026-89055 | Deferred | 未確認 | CWE-862 | The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.120.0. This is due to the plugin not properl |
| CVE-2026-89058 | Awaiting Analysis | 未確認 | CWE-346, CWE-942 | A flaw was found in RESTEasy's CorsFilter, which, when configured to allow all origins ("*"), reflects the request's Origin header back in the Access-Control-Allow-Origin response |
| CVE-2026-89059 | Awaiting Analysis | 未確認 | CWE-409 | A flaw was found in RESTEasy's IIOImageProvider, which decodes attacker-supplied image request bodies without enforcing any limit on the declared image dimensions or pixel count. A |
| CVE-2026-89060 | Awaiting Analysis | 未確認 | CWE-551 | A cross-namespace authorization flaw in multicluster-observability-addon allows a user with permission to modify a managed cluster’s ManagedClusterAddOn configuration to reference |
| CVE-2026-89063 | Deferred | 未確認 | CWE-639 | The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 28.1 via |
| CVE-2026-89064 | Deferred | 未確認 | CWE-522 | The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to Insufficient Credential Protection in versions up to, and including, 7.110. This is due to the `Ai1wm_M |
| CVE-2026-89065 | Awaiting Analysis | 未確認 | CWE-23 | Relative path traversal in the generated file manifest cleanup component in projen before 0.101.37 might allow context-dependent attackers to recursively delete files and directori |
| CVE-2026-89066 | Awaiting Analysis | 未確認 | CWE-78, CWE-88 | Improper neutralization of special elements used in an OS command in the task synthesis component in projen before 0.103.0 might allow context-dependent attackers to execute arbitr |
| CVE-2026-89078 | Analyzed | 未確認 | CWE-415 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have a |
| CVE-2026-89080 | Deferred | 未確認 | CWE-287 | The Really Simple Security WordPress plugin before 9.8.1 does not prevent an unauthenticated request from resetting an account's completed email two-factor enrolment, allowing an |
| CVE-2026-89081 | Deferred | 未確認 | CWE-79 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'search' parameter in all versions up to, and incl |
| CVE-2026-89082 | Awaiting Analysis | 未確認 | CWE-94 | HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain |
| CVE-2026-89083 | Awaiting Analysis | 未確認 | CWE-94 | HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain |
| CVE-2026-89084 | Awaiting Analysis | 未確認 | CWE-22 | HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain |
| CVE-2026-89086 | Deferred | 未確認 | CWE-347 | In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proceed to declare the signature valid with |
| CVE-2026-89087 | Deferred | 未確認 | CWE-573 | The cstruct package before 6.3.0 for OCaml mishandles indexes. |
| CVE-2026-89089 | Awaiting Analysis | 未確認 | CWE-89 | A SQL injection vulnerability exists in the JasperReports-based reporting feature of multiple versions of OpenNMS Meridian and Horizon. A low-privileged authenticated user (ROLE_US |
| CVE-2026-89090 | Awaiting Analysis | 未確認 | CWE-248 | An unrecovered panic in the event stream header decoder in Amazon AWS SDK for Go v2 before release-2026-03-23 might allow an unauthenticated remote actor to terminate the consuming |
| CVE-2026-89092 | Awaiting Analysis | 未確認 | CWE-789 | The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for a DNS query, resulting in degra |
| CVE-2026-89093 | Deferred | 未確認 | CWE-287 | The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to Information Exposure by Spoofing in all versions up to, and incl |
| CVE-2026-89094 | Deferred | 未確認 | CWE-1336 | Forgejo before 16.0.4 allows remote code execution via a crafted template repository because template expansion on files in .forgejo/template is mishandled. |
| CVE-2026-89099 | Analyzed | 未確認 | CWE-362 | A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory |
| CVE-2026-89102 | Analyzed | 未確認 | CWE-295 | In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side implementation flaw in RFC 6961, multiple OCSP response stapling, which can lead to certificate forgery. When a wolfS |
| CVE-2026-89133 | Analyzed | 未確認 | CWE-295 | wolfSSL versions 5.9.2 and earlier contain a flaw in the X.509 certificate validation logic where it fails to properly enforce NameConstraints extensions when there is an unconstra |
| CVE-2026-89134 | Analyzed | 未確認 | CWE-295 | A certificate with no dNSName SAN but another SAN type present (e.g. registeredID or iPAddress) bypassed the Subject CN dNSName name-constraint check. The CN-as-DNS fallback was ga |
| CVE-2026-89135 | Analyzed | 未確認 | CWE-295 | A failed X509_verify_cert call permanently plants an unverified attacker CA in the shared CertManager, bypassing certificate validation in every type-blind sibling consumer (native |
| CVE-2026-89136 | Awaiting Analysis | 未確認 | CWE-287 | When using RPK (Raw Public Key), the client side of a TLS 1.2, 1.3 and DTLS 1.2 connection could accept an unsolicited server_cert_type=RawPublicKey which allowed a malicious or mi |
| CVE-2026-89138 | Deferred | 未確認 | CWE-862 | The Filter Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.4. This is due to the plugin not properly verifying that a u |
| CVE-2026-89139 | Awaiting Analysis | 未確認 | CWE-1188, CWE-749, CWE-78 | Temporal Server compiles a Worker Controller Instance module into its Worker Service, and that module registers a compute provider named subprocess whose function is to launch a wo |
| CVE-2026-89141 | Deferred | 未確認 | CWE-639 | The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.7.7 via |
| CVE-2026-89145 | Deferred | 未確認 | CWE-79 | Flextype CMS versions 0.9.9 through 1.0.0-alpha.3 fail to HTML-escape plugin directory names in the dependency error page rendered by getValidPluginsDependencies(). Attackers with |
| CVE-2026-89146 | Deferred | 未確認 | CWE-190, CWE-617 | libp2p-rendezvous through 0.17.1 fails to validate registration TTL values in discovery responses, allowing attackers to trigger timer arithmetic overflow. A malicious rendezvous s |
| CVE-2026-89147 | Awaiting Analysis | 未確認 | CWE-1088, CWE-400 | Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in the SMUX module where smux_accept() performs an unauthenticated blocking read without timeout on newly accept |
| CVE-2026-89148 | Deferred | 未確認 | CWE-352 | AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an open redirect in objects/playlistSort.php. Because the endpoint is not a *.json.php script, AVideo's auto |
| CVE-2026-89151 | Deferred | 未確認 | CWE-863 | Forgejo before 16.0.4 allows use of restricted API tokens for unintended access to the "allow maintainer edit" feature. |
| CVE-2026-89155 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-89156 | Analyzed | 未確認 | CWE-125 | PCRE2 before 10.48 has a pcre2_match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data. |
| CVE-2026-89157 | Analyzed | 未確認 | CWE-190 | PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an attacker can provide a large pattern. |
| CVE-2026-89158 | Analyzed | 未確認 | CWE-190 | PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write. |
| CVE-2026-89160 | Analyzed | 未確認 | CWE-125 | PCRE2 before 10.48 has a pcre2_match out-of-bounds read during the PCRE2_MATCH_INVALID_UTF matching of an invalid UTF subject. |
| CVE-2026-89161 | Undergoing Analysis | 未確認 | CWE-590 | In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur. |
| CVE-2026-89162 | Undergoing Analysis | 未確認 | CWE-669 | In PCRE2 before 10.48, pcre2_serialize_encode might disclose two bytes to an adversary, typically in a situation where the access available to the adversary is already unsafe. |
| CVE-2026-89169 | Deferred | 未確認 | CWE-347 | live-boot ff8867c allows attackers to bypass the dm-verity-enforce-roothash-signature protection mechanism when the .verity file is missing. |
| CVE-2026-89172 | Awaiting Analysis | 未確認 | CWE-1300 | Improper protection of physical side channels vulnerability in Microchip AN1044, Microchip AN953, and Microchip SW300052. This issue affects AN1044: through A; AN953: through A; S |
| CVE-2026-89173 | Deferred | 未確認 | CWE-204 | Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user acc |
| CVE-2026-89174 | Deferred | 未確認 | CWE-307 | Smart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-force Protection vulnerability. Unauthenticated remote attackers can gain access to va |
| CVE-2026-89175 | Deferred | 未確認 | CWE-602 | Smart Video Intercom System developed by Kingdom Communication Associated has a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication |
| CVE-2026-89176 | Deferred | 未確認 | CWE-306 | WeenyGenius, a computer lab management system developed by Howyar Technologies, has a Missing Authentication vulnerability. Unauthenticated attackers on the same network can easily |
| CVE-2026-89177 | Deferred | 未確認 | CWE-757 | WeenyGenius, a computer lab management system by Howyar Technologies, has a Use of Insecure Protocol vulnerability. Due to the reliance on ZMTP Null mode, unauthenticated attackers |
| CVE-2026-89178 | Deferred | 未確認 | CWE-940 | WeenyGenius, a computer lab management system by Howyar Technologies, has an Origin Validation Error vulnerability. Unauthenticated attackers on the same network can spoof the teac |
| CVE-2026-89179 | Deferred | 未確認 | CWE-353 | WeenyGenius, a computer lab management system by Howyar Technologies, has a Missing Support for Integrity Check vulnerability. Unauthenticated attackers on the same network can int |
| CVE-2026-89180 | Deferred | 未確認 | CWE-89 | EFence developed by Thinking Software Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database cont |
| CVE-2026-89186 | Awaiting Analysis | 未確認 | CWE-524 | Use of Cache Containing Sensitive Information in ZenHive mpp allows a shared HTTP cache to store a paid response and serve it to clients that never paid. MPP.Plug.verify_credentia |
| CVE-2026-89190 | Deferred | 未確認 | CWE-284 | The Robin Image Optimizer WordPress plugin before 2.0.8 does not check the user's capabilities before dispatching one of its bundled admin framework's request handlers, allowing u |
| CVE-2026-89193 | Deferred | 未確認 | CWE-79 | The Robin Image Optimizer WordPress plugin before 2.0.8 does not escape values that its bundled HTML parser re-emits into element attributes when a non-default image delivery mode |
| CVE-2026-89207 | Deferred | 未確認 | CWE-1287 | A vulnerability has been identified in WTV676-HB6035 Web Interface (All versions < V3.94), WTV776-HB6035 Web Interface (All versions < V4.17). Affected devices do not properly vali |
| CVE-2026-89212 | Awaiting Analysis | 未確認 | CWE-611 | A flaw resulting in XML external entity (XXE) was found in Akana API Platform in which references were improperly restricted during XML-to-JSON processing. The issue affects Akana |
| CVE-2026-89237 | Deferred | 未確認 | CWE-89 | The Bluff Post WordPress plugin through 1.1.1 does not sanitise and escape parameters before using them as identifiers in a SQL query, allowing unauthenticated attackers to append |
| CVE-2026-89238 | Analyzed | 未確認 | CWE-345 | WSS4J EncryptedHeader child confusion could promote an attacker-controlled plaintext element as the decrypted header, leading to incorrect confidentiality coverage and possible pol |
| CVE-2026-89239 | Deferred | 未確認 | CWE-79 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross-site scripting vulnerability in the showAlertMessage() function that inserts the raw |
| CVE-2026-89240 | Deferred | 未確認 | CWE-79 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross-site scripting vulnerability in plugin/Live/confirmLivePassword.php. The script inter |
| CVE-2026-89241 | Deferred | 未確認 | CWE-79 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross-site scripting vulnerability in confirmLivePassword.php that copies REQUEST_URI into |
| CVE-2026-89242 | Deferred | 未確認 | CWE-918 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a server-side request forgery vulnerability in the _json_decode function that fetches remote URLs and l |
| CVE-2026-89243 | Deferred | 未確認 | CWE-79 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in UserGroups::setGroup_name() that fails to sanitize group |
| CVE-2026-89244 | Deferred | 未確認 | CWE-79 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross-site scripting vulnerability in plugin/Gallery/view/Category.php when SubCategorys is |
| CVE-2026-89245 | Deferred | 未確認 | CWE-352 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in playlistRemove.php that allows attackers to delete playli |
| CVE-2026-89246 | Deferred | 未確認 | CWE-1236 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a CSV formula injection vulnerability in the myComments.download.php endpoint that fails to sanitize sp |
| CVE-2026-89247 | Deferred | 未確認 | CWE-91 | WWBN AVideo at commit c3edcc274c389816d434acadac07ee78eaf330c1 and earlier contains an XML injection vulnerability in plugin/AD_Server/VMAP.php, which is reachable without authenti |
| CVE-2026-89248 | Deferred | 未確認 | CWE-200 | AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 is missing an authentication/authorization check in plugin/WebRTC/status.json.php. When the WebRTC plugin is present, |
| CVE-2026-89249 | Deferred | 未確認 | CWE-79 | AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the YPTWallet plugin where user-supplied CryptoWallet values |
| CVE-2026-89250 | Deferred | 未確認 | CWE-306 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an unauthenticated file read vulnerability in the getRecordedFile.php endpoint that streams recorded FL |
| CVE-2026-89251 | Deferred | 未確認 | CWE-345 | AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate ad impressions in plugin/AD_Server/log.php, allowing logged-in users to submit arbitrary label valu |
| CVE-2026-89252 | Deferred | 未確認 | CWE-639 | AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to verify ownership in addLiveLink.php when updating LiveLinks, allowing authenticated users to modify other us |
| CVE-2026-89253 | Deferred | 未確認 | CWE-79 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the user 'donationLink' profile field. User::setDonation |
| CVE-2026-89254 | Deferred | 未確認 | CWE-79 | AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the CustomizeUser plugin where the field_name parameter is st |
| CVE-2026-89255 | Deferred | 未確認 | CWE-79 | AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the LoginControl plugin that fails to HTML-encode PGP public |
| CVE-2026-89256 | Deferred | 未確認 | CWE-79 | AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the Bookmark plugin where chapter names are not encoded befor |
| CVE-2026-89257 | Deferred | 未確認 | CWE-639 | AVideo through 29.0 contains an insecure direct object reference (IDOR) vulnerability in objects/categoryDeleteAssets.json.php. The endpoint validates only the Category::canCreateC |
| CVE-2026-89258 | Deferred | 未確認 | CWE-59 | Hugo is a static site generator. In versions after v0.123.0 and before v0.165.0, symlinks in parent directories were not dropped during direct resource lookups, allowing path confi |
| CVE-2026-89259 | Deferred | 未確認 | CWE-250 | Hugo is a static site generator. From v0.161.0, Hugo executes Node tools under Node's permission model, but TailwindCSS — included in the default security.exec.allow list — require |
| CVE-2026-89260 | Deferred | 未確認 | CWE-611 | MoguBlog through 6.2 contains an XML external entity injection vulnerability in the WeChat callback handler at POST /wechat/wechatCheck. The WechatRestApi.index() method passes the |
| CVE-2026-89261 | Deferred | 未確認 | CWE-306 | MoguBlog through 6.2 exposes Elasticsearch index management endpoints in the mogu_search service without authentication, allowing remote attackers to delete, recreate, or alter the |
| CVE-2026-89262 | Deferred | 未確認 | CWE-639 | MoguBlog through 6.2 contains an authorization bypass vulnerability in the comment deletion endpoint that performs ownership checks against request-body fields instead of the authe |
| CVE-2026-89263 | Deferred | 未確認 | CWE-306 | MoguBlog through 6.2 fails to authenticate requests to the /web/comment/closeEmailNotification endpoint, allowing unauthenticated attackers to disable email notifications for arbit |
| CVE-2026-89264 | Deferred | 未確認 | CWE-639 | MoguBlog through 6.2 fails to validate the comment author identity in the POST /web/comment/add endpoint, allowing authenticated users to post comments attributed to any other user |
| CVE-2026-89265 | Deferred | 未確認 | CWE-862 | MoguBlog through 6.2 contains an authorization bypass vulnerability in the POST /pictureSort/getPictureSortByUid endpoint, which omits the @AuthorityVerify annotation required to e |
| CVE-2026-89266 | Deferred | 未確認 | CWE-787 | stb_vorbis through 1.22 contains a heap buffer overflow in start_decoder() where the codebook multiplicands allocation size is truncated from size_t to int. Attackers can craft a m |
| CVE-2026-89267 | Deferred | 未確認 | CWE-863 | starlette-admin versions 0.16.1 through 0.17.1 fail to enforce the searchable_fields allowlist when configured as an empty list, allowing authenticated users to filter on non-searc |
| CVE-2026-89268 | Deferred | 未確認 | CWE-79 | QloApps through 1.7.0 renders back-office list filter POST parameters into HTML input value attributes without escaping them in the list helper template. Attackers can induce authe |
| CVE-2026-89274 | Deferred | 未確認 | CWE-94 | The WP Recipe Maker plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in all versions up to, and including, 10.8.1. The vulnerability exists because `WPRM_Metadat |
| CVE-2026-89275 | Analyzed | 未確認 | CWE-94 | Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context |
| CVE-2026-89276 | Analyzed | 未確認 | CWE-94 | Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context |
| CVE-2026-89277 | Analyzed | 未確認 | CWE-190 | CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnera |
| CVE-2026-89278 | Deferred | 未確認 | CWE-200 | The GPTranslate – Multilingual AI Translation Agent for WordPress: Translate Your Site with AI plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions |
| CVE-2026-89281 | Deferred | 未確認 | CWE-732 | The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability within openssl.cnf path that can allow local code execution |
| CVE-2026-89282 | Deferred | 未確認 | CWE-732 | The Apache Lounge Windows distribution of Apache HTTP Server build contains an insecure installation directory permissions vulnerability through its default install directory on C: |
| CVE-2026-89294 | Deferred | 未確認 | CWE-98 | The Simply Schedule Appointments plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.6.12.27 via the 'ssa_locale' parameter parameter |
| CVE-2026-89298 | Awaiting Analysis | 未確認 | CWE-200 | A flaw was found in the Dynamic Client Registration service of Keycloak, an open-source identity and access management solution. The issue occurs when a user with the view-clients |
| CVE-2026-89300 | Deferred | 未確認 | CWE-862 | The WP Verify API WordPress plugin through 1.0.0 does not have any authorisation check in one of its REST routes, allowing unauthenticated users to insert arbitrary data into its o |
| CVE-2026-89303 | Deferred | 未確認 | CWE-89 | The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing any authenticated user to perform SQL |
| CVE-2026-89307 | Deferred | 未確認 | CWE-601 | The "Firma Circolare" feature in the "Design Scuole Italia" WordPress theme allows an authenticated attacker to inject arbitrary HTML via the sign parameter, enabling forced redire |
| CVE-2026-89308 | Deferred | 未確認 | CWE-78 | An unauthenticated OS command injection vulnerability exists in the ping.php endpoint, allowing remote attackers to execute arbitrary commands on the underlying operating system an |
| CVE-2026-89321 | Awaiting Analysis | 未確認 | CWE-409 | Publishing limits the compressed size of a VSIX (ovsx.publishing.max-content-size, 512 MB by default) but nothing limited how large an entry becomes when opened. On the first r |
| CVE-2026-89325 | Awaiting Analysis | 未確認 | CWE-427 | An uncontrolled search path element in InsightVM assessment content in Rapid7 Insight Agent on Windows allows a local, low-privileged user to execute arbitrary code as SYSTEM via a |
| CVE-2026-89327 | Deferred | 未確認 | CWE-290 | The FluentBoards WordPress plugin before 2.0.15 does not verify that a board member submitting a comment is the user the comment is attributed to, allowing any board member to pos |
| CVE-2026-89328 | Deferred | 未確認 | CWE-284 | The FluentBoards WordPress plugin before 2.0.15 does not properly verify that a user holds board-manager privileges before performing several board-management operations, checking |
| CVE-2026-89329 | Awaiting Analysis | 未確認 | CWE-1322 | A flaw was found in `multipathd`. A local attacker with access to the `multipathd` UNIX control socket can exploit this vulnerability by sending valid commands and then ceasing to |
| CVE-2026-89330 | Deferred | 未確認 | CWE-79 | The EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents plugin for WordPress is vulnerable to Reflected Cross-Site Scripting vi |
| CVE-2026-89331 | Deferred | 未確認 | CWE-200 | The FluentBoards WordPress plugin before 2.1.0 does not properly restrict the member data returned by its public, token-shared board feature, allowing unauthenticated users to dis |
| CVE-2026-89332 | Analyzed | 未確認 | CWE-201, CWE-829 | Inclusion of functionality from an untrusted control sphere in the Kiro Powers feature in Amazon Kiro IDE before version 0.8.135 might allow remote unauthenticated actors to obtain |
| CVE-2026-89333 | Deferred | 未確認 | CWE-639 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.0.8 via the 'stu |
| CVE-2026-89334 | Deferred | 未確認 | CWE-862 | The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.15. |
| CVE-2026-8937 | Analyzed | 未確認 | CWE-862 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have a |
| CVE-2026-89406 | Deferred | 未確認 | CWE-862 | The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to unauthorized disclosure of private gallery contents in versions up to, and including, 3. |
| CVE-2026-89407 | Deferred | 未確認 | CWE-1333, CWE-400 | NumberInput.looksLikeValidNumber() in FasterXML jackson-core pre-validates "stringified numbers" with two regular expressions: PATTERN_FLOAT ([+-]?[0-9]*[\.]?[0-9]+([eE][+-]?[0-9]+ |
| CVE-2026-89411 | Deferred | 未確認 | CWE-345 | The Paymattic WordPress plugin from 4.6.20 before 4.6.26 does not verify that a confirmed Stripe payment belongs to the order it is applied to, allowing unauthenticated users to ma |
| CVE-2026-89412 | Deferred | 未確認 | CWE-79 | The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Translation Memory Suggestion Panel (v-h |
| CVE-2026-89413 | Deferred | 未確認 | CWE-862 | The Filter Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.4. This is due to the plugin not properly verifying that a u |
| CVE-2026-89418 | Awaiting Analysis | 未確認 | CWE-674 | google-protobuf contains an unbounded recursion when parsing unknown protobuf group fields. An attacker can send a small crafted payload of deeply nested START_GROUP wire bytes to |
| CVE-2026-89420 | Deferred | 未確認 | CWE-1284 | Improper Validation of Specified Quantity in Input in ZenHive mpp allows a client holding an open payment channel to obtain paid resources without being charged. MPP.Session.Actio |
| CVE-2026-89422 | Deferred | 未確認 | CWE-322 | Key Exchange without Entity Authentication vulnerability in Erlang/OTP ssl allows a peer that answers a TLS 1.3 client connection to impersonate the intended server. A pre_shared_k |
| CVE-2026-89425 | Deferred | 未確認 | CWE-400, CWE-770 | UTF8DataInputJsonParser._reportInvalidToken() in FasterXML jackson-core builds the offending-token text for its error message by appending Java identifier characters to a StringBui |
| CVE-2026-89426 | Deferred | 未確認 | CWE-269 | The Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 9.6.1.0. This is due |
| CVE-2026-89436 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: panasonic-laptop: Fix sentinel write past pcc->sinf[] acpi_pcc_retrieve_biosdata() rejects SINF | |
| CVE-2026-89437 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: int1092: Fix potential memory leak in sar_probe() The memory allocated for device_mode_info in p | |
| CVE-2026-89438 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate logical CPU id and clos id Validate max CLOS ID and logical CPU ID for core power | |
| CVE-2026-89439 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Add a NULL check for sst_inst[] To be consistent with other places, add a NULL check for f | |
| CVE-2026-89440 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mmc: via-sdmmc: stop card-detect handling on probe failure request_irq() registers the SD card-detect interrup | |
| CVE-2026-89441 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mmc: via-sdmmc: cancel card-detect work on remove Disabling the device interrupt and freeing the IRQ prevents | |
| CVE-2026-89442 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate socket ID in clos_assoc ioctl isst_if_clos_assoc() validates the user-supplied so | |
| CVE-2026-89443 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate level in perf mask ioctls isst_if_get_perf_level_mask() and isst_if_get_base_freq | |
| CVE-2026-89444 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer set_attribute() populates the security | |
| CVE-2026-89445 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix UAF in selftest IOPF reporting IOMMUFD selftest TRIGGER_IOPF borrows an attach handle from group- | |
| CVE-2026-89446 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommufd: Release current IOAS on xa_store() failure iommufd_take_all_iova_rwsem() takes an object reference an | |
| CVE-2026-89447 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommufd: Avoid locking internal accesses during unmap iommufd_access_notify_unmap() skips internal accesses be | |
| CVE-2026-89448 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Force requesting ACS when tboot is enabled Currently the conditions of requesting ACS in detect_in | |
| CVE-2026-89449 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu: Fix dev_iommu memory leak when device_add fails in iommu_mock_device_add iommu_mock_device_add() first | |
| CVE-2026-89450 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Reject a vSID wider than the SID_MATCH field tegra241_vintf_init_vsid() programs the gue | |
| CVE-2026-89451 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/sva: Set handle->dev before the SVA handle is visible iommu_attach_device_pasid() installs the new SVA a | |
| CVE-2026-89452 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/msm: Unwind probe state on registration failure msm_iommu_probe() adds its devm-managed IOMMU object to | |
| CVE-2026-89453 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Put PCI device after handling PPR faults iommu_call_iopf_notifier() looks up the requester with pci | |
| CVE-2026-89454 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: PCI: plda: Fix IRQ domain leaks in the error paths of plda_init_interrupts() plda_init_interrupts() initialize | |
| CVE-2026-89455 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: PCI: plda: Fix use-after-free of event IRQs during teardown plda_pcie_irq_domain_deinit() removes pcie->event_ | |
| CVE-2026-89456 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Propagate partial completion length across ERP recovery dasd_default_erp_postaction() copies the ti | |
| CVE-2026-89457 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Guard sysfs discipline callbacks against unallocated private data Several sysfs show/store handlers | |
| CVE-2026-89458 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Do not complete a failed ESE read as successful dasd_int_handler() completes an NRF read of an unal | |
| CVE-2026-89459 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/percpu: Fix MVIY_PERCPU() with older binutils Commit a737737cdb9c ("s390/percpu: Infrastructure for more | |
| CVE-2026-89460 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks The command 'perf stat -e cycles -- <command>' cra | |
| CVE-2026-89461 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: synchronize work cancellation on suspend max17040_work() requeues itself after every | |
| CVE-2026-89462 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: propagate register read errors max17040_get_vcell() and max17040_get_soc() ignore err | |
| CVE-2026-89463 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: power: supply: ucs1002: fix use-after-free on remove ucs1002 has no remove callback, so unbind runs entirely t | |
| CVE-2026-89464 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: power: supply: twl4030_charger: cancel workers via devm bci is devm-allocated. Two workers (bci->work and bci- | |
| CVE-2026-89465 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: power: supply: rt9455: quiesce delayed work before teardown The threaded IRQ handler can queue pwr_rdy_work, m | |
| CVE-2026-89466 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: power: supply: qcom_battmgr: terminate the strings from firmware The qcom_battmgr_sc8280xp_strcpy() takes a Pa | |
| CVE-2026-89467 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: power: supply: qcom_battmgr: fix use-after-free qcom_battmgr_pdr_notify() queues enable_work when the PMIC GLI | |
| CVE-2026-89468 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: power: supply: lp8788-charger: fix use-after-free on remove lp8788_charger_remove() flushes charger_work befor | |
| CVE-2026-89469 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: power: supply: lp8727: fix use-after-free in lp8727_release_irq() lp8727_isr_func(), the threaded IRQ handler, | |
| CVE-2026-89470 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: power: supply: cros_usbpd: Limit port counts to EC_USB_PD_MAX_PORTS Currently the cros_usbpd-charger driver pr | |
| CVE-2026-89471 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: power: supply: cros_usbpd-charger: bound the EC-reported port count cros_usbpd_charger_probe() reads two port | |
| CVE-2026-89472 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: power: supply: charger-manager: register regulators before exposing sysfs charger_manager_remove() and the err | |
| CVE-2026-89473 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: power: supply: bq25890: Fix power_supply reference leak bq25890_fw_probe() acquires a reference to a secondary | |
| CVE-2026-89474 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: power: supply: bq256xx: drain usb_work before freeing the charger The USB-PHY notifier queues usb_work, whose | |
| CVE-2026-89475 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: power: supply: bq24257: fix use-after-free on remove The STAT-pin interrupt is devm-managed, so it stays armed | |
| CVE-2026-89476 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sctp: fix stream->outcnt underflow on duplicate RECONF responses A cached RECONF chunk may contain more than o | |
| CVE-2026-89477 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sctp: fix NULL deref on untransmitted RECONF completion sctp_process_strreset_outreq(), sctp_process_strreset_ | |
| CVE-2026-89478 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sctp: drop a chunk if its transport was removed sctp_rcv() resolves the transport once per packet and leaves i | |
| CVE-2026-89479 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sctp: stop processing a packet once its association is deleted sctp_endpoint_bh_rcv() looks the association up | |
| CVE-2026-89480 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: reject a read that transferred too few bytes nvme_tcp_recv_data() completes a request once the curre | |
| CVE-2026-89481 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix host memory disclosure on R2T for a read command nvme_tcp_handle_r2t() does not check the direct | |
| CVE-2026-89482 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone Commit 25e5cb780e62 ("nvme-tcp: fix poss | |
| CVE-2026-89483 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvme: zero the discard fallback page nvme_setup_discard() always maps sizeof(struct nvme_dsm_range) * NVME_DSM | |
| CVE-2026-89484 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: lockd: fix NULL dereference on lockowner allocation failure nlmclnt_locks_init_private() installs NLM file loc | |
| CVE-2026-89485 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: lockd: pin next file across nlm_inspect_file lock-drop nlm_traverse_files() pins the current file with f_count | |
| CVE-2026-89486 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix use-after-free of cmd_rcvr in _ipmi_destroy_user() Commit 9e91f8a6c868 ("ipmi:msghandler: Remove src | |
| CVE-2026-89487 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: openvswitch: only skb_tx_error() a packet we are about to drop queue_userspace_packet() borrows the packet skb | |
| CVE-2026-89488 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: openvswitch: Fix CT limit teardown use-after-free Packet processing uses CT limit state under RCU, while netns | |
| CVE-2026-89489 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: openrisc: fix arbitrary kernel memory access via or1k_atomic syscall sys_or1k_atomic() (syscall 244 in the "or | |
| CVE-2026-89490 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix readdir position truncation on 32-bit kernels In ocfs2_dir_foreach_blk_el(), the directory cookie p | |
| CVE-2026-89491 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: cluster: don't sleep while holding o2hb_live_lock in o2hb_region_pin() Patch series "ocfs2: cluster: o2 | |
| CVE-2026-89492 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate directory-index entry counts when reading metadata ocfs2_validate_dx_leaf() and ocfs2_validate | |
| CVE-2026-89493 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate rl_used against rl_count in refcount block validator ocfs2_find_refcount_rec_in_rl() walks the | |
| CVE-2026-89494 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate lengths in dlm_mig_lockres_handler A node receiving a DLM_MIG_LOCKRES message trusts several f | |
| CVE-2026-89495 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: bound namelen in dlm_migrate_request_handler Patch series "ocfs2/dlm: bound peer-controlled lengths in | |
| CVE-2026-89496 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: always run deallocs on copy-on-write completion Local fuzzing of 6.12.94 has found the following memory | |
| CVE-2026-89497 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: orangefs: skip leading spaces before parsing client debug masks orangefs_prepare_cdm_array() sizes each client | |
| CVE-2026-89498 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: orangefs: fix double-free of trailer_buf on readdir copy failure On a readdir downcall, orangefs_devreq_write_ | |
| CVE-2026-89499 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Stop remote reader update when page swap fails The remote swap_reader_page callback can return -E | |
| CVE-2026-89500 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page Discarding a cached reader page after a concur | |
| CVE-2026-89501 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Hold cpu_buffer::lock when resizing a subbuf Because, ring_buffer_subbuf_order_set() can clear cp | |
| CVE-2026-89502 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Free cpu_buffer::free_page with subbuf_order When sub-buffers use an order greater than 0, cpu_bu | |
| CVE-2026-89503 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page() ring_buffer_alloc_read_page() is racy w | |
| CVE-2026-89504 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer In as3722_ | |
| CVE-2026-89505 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Guard legacy bundles without method_elm The legacy write() path dispatches through a uverbs_api_w | |
| CVE-2026-89506 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Add UVERBS_ATTR_UHW to UVERBS_METHOD_REG_MR The original commit missed that three drivers (mthca, | |
| CVE-2026-89507 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Lock the handler in ucma_write_cm_event() ctx->file may only be changed under the handler lock and | |
| CVE-2026-89508 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Lock the handler in ucma_set_ib_path() ucma_set_ib_path() calls ucma_event_handler() straight from | |
| CVE-2026-89509 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: Embed counter driver data in rdma_counter allocation Commit 7e53b31acc7f ("RDMA/core: Create and d | |
| CVE-2026-89510 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Cancel reg_work before freeing device on remove c4iw_uld_state_change() queues reg_work to registe | |
| CVE-2026-89511 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: qede: Fix NULL pointer dereference in TPA fragment processing Under memory pressure, the qede driver encounter | |
| CVE-2026-89512 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: remoteproc: scp: Fix device reference leak on failed lookup Make sure to drop the reference taken to the SCP d | |
| CVE-2026-89513 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Fix PMU event info array size overflow SBI PMU EVENT_GET_INFO stores guest-controlled num_events | |
| CVE-2026-89514 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: fnic: Use GFP_ATOMIC for VLAN alloc under spinlock fnic_fcoe_process_vlan_resp() allocates a VLAN descri | |
| CVE-2026-89515 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fill in DMA padding bytes in scsi_alloc_sgtables() During fuzz testing, the following issue was di | |
| CVE-2026-89516 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Don't BUG_ON a destroyed DSQ in process_deferred_reenq_users scx_bpf_dsq_reenq() queues a deferred | |
| CVE-2026-89517 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix rq->core_pick corruption under core scheduling Core scheduling's pick_next_task() picks what to | |
| CVE-2026-89518 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix this_rq() assumptions in dispatch kfuncs Under core scheduling, dispatch runs from within the c | |
| CVE-2026-89519 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Replace SCX_RQ_BAL_KEEP with a dispatch verdict return SCX_RQ_BAL_KEEP tells the pick to keep runni | |
| CVE-2026-89520 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sched/core: Make core-sched flips wait for in-flight selections Core scheduling's pick_next_task() operates on | |
| CVE-2026-89521 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sched/core: Handle pick_task() releasing the rq lock Core scheduling's pick_next_task() breaks when a ->pick_t | |
| CVE-2026-89522 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: staging/ipu7: fix async notifier UAF on probe error path isys_register_devices() registers the V4L2 asy | |
| CVE-2026-89523 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: cancel pending mlo_pm_work If the device is reset, suspended or unregistered within that w | |
| CVE-2026-89524 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets ath6kl_cfg80211_connect_event | |
| CVE-2026-89525 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: udf: reject VAT indexes equal to the entry count UDF 1.50 virtual partition mapping uses the VAT as an array o | |
| CVE-2026-89526 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: svcrdma: Validate Read chunk positions before reconstruction The RPC/RDMA Read chunk position field is supplie | |
| CVE-2026-89527 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: svcrdma: Use svc_xprt_put to free listener on create failure svc_rdma_create() calls kfree(cma_xprt) when svc_ | |
| CVE-2026-89528 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject Read lists that exceed the page budget Individual Read segment lengths are validated at decode | |
| CVE-2026-89529 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject oversized Read segments at decode time The RPC/RDMA Read list decoder stores wire-supplied seg | |
| CVE-2026-89530 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject inline replies that overflow the pull-up buffer An RPC-over-RDMA client can request a reply, s | |
| CVE-2026-89531 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject connection when transport allocation fails handle_connect_req() returns without action when sv | |
| CVE-2026-89532 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: svcrdma: Fix pcl_for_each_segment for empty chunks When a parsed chunk list contains a chunk whose ch_segcount | |
| CVE-2026-89533 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: svcrdma: Fix offset arithmetic in read_chunk_range svc_rdma_read_chunk_range() walks a Read chunk's segment li | |
| CVE-2026-89534 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails When svc_rdma_listen_handler() handles RDMA_CM_EVEN | |
| CVE-2026-89535 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id svc_rdma_free() caches rdma->sc_cm_id->device be | |
| CVE-2026-89536 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: wait for in-flight client TLS handshake callback xs_tls_handshake_sync() gives xs_tls_handshake_done() | |
| CVE-2026-89537 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 gss_krb5_verify_mic_v2() reads the token ID | |
| CVE-2026-89538 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field gss_krb5_unwrap_v2() sets buf->len to a logical len | |
| CVE-2026-89539 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: reject duplicate CREDS_VALUE options gssx_dec_option_array() walks the wire-supplied option array and, | |
| CVE-2026-89540 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sunrpc: init gssp_lock before publishing proc entry create_use_gss_proxy_proc_entry() publishes /proc/net/rpc/ | |
| CVE-2026-89541 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: harden gss_unwrap_resp_priv length checks gss_unwrap_resp_priv() validates the RPCSEC_GSS opaque lengt | |
| CVE-2026-89542 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens gss_krb5_unwrap_v2() reads the EC and RRC header fields | |
| CVE-2026-89543 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix use-after-free in __rpc_clnt_handle_event and __rpc_clnt_remove_pipedir Normal client creation goe | |
| CVE-2026-89544 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix gssx_dec_option_array error path bugs Four coupled defects in the gssx XDR option-array decoder ma | |
| CVE-2026-89545 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sunrpc: defer rq_argp and rq_resp free until after RCU grace period svc_rqst_free() frees rqstp->rq_argp and r | |
| CVE-2026-89546 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: close backchannel before destroying callback service A backchannel receive can complete a request whil | |
| CVE-2026-89547 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Check svc pool percpu counter allocation __svc_create() initializes three per-pool percpu_counter stat | |
| CVE-2026-89548 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: always drain cache_cleaner before destroying a cache_detail sunrpc_destroy_cache_detail() only cancels | |
| CVE-2026-89549 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sunrpc: route to a populated pool in svc_pool_for_cpu() svc_set_num_threads() spreads the requested threads ev | |
| CVE-2026-89550 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: svcauth_gss: enforce krb5 token minimum length svcauth_gss_unwrap_priv() validates only an upper bound | |
| CVE-2026-89551 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow xdr_buf_trim() trims `len` bytes from the tail of an x | |
| CVE-2026-89552 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: params: fix charp corruption on allocation failure param_set_charp() stores charp parameters in allocated memo | |
| CVE-2026-89553 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nouveau/gem: reserve the bo in the info ioctl around the vma lookup In the non-uvmm path, there could be a rac | |
| CVE-2026-89554 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction mptcp_token_join_cookie_init_state() res | |
| CVE-2026-89555 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mpls: reload header after pskb_may_pull() mpls_select_multipath() calls mpls_multipath_hash() to choose a next | |
| CVE-2026-89556 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: module: validate string table section types In elf_validity_cache_sechdrs, section sizes and offsets are valid | |
| CVE-2026-89557 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: md: do overflow check for sb->bblog_shift in super_1_load() In super_1_load(), sb->bblog_shift is an __u8 type | |
| CVE-2026-89558 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix still_degraded being inverted in raid10_sync_request() Commit fe6a19d40ceb ("md/md-bitmap: merg | |
| CVE-2026-89559 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: libnvdimm/labels: Prevent integer overflow in __nd_label_validate() The on-media namespace index field nslot i | |
| CVE-2026-89560 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation Whiteout objects are used in the upper lay | |
| CVE-2026-89561 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: fix NULL dereference of idev in ipv6_rpl_srh_rcv() ipv6_rpl_srh_rcv() dereferences idev from __in6_ | |
| CVE-2026-89562 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ip6_gre: fix hardware header length for NBMA tunnels ip6gre_tnl_link_config_route() accumulates the lower devi | |
| CVE-2026-89563 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: use skb_cow_head() in ip6_tnl_xmit() ip6_tnl_xmit() may need to expand headroom before it can push | |
| CVE-2026-89564 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ip: orphan prefetched skbs before multicast forwarding IPv4 and IPv6 input preserve an skb->sk association ins | |
| CVE-2026-89565 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipip: fix skb leak in collect_md mode when metadata_dst allocation fails In collect_md mode ipip_tunnel_rcv() | |
| CVE-2026-89566 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: jbd2: check need_resched() when skipping busy checkpoint buffers journal_shrink_one_cp_list() skips busy check | |
| CVE-2026-89567 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: jbd2: bound shrinker scans by examined checkpoint buffers The jbd2 shrinker currently accounts only checkpoint | |
| CVE-2026-89568 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: kho: fix size calculation in kho_preserved_memory_reserve() kho_preserved_memory_reserve() calculates the size | |
| CVE-2026-89569 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: serialize security confirmation handling rfcomm_security_cfm() looks up a session on sessio | |
| CVE-2026-89570 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cxl/mce: Make the MCE notifier per-region Flavien Solt reported lifetime issues with the CXL MCE notifier, whi | |
| CVE-2026-89571 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cxl/features: bound fwctl command payload to the input buffer fwctl_cmd_rpc() copies cmd->in_len bytes into in | |
| CVE-2026-89572 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: apple-soc: Fix OPP table cleanup apple_soc_cpufreq_init() adds OPP tables from firmware, but some fai | |
| CVE-2026-89573 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dm array: reject an array block whose value size is not the caller's array_block_check() can only compare the | |
| CVE-2026-89574 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dm array: validate array block headers on read array_block_check() validates blocknr and csum and nothing else | |
| CVE-2026-89575 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dm raid1: reserve space for NUL-terminator in build_constructor_string() Reserve space for the termination NUL | |
| CVE-2026-89576 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dm-era: fix shadowed superblock leak on take-snap failure metadata_take_snap() bumps the live superblock refco | |
| CVE-2026-89577 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dm-io: report non-retryable errors separatedly The error codes BLK_STS_NOTSUPP and BLK_STS_INVAL should not ca | |
| CVE-2026-89578 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dm-io: clone the source bio instead of copying its biovec For DM_IO_BIO requests, do_region() built each desti | |
| CVE-2026-89579 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Harden bloom filter sizing and indexing on 32-bit kernels bloom_map_alloc() has two 32-bit-specific probl | |
| CVE-2026-89580 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in __bpf_get_stack get_perf_callchain() returns a per-CPU perf_callchain_entry buffer | |
| CVE-2026-89581 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf, x86: Fix per-CPU address resolution into an extended register The destination of the per-CPU address MOV | |
| CVE-2026-89582 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bnx2x: fix double free in bnx2x_init_firmware() error path bnx2x_init_firmware() frees bp->init_ops, bp->init_ | |
| CVE-2026-89583 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix OOB read in eir_get_service_data() eir_get_service_data() walks the advertising data for a | |
| CVE-2026-89584 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: block: validate user space vectors during extraction The bio-based drivers don't necessarily check the alignme | |
| CVE-2026-89585 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: auxdisplay: charlcd: cancel backlight work on registration failure With CONFIG_CHARLCD_BL_FLASH, charlcd_init( | |
| CVE-2026-89586 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ata: libata-scsi: fix DSM TRIM for sector sizes larger than 2048 bytes ata_scsi_write_same_xlat() translates a | |
| CVE-2026-89587 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ACPI: pfr_update: fix stack buffer overflow in query_capability() query_capability() copies four ACPI buffer o | |
| CVE-2026-89588 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: GHES: fix ARM section length accounting after header In ghes_handle_arm_hw_error(), after skipping | |
| CVE-2026-89589 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: acpi/apei/ghes: Use raw_spinlock_t for CXL CPER work locks The CXL CPER work registration and unregistration h | |
| CVE-2026-89590 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel/rocket: Fix error path handling in rocket_job_run() In rocket_job_run(), after taking an extra fence ref | |
| CVE-2026-89591 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel/rocket: initialize job domain before cleanup paths rocket_ioctl_submit_job() releases rjob through rocke | |
| CVE-2026-89592 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel/rocket: fix NULL dereference and integer overflow in rocket_job_push() rocket_job_push() allocates a tem | |
| CVE-2026-89593 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hugetlb: only adjust reservation during unmapping if mapcount is 0 Since df7a6d1f6405, __unmap_hugepage_range | |
| CVE-2026-89594 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device The OMAP SSI driver uses a synthetic | |
| CVE-2026-89595 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fsnotify: Fix stale object mask after concurrent mark updates When a mark gets a new event bit, fanotify and i | |
| CVE-2026-89596 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: forcedeth: fix off-by-one when saving/restoring non-PCI config space nv_suspend() and nv_resume() walk the non | |
| CVE-2026-89597 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fbdev: uvesafb: unregister connector callback on init failure uvesafb_init() registers the v86d connector call | |
| CVE-2026-89598 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fbdev: ssd1307fb: defer I2C transfers from damage callbacks The fbdev damage callbacks may run from fbcon whil | |
| CVE-2026-89599 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fbdev: omapfb: panel-dsi-cm: initialize lock before registering display dsicm_probe() registers the display be | |
| CVE-2026-89600 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fanotify: fix use-after-free of file range info fsnotify_pre_content() builds its file_range on the triggering | |
| CVE-2026-89601 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ext2: Fix lost inode updates for IS_SYNC inodes ext2_setsize() and ext2_xattr_set2() had a construct like: i | |
| CVE-2026-89602 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: erofs: skip sufficiently large global buffers when resizing z_erofs_gbuf_nrpages is advanced only after every | |
| CVE-2026-89603 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-89604 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: efivarfs: Rate limit statfs() handler Ravi reports that statfs() may be called by unprivileged users on the ef | |
| CVE-2026-89605 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ecryptfs: release message context on send failure ecryptfs_send_message_locked() moves a message context from | |
| CVE-2026-89606 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ecryptfs: reject too-small tag 70 packets ecryptfs_parse_tag_70_packet() subtracts fixed metadata fields from | |
| CVE-2026-89607 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet parse_tag_3_packet() set encrypted_key_siz | |
| CVE-2026-89608 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ecryptfs: pass packet set buffer size to parser ecryptfs_parse_packet_set() receives a pointer into the file h | |
| CVE-2026-89609 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ecryptfs: hold msg ctx list lock when cleaning daemon queue ecryptfs_exorcise_daemon() drops queued messages f | |
| CVE-2026-89610 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: verify run length exceeding volume boundary The mapping pairs decoder validates that the starting LCN is | |
| CVE-2026-89611 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: validate non-resident attribute offsets ntfs_attr_update_meta() shifts the attribute name when convertin | |
| CVE-2026-89612 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: reject invalid MFT LCNs from boot sector The NTFS boot sector stores the MFT and MFTMirr locations as un | |
| CVE-2026-89613 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: reject invalid empty mapping pairs Reject an attribute with empty mapping pairs if it has inconsistent h | |
| CVE-2026-89614 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the free-cluster bitmap scan to the volume vol->lcn_empty_bits_per_page is sized from vol->nr_clus | |
| CVE-2026-89615 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound page_lcns[] index by the log record The copy_lcns loop and the redo shorten loop index page_lc | |
| CVE-2026-89616 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix info-leak on partial LZNT decompress in ni_read_frame() ni_read_frame() decompresses an LZNT $DA | |
| CVE-2026-89617 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate dirty page table on log replay Each DIR_PAGE_ENTRY ends in a page_lcns[] array whose length | |
| CVE-2026-89618 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: eventfs: Initialize ei->children and ei->list in init_ei() eventfs_create_dir() allocates the eventfs_inode an | |
| CVE-2026-89619 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: intel-thc-hid: intel-quickspi: bound GET_REPORT response to the caller buffer quickspi_hid_raw_request() | |
| CVE-2026-89620 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: intel-thc-hid: intel-quickspi: validate report size before copy write_cmd_to_txdma() builds an output rep | |
| CVE-2026-89621 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: mcp2221: validate report size in mcp2221_raw_event() mcp2221_raw_event() never validates the size of inco | |
| CVE-2026-89622 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes mcp_i2c_smbus_read() stores the caller-supplied b | |
| CVE-2026-89623 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: mcp2221: stop device IO before hid_hw_stop Quiesce device IO at the start of the devm cleanup callback mc | |
| CVE-2026-89624 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: universal-pidff: stop the device when force-feedback init fails universal_pidff_probe() starts the device | |
| CVE-2026-89625 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: sony: fix UAF of ghl_poke_timer / ghl_urb at driver unbind For GHL (Guitar Hero Live) dongles, sony_probe | |
| CVE-2026-89626 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: sensor: custom: Fix field sysfs group cleanup on failure hid_sensor_custom_add_attributes() creates one s | |
| CVE-2026-89627 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: roccat: free buffered reports when destroying device roccat_report_event() duplicates each report with km | |
| CVE-2026-89628 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: picolcd: clamp eeprom debugfs read to bytes actually received picolcd_debug_eeprom_read() trusts resp->ra | |
| CVE-2026-89629 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: corsair-void: Check size of status and firmware events before reading them Malformed status and firmware | |
| CVE-2026-89630 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: restore the data_offset bound in is_valid_oplock_break() Commit 83bfbd0bb902 ("cifs: Remove the R | |
| CVE-2026-89631 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: reject a tree connect response whose byte count is too small CIFSTCon() bounds its strnlen() over | |
| CVE-2026-89632 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-before-check of ReparseDataLength in reparse_buf_ptr() reparse_buf_ptr() reads buf->Repar | |
| CVE-2026-89633 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() coalesce_t2() computes data point | |
| CVE-2026-89634 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix ALIGN() overflow in symlink_data() error context loop The check added by commit 7d9a7f1f96cd | |
| CVE-2026-89635 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: only rebind the reopened file's own oplock on durable reconnect ksmbd_reopen_durable_fd() walks the ino | |
| CVE-2026-89636 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: clear ce->tgthint in free_tgts() When free_tgts() frees all structures in ce->tlist, ce->tgthint | |
| CVE-2026-89637 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 When a valid primary TR | |
| CVE-2026-89638 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions When a file has the se | |
| CVE-2026-89639 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cifs: use cifs_invalidate_cache() in cifs_do_truncate() for O_TRUNC cifs_do_truncate() is invoked from cifs_op | |
| CVE-2026-89640 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 With len == 0 (clone to EOF), the effectiv | |
| CVE-2026-89641 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size() When the else branch of cifs_file_set_size() | |
| CVE-2026-89642 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cifs: call pagecache_isize_extended() in cifs_setsize() when extending cifs_setsize() calls truncate_pagecache | |
| CVE-2026-89643 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: audit: avoid dropping live tree ref on fsnotify rule autoremove audit_del_rule() is used for both netlink dele | |
| CVE-2026-89644 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map leak in NOCOW direct I/O write btrfs_dio_iomap_begin() calls btrfs_get_extent(), which r | |
| CVE-2026-89645 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: drop recovered reloc root refs on recovery failure During relocation recovery, each fs root gets a refe | |
| CVE-2026-89646 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ceph: fix leaked inode reference on writeback abort at umount ceph_dirty_folio() takes a wrbuffer claim on eac | |
| CVE-2026-89647 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ceph: do not repeat ceph_trim_dentries() if no progress possible ceph_cap_reclaim_work() re-queues itself for | |
| CVE-2026-89648 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ceph: cap delegated inode count in ceph_parse_deleg_inos() ceph_parse_deleg_inos() decodes interval sets of de | |
| CVE-2026-89649 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ceph: bound xattr value length in __build_xattrs() __build_xattrs() decodes the MDS-supplied xattr blob one at | |
| CVE-2026-89650 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ceph: bound num_export_targets array for mds info v2/v3 ceph_mdsmap_decode() in fs/ceph/mdsmap.c reads num_exp | |
| CVE-2026-89651 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ceph: bound MDSCapAuth path and fs_name decode in handle_session() handle_session() decodes the MDSCapAuth rec | |
| CVE-2026-89652 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ceph: bound copied dentry name length in NFS export get_name ceph_get_name() copies the MDS-supplied name into | |
| CVE-2026-89653 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ceph: reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decode MDSMap export_targets entries are monitor c | |
| CVE-2026-89654 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in check_new_map() on session freed during unlock check_new_map() iterates mdsc->sessions[] and | |
| CVE-2026-89655 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock list_for_each_entry() iterates ci->i_c | |
| CVE-2026-89656 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: libceph: reject buckets with mismatched CRUSH ids crush_decode() stores bucket data by array slot, and the map | |
| CVE-2026-89657 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: libceph: validate OSD extent maps before cursor advance net/ceph/osd_client.c:osd_sparse_read() validates that | |
| CVE-2026-89658 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup nfs40_clean_admin_revoked() takes a s | |
| CVE-2026-89659 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during delegation revoke A delegation stateid holds only a bare pointer to | |
| CVE-2026-89660 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during admin state revocation A stateid holds only a bare pointer to its n | |
| CVE-2026-89661 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent post-shutdown use-after-free in unlock_filesystem Writing a filesystem path to /proc/fs/nfsd/unl | |
| CVE-2026-89662 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent lock owner use-after-free during client teardown __destroy_client() releases a client's open own | |
| CVE-2026-89663 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: revoke copy-notify stateids before dropping their reference Copy-notify stateids live in the s2s_cp_stat | |
| CVE-2026-89664 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: release OPEN-decoded posix ACLs via op_release nfsd4_decode_createhow4() calls nfsd4_decode_fattr4(), wh | |
| CVE-2026-89665 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE The NFSv2 sattr decoder converts the wire useconds | |
| CVE-2026-89666 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: reject out-of-range nseconds in NFSv3 SETATTR and create ops A client can send an NFSv3 SETATTR, CREATE, | |
| CVE-2026-89667 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache The shrinker, GC worker, and fsnotify/l | |
| CVE-2026-89668 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: move nfsd_debugfs_init() after nfsd4_init_slabs() in init_nfsd() nfsd_debugfs_init() runs before nfsd4_i | |
| CVE-2026-89669 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: initialize copy-notify stateid before publishing it nfsd4_copy_notify() finished initializing the cpntf | |
| CVE-2026-89670 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: hold rcu across localio cmpxchg retry nfsd_file objects are freed via call_rcu (filecache.c:296), and nf | |
| CVE-2026-89671 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: gate nfs3 setacl by argp->mask nfsd3_proc_setacl() calls set_posix_acl() unconditionally for both ACL_TY | |
| CVE-2026-89672 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: gate nfs2 setacl by argp->mask The NFSACL v2 SETACL path shares the decoder convention used by its v3 si | |
| CVE-2026-89673 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo nfsd4_ff_encode_getdeviceinfo() computes the da_a | |
| CVE-2026-89674 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget The XDR buffer size calculation in nfsd4_ff_enco | |
| CVE-2026-89675 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix UAF in async copy cancel and shutdown An async copy could be freed or used after free while a teardo | |
| CVE-2026-89676 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix stale s2s_cp_stateids IDR entry for async COPY For an async COPY, nfsd4_copy() called nfs4_init_copy | |
| CVE-2026-89677 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix possible fh_compose of wrong dentry in nfsd4_create_file() dentry_create() can hypothetically provid | |
| CVE-2026-89678 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix partial-write detection in nfsd_direct_write nfsd_direct_write() walks a list of write segments and, | |
| CVE-2026-89679 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix null dereference in nfsd4_setattr for deleg timestamp attrs When a SETATTR request includes FATTR4_W | |
| CVE-2026-89680 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfsd_file leak on inter-server COPY setup failure When nfsd4_setup_inter_ssc() fails, nfsd4_copy() r | |
| CVE-2026-89681 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix layout fence worker double-reference race The workqueue core clears WORK_STRUCT_PENDING before the c | |
| CVE-2026-89682 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix fcache_disposal UAF by inlining dispose state into nfsd_net nfsd_file_dispose_list_delayed() defers | |
| CVE-2026-89683 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix dentry ref leak on V4ROOT export filehandle lookup nfsd_set_fh_dentry() leaks the dentry reference f | |
| CVE-2026-89684 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix cpntf publish race in nfs4_init_cp_state nfs4_alloc_init_cpntf_state() published the new cpntf entry | |
| CVE-2026-89685 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix clock domain mismatch in clients_still_reclaiming() clients_still_reclaiming() computes a deadline f | |
| CVE-2026-89686 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke nfsd4_alloc_layout_stateid reads fp | |
| CVE-2026-89687 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: ensure nfsd_file_do_acquire() does not use a non-opened file ->atomic_open is permitted to return succes | |
| CVE-2026-89688 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: drop the stateid, not the stateowner, on seqid_op replay retry In nfs4_preprocess_seqid_op() the stateid | |
| CVE-2026-89689 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: don't free session slots that are still in use nfsd4_sequence() can free the very slot it is currently p | |
| CVE-2026-89690 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: defer vfree of compound ops to fix rpc_status UAF The rpc_status netlink dumpit walks every in-flight sv | |
| CVE-2026-89691 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: clear opcnt on compound arg release to prevent OOB read nfsd4_release_compoundargs() resets args->ops to | |
| CVE-2026-89692 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: clear CALLBACK_RUNNING on failed delegation recall queue nfsd_break_one_deleg() sets NFSD4_CALLBACK_RUNN | |
| CVE-2026-89693 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: check nfsd4_acl_to_attr() return value in nfsd4_create() nfsd4_create() stores the return value of nfsd4 | |
| CVE-2026-89694 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: check client ownership when cancelling a copy-notify stateid On the OFFLOAD_CANCEL path (clp != NULL), m | |
| CVE-2026-89695 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: cap decoded POSIX ACL count to bound sort cost nfsd4_decode_posixacl() reads a u32 entry count off the w | |
| CVE-2026-89696 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref When CONFIG_NFSD_V4_2_INTER_SSC is enable | |
| CVE-2026-89697 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() The BOTH_TIME_SET branch calls fh_ | |
| CVE-2026-89698 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage struct nfsd_genl_rqstp declares rq_daddr and rq | |
| CVE-2026-89699 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: validate symlink target length in NFSv4 CREATE nfsd4_decode_create() accepts an unbounded cr_datalen fro | |
| CVE-2026-89700 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: validate sockaddr length per family in listener_set nfsd_sock_nl_policy declares NFSD_A_SOCK_ADDR as a b | |
| CVE-2026-89701 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: validate nseconds in TIME_DELEG decode paths The xdrgen-based TIME_DELEG_ACCESS and TIME_DELEG_MODIFY de | |
| CVE-2026-89702 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: size fh_verify server sockaddr slot by xpt_locallen The nfsd_fh_verify and nfsd_fh_verify_err tracepoint | |
| CVE-2026-89703 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations nfsd4_drop_revoked_stid() handles FREE_ST | |
| CVE-2026-89704 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: sample writeback error cursor before async COPY loop _nfsd_copy_file_range() samples dst->f_wb_err into | |
| CVE-2026-89705 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths nfsd_dispatch() sets rq_status_count | |
| CVE-2026-89706 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: Reset write verifier when async COPY writeback fails Async COPY captures nn->writeverf at request time a | |
| CVE-2026-89707 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: release path refs on follow_down() error nfsd_cross_mnt() initializes a local struct path with mntget() | |
| CVE-2026-89708 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown After a DESTROY_SESSION the per-sess | |
| CVE-2026-89709 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: lockd, nfsd: RCU-protect nlmsvc_ops dispatch nlmsvc_ops is published by nfsd_lockd_init() and cleared by nfsd_ | |
| CVE-2026-89710 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path When the server returns a new layout | |
| CVE-2026-89711 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: NFSD: remove flawed WARN_ON_ONCE from nfsd_mode_check The header for commit e75b23f9e323 ("nfsd: check d_can_l | |
| CVE-2026-89712 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock nfsd4_ssc_expire_umount() walks nn->nfsd_ssc | |
| CVE-2026-89713 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: NFSD: check truncate permission under inode lock nfsd_setattr() checks whether a size update needs NFSD_MAY_TR | |
| CVE-2026-89714 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: NFS: fix delegation_hash_table leak when nfs4_server_common_setup() fails nfs4_server_common_setup() allocates | |
| CVE-2026-89715 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: NFS/localio: fix ref leak on nfs_uuid_add_file failure When nfs_uuid_add_file() races with nfs_uuid_put() tear | |
| CVE-2026-89716 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: zram: validate deflate params We must validate user-supplied deflate winbits before we pass it to zlib_deflate | |
| CVE-2026-89717 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: zram: set default primary compressor in zram_destroy_comps() Patch series "zram: fix zram issues reported by s | |
| CVE-2026-89718 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: zram: fix out-of-bounds access in writeback_store() Patch series "zram: fix stale scan bounds after reinitiali | |
| CVE-2026-89719 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: zram: fix out-of-bounds access in read_block_state() read_block_state() calculates nr_pages before taking dev_ | |
| CVE-2026-89720 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ubifs: fix out-of-bounds read in signature length check ubifs_sb_verify_signature() bounds the on-disk ubifs_s | |
| CVE-2026-89721 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: phy: rockchip-samsung-dcphy: fix out-of-range max_register The PHY register block is 64KB, so with a register | |
| CVE-2026-89722 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Fix out-of-bounds read in pci_write_legacy_io() pci_write_legacy_io() loads 4 bytes from the kernfs | |
| CVE-2026-89723 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix slab-out-of-bounds in nilfs_direct_propagate after truncation Shuangpeng Bai reported that KASAN d | |
| CVE-2026-89724 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: vicodec: fix out-of-bounds write in FWHT encoder vidioc_s_fmt_vid_out() sizes the encoder CAPTURE buffe | |
| CVE-2026-89725 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: cec: stm32: prevent out-of-bounds write on RX overflow stm32_rx_done() appends each received CEC byte t | |
| CVE-2026-89726 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() Patch series "lib/ucs2_string.c: fix out-of-bounds | |
| CVE-2026-89727 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: GICv2: Don't WARN on out-of-range GICV_DIR INTID vgic_v2_deactivate() passes the INTID a guest wro | |
| CVE-2026-89728 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: i3c: renesas: Fix out-of-bounds access for newdevs mask When software initiates DAA (Dynamic Address Assignmen | |
| CVE-2026-89729 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature sensor_hub_get_feature() clamps its return | |
| CVE-2026-89730 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write The trailing byte path in altera_cvp_send_bl | |
| CVE-2026-89731 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cxl/ras: Fix cxl_rch_get_aer_info() out-of-bounds AER register read cxl_rch_get_aer_info() copies the RCH Down | |
| CVE-2026-89732 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Prevent deadlock during ep0 read loop Currently, ffs_ep0_read() holds ffs->mutex when it pr | |
| CVE-2026-89733 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: fix dangling pointers in uvc_function_bind() and uvc_function_unbind() In uvc_function_bind( | |
| CVE-2026-89734 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: Fix null pointer dereference in uvcg_video_init() In uvcg_video_init(), if kthread_run_worke | |
| CVE-2026-89735 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: midi2: remove default configfs groups on teardown f_midi2_alloc_inst() creates default configfs c | |
| CVE-2026-89736 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_audio: Fix use-after-free on sound card disconnect g_audio_cleanup() invokes snd_card_free_when | |
| CVE-2026-89737 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: thunderbolt: Disable work before freeing tbt on remove tbt_altmode_remove() drops the plug and cab | |
| CVE-2026-89738 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: at91_udc: drain polled-VBUS timer/work before udc is freed In polled-VBUS mode (board.vbus_pin && | |
| CVE-2026-89739 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Fix use-after-free in dwc3_gadget_free_endpoints due to race condition In dwc3_gadget_init_ | |
| CVE-2026-89740 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: serial: imx: serialize imx_uart_ports[] lifetime imx_uart_probe() publishes its devm-allocated port in imx_uar | |
| CVE-2026-89741 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Revert "media: v4l2-dev: fix error handling in __video_register_device()" This reverts commit 2a934fdb01db6458 | |
| CVE-2026-89742 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rapidio: mport_cdev: fix use-after-free in dma_req_free() dma_req_free() acquires buf_mutex through req->map, | |
| CVE-2026-89743 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: misc: nsm: bound the device-reported response length nsm_sendrecv_msg_locked() stores the virtqueue used-ring | |
| CVE-2026-89744 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: device property: fix infinite loop in fwnode_for_each_child_node() When iterate over children of a fwnode that | |
| CVE-2026-89745 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: debugfs: Fix lockdown check for mmap_prepare Commit 651fdda8406d ("relay: update relay to use mmap_prepare") c | |
| CVE-2026-89746 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free with same-name named triggers When two hist triggers on different events are regis | |
| CVE-2026-89747 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free in trace_pipe read on sub-buffer order change Writing to buffer_subbuf_size_kb cal | |
| CVE-2026-89748 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix retry exhaustion in simple ring buffer reader swap simple_ring_buffer_swap_reader_page() starts w | |
| CVE-2026-89749 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix crash passing ERR_PTR to kthread_stop() event_test_stuff() calls kthread_run() and unconditionall | |
| CVE-2026-89750 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracing/user_events: Clear copied tracing state before fork duplication dup_task_struct() copies user_event_mm | |
| CVE-2026-89751 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix off-by-one in port I/O handling handle_in() and handle_out() in arch/x86/coco/tdx/tdx.c use: | |
| CVE-2026-89752 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm: memcg: stop reclaim when a limit update is superseded kernfs serializes file operations only per open file | |
| CVE-2026-89753 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: report RCU-tasks quiescent states in shrink_lruvec() I am seeing some rcu_tasks stalls in the Meta | |
| CVE-2026-89754 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/pagewalk: fix stale walk->action escaping walk_pmd_range() If ->pmd_entry() sets walk->action = ACTION_AGAI | |
| CVE-2026-89755 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/migrate_device: clear stale mapping after freeing swapcache __migrate_device_pages() reads the folio mappin | |
| CVE-2026-89756 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/migrate: report RCU-tasks quiescent states in migrate_pages_batch() migrate_pages_batch() unmaps each folio | |
| CVE-2026-89757 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/mglru: fix and remove redundant unevictable folio handling sort_folio() has a shortcut for moving folios th | |
| CVE-2026-89758 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: skip non-present PMDs when queueing folios Patch series "mm: handle device-private PMDs in walk | |
| CVE-2026-89759 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/kmemleak: avoid soft lockup when scanning task stacks Patch series "mm/kmemleak: avoid soft lockup when sca | |
| CVE-2026-89760 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm, swap: don't free a hibernation slot that is in the swap cache A slot with a folio in the swap cache is fre | |
| CVE-2026-89761 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix out-of-bounds write when null terminating a label vec aa_vec_unique() null terminates at vec[n - | |
| CVE-2026-89762 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix cred UAF caused by begin_current_label_crit_section() AppArmor's begin_current_label_crit_sectio | |
| CVE-2026-89763 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix TPM teardown ordering trusted_tpm_exit() drops the TPM chip reference and frees the digest | |
| CVE-2026-89764 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rust: devres: fix race between concurrent revokers There is a potential race condition when two paths try to r | |
| CVE-2026-89765 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: timers/itimer: Zero-init old itimerval before copy to userspace On native sparc64, struct __kernel_old_timeval | |
| CVE-2026-89766 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: pidfd: hold exec_update_lock around namespace ioctl The PIDFD_GET_*_NAMESPACE ioctls in pidfd_ioctl() perform | |
| CVE-2026-89767 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ovl: fix double end_creating() on the casefold-mismatch path ovl_create_real() releases the new dentry twice w | |
| CVE-2026-89768 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs: fix user path of nested backing files backing_file_open() derives the path to be stored in the new backing | |
| CVE-2026-89769 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path When cpuhp_setup_state fails after p | |
| CVE-2026-89770 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iomap: don't free integrity payload that doesn't exist fs_bio_integrity_alloc might not allocate a bio integri | |
| CVE-2026-89771 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix subbuf resize race with ring buffer readers trace_buffer subbuf_size is read lockless in ring | |
| CVE-2026-89772 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: write-protect folios during data writeback commit 095be159f3eb ("btrfs: unify folio dirty flag clearing | |
| CVE-2026-89773 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip Update HDCP Config In Transition State Transition state does not have a valid dm_stream_ | |
| CVE-2026-89774 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: hold sk properly in sco_conn_ready sk deref in sco_conn_ready must be done either under conn-> | |
| CVE-2026-89775 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation Computing the effects of a TLB invalida | |
| CVE-2026-89776 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vxlan: vnifilter: enforce exact length of GROUP/GROUP6 attributes The VXLAN VNI filter entry policy declares t | |
| CVE-2026-89777 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vfio/pci: clear vdev->msi_perm after freeing it on init failure vfio_msi_cap_len() lazily allocates the per-de | |
| CVE-2026-89778 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: isofs: fix out-of-bounds page array access on empty zisofs block zisofs_uncompress_block()'s empty-block fast | |
| CVE-2026-89779 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate ef->size covers the record's name and value When an EA record has a non-zero ef->size, ntfs | |
| CVE-2026-89780 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: restore skb->dev on deaggregated frames rmnet_map_deaggregate() allocates each sub-frame | |
| CVE-2026-89781 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix out-of-bounds read in read_log_rec_buf() read_log_rec_buf() copies a log record into a caller bu | |
| CVE-2026-89782 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject restart table growth beyond U16_MAX entries During $LogFile replay, log_replay() indexes the | |
| CVE-2026-89783 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full The depth check in xfrm6_input_addr( | |
| CVE-2026-89784 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 rpcb_register_inet4() and rpcb_regist | |
| CVE-2026-89785 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix out-of-bounds read of INDEX_ROOT in reparse/objid init ntfs_reparse_init() and ntfs_objid_init() | |
| CVE-2026-89786 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix out-of-bounds read in ext4_read_inline_dir() ext4_read_inline_dir() can read a dirent header past th | |
| CVE-2026-89787 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ext4: check dir entry fits before reading the hash trailer in ext4_search_dir() For casefolded encrypted direc | |
| CVE-2026-89788 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix tree connection use-after-free in smb2_tree_connect() ksmbd_tree_conn_connect() publishes a new tre | |
| CVE-2026-89789 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free gtp_newlink()'s error path fr | |
| CVE-2026-89790 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid divide by zero in rt6_multipath_rebalance rt6_multipath_rebalance() calculates the total eligible | |
| CVE-2026-89791 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: perf: Fix use-after-free when perf mmap() revival races with the last munmap() perf_mmap_close() drops rb->mma | |
| CVE-2026-89792 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds reads in share config responses Validate IPC share configuration payload sizes be | |
| CVE-2026-89793 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ublk: clear VM_MAYWRITE on read-only ublk char device mmap ublk_ch_mmap() rejects mmap requests with VM_WRITE | |
| CVE-2026-89794 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: zero pipe read compound padding Compound response handling extends the last response iov to an eight-by | |
| CVE-2026-89795 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: PCI: Allow per function PCI slots to fix slot reset on s390 On s390 systems, which use a machine level hypervi | |
| CVE-2026-89796 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: avoid infinite kdamond_merge_regions() internal loop Patch series "mm/damon: unurgent fixes for | |
| CVE-2026-89797 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: power: supply: ab8500_fg: fix use-after-free on remove ab8500_fg_remove() destroys the driver workqueue while | |
| CVE-2026-89798 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rpcrdma: arm rn_done before publishing the notification rpcrdma_rn_register() inserts @rn into rd_xa with xa_a | |
| CVE-2026-89799 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in bpf_get_stackid The get_perf_callchain call needs disabled preemption plus we need | |
| CVE-2026-89800 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE A successful OP_UNMAP_SPARSE marks it | |
| CVE-2026-89801 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE In nouveau_uvmm_bind_job_submit()'s OP_U | |
| CVE-2026-89802 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op Each bind_job_op is zeroed by kzalloc_obj() in | |
| CVE-2026-89803 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: unsubscribe the channel-kill event before the fence context nouveau_channel_del() tears the fence | |
| CVE-2026-89804 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dmem: fix mismatched DMA unmap size for large folios Device-private THP migration maps migration b | |
| CVE-2026-89805 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/pagemap: Fix folio allocation fallback and use-after-put drm_pagemap_migrate_populate_ram_pfn() had two is | |
| CVE-2026-89806 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/sysfb: ofdrm: Fix integer overflow in fb_size calculation The framebuffer size calculation `fb_size = line | |
| CVE-2026-89807 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: guard against NULL restore_mqd in CRIU queue restore Both create_queue_cpsch() and create_queue_no | |
| CVE-2026-89808 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix the case that vm range is hole at svm_migrate_copy_to_vram When migration vm range is hole at | |
| CVE-2026-89809 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix scope of mqd_mgr dereference in pqm_debugfs_mqds Reading /sys/kernel/debug/kfd/mqds while a pr | |
| CVE-2026-89810 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix error path at svm_migrate_copy_to_ram If page migration from device to sys ram fails for some | |
| CVE-2026-89811 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add TLB flush after MES queue eviction/suspension MES (Micro Engine Scheduler) does not perform he | |
| CVE-2026-89812 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: force complete the MES ring fences on reset The MES scheduler ring has no drm scheduler (no_schedu | |
| CVE-2026-89813 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: force complete the KIQ ring fences on reset Like the MES scheduler ring, the KIQ ring sets no_sche | |
| CVE-2026-89814 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: clamp the isolation index for rings outside a partition adev->isolation[] has one slot per partiti | |
| CVE-2026-89815 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Drop tt->restore after successful restore ttm_pool_restore_and_alloc() can successfully complete the | |
| CVE-2026-89816 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used Commit 1c6ceeee6ebb ("drm/atomic: Fix m | |
| CVE-2026-89817 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/gud: NUL-terminate TV mode names read from the device gud_connector_add_tv_mode() reads a buffer of fixed- | |
| CVE-2026-89818 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check If the supplied msg[2] (num_buffers) is 0x3 | |
| CVE-2026-89819 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: validate plane degamma LUT size for private color prop Unlike the CRTC degamma path, which is | |
| CVE-2026-89820 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix dc_lock leak on GPU reset error paths On GPU reset, dm_suspend() takes dc_lock and leaves | |
| CVE-2026-89821 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: avoid divide-by-zero in __is_lut_linear() __is_lut_linear() computes the expected value of ea | |
| CVE-2026-89822 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/i915: Guard against NULL driver_data in i915_pci_probe() pci_match_device() can return the dummy pci_devic | |
| CVE-2026-89823 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm: fix race between partial drm_dev_register() failure and ioctl If drm_dev_register() fails after registeri | |
| CVE-2026-89824 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/panel-edp: fix i2c adapter leak on probe failure Make sure to drop the i2c adapter reference on probe fail | |
| CVE-2026-89825 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/panthor: fix firmware control interface bounds checks panthor_init_cs_iface() and panthor_init_csg_iface() | |
| CVE-2026-89826 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/panthor: harden firmware build-info bounds checks panthor_fw_read_build_info() checks whether the metadata | |
| CVE-2026-89827 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid force-completing uninitialized UVD rings uvd_v7_0_sw_init() does not initialize the UVD deco | |
| CVE-2026-89828 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix init ordering in amdgpu_vram_mgr_init() drmm_cgroup_register_region() is called before INIT_LI | |
| CVE-2026-89829 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to pass folio->index to f2fs_sanity_check_node_footer() Otherwise in f2fs_sanity_check_node_footer() | |
| CVE-2026-89830 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix valid block count leak on data block allocation failure In __allocate_data_block(), when allocating | |
| CVE-2026-89831 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: f2fs: protect critical_task_priority updates with s_umount The sysfs store path already takes s_umount for GC | |
| CVE-2026-89832 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to clear dirty flag on folio in error path If node block is corrupted due to chksum mismatch or inco | |
| CVE-2026-89833 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages() There is potential deadloop in race condition | |
| CVE-2026-89834 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to migrate all curseg types during free_segment_range In free_segment_range(), the curseg evacuation | |
| CVE-2026-89835 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: f2fs: avoid NULL checkpoint thread access in sysfs checkpoint_merge can be enabled even when no checkpoint mer | |
| CVE-2026-89836 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix folio_nr_pages() race after put in large folio invalidate Our v6.18 based Android system is continue | |
| CVE-2026-89837 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix dentry folio leak in find_in_level find_in_level() gets a dentry folio with f2fs_find_data_folio() b | |
| CVE-2026-89838 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: f2fs: limit recovery filename logging to stored length F2FS stores recovery filenames as a length plus a fixed | |
| CVE-2026-89839 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: f2fs: use the mount idmap for the owner check in f2fs_xattr_advise_set() f2fs_xattr_advise_set() calls inode_o | |
| CVE-2026-89840 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: f2fs: validate MOVE_RANGE destination size F2FS_IOC_MOVE_RANGE checks the source range, but not the destinatio | |
| CVE-2026-89841 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: f2fs: only redirty pinned folios in redirty_blocks redirty_blocks() pins folios with read_cache_folio() and th | |
| CVE-2026-89842 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Skip NVMe LS reject IOCB when FW not started qla_nvme_xmt_ls_rsp() bails out to the out: label | |
| CVE-2026-89843 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak Several bsg handlers stage their request/reply i | |
| CVE-2026-89844 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisition qla24xx_report_id_acquisition() f | |
| CVE-2026-89845 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry() qla2x00_error_entry() reads ha->req_q_map[ | |
| CVE-2026-89846 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read In qla2x00_status_entry(), the FWI2 status path | |
| CVE-2026-89847 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Avoid double completion in async IOCB timeout qla2x00_async_iocb_timeout() tries to abort a tim | |
| CVE-2026-89848 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Quiesce response IRQ before freeing request queue qla2xxx_delete_qpair() deletes the request qu | |
| CVE-2026-89849 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path qla2x00_status_entry() filters out non-TYPE_SRB en | |
| CVE-2026-89850 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Don't query firmware state while chip is down qla2x00_fw_state_show() initializes rval to QLA_F | |
| CVE-2026-89851 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix FCE trace enable parsing in debugfs qla2x00_dfs_fce_write() called kstrtoul() with a NULL r | |
| CVE-2026-89852 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state() The mbx_cmd_t is allocated on the stack but | |
| CVE-2026-89853 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix FCE trace use-after-free during firmware dump qla2x00_free_fce_trace() freed and cleared ha | |
| CVE-2026-89854 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix cs84xx use-after-free on host teardown qla84xx_put_chip() drops the last reference to ha->c | |
| CVE-2026-89855 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Serialize flash version read in reset handler The "update cache versions without reset" sysfs r | |
| CVE-2026-89856 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation ha->msix_count is u16, but ha->max_req_que | |
| CVE-2026-89857 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject qla_nvme_ls_reject_iocb() allocates from and advanc | |
| CVE-2026-89858 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions() qla2x00_update_fru_versions() copies the use | |
| CVE-2026-89859 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak qla2x00_do_dport_diagnostics() allocates the q | |
| CVE-2026-89860 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Initialize NVMe abort_work once at submission qla_nvme_fcp_abort() and qla_nvme_ls_abort() ran | |
| CVE-2026-89861 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition() In the format 1 path, the virtual port | |
| CVE-2026-89862 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix BSG job leak on validate flash image error path qla28xx_validate_flash_image() returns QLA_ | |
| CVE-2026-89863 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check qla_chk_edif_rx_sa_delete_pending() obtains | |
| CVE-2026-89864 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Bound i2c->length in I2C bsg handlers struct qla_i2c_access carries a 16-bit length field along | |
| CVE-2026-89865 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers The FRU and I2C bsg handlers stage their transfer i | |
| CVE-2026-89866 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Resume device before setting EOS flag Setting the EOS flag talks to the firmware vi | |
| CVE-2026-89867 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Defer job_finish() only when a DEC_PIC was queued Decoder instances sharing a VPU a | |
| CVE-2026-89868 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Add timeout while stop_streaming When stop_streaming is called, an infinite loop ma | |
| CVE-2026-89869 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: use disable_irq() during power-off The IRQ is registered as a threaded IRQ. Using disable_ | |
| CVE-2026-89870 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: zoran: Avoid freeing a registered video_device twice zoran_init_video_device() installs zoran_vdev_rele | |
| CVE-2026-89871 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure kthread_run() returns an ERR_PT | |
| CVE-2026-89872 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link In v4l2_fwnode_parse_link(), the remote endpoint | |
| CVE-2026-89873 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC EXT SPS RPS counts The HEVC SPS control carries the short-term and long-term | |
| CVE-2026-89874 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: v4l2-async: avoid deleting unlinked ASC entry on link error v4l2_async_match_notify() creates ancillary | |
| CVE-2026-89875 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: ti: vpe: quiesce overflow recovery before freeing streams The VIP overflow recovery worker is armed fro | |
| CVE-2026-89876 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: tda18250: fix possible integer overflow Integer overflow may occur, when variable exp equals to zero. R | |
| CVE-2026-89877 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: saa7164: fix cleanup on resource allocation failure saa7164_dev_setup() adds the device to the global s | |
| CVE-2026-89878 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: s2255: check firmware size before reading trailing marker s2255_probe() reads a 4-byte marker and versi | |
| CVE-2026-89879 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: s2255: bound JPEG frame size before copying into the buffer s2255_fillbuff() memcpy()s vc->jpg_size byt | |
| CVE-2026-89880 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failure rtl2832_sdr_start_streaming() | |
| CVE-2026-89881 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leak rtl2832_sdr_remove() runs on U | |
| CVE-2026-89882 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: rkvdec: hevc: guard INTER_REF_PIC_SET_PRED index underflow st_ref_pic_set_prediction() computes the ref | |
| CVE-2026-89883 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: rc: sunxi-cir: Unregister rc device on probe failure After rc_register_device() succeeds, later probe f | |
| CVE-2026-89884 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup Add the missing sanity check after looking up t | |
| CVE-2026-89885 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: platform: mtk-mdp3: Fix SCP device refcounting mdp_probe() first tries to get the SCP handle with scp_g | |
| CVE-2026-89886 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: intel/ipu6: fix async notifier cleanup leak on parse error isys_notifier_init() calls v4l2_async_nf_ini | |
| CVE-2026-89887 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov7740: fix use-after-destroy in remove The ov7740_remove() function had a severe teardown order b | |
| CVE-2026-89888 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov02a10: fix endpoint parsing use-after-free The ov02a10_check_hwcfg() function calls fwnode_handl | |
| CVE-2026-89889 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: i2c: imx415: Release runtime PM reference on VBLANK error The VBLANK path returned immediately when pro | |
| CVE-2026-89890 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: go7007: defer the ALSA v4l2 put until card release go7007_snd_init() already takes a v4l2_device refere | |
| CVE-2026-89891 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: em28xx: fix use-after-free of dev_next->devlist on disconnect When a device with has_dual_ts=1 is probe | |
| CVE-2026-89892 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: em28xx: defer audio-only extension registration The audio-only path registers extensions while probing | |
| CVE-2026-89893 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: cx23885: cancel NetUP CI work before teardown netup_ci_exit() frees a netup_ci_state while its work ite | |
| CVE-2026-89894 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: cx231xx: reject geometry changes while the VBI queue is busy vidioc_s_fmt_vid_cap() and vidioc_s_std() | |
| CVE-2026-89895 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: cobalt: Avoid freeing ALSA private data twice snd_cobalt_card_create() stores cobsc in sc->private_data | |
| CVE-2026-89896 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: cedrus: fix memory leak in cedrus_init_ctrls() In cedrus_init_ctrls(), the V4L2 control handler is init | |
| CVE-2026-89897 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: cec: Serialize exclusive follower delivery cec_receive_notify() reads the exclusive follower pointer wi | |
| CVE-2026-89898 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: cec: extron-da-hd-4k-plus: add sanity check Add check to prevent overflowing msg.msg[] in case the inco | |
| CVE-2026-89899 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: cec: disable delayed work before freeing an interrupted transmit cec_transmit_msg_fh() drops adap->lock | |
| CVE-2026-89900 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: cec: core: Fix kmemleak due to missed rc_free_device() call The commit dccc0c3ddf8f ("media: rc: fix ra | |
| CVE-2026-89901 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: airspy: use vb2_video_unregister_device() on disconnect to fix NULL deref airspy_disconnect() clears s- | |
| CVE-2026-89902 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Avoid preempt count underflow without probe LoongArch uses break 11 for the breakpoint placed after | |
| CVE-2026-89903 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Do not save/restore percpu base register in rethook trampoline The rethook trampoline saves $r21 ($ | |
| CVE-2026-89904 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix acpi_package_ids[] array overflow With LoongArch virt machine, a typical setting is one core pe | |
| CVE-2026-89905 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Move arena register slot below TCC context Currently, the stack layout places the optional are | |
| CVE-2026-89906 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Refactor jump offset calculation in tail call The old macro-based jmp_offset calculation deriv | |
| CVE-2026-89907 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Validate MSI data before routing it to EIOINTC pch_msi_set_irq() passes e->msi.data straight i | |
| CVE-2026-89908 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Preserve memslot arch flags on KVM_MR_FLAGS_ONLY kvm_arch_prepare_memory_region() computes new | |
| CVE-2026-89909 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Free init resources if kvm_init() fails kvm_loongarch_init() calls kvm_loongarch_env_init() to | |
| CVE-2026-89910 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix uninitialized stack variable issue with dmsintc Variable vector[] is declared on stack in | |
| CVE-2026-89911 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Correctly cap TLBI Range to the architural limit TLB Invalidation by Range has a fairly powerful w | |
| CVE-2026-89912 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save MAPC with V=0 drops ite->collection but | |
| CVE-2026-89913 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables vgic_v3_save_pending_tables() iterat | |
| CVE-2026-89914 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Sign-extend VA for range-based TLBI invalidation When the decode_range_tlbi() helper was moved to | |
| CVE-2026-89915 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Remove VM-wide VNCR mapping counter The global VNCR mapping counter is used to decide whether an L | |
| CVE-2026-89916 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Make VNCR invalidation participate in MMU invalidation retry A VNCR TLB invalidation can occur on | |
| CVE-2026-89917 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Handle VNCR TLB invalidation race with vcpu_put() VNCR unmapping While VNCR TLB invalidation alway | |
| CVE-2026-89918 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Correctly handle end of VA space TLBI invalidation Our TLB invalidation by VA code is based on com | |
| CVE-2026-89919 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: keyop: use mmu_lock to read gmap->asce Every other dat_* consumer in this file (kvm_s390_get_skeys, | |
| CVE-2026-89920 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix memory corruption by not reinjecting CK machine checks Channel-subsystem damage machine checks | |
| CVE-2026-89921 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Zero initialize data structures for inject_pfault_token __kvm_inject_pfault_token() only sets .type | |
| CVE-2026-89922 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Take srcu when importing watchpoint data __import_wp_info() backs up the original guest memory cont | |
| CVE-2026-89923 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Free guest debug data on vcpu destroy kvm_s390_clear_bp_data() is only called from kvm_arch_vcpu_io | |
| CVE-2026-89924 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix old_data leak in guest debug error path __import_wp_info() allocates a per-watchpoint old_data | |
| CVE-2026-89925 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix memory leak in guest debug handling bp_data is freed only for the error case by kfree(bp_data). | |
| CVE-2026-89926 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix length check __import_wp_info() struct kvm_hw_breakpoint::len is a __u64 that is fully controll | |
| CVE-2026-89927 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock Fix an issue where userspace or the guest can progr | |
| CVE-2026-89928 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Consume the locked rmap value in the lockless rmap walk __kvm_rmap_lock() deliberately elides th | |
| CVE-2026-89929 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU When emulating INVVPID, KVM executes INVVPID | |
| CVE-2026-89930 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Service local TLB flushes on failed nested VM-Enter KVM services local TLB flushes on "full" nested | |
| CVE-2026-89931 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit Always check and clear KVM_REQ_GET_NEST | |
| CVE-2026-89932 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Always flush vpid02 on first use Make sure vpid02 is always flushed on first use by setting last_vp | |
| CVE-2026-89933 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: pressure: dps310: fix NULL pointer dereference on ACPI probe When the device is enumerated through its AC | |
| CVE-2026-89934 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: light: ltrf216a: fix runtime PM reference leak in error path ltrf216a_get_lux() acquires a runtime PM ref | |
| CVE-2026-89935 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: light: apds9306: fix PM reference leak in apds9306_read_data() apds9306_read_data() calls pm_runtime_resu | |
| CVE-2026-89936 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: dac: m62332: Fix regulator reference count imbalance m62332_set_value() enables the Vcc regulator on ever | |
| CVE-2026-89937 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: chemical: sgp30: Handle IAQ thread creation failure kthread_run() can fail and return an error pointer, b | |
| CVE-2026-89938 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF The atlas driver requests its har | |
| CVE-2026-89939 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable atlas_buffer_postenable() acquires a r | |
| CVE-2026-89940 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Tie IIO dma fence lock lifetime to the fence The `iio_dma_fence` implementation currently uses a | |
| CVE-2026-89941 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Make IIO DMA fence release RCU-safe The `dma_fence` documentation states that if a custom release | |
| CVE-2026-89942 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Fix potential use-after-free in anonymous buffer release An anonymous buffer handle holds a refer | |
| CVE-2026-89943 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: loongson: Fix error handling in ACPI property parsing In loongson_card_parse_acpi(), the return value of | |
| CVE-2026-89944 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: hdac_hda: Fix hlink refcount leak on component registration failure hdac_hda_dev_probe() gets the HDA li | |
| CVE-2026-89945 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: cs35l34: drain threaded IRQ before runtime suspend cs35l34_runtime_suspend() currently switches the code | |
| CVE-2026-89946 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: cs35l33: drain threaded IRQ before runtime suspend cs35l33_runtime_suspend() currently switches the code | |
| CVE-2026-89947 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: clk: meson: align gxbb_32k_clk_sel number of parents with actual count The following out-of-bounds read has be | |
| CVE-2026-89948 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: fix freeing of claims on meshif deletion When the mesh interface is getting deleted, then bat | |
| CVE-2026-89949 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: avoid unaligned fault in IP extraction Independent of the alignment of the ARP packet in the | |
| CVE-2026-89950 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: mcast: linearize skbuff for packet generation batadv_mcast_forw_packet() and batadv_mcast_forw_scr | |
| CVE-2026-89951 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix stale receive device on merged fragments Fragment reassembly reuses the skb from the highest-n | |
| CVE-2026-89952 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: validate ONFI extended parameter page sections nand_flash_detect_ext_param_page() allocates the | |
| CVE-2026-89953 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mtd: mtdoops: free page bitmap when the backing MTD is removed mtdoops_notify_add() allocates oops_page_used w | |
| CVE-2026-89954 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mtd: afs: validate v2 image info bounds The AFS v2 parser uses footer[8] to locate the image information block | |
| CVE-2026-89955 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: Fix NULL deref in status_show() during queue probe When vfio_ap_mdev_probe_queue() creates the s | |
| CVE-2026-89956 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: Fix missing lock required to access list of ap_matrix_mdev objects In order to traverse or add/r | |
| CVE-2026-89957 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: Fix hot-unplug skipped when last AP adapter or domain removed The vfio_ap_mdev_hot_unplug_cfg() | |
| CVE-2026-89958 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: Fix dereference matrix_mdev->kvm without checking for NULL The ap_driver structure has two field | |
| CVE-2026-89959 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove The vfio_ap_config_remove function uses th | |
| CVE-2026-89960 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: fix stale pqap_hook pointer on error in vfio_ap_mdev_set_kvm() In vfio_ap_mdev_set_kvm(), kvm->a | |
| CVE-2026-89961 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: powerpc/mm: fix wrong addr_pfn tracking in compound vmemmap population vmemmap_populate_compound_pages() uses | |
| CVE-2026-89962 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: powerpc/kexec_file: Prevent kexec range truncation Sashiko AI review pointed out the following issue. The __m | |
| CVE-2026-89963 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: powerpc/kexec_file: Fix null-ptr-def in extra size calculation A static Sashiko AI review identified a potenti | |
| CVE-2026-89964 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: parisc: eisa: Fix infinite loop when parsing invalid IRQ value When an invalid value is passed via the "eisa_i | |
| CVE-2026-89965 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: reject an arena whose nfree is below the lane count The BTT info block's nfree field, the number o | |
| CVE-2026-89966 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb_cma: fix null nodemask dereference in hugetlb_cma_alloc_frozen_folio alloc_buddy_hugetlb_folio_with | |
| CVE-2026-89967 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/migrate_device: avoid out-of-bounds writes for compound folios migrate_device_range() and migrate_device_pf | |
| CVE-2026-89968 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: reject unsolicited H2CData PDUs nvmet_tcp_handle_h2c_data_pdu() accepts an H2CData PDU after only c | |
| CVE-2026-89969 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: fix out-of-bounds write when receiving an over-long PDU nvmet_tcp_try_recv_pdu() reads a PDU header | |
| CVE-2026-89970 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: Synchronize timeout work during SQ teardown nvmet_auth_sq_free() cancels auth_expired_work with ca | |
| CVE-2026-89971 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvme: skip the zoned limits update if the zone info query failed nvme_query_zone_info() returns either a negat | |
| CVE-2026-89972 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvme: add missing SRCU grace period in error path nvme_alloc_ns() error path at out_unlink_ns removes ns from | |
| CVE-2026-89973 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: check the data direction of a C2HData PDU nvme_tcp_handle_c2h_data() finds the request by command id | |
| CVE-2026-89974 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvme-fc: fix double free of fabrics options when nvme_add_ctrl() fails nvmf_create_ctrl() owns the fabrics opt | |
| CVE-2026-89975 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvme-fabrics: fix DHCHAP secret leak on parse failure nvmf_parse_options() duplicates dhchap_secret and dhchap | |
| CVE-2026-89976 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel/ethosu: fix job completion fence cleanup ethosu_ioctl_submit_job() allocates done_fence before validatin | |
| CVE-2026-89977 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel/ethosu: check MMIO mapping errors in probe devm_platform_ioremap_resource() returns an error pointer whe | |
| CVE-2026-89978 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: return early from a zero-length flush SYNC_BO does not constrain its size, so a request for zer | |
| CVE-2026-89979 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix race between non-atomic ops and trigger-start We protect the races of the concurrent state tran | |
| CVE-2026-89980 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: harmony: initialize locks before requesting IRQ snd_harmony_create() registers the IRQ before initializi | |
| CVE-2026-89981 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: arm64: Don't read GMID_EL1 when MTE is disabled __cpuinfo_store_cpu() gates the GMID_EL1 read on the raw ID_AA | |
| CVE-2026-89982 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: i2c: mux: Fix channel node leak on adapter add failure i2c_mux_add_adapter() takes a reference to the Device T | |
| CVE-2026-89983 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix debugfs UAF on adapter removal i2c_del_adapter() frees the adapter's debugfs directory before i | |
| CVE-2026-89984 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix kernel address leakages in LBR stack Before Arch LBR gained CPL filtering support, a user- | |
| CVE-2026-89985 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: memcg: keep folio's objcg same as its node memcg_reparent_objcgs() has an inherent assumption that a folio's o | |
| CVE-2026-89986 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix sleeping allocation in alloc_pages_bulk_weighted_interleave() syzbot reported a sleeping fun | |
| CVE-2026-89987 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: transfer the pmd dirty bit to the folio on zap zap_huge_pmd_folio() propagates the pmd young b | |
| CVE-2026-89988 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: kprobes: Protect kprobe_blacklist with RCU __within_kprobe_blacklist() traverses kprobe_blacklist without hold | |
| CVE-2026-89989 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ima: Check for ERR_PTR from dentry_path() in validate_hash_algo() dentry_path() returns ERR_PTR(-ENAMETOOLONG) | |
| CVE-2026-89990 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ceph: lock mutex in ceph_mds_check_access() MDS session OPEN handling replaces mdsc->s_cap_auths under mdsc->m | |
| CVE-2026-89991 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix infinite loop in pcpu_freelist push with one possible CPU __pcpu_freelist_push() can loop forever whe | |
| CVE-2026-89992 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cpuidle: dt_idle_genpd: kfree() the original name allocation dt_idle_pd_alloc() kasprintf()s the full node pat | |
| CVE-2026-89993 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: Initialize IRQ data before requesting IRQs dw_edma_irq_request() passes struct dw_edma_irq | |
| CVE-2026-89994 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: fsl-edma: tracing: no ptr dereference during log output The fsl edma events store a pointer to a st | |
| CVE-2026-89995 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dma-direct: return struct page from dma_direct_alloc_from_pool() Commit 5b138c534fda ("dma-direct: factor out | |
| CVE-2026-89996 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dma-buf: dma-heap: don't publish fd before copy_to_user() succeeds DMA_HEAP_IOCTL_ALLOC allocates a dma-buf an | |
| CVE-2026-89997 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dm: fix resume-vs-remove race If the user issues the resume ioctl and the remove ioctl at the same time, it ma | |
| CVE-2026-89998 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dm: fix race when loading and unloading a table If the userspace calls two concurrent table load ioctls and on | |
| CVE-2026-89999 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: wacom: validate report length in wacom_intuos_pro2_bt_irq wacom_intuos_pro2_bt_irq() receives the wire re | |
| CVE-2026-90000 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: rmi: fix OOB access with undersized RMI reports The hid-rmi driver sizes its writeReport/readReport buffe | |
| CVE-2026-90001 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: bpf: serialize device reference release in struct_ops destroy path __hid_bpf_ops_destroy_device() and hid | |
| CVE-2026-90002 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ftrace: Take trace_array reference before accessing its ftrace_ops The trace instance files set_ftrace_filter | |
| CVE-2026-90003 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: futex: Prevent rcuwait use-after-free during requeue PI On PREEMPT_RT, FUTEX_CMP_REQUEUE_PI can trigger a KASA | |
| CVE-2026-90004 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: handle region split failure in apply_min_nr_regions() damon_apply_min_nr_regions() repeatedly s | |
| CVE-2026-90005 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: samples/damon/wsse: handle damon_start() failure Patch series "samples/damon: handle damon_{start,stop}() fail | |
| CVE-2026-90006 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: handle damon_stop() failure damon_sample_mtier_stop() assumes its damon_stop() call will | |
| CVE-2026-90007 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Use rollback index when freeing MSI-X vectors pm8001_request_msix() unwinds previously registere | |
| CVE-2026-90008 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: megaraid_sas: Limit NVMe request size to the PRP chain frame megasas_make_prp_nvme() builds a command's | |
| CVE-2026-90009 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: bsg: Fix TOCTOU in io_uring passthrough command setup scsi_bsg_uring_cmd() reads bsg_uring_cmd from the | |
| CVE-2026-90010 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: bsg: Cap io_uring sense copy to max_response_len Completion copied scmd->sense_len to the user response | |
| CVE-2026-90011 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Reserve a terminator byte for the login payload iscsi_target_check_login_request() reject | |
| CVE-2026-90012 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: spi: Fix DMA mapping ownership on partial map failure If RX mapping fails after TX mapping succeeds, __spi_map | |
| CVE-2026-90013 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracing: Take trace_array reference when opening options file The options files do not take the trace_array re | |
| CVE-2026-90014 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracing: Have show_event_filters/triggers files take trace array ref The newly added files show_event_filters | |
| CVE-2026-90015 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xhci: fix lost bounce buffers on TDs spanning several ring segments When a TD reaches a link TRB with data tha | |
| CVE-2026-90016 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read in rtw_restruct_wmm_ie() rtw_restruct_wmm_ie() scans in_ie for a WMM IE with: | |
| CVE-2026-90017 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() rtw_action_frame_parse() takes a frame_len parame | |
| CVE-2026-90018 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() rtw_get_wps_attr() walks WPS attribute | |
| CVE-2026-90019 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fix null pointer dereference in usb_put_function_instance() usb_put_function_instance() attempts | |
| CVE-2026-90020 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() gadget_dev_ioctl() reads dev->gadget before ac | |
| CVE-2026-90021 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_midi: initialize work in f_midi_alloc() f_midi_alloc initializes free_ref to 1 and it can only | |
| CVE-2026-90022 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_midi2: fix use-after-free in string attribute show path f_midi2_opts_str_show() takes the strin | |
| CVE-2026-90023 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers() Previously fsg_num_b | |
| CVE-2026-90024 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: midi2: Fix null-pointer dereference in f_midi2_free_ep_reqs A null-pointer dereference occurs in | |
| CVE-2026-90025 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: displayport: Fix OOB altmode array index The UCSI displayport driver indexes the connector's | |
| CVE-2026-90026 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: qcom-pmic: cancel reset_work on stop pdphy_stop() disables IRQs but leaves reset_work pending. If | |
| CVE-2026-90027 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: qcom-pmic-typec: disable cc_debounce_dwork on stop cc_debounce_dwork is queued from the set_cc() a | |
| CVE-2026-90028 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: hd3ss3220: track VBUS enable state per consumer regulator_is_enabled() reports the aggregate regul | |
| CVE-2026-90029 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: storage: realtek_cr: fix use-after-free on disconnect realtek_cr_destructor() calls timer_delete() before | |
| CVE-2026-90030 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: clear forceRM when issuing EndTransfer The forceRM bit of the DEPCMD register controls the behavior | |
| CVE-2026-90031 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb-storage: ene_ub6250: fix race between scan work and probe ene_ub6250_probe() calls usb_stor_probe2(), whic | |
| CVE-2026-90032 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: usbtv: keep device alive while ALSA card exists The ALSA PCM callbacks store the driver state in pcm->p | |
| CVE-2026-90033 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() The snd_usbmidi_us122l_output() picks a count of | |
| CVE-2026-90034 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: image: mdc800: change kmalloc() to kzalloc() Change the kmalloc() calls in usb_mdc800_init() for irq_urb_ | |
| CVE-2026-90035 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix division by zero in get_estimated_bw() get_estimated_bw() divides by link->dpia_bw_alloc_ | |
| CVE-2026-90036 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during blocked-lock reaping A bare lock owner -- its only remaining refere | |
| CVE-2026-90037 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during close_lru reaping An nfs4_openowner left on nn->close_lru after its | |
| CVE-2026-90038 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during export state revocation nfsd4_revoke_export_states() has the same u | |
| CVE-2026-90039 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Guard admin state-revocation walks with NFSD_NET_UP Writing to /proc/fs/nfsd/unlock_filesystem, or sendi | |
| CVE-2026-9004 | Deferred | 未確認 | CWE-200 | The WP-CRM System – Manage Clients and Projects plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.4.6 via the 'contact_id |
| CVE-2026-90040 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped Wire up a gmem_invalidate_range() | |
| CVE-2026-90041 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: sony: clean up device list on probe failure sony_input_configured() adds some controllers to sony_device_ | |
| CVE-2026-90042 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ceph: properly decrypt filenames in vmalloc() buffers The fscrypt subsystem uses the scatterlist crypto API, i | |
| CVE-2026-90043 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: zram: fix slot lock bit position on big-endian 64-bit The slot lock is a bit operation on the whole __lock wor | |
| CVE-2026-90044 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Fix Use-After-Free in AIO error path In ffs_epfile_write_iter() and ffs_epfile_read_iter(), | |
| CVE-2026-90045 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: USB: gadget: ffs: fix mm lifetime handling io_data stores a pointer to the submitting task's mm_struct, but do | |
| CVE-2026-90046 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: don't spin_trylock() in NMI on UP Patch series "mm/page_alloc: fixes for free_pages_nolock() on | |
| CVE-2026-90047 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Don't hand out the flat CCS storage as usable VRAM get_flat_ccs_offset() reads the base of the flat CC | |
| CVE-2026-90048 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list() ni_create_attr_list() allocates a fixed buffer | |
| CVE-2026-90049 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: skbuff: don't skb_tx_error() the source skb in skb_zerocopy() skb_zerocopy() copies frags from @from into | |
| CVE-2026-90050 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-90051 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tcp: reject non zerocopy devmem tx Devmem tcp tx doesn't work without zero-copy, however it's not currently en | |
| CVE-2026-90052 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-90053 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_htb: limit htb_classify inner-class filter hops htb_classify() follows each filter-selected inn | |
| CVE-2026-90054 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tcp: fix corruption of urgent data on multi-segment retransmit On the normal xmit path, while in urgent mode w | |
| CVE-2026-90055 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: atm: usbatm: fix invalid ci_range initialization syzbot reported a shift-out-of-bounds in __vcc_connect() | |
| CVE-2026-90056 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: fec: only stop PTP if it was initialized fec_ptp_init() is only called when fep->bufdesc_ex is available. | |
| CVE-2026-90057 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() Jaeyoung Chung and Eulgyu Kim reported | |
| CVE-2026-90058 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: bound qdisc_pkt_len to prevent qdisc soft lockup qdisc_get_stab() accepts a user-supplied size tabl | |
| CVE-2026-90059 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: restore NET_IP_ALIGN in the RX DMA offset Since the RX path was converted to zero-copy, the page | |
| CVE-2026-90060 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: control: Don't add invalid kcontrols to LED layer The kcontrol LED state layer tries to track the all as | |
| CVE-2026-90061 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: skip double clone set expressions on element insert Both the dynset and newsetelem path | |
| CVE-2026-90062 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: move hardware offload step after building the chain blob Allocate the chain blob before | |
| CVE-2026-90063 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: virtio-net: Ensure that TCP packets don't overflow gso_segs The user can specify any gso_size in a packet craf | |
| CVE-2026-90064 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Reject page faults from non-fault-mode scratch VMs Having scratch enabled does not make a VM capable o | |
| CVE-2026-90065 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure IPPROTO_SMC sockets create an in | |
| CVE-2026-90066 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: samples/ftrace: Fix kthread_stop() on ERR_PTR in ftrace-direct-multi-modify ftrace_direct_multi_init() assigns | |
| CVE-2026-90067 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: libceph: validate banner payload length When parsing the Ceph messenger v2 protocol banner, the `payload_len` | |
| CVE-2026-90068 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: dapm: Fix off-by-one check on the second enum channel The snd_soc_dapm_put_enum_double() rejects item[0] | |
| CVE-2026-90069 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: acomp - allocate async request context when cloning ACOMP_REQUEST_ON_STACK() reserves only enough stor | |
| CVE-2026-90070 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tpm: st33zp24: Return zero on status read failure st33zp24_status() ignores the result of the transport read a | |
| CVE-2026-90071 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_teql: restore skb->dev on the slave failure path teql_master_xmit() sets skb->dev = slave befor | |
| CVE-2026-90072 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sfq: clamp quantum to avoid signed overflow soft lockup sfq_init() sets q->quantum = psched_mtu(qdi | |
| CVE-2026-90073 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: hhf: clamp quantum before hhf_change() to avoid overflow hhf_init() sets q->quantum = psched_mtu(qd | |
| CVE-2026-90074 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: fq_pie: clamp default quantum to avoid signed overflow fq_pie_init() sets q->quantum = psched_mtu(q | |
| CVE-2026-90075 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: fq_codel: clamp default quantum and mtu fq_codel_init() sets q->quantum = psched_mtu(qdisc_dev(sch) | |
| CVE-2026-90076 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: fq: add overflow bounds to quantum and initial quantum fq_init() computes quantum = 2 * psched_mtu( | |
| CVE-2026-90077 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: fix a resource leak in copy_net_ns() error handling path Currently, preinit_net() does two things: (1) | |
| CVE-2026-90078 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_skbmod: fix length calculations and avoid invalid header warnings syzbot reported a warning in | |
| CVE-2026-90079 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: fix cn20k mailbox lifetime on repeated rvu_mbox_init() rvu_mbox_init() is called separately for | |
| CVE-2026-90080 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix NULL deref of af_xdp_zc_qidx on rep setup af_xdp_zc_qidx tracks receive queues using AF_XDP | |
| CVE-2026-90081 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/rds: use wq_has_sleeper() in rds_cong_map_updated() rds_cong_map_updated() runs after a peer's congestion | |
| CVE-2026-90082 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: mana: Cap MSI-X vectors to the device MSI-X table size mana_gd_query_max_resources() sizes gc->num_msix_u | |
| CVE-2026-90083 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ife: Only operate on Ethernet frames act_ife encapsulates/decapsulates the original Ethernet he | |
| CVE-2026-90084 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-vf: fix workqueue and netdev race in probe/remove Initialize the VF workqueue before register_netdev | |
| CVE-2026-90085 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: fix NULL deref in NIX TM tree debugfs read path rvu_dbg_nix_tm_tree_display() dereferences pfvf- | |
| CVE-2026-90086 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xsk: honor XDP_TX_METADATA in zero-copy path The zero-copy path reads TX metadata whenever the UMEM has metada | |
| CVE-2026-90087 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: do not leak an hci_conn when a second LE connect is rejected create_le_conn_complete() decides whet | |
| CVE-2026-90088 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop rfcomm_apply_pn() accepts the MT | |
| CVE-2026-90089 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Validate the FW dump header length nxp_process_fw_dump() pulls the ACL header off the fr | |
| CVE-2026-90090 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtksdio: Fix out-of-bounds DMA read in the TX path btmtksdio_tx_packet() rounds the transfer size | |
| CVE-2026-90091 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix race l2cap_sock_cleanup_listen() vs. put_chan For L2CAP sockets without owning sk->sk_so | |
| CVE-2026-90092 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN New sk should not be added to parent socket accept | |
| CVE-2026-90093 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: access chan->conn safely in get/setsockopt Since commit b66774b48dd9 ("Bluetooth: L2CAP: Fix | |
| CVE-2026-90094 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: arm64: process: Fix context switching MTE store-only tag check SCTLR_EL1.TCSO0 is set when user opt-in for MTE | |
| CVE-2026-90095 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fuse: Fix the condition to enable over-io-uring The existing condition in fuse_uring_cmd() is there only to av | |
| CVE-2026-90096 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fuse: invalidate the correct range after O_APPEND direct write fuse_direct_write_iter() captures pos before ge | |
| CVE-2026-90097 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition The VMBus module initialization fu | |
| CVE-2026-90098 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: sparx5: fix sleep in atomic context in MAC table access sparx5_set_rx_mode() runs with netif_addr_lock_bh | |
| CVE-2026-90099 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: account classifier filter allocations to memcg Allocations in the tc classifier *_change() paths (f | |
| CVE-2026-90100 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ptp: netc: fix period truncation and potential divide-by-zero in PEROUT The max_period bound in net_timer_enab | |
| CVE-2026-90101 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix call to hardware monitoring event handler The first parameter of hwmon_notify_event() is supposed | |
| CVE-2026-90102 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: NFSv4/pnfs: key the data server cache on the NFS version nfs4_pnfs_ds_add() keys the per-net data server cache | |
| CVE-2026-90103 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: NFSv4.2: fix LAYOUTSTATS send buffer exhaustion encode_layoutstats_maxsz budgets XDR_QUADLEN(PNFS_LAYOUTSTATS_ | |
| CVE-2026-90104 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: NFSv4.1: zero referring call lists before decoding decode_cb_sequence_args() allocates csa_rclists with kmallo | |
| CVE-2026-90105 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vxlan: fix reading neigh ha Currently arp/neigh_reduce read neigh ha directly which can lead to partial reads | |
| CVE-2026-90106 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: arp/nd proxy: fix reading neigh ha Currently neigh ha address is read directly, but that can resu | |
| CVE-2026-90107 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/smc: free pending qentry in smc_llc_flow_stop() before memset smc_llc_flow_stop() resets a flow struct wit | |
| CVE-2026-90108 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/smc: free stashed qentry before overwrite in REQ_ADD_LINK to ADD_LINK transition When smc_llc_event_handle | |
| CVE-2026-90109 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: sched: fix 32-bit backlog wrap in gred, bfifo and plug enqueue gred_enqueue(), bfifo_enqueue() and plug_e | |
| CVE-2026-90110 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: inetpeer: randomize RB-tree node comparison using SipHash The inetpeer rate limiting system stores peer entrie | |
| CVE-2026-90111 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ip6mr: do not clone dst in ip6mr_cache_report() IPv6 input attaches a non-refcounted (NOREF) dst to skbs under | |
| CVE-2026-90112 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: qlcnic: validate unified ROM sections before loading The unified ROM parser reads directory, product, and | |
| CVE-2026-90113 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netdevsim: update queue NAPI association on queue reset In netdevsim, receive queues (struct nsim_rq) embed th | |
| CVE-2026-90114 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: Reject descending VLAN tunnel ranges A pair of descending VLAN and tunnel IDs can pass the tunnel | |
| CVE-2026-90115 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xsk: fix NULL pointer dereference in __xsk_rcv() In the __xsk_rcv() multi-buffer path, xsk_buff_alloc() is cal | |
| CVE-2026-90116 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: mtpav: shut down output timer before card teardown snd_mtpav_output_timer() rearms chip->timer while hol | |
| CVE-2026-90117 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: validate usa_ofs before preserving the update sequence number When ntfs_mft_record_alloc() reuses a free | |
| CVE-2026-90118 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: fix off-by-one page overflow in ntfs_decompress() The per-token range check in ntfs_decompress() uses | |
| CVE-2026-90119 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup snd_ice1712_probe() performs multiple in | |
| CVE-2026-90120 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v5: Check get_logical_index() return value in MADT IAFFID parsing In gic_acpi_parse_iaffid() a giv | |
| CVE-2026-90121 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v5: Clear per-CPU IRS data on teardown IRS affinity setup publishes an IRS pointer and IAFFID stat | |
| CVE-2026-90122 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: clk: visconti: Make sure clk_init_data is fully initialized The clk_init_data structure contains several mutua | |
| CVE-2026-90123 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: irqchip/ast2700-intc: Avoid allocating in the irq_domain activate() callback The interrupt core calls the irq_ | |
| CVE-2026-90124 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: irqchip/renesas-rzg2l: Fix loss of interrupt rzg2l_clear_irq_int() and rzg2l_clear_tint_int() perform a read-m | |
| CVE-2026-90125 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix request buffer leak in smb2_new_read_req() smb2_new_read_req() allocates the request buffer w | |
| CVE-2026-90126 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rtc: pcf8563: fix clock provider leak on unbind pcf8563_clkout_register_clk() registers the CLKOUT clock provi | |
| CVE-2026-90127 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: virtio: rtc: time out alarm requests RTC class operations run with rtc_device.ops_lock held. The virtio RTC al | |
| CVE-2026-90128 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: fix wrong list iterated in add_direct_chain error path In add_direct_chain(), newly allocated direc | |
| CVE-2026-90129 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: virtio_balloon: quiesce balloon work before device shutdown Commit 8bd2fa086a04 ("virtio: break and reset virt | |
| CVE-2026-90130 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vdpa_sim: fix cleanup after worker creation failure vdpasim_create() leaves vdpasim->worker as an ERR_PTR when | |
| CVE-2026-90131 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: serialize resident iomap reads with mrec_lock ntfs_read_iomap_begin_resident() walks the MFT record thro | |
| CVE-2026-90132 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: reject unprivileged writes to reserved $LX* xattrs Reject setxattr of the reserved $LXUID, $LXGID, $LXMO | |
| CVE-2026-90133 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: Fix index_root heap OOB write in ntfs_ir_to_ib() ntfs_ir_to_ib copies all entries from index_root into a | |
| CVE-2026-90134 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: fix kmap_local_page() usage in compress Several compressed I/O paths discard the address returned by kma | |
| CVE-2026-90135 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: add missing ref_tracker_dir_exit() to alloc_netdev_mqs() sashiko is reporting that trying to read /sys/ke | |
| CVE-2026-90136 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/hsmp: Reject negative power cap writes in hwmon hsmp_hwmon_write() takes the user-supplied hw | |
| CVE-2026-90137 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix password encoding bounds check The password PSWD_ENCODINGS parser reads password | |
| CVE-2026-90138 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vsock: don't check the listener's sk_err in vsock_accept() Syzbot reported an issue which can be reproduced wi | |
| CVE-2026-90139 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fuse: check for NULL root inode in fuse_fill_super_submount fuse_iget() can return NULL when its inode allocat | |
| CVE-2026-90140 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cuse: wait for pending RCU callbacks on module exit Since commit 053fc4f755ad ("fuse: fix UAF in rcu pathwalks | |
| CVE-2026-90141 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipvs: fix integer overflow in ftp helper port/address parsing ip_vs_ftp_get_addrport() accumulates decimal dig | |
| CVE-2026-90142 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: virtio_net: Fix resize of the RX ring When a AF_XDP socket is attached, the virtnet_rx_resize should resize th | |
| CVE-2026-90143 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: kcm: Hold RCU read lock while running BPF parser kcm_parse_func_strparser() calls bpf_prog_run_pin_on_cpu | |
| CVE-2026-90144 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dpll: fix NULL deref in dpll_device_ops() during teardown race When the last owner of a dpll device unregister | |
| CVE-2026-90145 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hinic3: Fix skb linearization mismatch and drop skb when skb_checksum_help() failed Previously, hinic3_send_on | |
| CVE-2026-90146 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf, xdp: move offload check into dev_xdp_install() bpf_xdp_link_update() calls dev_xdp_install() directly and | |
| CVE-2026-90147 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: clk: devres: fix cleanup in devm_clk_get_optional_enabled_with_rate() devm_clk_get_optional_enabled_with_rate( | |
| CVE-2026-90148 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease() When nfs4_add_lease() races wi | |
| CVE-2026-90149 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers flexfiles accepts NFSv4.0 data servers, but two | |
| CVE-2026-90150 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: pnfs/blocklayout: Fix device leaks on parse failure bl_parse_concat() and bl_parse_stripe() allocate a child d | |
| CVE-2026-90151 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: NFSv4: remove callback IDR entry on client allocation failure nfs4_alloc_client() allocates an NFSv4.0 callbac | |
| CVE-2026-90152 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb/server: fix session leak in ksmbd_session_register() See the procedure below: smb2_sess_setup ksmbd | |
| CVE-2026-90153 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: bound smb_check_perm_dacl() ACE walks by DACL size smb_check_perm_dacl() validates that the DACL fits i | |
| CVE-2026-90154 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: scope session state changes to bound connections ksmbd_all_conn_set_status() treats every connection wh | |
| CVE-2026-90155 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: detach blocked lock requests before freeing A file_lock retained by ksmbd for byte-range lock bookkeepi | |
| CVE-2026-90156 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely discard unregistered deferred locks When vfs_lock_file() defers a lock, smb2_lock() puts its ksm | |
| CVE-2026-90157 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject negative optlen in cgroup getsockopt hook A cgroup getsockopt BPF program can shrink ctx->optlen a | |
| CVE-2026-90158 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: m68k: nfcon: Do not call console_is_registered() in nfcon_device() Since 7c2af0f634f1 ("tty: tty_io: use conso | |
| CVE-2026-90159 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow bpf_{g,s}etsockopt() in cgroup UNIX getname hooks _bpf_setsockopt() and _bpf_getsockopt() call s | |
| CVE-2026-90160 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: lwt_bpf: Restore reserved headroom after xmit program ip_finish_output2() expands an skb to LL_RESERVED_SPACE( | |
| CVE-2026-90161 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix interlaced ztailpacking pclusters On-disk sizes of interlaced pclusters should be block-aligned, an | |
| CVE-2026-90162 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: defer publishing granted locks to prevent UAF/double-free race In smb2_lock(), mid-batch granted locks | |
| CVE-2026-90163 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb/server: call ksmbd_proc_cleanup() on module init failure When a later initializer fails, the unwind chain | |
| CVE-2026-90164 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb/server: abort initialization when proc setup fails ksmbd_server_init() calls ksmbd_proc_init() before crea | |
| CVE-2026-90165 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb/server: fix invalid pointer dereference in ksmbd_stop_durable_scavenger() See the procedure below: ksmb | |
| CVE-2026-90166 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb/server: fix null-ptr-deref in ksmbd_ipc_tree_connect_request() See the procedure below: ksmbd_tree_conn | |
| CVE-2026-90167 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: serialize oplock close with pending break ownership close may abort an in-flight oplock break while ano | |
| CVE-2026-90168 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-90169 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: free preauth sessions on connection teardown SMB3.1.1 multichannel binding preserves the preauthenticat | |
| CVE-2026-90170 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate ipc response length before dereferencing its fields ipc_validate_msg() computes the expected m | |
| CVE-2026-90171 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: release pending child sockets outside the handler lock smbdirect_socket_destroy() releases the | |
| CVE-2026-90172 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: destroy QP before mem pools on accept failure On the rdma_accept_failed error path of smbdirec | |
| CVE-2026-90173 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: free completion queues with ib_free_cq() smbdirect_connection_destroy_qp() creates the send an | |
| CVE-2026-90174 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-out-of-bounds read in ksmbd_alloc_user() ksmbd_alloc_user() copies resp->hash_sz bytes out of | |
| CVE-2026-90175 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: server: fix leak of ksmbd_ipc_login_request_ext() returned buffer Free it unconditionally after ksmbd_all | |
| CVE-2026-90176 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: Do not skip lock checks for single-byte ranges check_lock_range() uses inclusive ranges. Its callers pa | |
| CVE-2026-90177 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Check pointer type for all atomic RMW paths Atomic RMW verification records an instruction pointer type o | |
| CVE-2026-90178 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (coretemp) Fix core_data leak on CPUs without PTS pdata->core_data is allocated in init_temp_data() whe | |
| CVE-2026-90179 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix deadlock in complain-mode change_hat The use of change_hat when in complain mode can cause a dea | |
| CVE-2026-90180 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: block: mtip32xx: synchronize ioctls with device removal The ioctl handlers only test REMOVE_PENDING before ent | |
| CVE-2026-90181 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ublk: avoid teardown retry loop on xarray allocation failure __ublk_shmem_remove_ranges() removes matching map | |
| CVE-2026-90182 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: blk-iocost: clear delay state when freeing policy data iocg_kick_delay() turns sufficiently large debt into an | |
| CVE-2026-90183 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: blk-iolatency: clear delay state when freeing policy data io.latency can throttle a group which has no latency | |
| CVE-2026-90184 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: null_blk: serialize configfs attribute updates with device setup The attribute store methods generated with NU | |
| CVE-2026-90185 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: null_blk: serialize configfs attribute stores with the lock The NULLB_DEVICE_ATTR _store takes no lock: apply_ | |
| CVE-2026-90186 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: null_blk: reject per-device queue resize for shared tag set When shared_tags is enabled, null_setup_tagset() m | |
| CVE-2026-90187 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: null_blk: free zones array on device power-off null_init_zoned_dev() allocates dev->zones when a zoned device | |
| CVE-2026-90188 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: null_blk: free global tag_set on init error path If shared_tags is enabled, null_setup_tagset() allocates the | |
| CVE-2026-90189 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: null_blk: register configfs subsystem after creating default devices In null_init(), configfs_register_subsyst | |
| CVE-2026-90190 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: null_blk: use DEFINE_MUTEX for the file-scope mutex In null_init(), mutex_init(&lock) currently happens after | |
| CVE-2026-90191 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mailbox: riscv-sbi-mpxy: validate RPMI notification lengths The SBI return value controls how many bytes are c | |
| CVE-2026-90192 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mailbox: qcom-cpucp: handle NULL data in send_data callback mailbox_clear_channel() calls mbox_send_message() | |
| CVE-2026-90193 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mailbox: qcom-cpucp: fix PREEMPT_RT self-deadlock in IRQ handler qcom_cpucp_mbox_irq_fn() calls mbox_chan_rece | |
| CVE-2026-90194 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ACPI: scan: fix bus ID cleanup on device_add() failures When device_add() fails after acpi_device_set_name() h | |
| CVE-2026-90195 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Fix missing sign-ext for signed 1-byte and 2-byte kfunc args On RV64, the ABI requires sign-extens | |
| CVE-2026-90196 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: validate topology volume range before allocation SOF treats the topology mixer min and max values a | |
| CVE-2026-90197 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: haptic: don't write an uninitialized value to unhandled usages fill_effect_buf() initializes value only f | |
| CVE-2026-90198 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix use-after-free in snd_card_do_free() A use-after-free was detected in snd_card_do_free() when | |
| CVE-2026-90199 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject out-of-range evcn in mi_enum_attr() In mi_enum_attr(), the start/end VCN validation for non-r | |
| CVE-2026-90200 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix integer overflow in MFT cluster validation In ntfs_init_from_boot(), the boot sector's MFT clust | |
| CVE-2026-90201 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: page_pool: fix UAF in __page_pool_release_netmem_dma on xa_cmpxchg race This bug was discovered while tes | |
| CVE-2026-90202 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers _base_release_memory_pools() unconditionally frees e | |
| CVE-2026-90203 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Squashfs: check block offset is not negative If a negative offset is read off disk (for example the offset int | |
| CVE-2026-90204 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate DIO orphan slot during inode read [BUG] A corrupted append-DIO dinode (high byte at offset 0xa | |
| CVE-2026-90205 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate orphan slot during inode read Patch series "ocfs2: validate active orphan slots during inode r | |
| CVE-2026-90206 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvmet: fix max_qid race between configfs and controller allocation The function nvmet_subsys_attr_qid_max_stor | |
| CVE-2026-90207 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: midi: Serialize input teardown with event_input snd_midi_input_event() must not be running while a | |
| CVE-2026-90208 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/samsung_pwm: Switch to raw_spinlock_t type Samsung PWM timer might be used as a clock sour | |
| CVE-2026-90209 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/debug: Fix deadlock during unregister Unregistering an s390dbf debug area while one of the associated deb | |
| CVE-2026-90210 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF in bpf_trampoline_multi_attach_free on update failure When bpf_trampoline_update() fails before m | |
| CVE-2026-90211 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf, s390: Clear fetch destination on faulting arena atomic Same missing register clear as on riscv64. A RMW a | |
| CVE-2026-90212 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: arm64/efi: Avoid voluntary preemption with efi_mm installed Gus reports a bad kernel memory access when using | |
| CVE-2026-90213 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix memory leak in error path of build_tree() In the error path of build_tree(), node instance | |
| CVE-2026-90214 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: xilinx: formatter_pcm: fix stream_data leak on open error In xlnx_formatter_pcm_open(), stream_data is a | |
| CVE-2026-90215 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mtd: ubi: Release device reference on busy detach ubi_detach_mtd_dev() obtains a device reference through ubi_ | |
| CVE-2026-90216 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ubi: Fix rollback for explicit UBI device numbers ubi_init_attach() rolls back module initialization failures | |
| CVE-2026-90217 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Compare iterator types during state pruning An iterator stack slot can be MEM_RCU or PTR_UNTRUSTED. These | |
| CVE-2026-90218 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix WARNING in res_to_rt syzbot reported a WARN_ON(!res->dev) in res_to_rt() triggered via addr_hand | |
| CVE-2026-90219 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Free debugfs on registration failure c4iw_alloc() creates the per-device debugfs tree (dev->debugf | |
| CVE-2026-90220 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Don't leak the extension cell pointer in the bounce payload The bounce_error_event() embeds the fai | |
| CVE-2026-90221 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix use of uninitialized memory in CORE_INIT_RSP parsing nci_core_init_rsp_packet_v1() and nci_core_ | |
| CVE-2026-90222 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: hold a reference to the request skb during send_frame __pn533_send_async() publishes the command a | |
| CVE-2026-90223 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: bound SNL TLV parsing to the skb and add length checks nfc_llcp_recv_snl() walked the SNL TLV list | |
| CVE-2026-90224 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix double completion race in nci_data_exchange_complete nci_close_device() and nci_rx_work can both | |
| CVE-2026-90225 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: read llcp_sock->local under the socket lock in getsockopt nfc_llcp_getsockopt() read llcp_sock->loc | |
| CVE-2026-90226 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: avoid userspace overflow on invalid optlen nfc_llcp_getsockopt() casts optval to (u32 __user *) for | |
| CVE-2026-90227 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() Unlike IO_CMD / IO64_CMD, NVME_IOCTL_SUBMIT_IO never calls | |
| CVE-2026-90228 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() When a host issues an Identify command | |
| CVE-2026-90229 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvme-apple: Destroy the admin queue on removal The admin queue is allocated with blk_mq_alloc_queue() but neve | |
| CVE-2026-90230 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvmet: fix heap out-of-bounds read in nvmet_auth_negotiate() nvmet_execute_auth_send() allocates the DH-HMAC-C | |
| CVE-2026-90231 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix unconfined user namespace restriction forced stack If a task is already confined by a stack the | |
| CVE-2026-90232 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: amt: Don't support cross-netns setup. When a lower device is unregistered, amt_device_event() tries to unregis | |
| CVE-2026-90233 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvme-pci: release descriptor pools on probe failure The per-NUMA-node descriptor DMA pools are created lazily | |
| CVE-2026-90234 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: NFS: Return a delegation the client fails to record When an NFS server grants a delegation in an OPEN reply, n | |
| CVE-2026-90235 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sunrpc: xprtsock: annotate shared socket callbacks with READ_ONCE/WRITE_ONCE xprtsock replaces and restores sk | |
| CVE-2026-90236 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Release the export reference when reaping open stateids nfs4_put_stid() releases the svc_export tracked | |
| CVE-2026-90237 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: move custom expectation support to helper Originally, the ct expectation support called nf_ | |
| CVE-2026-90238 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: amd: isp4: fix self-deadlock in isp4sd_pwron_and_init() error path isp4sd_pwron_and_init() holds ops_mu | |
| CVE-2026-90239 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: amd: isp4: release partial allocations in isp4if_alloc_fw_gpumem() isp4if_alloc_fw_gpumem() allocates s | |
| CVE-2026-90240 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush context cache with correct SID when tearing down aliases domain_context_clear_one() and devi | |
| CVE-2026-90241 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Tear down scalable-mode context on probe failure intel_pasid_setup_sm_context() walks a PCI device | |
| CVE-2026-90242 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix iopf_refcount leak on RID domain replacement intel_iommu_attach_device() enables IOPF for the | |
| CVE-2026-90243 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clear Present bit before tearing down copied context entry copied_context_tear_down() zeroes the 1 | |
| CVE-2026-90244 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/dma: Restore locking around msi_page_list Unlike a group's default domain, which is always freshly alloc | |
| CVE-2026-90245 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fbdev: kyro: Validate overlay viewport coordinates The overlay viewport end coordinates are computed from the | |
| CVE-2026-90246 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix integer overflow in verify_tags() bounds check verify_tags() validates the tagset table unpacked | |
| CVE-2026-90247 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix mmap_lock leak in irq_work path stack_map_get_build_id_offset() introduced a per-CPU irq_work to defe | |
| CVE-2026-90248 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: fix teardown of an adopted proto on insert-race loss In tc_new_tfilter() the create branch | |
| CVE-2026-90249 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: Fix unbalanced runtime PM on repeated event writes The IIO core does not filter duplicat | |
| CVE-2026-90250 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf, cgroup: Fix storage null-ptr-deref after replacing prog Syzkaller reported a storage null-ptr-deref issue | |
| CVE-2026-90251 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MSFT: validate evt_prefix_len against the response length read_supported_features() only checks tha | |
| CVE-2026-90252 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: free the HCI command when it is cancelled mgmt_hci_cmd_sync() queues the pending command with | |
| CVE-2026-90253 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: free the mesh send cancel command when it is cancelled mesh_send_cancel() queues the pending | |
| CVE-2026-90254 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: free the advertising instance on the failure and cancel paths adv_timeout_expire() hands | |
| CVE-2026-90255 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: fix the SCO setup context lifetime hci_setup_sync() queues a conn_handle_t with a NULL de | |
| CVE-2026-90256 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: use proto_lock for l2cap_data to fix l2cap_disconn_ind hci_conn::l2cap_data is accessed with | |
| CVE-2026-90257 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: virtio_bt: avoid OOB read of build info string The virtbt_setup_zephyr() sends the Zephyr vendor co | |
| CVE-2026-90258 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: airoha: add missed IRQ resource helpers Without hooking .irq_request_resources, gpiolib cannot set GP | |
| CVE-2026-90259 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() In that function, we round down t | |
| CVE-2026-90260 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: don't clobber the extent buffer when zeroing it out On a zoned filesystem a freed-but-still-dirt | |
| CVE-2026-90261 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: flush active metadata block group at btree_writepages() start btree_writepages() writes the btre | |
| CVE-2026-90262 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: retry verity reads for not-uptodate Merkle folios btrfs_read_merkle_tree_page() can find a folio in the | |
| CVE-2026-90263 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: check if root is readonly when setting posix acl For a filesystem which has btrfs read-only property se | |
| CVE-2026-90264 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: always wait for ordered extents to avoid OE races [BUG] Syzbot reported a bug that there can be conflic | |
| CVE-2026-90265 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: defrag: fix deadlock between defrag and delalloc space reservation While running fsstress with autodefr | |
| CVE-2026-90266 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: don't force read-only on transient -EAGAIN from reloc merge On a zoned FS, btrfs_delayed_refs_rs | |
| CVE-2026-90267 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: sd: Fix special_vec mempool leak when scsi_alloc_sgtables() fails sd_set_special_bvec() allocates a spec | |
| CVE-2026-90268 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: sd: Fix error handling in sd_probe() after large pool creation failure After device_add(&sdkp->disk_dev) | |
| CVE-2026-90269 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject load-acquire from pointers requiring fault protection A BPF_LOAD_ACQ is not rewritten to a BPF_PRO | |
| CVE-2026-90270 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: arm_mpam: Disable driver unbind to avoid UAF When a user unbinds an MSC and that MSC is the only MSC left for | |
| CVE-2026-90271 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: arm_mpam: Fix a NULL pointer dereference on unbinding after an error interrupt If a user unbinds an MSC after | |
| CVE-2026-90272 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: perf: arm_pmuv3: Zero initialize hw_id branch stack field PERF_SAMPLE_BRANCH_HW_INDEX is supported by BRBE so | |
| CVE-2026-90273 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: coresight: etm4x: missing cscfg_csdev_disable_active_config() in perf enable In the perf enable path, there ar | |
| CVE-2026-90274 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: coresight: etm4x: fix underflow for usage of (nrseqstate - 1) According to IHI006H Embedded Trace Macrocell Ar | |
| CVE-2026-90275 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: md/raid1: don't set array_frozen in raid1_takeover() raid1_takeover() sets conf->array_frozen = 1 on the newly | |
| CVE-2026-90276 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: md/md-llbitmap: stop daemon timer rearm on destroy llbitmap_destroy() deletes pending_timer before flushing md | |
| CVE-2026-90277 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: md/md-llbitmap: prevent create failure bitmap UAF llbitmap_create() publishes mddev->bitmap before reading the | |
| CVE-2026-90278 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: md: wait for behind writes before destroying bitmap __md_stop() destroyed the bitmap before calling mddev_deta | |
| CVE-2026-90279 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: md/raid5: round bitmap stripes with sector division raid5_bitmap_sector_map() aligns the array range to full R | |
| CVE-2026-90280 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usb: Fix possible NULL-deref on early runtime suspend There is a small window where the runtime | |
| CVE-2026-90281 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend Runtime PM must be enabled before c | |
| CVE-2026-90282 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usb-legacy: Fix possible NULL-deref on early runtime suspend There is a small window where the | |
| CVE-2026-90283 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hugetlbfs: release subpool on fill_super failure hugetlbfs_fill_super() allocates a hugepage subpool when size | |
| CVE-2026-90284 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: firmware_loader: do not queue completed sysfs fallback requests fw_load_sysfs_fallback() calls device_add() be | |
| CVE-2026-90285 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path qla2x00_sysfs_read_vpd() called ha->isp_ops- | |
| CVE-2026-90286 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx6: Use PFP on the compute queues too On GFX6, the compute rings use the same CP path as the grap | |
| CVE-2026-90287 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: phy: sunplus: fix error handling in sp_uphy_init() Fix the error paths of sp_uphy_init() to undo exactly what | |
| CVE-2026-90288 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: phy: renesas: rcar-gen2: Fix double of_node_put on phy creation failure for_each_child_of_node_scoped() releas | |
| CVE-2026-90289 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Resize MST HDCP per-connector arrays to 32 AMDGPU_DM_MAX_DISPLAY_INDEX is 31. It suggest a ma | |
| CVE-2026-90290 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: arm64: hibernate: Restore DAIF state on error Sashiko AI has reported that if swsusp_mte_save_tags() for some | |
| CVE-2026-90291 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: module/dups: Fix use-after-free in kmod_dup_req lifetime handling The kmod dups code uses RCU to ensure that a | |
| CVE-2026-90292 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix use-after-free in siw_accept() siw_accept() looks up the QP supplied by userspace. If that QP is | |
| CVE-2026-90293 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: IB/isert: post the full-feature receive buffers after session registration isert_put_login_tx() posts the full | |
| CVE-2026-90294 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: IB/isert: delay the final Login Response until the session is registered isert_put_login_tx() puts the final L | |
| CVE-2026-90295 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: imx6q: fix out-of-bounds write when probed more than once imx6_soc_volt is allocated fresh on every p | |
| CVE-2026-90296 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: imx6q: fix devres accumulation across driver rebind imx6_soc_volt is allocated with devm_kcalloc(cpu_ | |
| CVE-2026-90297 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/sun4i: crtc: Propagate layer initialization error sun4i_crtc_init() returns plain NULL when layer initiali | |
| CVE-2026-90298 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/sun4i: tcon: Drop TCON TOP device reference of_find_device_by_node() takes a device reference. Drop it aft | |
| CVE-2026-90299 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix sleepable check for tracing/lsm prog When CONFIG_FUNCTION_ERROR_INJECTION is disabled, a sleepable tr | |
| CVE-2026-90300 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Clear buf on error in __bpf_get_task_stack Both bpf_get_task_stack and bpf_get_task_stack_sleepable helpe | |
| CVE-2026-90301 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: o2hb: quiesce negotiate handlers and timeout work Heartbeat regions publish struct o2hb_region as the p | |
| CVE-2026-90302 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: synchronize heartbeat callbacks with o2net teardown Patch series "ocfs2: harden heartbeat teardown race | |
| CVE-2026-90303 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ARM: 9485/1: mm: acquire mmap write lock around show_pte() for user faults When CONFIG_DEBUG_USER=y, and cmdli | |
| CVE-2026-90304 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ARM: 9484/1: enable interrupts when unhandled user faults are triggered PREEMPT_RT requires interrupts to be e | |
| CVE-2026-90305 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ARM: 9483/1: select HAVE_POSIX_CPU_TIMERS_TASK_WORK Commit c6e61c06d606 ("ARM: 9463/1: Allow to enable RT") en | |
| CVE-2026-90306 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ARM: 9481/2: breakpoint: CFI breakpoints only on demand This removes the stub hw_breakpoint_cfi_handler() from | |
| CVE-2026-90307 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ srp_recv_done() passes wc->byte_len to srp_pro | |
| CVE-2026-90308 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Hold QP references for AE and CM processing AE QP fatal events and iWARP CM paths load QPs from de | |
| CVE-2026-90309 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Hold CQ references when processing EQ events EQ handlers look up CQs from dev->cq_xa and invoke CQ | |
| CVE-2026-90310 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-90311 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: thermal: hwmon: Remove hwmon class device along with its parent The current code creates one hwmon device per | |
| CVE-2026-90312 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Check load-acquire src ptr type before the load check_atomic_load() calls check_load_mem() before atomic_ | |
| CVE-2026-90313 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf, cgroup: Fix invalid storage access after __cgroup_bpf_attach failed A potential invalid storage access is | |
| CVE-2026-90314 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: remoteproc: fix OOB read via signed offset in rsc_table_for_each_entry() table->offset[i] is a u32 from firmwa | |
| CVE-2026-90315 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers Currently, the legacy I/O and memory sysfs ha | |
| CVE-2026-90316 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/omap: dsi: Do not copy isr table To be able to unregister stuff from isrs, the corresponding table was cop | |
| CVE-2026-90317 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Invalidate RCU pointers after final spin unlock In a sleepable BPF program, a spin lock can provide the o | |
| CVE-2026-90318 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fat: release buffer head after rebuilding parent fat_scan_logstart() leaves the matching directory entry's buf | |
| CVE-2026-90319 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rapidio: clear mport->net when rio_add_net() fails rio_alloc_net() stores the newly allocated rio_net in mport | |
| CVE-2026-90320 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate external xattr entries when reading metadata ocfs2_validate_xattr_block() checks the xattr blo | |
| CVE-2026-90321 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate inline xattrs during inode block validation Patch series "ocfs2: validate xattr entry bounds", | |
| CVE-2026-90322 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ocfs2/cluster: keep heartbeat local node stable o2nm_node_local_store() handles local=0 by stopping o2net and | |
| CVE-2026-90323 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ublk: validate auto buf reg before taking uring_cmd With UBLK_F_AUTO_BUF_REG, invalid sqe->addr can fail after | |
| CVE-2026-90324 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ublk: check import_ubuf() return value import_ubuf() can fail if the address range (provided by the userspace | |
| CVE-2026-90325 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: skip dying blkg in blkcg_activate_policy() When switching IO schedulers on a block device, blkcg_a | |
| CVE-2026-90326 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix race between policy activation and blkg destruction When switching an IO scheduler on a block | |
| CVE-2026-90327 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: phonet: pep: do not write beyond optlen in getsockopt pep_getsockopt() clamps the reported length to the calle | |
| CVE-2026-90328 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: steam: Reject short reads Steam Controller FEATURE reports encode the size of the message in the message | |
| CVE-2026-90329 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: synchronize input before cleaning up a failed probe hid_device_io_start() allows reports to run concurren | |
| CVE-2026-90330 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Fix FF device cleanup on init failure hidpp_ff_init() creates the input force-feedback de | |
| CVE-2026-90331 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: asus: refactor the two workqueues and init sequence Multiple issues have been found within the hid-asus d | |
| CVE-2026-90332 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: ep: Flush cached MSI write before unmapping the iATU The MSI-X path already flushes any posted MSI-X | |
| CVE-2026-90333 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dm-integrity: replace forgeable discard filler with a keyed sector marker The discard-block check in dm_integr | |
| CVE-2026-90334 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tty: clear cdev pointer after cdev_add() failure tty_cdev_add() drops the cdev reference when cdev_add() fails | |
| CVE-2026-90335 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tty: skip cdev_del() when no cdev is registered TTY device registration can fail before a cdev is allocated. S | |
| CVE-2026-90336 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: serial: core: clear freed pointers on uart_register_driver() failure uart_register_driver() leaves drv->state | |
| CVE-2026-90337 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: serial: core: do fallible allocations before the console can be registered serial_core_add_one_port() allocate | |
| CVE-2026-90338 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: serial: amba-pl011: keep console clock enabled for atomic writes pl011_console_write_atomic() runs from nbcon | |
| CVE-2026-90339 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: powerpc/syscall: Fix syscall skip handling for seccomp and ptrace After enabling GENERIC_ENTRY on PowerPC, sys | |
| CVE-2026-9034 | Awaiting Analysis | 未確認 | CWE-416 | Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privi |
| CVE-2026-90340 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: generic: free maps on pinctrl_generic_to_map() failure pinctrl_generic_to_map() parses DT configurati | |
| CVE-2026-90341 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: firmware: coreboot: Validate table bounds The existing coreboot_table_populate() bounds checks limit individua | |
| CVE-2026-90342 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix mmap_lock deadlock on arena lock failure Reported by the Sashiko AI review. arena_vm_fault() returns | |
| CVE-2026-90343 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: stop PMSR before P2P and NAN teardown PMSR request teardown must abort active measurements whi | |
| CVE-2026-90344 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: disconnect on CSA to channel 0 The refactor for the CSA parsing erroneously equates channel ze | |
| CVE-2026-90345 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix P2P action frame handling without device vif Some P2P action frame paths assume the P2P de | |
| CVE-2026-90346 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: clean up color-change beacon data on errors nl80211_color_change() calls nl80211_parse_beacon() | |
| CVE-2026-90347 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: arm64: ptrace: Keep 'orig_x0' in-sync with x0 on syscall entry Commit e057b9477232 ("arm64: syscall: Ensure sa | |
| CVE-2026-90348 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath10k: snoc: use memcpy_fromio() for MSA ramdump On WCN3990/SNOC the MSA region is mapped with devm_mem | |
| CVE-2026-90349 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix out-of-bounds link array access in mt7996_tx() When mac80211 leaves the link unspecifi | |
| CVE-2026-90350 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: reject out-of-range link ids in mt76_vif_link() mt76_vif_link() indexes mvif->link[] without valid | |
| CVE-2026-90351 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: do not attach hif2 WED when the main WED attach failed If the WED attach for the primary P | |
| CVE-2026-90352 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: release hif2 reference on probe IRQ failure The hif2 reference obtained by mt7915_pci_init | |
| CVE-2026-90353 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: fix ext PHY use-after-free on register error path After mt7915_register_ext_phy() succeede | |
| CVE-2026-90354 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: fix double hif2 init on the non-WED path mt7915_pci_init_hif2() was called unconditionally | |
| CVE-2026-90355 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: clear stale link state on full reset After a full chip reset, mac80211 reconfig replays in | |
| CVE-2026-90356 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: free vif links after clearing wcid entries on full reset mt7996_mac_reset_vif_iter() queue | |
| CVE-2026-90357 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement The flow is added to dev->twt_list before | |
| CVE-2026-90358 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf, x86: Fix trampoline stack size for 128-bit arguments btf_distill_func_proto() accepts a function argument | |
| CVE-2026-90359 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject >8 byte return values on return-reading trampoline paths btf_distill_func_proto() builds the funct | |
| CVE-2026-9036 | Analyzed | 未確認 | CWE-295 | IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive inform |
| CVE-2026-90360 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: regulator: core: use system_freezable_wq for init complete work schedule_delayed_work() uses system_wq, which | |
| CVE-2026-90361 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix leak in ath11k_service_ready_ext_event() Currently, during ath11k_service_ready_ext_event() | |
| CVE-2026-90362 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: Drop dev_pm_opp_set_rate(0) dev_pm_opp_set_rate(0) removes the vote specified in required-opps bu | |
| CVE-2026-90363 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: don't tear down KMS twice when KMS init fails When priv->kms_init() (mdp4_kms_init() / mdp5_kms_init( | |
| CVE-2026-90364 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: Unregister cpufreq notifier on init failure acpi_processor_driver_init() registers the cpufre | |
| CVE-2026-90365 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: cancel reset and rc work on device unregister Both drivers cancelled dump_work on unregister but l | |
| CVE-2026-90366 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: reserve space for the CSA-abort countdown TLV When a CSA countdown is active, mt7996_mcu_b | |
| CVE-2026-90367 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: hold dev->mt76.mutex while disabling tx worker in SER mt7996_mac_reset_work() parked the t | |
| CVE-2026-90368 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: unwind state on add_interface failure When mt76_wcid_alloc() fails, mt7915_add_interface() | |
| CVE-2026-90369 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix out-of-bounds access in mmio copy helpers mt76_mmio_write_copy() and mt76_mmio_read_copy() ite | |
| CVE-2026-90370 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: bound TLV walk in mt7996_mcu_get_chip_config The response TLV loop advanced by tlv->len wi | |
| CVE-2026-90371 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix RXDMAD_C buffer recycling race The RXDMAD_C buffers come from the RRO data queues' page pools, | |
| CVE-2026-90372 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: avoid nss underflow in mt7915_mcu_get_sta_nss If a peer's VHT/HE MCS map has no supported | |
| CVE-2026-90373 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: clear wcid mask under mutex after RCU pointer clear mt7915_remove_interface() cleared the | |
| CVE-2026-90374 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: validate RX band_idx before dereferencing phys[] band_idx comes from a 2-bit descriptor fi | |
| CVE-2026-90375 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix non-AQL packet accounting for MLO stations __mt76_tx_queue_skb() overrides the wcid passed by | |
| CVE-2026-90376 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix MLD ID in MAC TXD and HIF TXP Problem: MCU command timeout while the firmware state is | |
| CVE-2026-90377 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix RX data queuing of RRO 3.0 For RRO 3.0, RX data released from a RRO data queue should be put t | |
| CVE-2026-90378 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt792x: Fix memory leak in SDIO TX path When tx_prepare_skb() returns an error in the SDIO TX path | |
| CVE-2026-90379 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: Add PCIe AER handler support to prevent system crash When an AER error occurs and the bus | |
| CVE-2026-90380 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt792x: fix use-after-free in mt76_rx_poll_complete A use-after-free issue occurs in mt76_rx_poll_ | |
| CVE-2026-90381 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix handling channel context with different bands in mt76_switch_vif_chanctx() When performing cha | |
| CVE-2026-90382 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length The MPDU length in the rx descriptor comes fr | |
| CVE-2026-90383 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: misc: sgi-gru: remove interrupt-context page-table walks The GRU TLB miss handler walks a process's page table | |
| CVE-2026-90384 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iomap: release the folio batch on iomap callback failures A sashiko review of an unrelated patch points out th | |
| CVE-2026-90385 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: md/raid1: create serial pool adding rdev to array with serialize_policy=1 The following bug has been observed | |
| CVE-2026-90386 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices On an empty bus ENTDAA assigns nothing, so cmd- | |
| CVE-2026-90387 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: swiotlb: Preserve allocation virtual address for dynamic pools swiotlb_alloc_tlb() can allocate from the DMA a | |
| CVE-2026-90388 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/dma: Check atomic pool allocation result directly The non-blocking, non-coherent allocation path uses dm | |
| CVE-2026-90389 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: md: scope memalloc_noio to allocation critical sections Storing a memalloc_noio_save() token in mddev->noio_fl | |
| CVE-2026-90390 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: md/bitmap: resume array on backlog_store() error path backlog_store() suspends the array before checking wheth | |
| CVE-2026-90391 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: lib/test_hmm: fail dmirror_fault() when the mirrored mm is gone dmirror_fault() is called from the dmirror_rea | |
| CVE-2026-90392 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix potential UAF when reading bpf link info In bpf_link_show_fdinfo and bpf_link_get_info_by_fd, link->p | |
| CVE-2026-90393 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix potential UAF in bpf_netns_link_update_prog In bpf_netns_link_update_prog, the checks for old_prog an | |
| CVE-2026-90394 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: power: supply: sc2731_charger: cancel work on remove The USB notifier and initial charger detection can schedu | |
| CVE-2026-90395 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: power: supply: isp1704_charger: cancel work on remove The USB notifier and initial VBUS detection can schedule | |
| CVE-2026-90396 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: block: fix dio leak on metadata mapping error A failed integrity mapping holds a dio reference, so we need to | |
| CVE-2026-90397 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: scm: Fix NULL dereference in IRQ handler before __scm is published In qcom_scm_probe(), devm_r | |
| CVE-2026-90398 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() Currently, in ath11k_wmi_tlv_mac_phy_caps_parse(), k | |
| CVE-2026-90399 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() Currently, in ath12k_wmi_mac_phy_caps_parse(), kzall | |
| CVE-2026-9040 | Awaiting Analysis | 未確認 | CWE-362 | A race condition vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privil |
| CVE-2026-90400 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: md: recheck spare changes before starting sync remove_spares() and remove_and_add_spares() modify the array's | |
| CVE-2026-90401 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: md: remove REQ_NOWAIT support from raid1/10/456 REQ_NOWAIT support in md personalities that can block internal | |
| CVE-2026-90402 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Fix controller cleanup on EDL sysfs failure mhi_register_controller() adds the controller devi | |
| CVE-2026-90403 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: pci: fix error path in rtl_pci_probe() In the last error path in rtl_pci_probe(), the cleanup f | |
| CVE-2026-90404 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/chrome: cros_ec_debugfs: Unregister panic notifier cros_ec_debugfs_probe() registers notifier_panic w | |
| CVE-2026-90405 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: fix some error handling bugs in probe() There are a few issues here: 1) After we assign: | |
| CVE-2026-90406 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: handle runtime PM resume failure in core deinit Check the return value of pm_runtime_resume | |
| CVE-2026-90407 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() There is no policy entry for WMI_TA | |
| CVE-2026-90408 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix overreads in ath12k_wmi_process_csa_switch_count_event() There is no policy entry for WMI_TA | |
| CVE-2026-90409 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Add vm_bind region with kbo range overlap check When a VM is created, caller has to specify the r | |
| CVE-2026-90410 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: spi: davinci: switch to managed controller allocation The controller is allocated with the non-managed spi_all | |
| CVE-2026-90411 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvme-fc: unmap cmd_iu DMA on rsp_iu mapping failure in init_request __nvme_fc_init_request() maps cmd_iu and t | |
| CVE-2026-90412 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvmet: fix return status of RMI log page on allocation failure nvmet_execute_get_log_page_rmi() leaves 'status | |
| CVE-2026-90413 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: IB/isert: reject login PDUs declaring more data than was received isert_login_recv_done() records how many byt | |
| CVE-2026-90414 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: IB/isert: reject PDUs declaring more data than was received isert_recv_done() hands each received PDU to the o | |
| CVE-2026-90415 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: free STAG index when TPT entry write fails write_tpt_entry() allocates a new STAG index with c4iw_ | |
| CVE-2026-90416 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix stack out-of-bounds read in cc_params debugfs get_param() reads a congestion parameter as a u32 | |
| CVE-2026-90417 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() When the device is in the fatal error stat | |
| CVE-2026-90418 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix BUG in nilfs_copy_dirty_pages() on dirty state mismatch Syzbot reported a kernel BUG triggered wit | |
| CVE-2026-90419 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: prevent out-of-bounds read in super root block parsing super-root inode metadata size is trusted befor | |
| CVE-2026-90420 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix infinite loop in nilfs_clean_segments() syzbot reported a hung task in nilfs_transaction_begin(). | |
| CVE-2026-90421 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: PCI: Fix UAF when probe runs concurrent to dyn ID removal Dynamic IDs are only guaranteed to be valid when dyn | |
| CVE-2026-90422 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: pllfh: Fix IO remapping leak in register_pllfhs error path When mtk_clk_register_pllfhs functio | |
| CVE-2026-90423 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix UAF in ODP init error-handling path rxe_odp_mr_init_user() stores &umem_odp->umem in mr->umem be | |
| CVE-2026-90424 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Fix VINTF0 leak on the init-failure path tegra241_cmdqv_init_structures() allocates VINT | |
| CVE-2026-90425 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Require exactly one Stream ID for a vSID tegra241_vintf_init_vsid() maps a guest vSID to | |
| CVE-2026-90426 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs tegra241_cmdqv_remove() tears each VINTF d | |
| CVE-2026-90427 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Don't fall back to a freed smmu after devm_krealloc() __tegra241_cmdqv_probe() uses devm | |
| CVE-2026-90428 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs __tegra241_cmdqv_probe() requests th | |
| CVE-2026-90429 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Synchronize the error ISR against VINTF (de)init A user VINTF is torn down by tegra241_c | |
| CVE-2026-90430 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized tegra241_vintf_init_lvcmdq() stores | |
| CVE-2026-90431 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: remoteproc: Prevent crash handling to race with rproc_del() There's no synchronization between rproc_crash_han | |
| CVE-2026-90432 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Abort directly from the hardlockup handler scx_hardlockup() defers the abort to an irq_work because | |
| CVE-2026-90433 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: spi: oc-tiny: switch to managed controller allocation The controller is allocated with the non-managed spi_all | |
| CVE-2026-90434 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: isofs: release zisofs block pointer buffer head zisofs_fill_pages() reads the compressed block pointer table. | |
| CVE-2026-90435 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix integer overflow of user QP buffer size set_user_buf_size() computes the QP buffer size by left | |
| CVE-2026-90439 | Awaiting Analysis | 未確認 | CWE-122 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3 with OpenSSL versions <= OpenSSL 3.5.0 under certain configurations, a lim |
| CVE-2026-90441 | Analyzed | 未確認 | CWE-200, CWE-400, CWE-862 | A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authenticated, low-privileged user (including a read-only or gues |
| CVE-2026-90443 | Awaiting Analysis | 未確認 | CWE-79 | A web interface reflects a portion of the request URL into a script context and a hyperlink attribute without adequate encoding, and does not require authentication to reach. This |
| CVE-2026-90444 | Awaiting Analysis | 未確認 | CWE-78 | A file-transfer interface that requires valid credentials accepts attacker-controlled filenames without restricting shell metacharacters. An automated process later constructs and |
| CVE-2026-90445 | Awaiting Analysis | 未確認 | CWE-22 | An interface that accepts file uploads from authenticated users extracts the contents of uploaded archives without validating that extracted file paths remain within the intended d |
| CVE-2026-90446 | Awaiting Analysis | 未確認 | CWE-918 | An application programming interface endpoint accepts a user-supplied value and interpolates it directly into the path of a backend request to the underlying search and analytics d |
| CVE-2026-90447 | Awaiting Analysis | 未確認 | CWE-290 | A routing rule selects between two different authentication mechanisms for the same downstream service based on the value of a client-supplied request header, rather than on any pr |
| CVE-2026-90448 | Awaiting Analysis | 未確認 | CWE-862 | A deployment mode intended to expose only read access to stored data proxies a set of application programming interface routes without restricting which request methods are allowed |
| CVE-2026-90449 | Awaiting Analysis | 未確認 | CWE-306 | When a particular authentication mode is configured, the reverse proxy forwards requests for a bundled third-party administrative interface directly to that interface without apply |
| CVE-2026-90450 | Awaiting Analysis | 未確認 | CWE-863 | The application's role-authorization lookup defaults to granting access when a request handler's name is not present in its table of role requirements, rather than defaulting to de |
| CVE-2026-90451 | Awaiting Analysis | 未確認 | CWE-1392 | An example environment-configuration file ships with a fixed, publicly-known secret value used to sign authentication cookies for a bundled packet-analysis component. A deployment |
| CVE-2026-90452 | Awaiting Analysis | 未確認 | CWE-295 | Requests from the reverse proxy to the identity-provider service for token discovery, introspection, and credential exchange do not verify the identity provider's server certificat |
| CVE-2026-90453 | Awaiting Analysis | 未確認 | CWE-601 | A file-upload handler redirects the authenticated client's browser to a URL taken directly from that same request's Referer header, without validating it against the application's |
| CVE-2026-90454 | Awaiting Analysis | 未確認 | CWE-862 | A deployment mode intended to expose only read access to a bundled packet-analysis component's interface denies a list of write-capable routes by pattern, but the pattern omits rou |
| CVE-2026-90455 | Awaiting Analysis | 未確認 | A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the earlier, vulnerable version into a log | |
| CVE-2026-90456 | Awaiting Analysis | 未確認 | CWE-1392 | An example environment-configuration file for a bundled inventory-management component ships with a fixed, publicly-known administrative password. A deployment that copies this exa |
| CVE-2026-90457 | Awaiting Analysis | 未確認 | CWE-916 | The administrative password is hashed using a comparatively weak, fast algorithm for the credential store backing one authentication path, and the file containing that hash is writ |
| CVE-2026-90460 | Awaiting Analysis | 未確認 | CWE-863 | An issue was discovered in OpenStack Keystone before 29.0.3. Tokens obtained via delegated authentication methods (EC2 credentials, application credentials, OAuth1 access tokens, a |
| CVE-2026-90461 | Awaiting Analysis | 未確認 | CWE-923 | OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host when Image Service is configured for HTTP(S) Basic Authentication. |
| CVE-2026-90462 | Analyzed | 未確認 | CWE-280 | A flaw was found in SSSD. When configured with the LDAP access provider and `ldap_access_order` including `ppolicy` or `lockout`, a fail-open condition in the LDAP ppolicy access c |
| CVE-2026-90463 | Awaiting Analysis | 未確認 | CWE-125 | A flaw was found in the sssd NSS responder. This input validation vulnerability allows a local attacker, by sending specially crafted service lookup requests to the NSS responder's |
| CVE-2026-90467 | Deferred | 未確認 | CWE-88 | aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing attackers to inject ESMTP parameters into MAIL FROM and RCPT TO command lines. Atta |
| CVE-2026-90472 | Deferred | 未確認 | CWE-674 | msgpack-java through 0.9.12 contains a stack overflow vulnerability in MessageUnpacker.unpackValue() that recursively deserializes arrays and maps without nesting depth limits. Att |
| CVE-2026-90473 | Deferred | 未確認 | CWE-190 | msgpack-java through 0.9.12 contains an integer overflow vulnerability in MessageUnpacker.skipValue() when processing MAP32 containers with large element counts. Attackers can supp |
| CVE-2026-90474 | Deferred | 未確認 | CWE-287 | MCPHub before 1.0.32 contains an authentication bypass vulnerability in its embedded OAuth 2.0 authorization server where client authentication is disabled by default and PKCE enfo |
| CVE-2026-90481 | Awaiting Analysis | 未確認 | CWE-288 | In PortSwigger Burp Suite DAST (formerly Burp Suite Enterprise Edition) before 2026.8, an authentication bypass can occur via an alternate path or channel. |
| CVE-2026-90485 | Deferred | 未確認 | CWE-404, CWE-476 | A flaw has been found in IOBit Uninstaller 15.5.0.11. Affected by this issue is the function sub_11838 of the file IURegistryFilter.sys of the component IOCTL Dispatch Handler. Thi |
| CVE-2026-90486 | Deferred | 未確認 | CWE-918 | A vulnerability has been found in openstatusHQ openstatus up to f04c827112f30a11d571ebdad3892826034d6265. Affected by this vulnerability is an unknown functionality of the file app |
| CVE-2026-90487 | Deferred | 未確認 | CWE-266, CWE-269 | A vulnerability was found in Xuxueli xxl-job up to 3.4.2. Affected by this issue is some unknown functionality of the file xxl-job-admin/src/main/java/com/xxl/job/admin/business/co |
| CVE-2026-90488 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability was determined in Xuxueli xxl-job up to 3.4.2. This affects the function GroovyClassLoader.parseClass of the file xxl-job-core/src/main/java/com/xxl/job/core/glue/G |
| CVE-2026-90489 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in Xuxueli xxl-job up to 3.5.0. This vulnerability affects unknown code of the file /jobinfo/insert. Such manipulation of the argument name/author le |
| CVE-2026-90490 | Deferred | 未確認 | CWE-20, CWE-502 | A security flaw has been discovered in lenve vhr 1.0-SNAPSHOT. This issue affects some unknown processing of the component MailReceiver. Performing a manipulation results in deseri |
| CVE-2026-90491 | Deferred | 未確認 | CWE-74, CWE-94 | A weakness has been identified in sanjevirau gsubs up to 1.0.3. Impacted is the function showQuerySuccessPage of the file renderer/index.js of the component Electron. Executing a m |
| CVE-2026-90492 | Deferred | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in webgjc web_robot 2.4.0/2.5.0/2.8.0. The affected element is the function controller_listen/controller_recover of the file py/web.py. T |
| CVE-2026-90493 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability was detected in Tonec Internet Download Manager up to 6.42 Build 63 on Windows. The impacted element is an unknown function of the file idmwfp.sys of the component |
| CVE-2026-90494 | Deferred | 未確認 | CWE-22 | A flaw has been found in restify node-restify up to 12.0.0. This affects the function serveStatic in the library /lib/plugins/static.js. This manipulation causes path traversal. Th |
| CVE-2026-90495 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in Fengoffice Feng Office up to 3.11.13.11. This impacts the function Contacts::instance->findAll of the file application/models/CompanyWebsite.class |
| CVE-2026-90496 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in Fengoffice Feng Office up to 3.11.13.11. Affected is the function update_system_module_order/update_dimension_order of the file application/controllers |
| CVE-2026-90497 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in Fengoffice Feng Office up to 3.11.13.11. Affected by this vulnerability is the function getTitle of the file application/views/task/add_task.php o |
| CVE-2026-90498 | Deferred | 未確認 | CWE-1392 | A vulnerability was identified in lenve vhr 1.0-SNAPSHOT. Affected by this issue is some unknown functionality of the file vhr.sql. The manipulation leads to use of default credent |
| CVE-2026-90499 | Deferred | 未確認 | CWE-266, CWE-285 | A security flaw has been discovered in lenve vhr 1.0-SNAPSHOT. This affects the function HrInfoController.updatePass of the file /hr/pass of the component Password Update Handler. |
| CVE-2026-90500 | Deferred | 未確認 | CWE-284, CWE-434 | A weakness has been identified in lenve vhr 1.0-SNAPSHOT. This vulnerability affects the function FastDFSUtils.upload of the file /hr/userface of the component Avatar Upload. This |
| CVE-2026-90501 | Deferred | 未確認 | CWE-266, CWE-269 | A security vulnerability has been detected in lenve vhr 1.0-SNAPSHOT. This issue affects the function HrInfoController.updateHr of the file HrMapper.xml. Such manipulation of the a |
| CVE-2026-90502 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in stilleshan ServerStatus 1.0/2.0. Impacted is an unknown function of the file server/src/main.cpp of the component Stats Generation. Performing a man |
| CVE-2026-90503 | Deferred | 未確認 | CWE-200, CWE-284 | A flaw has been found in Chengdu Qilu Technology Ludashi 6.1026.4715.714. The affected element is the function sub_11008 in the library ComputerZ_x64.sys. Executing a manipulation |
| CVE-2026-90504 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability has been found in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. The impacted element is the function authorized. The manipulation of the a |
| CVE-2026-90505 | Deferred | 未確認 | CWE-362 | A vulnerability was found in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. This affects the function doUpdateLicenseKey. The manipulation results in race |
| CVE-2026-90506 | Deferred | 未確認 | CWE-362 | A vulnerability was determined in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. This impacts an unknown function of the component Save Account Job. This m |
| CVE-2026-90507 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability was identified in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. Affected is the function get_surge_subscription of the file services/subsc |
| CVE-2026-90508 | Deferred | 未確認 | CWE-862, CWE-863 | A security flaw has been discovered in Chengdu Qilu Technology Ludashi 6.1026.4715.714. Affected by this vulnerability is the function MessageNotifyCallback in the library ProtectF |
| CVE-2026-90509 | Deferred | 未確認 | CWE-259, CWE-798 | A weakness has been identified in dromara orion-visor up to 2.5.7. Affected by this issue is the function ExposeApiAspect.beforeExposeApi of the file ExposeApiAspect.java. Executin |
| CVE-2026-90510 | Deferred | 未確認 | CWE-320, CWE-321 | A security vulnerability has been detected in dromara orion-visor up to 2.5.7. This affects the function HostKeyServiceImpl.encryptKey of the file orion-visor-modules/orion-visor-m |
| CVE-2026-90511 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in GongShengyue OnlineBooks up to dfc5eacc08d3b0396c266049548618f6fb9587ea. This vulnerability affects unknown code of the file src/cn/ylcto/book/servl |
| CVE-2026-90513 | Deferred | 未確認 | CWE-287, CWE-306 | A flaw has been found in simalexan api-lambda-send-email-ses up to bda6869aa81371d1e872242e74fe7d953edb818d. This issue affects the function SES.sendEmail of the file template.yml |
| CVE-2026-90514 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in SourceCodester School Registration and Fee System 1.0. Impacted is an unknown function of the file /bilal/normal/save_stud.php. Such manipulation |
| CVE-2026-90515 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in SourceCodester School Registration and Fee System 1.0. The impacted element is an unknown function of the file /bilal/normal/delete_stud.php. Exec |
| CVE-2026-90516 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in SourceCodester School Registration and Fee System 1.0. The affected element is an unknown function of the file /bilal/normal/pay_report.php. Performing |
| CVE-2026-90517 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was identified in PHPGurukul Bank Locker Management System 1.0. This affects an unknown function of the file /blms/view-assign-locker.php. The manipulation of the a |
| CVE-2026-90518 | Deferred | 未確認 | CWE-266, CWE-284 | A security flaw has been discovered in PHPGurukul Bank Locker Management System 1.0. This impacts an unknown function of the file sidebar.php. The manipulation of the argument User |
| CVE-2026-90519 | Deferred | 未確認 | CWE-284, CWE-434 | A weakness has been identified in PHPGurukul Bank Locker Management System 1.0. Affected is an unknown function of the file /blms/banker/add-locker-form.php. This manipulation of t |
| CVE-2026-90520 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability has been found in jaychouchannel Tourism-Management-System up to 84d8ec384f669df3985293dab293bb7b477efa64. This vulnerability affects unknown code of the file Autho |
| CVE-2026-90521 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was found in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. This issue affects some unknown processing of the file Menpiao |
| CVE-2026-90522 | Deferred | 未確認 | CWE-640 | A vulnerability was determined in jaychouchannel Tourism-Management-System up to d984d172dceca907f8b447efbdb06dc233f7938d. Impacted is the function resetPass of the file UsersContr |
| CVE-2026-90523 | Deferred | 未確認 | CWE-266, CWE-269 | A vulnerability was identified in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The affected element is an unknown function of the file t |
| CVE-2026-90524 | Deferred | 未確認 | CWE-287, CWE-306 | A security flaw has been discovered in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The impacted element is an unknown function of the c |
| CVE-2026-90525 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown function of the file /pages/cust_pos_trans.php. Executing a manipulation of t |
| CVE-2026-90526 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in SourceCodester School Registration and Fee System 1.0. This impacts an unknown function of the file /bilal/save_class.php. The manipul |
| CVE-2026-90527 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in quequnlong shiyi-blog up to 1.2.1. Affected is an unknown function of the file blog-admin/src/views/message/message/index.vue of the component Add M |
| CVE-2026-90528 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in TDuckApp tduck-platform up to 5.3. Affected by this vulnerability is an unknown functionality of the file tduck-front/src/views/form/write/index.vue of the |
| CVE-2026-90529 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in DataEase up to 2.10.25/2.10.26. Affected by this issue is the function buildTooltip of the file core/core-frontend/src/views/chart/components/js/p |
| CVE-2026-90533 | Analyzed | 未確認 | CWE-862 | Flowise before 3.1.4 contains a broken access control vulnerability in GET /api/v1/organizationuser that allows any authenticated organization member to retrieve the organization o |
| CVE-2026-90534 | Analyzed | 未確認 | CWE-639 | Flowise is a low-code platform for building LLM applications. In versions up to and including 3.1.3, the POST /api/v1/node-load-method/:name endpoint is mounted without any route-l |
| CVE-2026-90535 | Analyzed | 未確認 | CWE-862 | Flowise versions before 3.1.4 contain an unauthenticated denial of service vulnerability in the /api/v1/text-to-speech/abort endpoint that accepts user-supplied chatflowId and chat |
| CVE-2026-90536 | Deferred | 未確認 | CWE-200 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to authorize access to the adsInfo API endpoint, allowing unauthenticated attackers to retrieve password-p |
| CVE-2026-90537 | Deferred | 未確認 | CWE-862 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization vulnerability in plugin/Scheduler/sendEmail.json.php that allows unauthenticate |
| CVE-2026-90538 | Deferred | 未確認 | CWE-200 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization vulnerability in playlistsFromUser.json.php that allows unauthenticated attacke |
| CVE-2026-90539 | Deferred | 未確認 | CWE-200 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authentication vulnerability in the plugin/TopMenu/menuItems.json.php endpoint that allows un |
| CVE-2026-90540 | Deferred | 未確認 | CWE-862 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate watch permissions in the playListAddVideo.json.php endpoint when adding videos to playlists. A |
| CVE-2026-90541 | Deferred | 未確認 | CWE-200 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to require authentication in the plugin/TopMenu/menus.json.php endpoint, allowing unauthenticated attacker |
| CVE-2026-90542 | Deferred | 未確認 | CWE-639 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate that logged-in users can access live schedules before creating reminders via remindMe.json.php |
| CVE-2026-90543 | Deferred | 未確認 | CWE-306 | WWBN AVideo at commit c3edcc274c389816d434acadac07ee78eaf330c1 and earlier, with the Live plugin enabled, contains a missing authentication vulnerability in plugin/Live/socketMessa |
| CVE-2026-90544 | Deferred | 未確認 | CWE-862 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate video access permissions in the videoAddViewCount.json.php endpoint before updating view stati |
| CVE-2026-90545 | Deferred | 未確認 | CWE-862 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate video access permissions in the commentAddNew.json.php endpoint, allowing authenticated users |
| CVE-2026-90546 | Deferred | 未確認 | CWE-862 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate video access permissions in the like.json.php endpoint, allowing logged-in users to record lik |
| CVE-2026-90547 | Deferred | 未確認 | CWE-862 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate user permissions in the Bookmark plugin getBookmarks.json.php endpoint, allowing unauthenticat |
| CVE-2026-90548 | Deferred | 未確認 | CWE-200 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate user permissions in the ImageGallery list.json.php endpoint, allowing unauthenticated access t |
| CVE-2026-90549 | Deferred | 未確認 | CWE-200 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to properly authorize access to the videosAndroid.json.php endpoint, allowing unauthenticated guests to li |
| CVE-2026-9055 | Deferred | 未確認 | CWE-269 | The Booking for Appointments and Events Calendar – Amelia (Premium) plugin for WordPress is vulnerable to Privilege Escalation in versions 8.0 - 9.6.2. This is due to insufficient |
| CVE-2026-90550 | Deferred | 未確認 | CWE-200 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to check user authorization in the PlayerSkins mediaSession.json.php endpoint before returning video metad |
| CVE-2026-90551 | Deferred | 未確認 | CWE-862 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate playlist ownership in the video_from_program API endpoint, allowing unauthenticated access to |
| CVE-2026-90552 | Deferred | 未確認 | CWE-639 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate playlist ownership in the Playlists_schedules/list.json.php and Live/calendar.json.php endpoin |
| CVE-2026-90553 | Analyzed | 未確認 | CWE-94 | vLLM before 0.28.0 contains a remote code execution vulnerability in the LlavaOnevision2 processor loader that ignores the trust_remote_code parameter when loading remote processor |
| CVE-2026-90554 | Analyzed | 未確認 | CWE-400 | vLLM versions >=0.10.2 and <0.28.0 do not apply any audio decode-size or duration limit when extracting audio from video input for NanoNemotronVL models. In nano_nemotron_vl.py, _e |
| CVE-2026-90555 | Analyzed | 未確認 | CWE-409 | vLLM versions before 0.28.0 fail to validate audio sample rate headers in the transcription endpoint, allowing authenticated clients to bypass duration checks. Attackers can submit |
| CVE-2026-90556 | Deferred | 未確認 | CWE-122 | Freeciv versions before 3.2.6 contain a heap buffer overflow in worklist_load() when processing savegame files with declared worklist lengths exceeding the fixed array bound of 64 |
| CVE-2026-90557 | Deferred | 未確認 | CWE-125 | Freeciv versions 3.1.0 through 3.2.5 contain an out-of-bounds read vulnerability in sg_load_player_unit() when processing savegame files with invalid unit activity indices. An atta |
| CVE-2026-90558 | Deferred | 未確認 | CWE-121 | sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. Attackers can craft ma |
| CVE-2026-90559 | Awaiting Analysis | 未確認 | CWE-787 | snappy-java through 1.1.10.8 contains an out-of-bounds write vulnerability in Snappy.uncompress(ByteBuffer, ByteBuffer) because destination buffer capacity is never validated again |
| CVE-2026-90560 | Awaiting Analysis | 未確認 | CWE-125 | zstd-jni versions 1.2.0 through 1.5.7-13 contain an out-of-bounds read vulnerability in the ZstdDictDecompress constructor because offset and length arguments are never validated a |
| CVE-2026-90561 | Awaiting Analysis | 未確認 | CWE-79 | Strapi versions 4.x through 4.26.2 and 5.x before 5.48.1 contain a stored cross-site scripting vulnerability in the content manager WYSIWYG preview component that fails to strip sc |
| CVE-2026-90562 | Deferred | 未確認 | CWE-331 | LangBot before 4.10.11 generates password recovery keys with only 24 bits of entropy and applies no rate limiting to the unauthenticated reset-password endpoint. Remote attackers k |
| CVE-2026-90563 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in maliangnansheng bbs-springboot 3.0.0. This affects the function utils.toToc of the file ArticleController.java. This manipulation causes cross sit |
| CVE-2026-90564 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in quequnlong shiyi-blog 1.0.0-1.2.1. This impacts the function SysChatMsgMapper.getChatMsgList of the file blog-web/src/views/chat/index.vue of the |
| CVE-2026-90565 | Deferred | 未確認 | CWE-266, CWE-284 | A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected is an unknown function of the file dashboard.ph |
| CVE-2026-90566 | Deferred | 未確認 | CWE-266, CWE-285 | A weakness has been identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected by this vulnerability is the function createUserAcco |
| CVE-2026-90567 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in quequnlong shiyi-blog up to 1.2.1. Affected by this issue is the function highlightKeyword of the file blog-web/src/components/Search/ |
| CVE-2026-90568 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in moxi624 Mogu Blog v2 up to 5.2. This affects the function BlogSortServiceImpl.addBlogSort of the file mogu_web/src/main/resources/templates/info.ftl |
| CVE-2026-90569 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in linlinjava litemall 1.5.0/1.6.0/1.7.0/1.8.0. This vulnerability affects the function AdminTopicController.validate of the file litemall-vue/src/views/items |
| CVE-2026-90570 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in linlinjava litemall 1.4.0/1.5.0/1.6.0/1.7.0/1.8.0. This issue affects the function AdminGoodsService.validate of the file litemall-vue/src/views/i |
| CVE-2026-90571 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in Exrick xmall up to 19e7917d5ed3bd2a2421a3a246ad494c133ba94c. Impacted is an unknown function of the file xmall-manager-web/src/main/webapp/WEB-INF/jsp/ |
| CVE-2026-90572 | Deferred | 未確認 | CWE-119 | A vulnerability was determined in davenardella snap7 up to 1.4.3. The affected element is the function TSnap7MicroClient::opUpload of the file src/core/s7_micro_client.cpp. Executi |
| CVE-2026-90573 | Deferred | 未確認 | CWE-404, CWE-476 | A vulnerability was identified in GPAC up to f1219cde. The impacted element is the function gf_sg_mfurl_del of the file scenegraph/vrml_tools.c of the component MP4Box. The manipul |
| CVE-2026-90574 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. This affects an unknown function of the file /pages/emp_transac.php?action=add. The manipulation |
| CVE-2026-90575 | Deferred | 未確認 | CWE-20, CWE-502 | A weakness has been identified in PHPGurukul Small CRM 4.0. This impacts the function unserialize of the file /crm/login.php of the component Login Success Handler. This manipulati |
| CVE-2026-90576 | Deferred | 未確認 | CWE-404, CWE-476 | A security vulnerability has been detected in GPAC up to f1219cde. Affected is the function gf_node_list_add_child of the file scenegraph/base_scenegraph.c of the component MP4Box. |
| CVE-2026-90577 | Deferred | 未確認 | CWE-119, CWE-122 | A vulnerability was detected in GPAC up to f1219cde. Affected by this vulnerability is the function gf_node_get_field of the file scenegraph/base_scenegraph.c of the component MP4B |
| CVE-2026-90578 | Deferred | 未確認 | CWE-119, CWE-416 | A flaw has been found in GPAC up to f1219cde. Affected by this issue is the function gf_list_count of the file utils/list.c of the component MP4Box. Executing a manipulation can le |
| CVE-2026-90579 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability has been found in cheshire-cat-ai Cheshire Cat AI up to 1.9.2. This affects the function _authorize_http_key of the file core/cat/factory/custom_auth_handler.py. Th |
| CVE-2026-90580 | Analyzed | 未確認 | CWE-918 | A vulnerability was found in FlowiseAI Flowise up to 3.0.2. This vulnerability affects the function axios.post of the file packages/server/src/controllers/evaluations/index.ts of t |
| CVE-2026-90581 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability was determined in cym1102 nginxWebUI up to 4.4.2. This issue affects the function MainController.autoUpdate of the file /adminPage/main/autoUpdate. This manipulatio |
| CVE-2026-90582 | Deferred | 未確認 | CWE-400, CWE-404 | A vulnerability was identified in evanchiu serverless-todo 1.0.3/2.0.0. Impacted is the function saveTodos of the file src/index.js of the component API Todo Endpoint. Such manipul |
| CVE-2026-90583 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in kagisearch smallweb up to 0ecb9c48edbf98dc7e934b54fbac43869e64b4cf. The affected element is the function index of the file app/sw.py of the c |
| CVE-2026-90584 | Deferred | 未確認 | CWE-400, CWE-770 | A weakness has been identified in TooTallNate Java-WebSocket up to 1.6.1. The impacted element is the function processFrameContinuousAndNonFin of the file Draft_6455.java of the co |
| CVE-2026-90593 | Deferred | 未確認 | CWE-189, CWE-190 | A vulnerability was determined in embedded-graphics up to 0.8.2. This affects the function ImageRaw::draw_sub_image of the file src/image/image_raw.rs. Executing a manipulation of |
| CVE-2026-90594 | Deferred | 未確認 | CWE-862, CWE-863 | A vulnerability was identified in wxiaoqi Spring-Cloud-Platform 3.0.1/3.1.0. This vulnerability affects the function PermissionService.checkUserPermission of the file /rpc/service/ |
| CVE-2026-90595 | Deferred | 未確認 | CWE-862, CWE-863 | A security flaw has been discovered in wxiaoqi Spring-Cloud-Platform 1.0/2.2/3.0. This issue affects the function OnlineController.getOnlineInfo of the file aceModules/ace-admin/au |
| CVE-2026-90596 | Deferred | 未確認 | CWE-189, CWE-190 | A weakness has been identified in embedded-graphics up to 0.8.2 on 32-bit. Impacted is the function ImageRaw::new/bytes_per_row of the file src/image/image_raw.rs. This manipulatio |
| CVE-2026-90597 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/sup_edit1.php. Such manipu |
| CVE-2026-90598 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was detected in jaygajera17 E-commerce-project-springBoot up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2. The impacted element is the function UserController.update |
| CVE-2026-90599 | Deferred | 未確認 | CWE-352, CWE-862 | A flaw has been found in Rizwan17 inventory-management-system up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2. This affects an unknown function of the file includes/process.php. Exe |
| CVE-2026-90600 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/inv_edit1.php. The manipulation of the argument I |
| CVE-2026-90601 | Deferred | 未確認 | CWE-287 | A vulnerability was found in getzep graphiti up to 0.30.2. Affected is an unknown function of the file server/graph_service/main.py of the component REST API. The manipulation resu |
| CVE-2026-90602 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this vulnerability is the function renderHistory of the file ImageStudio.js of the |
| CVE-2026-90603 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was identified in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this issue is some unknown functionality of the file /api/upload-binary of the comp |
| CVE-2026-90604 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. This affects an unknown part of the component Anchor Tag Handler. Performing a manipulation results in cr |
| CVE-2026-90605 | Deferred | 未確認 | CWE-119, CWE-120 | A weakness has been identified in Totolink A3002MU Hh-B20211125.1046. This vulnerability affects the function formFilter of the file /boafrm/formFilter of the component boa. Execut |
| CVE-2026-90606 | Deferred | 未確認 | CWE-119, CWE-120 | A security vulnerability has been detected in Totolink A3002MU Hh-B20211125.1046. This issue affects the function formIpv6Setup of the file /boafrm/formIpv6Setup of the component b |
| CVE-2026-90607 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was detected in Totolink A3002MU Hh-B20211125.1046. Impacted is the function formNewSchedule of the file /boafrm/formNewSchedule of the component boa. The manipulat |
| CVE-2026-90608 | Deferred | 未確認 | CWE-119, CWE-120 | A flaw has been found in Totolink A3002MU Hh-B20211125.1046. The affected element is the function formPortFw of the file /boafrm/formPortFw of the component boa. This manipulation |
| CVE-2026-90609 | Deferred | 未確認 | CWE-404, CWE-476 | A vulnerability has been found in GPAC up to f1219cde. The impacted element is an unknown function of the file scenegraph/vrml_tools.c of the component MP4Box. Such manipulation le |
| CVE-2026-90610 | Deferred | 未確認 | CWE-119, CWE-126 | A vulnerability was found in GPAC up to f1219cde. This affects the function gf_svg_attributes_copy of the file scenegraph/svg_attributes.c of the component MP4Box. Performing a man |
| CVE-2026-90611 | Deferred | 未確認 | CWE-617 | A vulnerability was determined in GPAC up to f1219cde. This impacts the function xmt_parse_element of the file scene_manager/loader_xmt.c of the component MP4Box. Executing a manip |
| CVE-2026-90612 | Deferred | 未確認 | CWE-617 | A vulnerability was identified in GPAC up to f1219cde. Affected is the function gf_sm_dump_command_list of the file scene_manager/scene_dump.c of the component MP4Box. The manipula |
| CVE-2026-90613 | Deferred | 未確認 | CWE-617 | A security flaw has been discovered in GPAC up to f1219cde. Affected by this vulnerability is the function stbl_GetSampleInfos of the file isomedia/stbl_read.c of the component MP4 |
| CVE-2026-90614 | Deferred | 未確認 | CWE-20, CWE-502 | A weakness has been identified in FedML-AI FedML up to 0.9.6. Affected by this issue is the function S3Storage.read_model of the file fedml/core/distributed/communication/s3/remote |
| CVE-2026-90615 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /subject1.php. Such manipulation of the |
| CVE-2026-90616 | Awaiting Analysis | 未確認 | CWE-61 | In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write access to files on the host, which can be escalated to arbitrary code execution on the host, |
| CVE-2026-90617 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was detected in GH05TCREW PentestAgent up to cf882dabea3ed91cef016cdd115e5426315665a2. This vulnerability affects the function run_task of the file interface/main.p |
| CVE-2026-90618 | Deferred | 未確認 | CWE-77, CWE-78 | A flaw has been found in GH05TCREW PentestAgent up to cf882dabea3ed91cef016cdd115e5426315665a2. This issue affects the function LocalRuntime.execute_command of the file runtime/run |
| CVE-2026-90619 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability has been found in 0x4m4 HexStrike AI up to d689933ff579d839c676c82b231f8e98326c5f04. Impacted is an unknown function of the file hexstrike_server.py of the componen |
| CVE-2026-90620 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was determined in 0x4m4 HexStrike AI up to d689933ff579d839c676c82b231f8e98326c5f04. The impacted element is an unknown function of the file hexstrike_server.py of |
| CVE-2026-90621 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in ipa-lab HackingBuddyGPT up to 0.5.0. This affects the function ssh_run_command of the file src/hackingBuddyGPT/extensions/ssh_run_command.py. Such |
| CVE-2026-90622 | Deferred | 未確認 | CWE-404, CWE-476 | A security flaw has been discovered in GNU libredwg 0.13.4. This impacts the function DWG_TABLE of the file src/dwg.spec of the component Layer Encoding. Performing a manipulation |
| CVE-2026-90623 | Deferred | 未確認 | CWE-287, CWE-295 | A weakness has been identified in andreashappe cochise up to 0.4.1. Affected is the function asyncssh.connect of the file src/cochise/ssh_connection.py of the component SSH Host Ke |
| CVE-2026-90647 | Deferred | 未確認 | CWE-295 | ASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows contains an improper certificate validation vulnerability in the IEC 60870-5-104 TLS client (Task Mode) |
| CVE-2026-90648 | Deferred | 未確認 | CWE-252 | wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack. It does not check the return |
| CVE-2026-90650 | Deferred | 未確認 | CWE-79 | The MotoPress Hotel Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Stripe Webhook event object 'id' in all versions up to, and including, 6.2.4 d |
| CVE-2026-90651 | Deferred | 未確認 | CWE-295 | Socket Firewall (socketdev/socket-registry-firewall) in registry mode before 2.0.0 does not verify upstream TLS certificates by default. When the api_ssl_verify and upstream_ssl_ve |
| CVE-2026-90668 | Deferred | 未確認 | CWE-770 | The webserver in UnrealIRCd 6.0.5 through 6.2.6 before 6.2.7 does not limit the number of HTTP request headers, which allows remote attackers to cause a denial of service (memory c |
| CVE-2026-90678 | Awaiting Analysis | 未確認 | CWE-130 | An issue was discovered in HAProxy 3.3.0 through 3.4.4 and in 3.5-dev1 through 3.5-dev5. Exploitation requires an HTTP/3 frontend: HAProxy must be built with QUIC support and confi |
| CVE-2026-90679 | Deferred | 未確認 | CWE-348 | Forgejo 13.0.0 through 16.0.4, when "[federation] ENABLED = true" is set, has a spoofing issue that affects identity integrity but does not allow account takeover or content modifi |
| CVE-2026-90680 | Deferred | 未確認 | CWE-119, CWE-121 | A security flaw has been discovered in D-Link DIR-823G 1.0.2B05_20181207. The impacted element is the function strcpy of the file /HNAP1/SetStaticRouteSettings of the component HNA |
| CVE-2026-90681 | Deferred | 未確認 | CWE-119, CWE-125 | A weakness has been identified in Matthias-Wandel jhead up to 3.3. This affects the function Get16u of the file exif.c of the component EXIF Parsing. This manipulation causes out-o |
| CVE-2026-90682 | Deferred | 未確認 | CWE-119, CWE-122 | A security vulnerability has been detected in Matthias-Wandel jhead up to 3.3. This impacts the function ProcessGpsInfo of the file gpsinfo.c of the component WebP EXIF Handler. Su |
| CVE-2026-90683 | Deferred | 未確認 | CWE-617 | A vulnerability was detected in GPAC up to f1219cde. Affected is the function gf_node_unregister of the file scenegraph/base_scenegraph.c of the component MP4Box. Performing a mani |
| CVE-2026-90684 | Deferred | 未確認 | CWE-617 | A flaw has been found in GPAC up to f1219cde. Affected by this vulnerability is the function gf_node_get_field_count of the file scenegraph/base_scenegraph.c of the component MP4Bo |
| CVE-2026-90685 | Deferred | 未確認 | CWE-617 | A vulnerability has been found in GPAC up to f1219cde. Affected by this issue is the function lsr_exec_command_list of the file laser/lsr_dec.c of the component MP4Box. The manipul |
| CVE-2026-90686 | Deferred | 未確認 | CWE-119 | A vulnerability was found in GPAC up to f1219cde. This affects the function gf_bt_report of the file scene_manager/loader_bt.c of the component MP4Box. The manipulation results in |
| CVE-2026-90687 | Deferred | 未確認 | CWE-119, CWE-416 | A vulnerability was determined in GPAC up to f1219cde. This vulnerability affects the function gf_node_changed_internal of the file scenegraph/base_scenegraph.c of the component MP |
| CVE-2026-90688 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was identified in Tenda W20E 15.11.0.61068_1546_841_CN_TDC. This issue affects the function formIPMacBindAdd of the component HTTP Handler. Such manipulation of the |
| CVE-2026-90689 | Deferred | 未確認 | CWE-119, CWE-121 | A security flaw has been discovered in Tenda W20E 15.11.0.61068_1546_841_CN_TDC. Impacted is the function formDelWebAuthWhiteUser. Performing a manipulation of the argument webAuth |
| CVE-2026-90690 | Deferred | 未確認 | CWE-77, CWE-78 | A weakness has been identified in 0x4m4 HexStrike AI up to d689933ff579d839c676c82b231f8e98326c5f04. The affected element is the function subprocess.Popen of the file hexstrike_ser |
| CVE-2026-90691 | Deferred | 未確認 | CWE-22 | A security vulnerability has been detected in 0x4m4 HexStrike AI up to d689933ff579d839c676c82b231f8e98326c5f04. The impacted element is the function FileOperationsManager of the f |
| CVE-2026-90692 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in D-Link DIR-878 120B05. This affects the function SetDynamicDNSIPv6Settings of the component Dynamic DNS IPv6 Settings. The manipulation of the argum |
| CVE-2026-90693 | Deferred | 未確認 | CWE-119, CWE-121 | A flaw has been found in D-Link DIR-878 120B05. This impacts the function SetWan3Settings of the component WAN Settings. This manipulation of the argument Primary/Secondary causes |
| CVE-2026-90694 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file /api/customers_handler.php of the component Customer M |
| CVE-2026-90695 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in SourceCodester Inventory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /api/vendors_handler.php of the |
| CVE-2026-90696 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in SourceCodester Inventory Management System 1.0. Affected by this issue is some unknown functionality of the file /api/products_handler.php of the |
| CVE-2026-90697 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was identified in SourceCodester Inventory Management System 1.0. This affects an unknown part of the file invoice.php. The manipulation of the argument ID leads to |
| CVE-2026-90698 | Deferred | 未確認 | CWE-119, CWE-125 | A security flaw has been discovered in memcached 1.6.41/1.6.42/1.6.43. This vulnerability affects the function try_read_command_asciiauth of the file proto_text.c of the component |
| CVE-2026-90699 | Deferred | 未確認 | CWE-77, CWE-78 | A weakness has been identified in D-Link DWR-M920 1.1.7. This issue affects the function sub_41E60C of the file /boafrm/formPinManageSetup. This manipulation of the argument newPin |
| CVE-2026-90700 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/pro_edit1.php. Such manipulation of th |
| CVE-2026-90701 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. The affected element is an unknown function of the file |
| CVE-2026-90702 | Deferred | 未確認 | CWE-77, CWE-78 | A flaw has been found in D-Link DWR-M921 1.1.52. Impacted is the function system of the file /boafrm/formDiskFormat. This manipulation of the argument partition causes os command i |
| CVE-2026-90703 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability has been found in D-Link DWR-M921 1.1.52. The affected element is the function system of the file /boafrm/formDiskCreateShare. Such manipulation of the argument fol |
| CVE-2026-90704 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was found in D-Link DWR-M921 1.1.52. The impacted element is the function system of the file /boafrm/formDiskPartition. Performing a manipulation of the argument de |
| CVE-2026-90705 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was determined in D-Link DWR-M921 1.1.52. This affects the function formsysCmd of the file /boafrm/formsysCmd of the component Boa Dispatch Table. Executing a manip |
| CVE-2026-90706 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was identified in D-Link DWR-M921 1.1.52. This impacts the function formWsc of the file /boafrm/formWsc. The manipulation of the argument targetAPSsid leads to os c |
| CVE-2026-90707 | Deferred | 未確認 | CWE-119, CWE-416 | A security flaw has been discovered in Open5GS up to 2.7.x. Affected is the function amf_nnrf_try_old_amf_discovery_fallback of the file src/amf/nnrf-handler.c of the component Old |
| CVE-2026-90708 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in Yot CMS up to 3.3.1. Affected by this vulnerability is the function Login of the file global.php of the component Cookie Handler. This manipulatio |
| CVE-2026-90709 | Deferred | 未確認 | CWE-74, CWE-94 | A security vulnerability has been detected in Yot CMS up to 3.3.1. Affected by this issue is the function eval of the file modsys/console/admin.php of the component Admin Console. |
| CVE-2026-90710 | Deferred | 未確認 | CWE-918 | A vulnerability was determined in taisan tarzan-cms 1.0.0. This issue affects the function openConnection of the file com/tarzan/cms/modules/admin/service/biz/ThemeService.java of |
| CVE-2026-90711 | Awaiting Analysis | 未確認 | CWE-290, CWE-348, CWE-697 | proxy-addr is a Node.js module that determines a request's client address behind trusted reverse proxies, and it backs Express req.ip and req.ips. In versions 1.1.0 through 2.0.7, |
| CVE-2026-90712 | Deferred | 未確認 | CWE-404 | A vulnerability was identified in Gitlawb openclaude up to 0.30.0. Impacted is the function waitForCallback of the file src/services/api/xaiOAuthCallback.ts of the component xAI OA |
| CVE-2026-90713 | Deferred | 未確認 | CWE-404 | A security flaw has been discovered in vllm-project vLLM up to 0.29.0. The affected element is the function TiktokenTokenizer::new of the file rust/src/text/src/backend/hf/mod.rs o |
| CVE-2026-90714 | Deferred | 未確認 | CWE-119 | A weakness has been identified in marcobambini Gravity up to 0.9.7. The impacted element is an unknown function of the file src/utils/gravity_json.c of the component JSON parser. T |
| CVE-2026-90715 | Deferred | 未確認 | CWE-189, CWE-190 | A security vulnerability has been detected in marcobambini Gravity up to 0.9.7. This affects an unknown function of the file src/utils/gravity_json.c of the component udp json-pars |
| CVE-2026-90716 | Deferred | 未確認 | CWE-119, CWE-125 | A vulnerability was detected in marcobambini Gravity up to 0.9.7. This impacts the function parse_number_expression of the file src/compiler/gravity_parser.c of the component Numbe |
| CVE-2026-90767 | Deferred | 未確認 | CWE-93 | Froxlor before 2.3.12 fails to properly validate multi-line SSH public keys in the SshKeys::add() endpoint, allowing customers to inject arbitrary lines into authorized_keys files. |
| CVE-2026-90768 | Deferred | 未確認 | CWE-862 | CAPEv2 through commit 471ee4b fails to validate task ownership in REST API endpoints, allowing authenticated users to read and delete analyses submitted by other users. Attackers c |
| CVE-2026-90769 | Deferred | 未確認 | CWE-918 | Open Notebook before 1.11.0 fails to validate the URL parameter in POST /api/sources endpoint, allowing authenticated users to perform server-side requests to internal services. At |
| CVE-2026-90770 | Deferred | 未確認 | CWE-78 | Spug through 3.4.0 contains a remote code execution vulnerability in the ping_check function that interpolates user-supplied monitor addresses directly into shell commands without |
| CVE-2026-90771 | Awaiting Analysis | 未確認 | CWE-1321 | joi before versions 17.13.8 and 18.2.9 contains a prototype pollution vulnerability in the messages compilation function that accepts __proto__ as an error code. Attackers can supp |
| CVE-2026-90772 | Deferred | 未確認 | CWE-79 | Amundsen frontend through 4.3.0 renders table, dashboard, and feature descriptions with dangerouslySetInnerHTML without HTML sanitization in ResourceListItem components. Attackers |
| CVE-2026-90773 | Deferred | 未確認 | CWE-150 | procs through 0.14.12 fails to sanitize escape sequences in process command lines before displaying them in the Command column. Local attackers can execute processes with malicious |
| CVE-2026-90774 | Deferred | 未確認 | CWE-22 | rustypaste before 0.18.1 validates the destination path before applying the optional custom filename HTTP header, allowing attackers to bypass directory-escape checks. Attackers ca |
| CVE-2026-90775 | Awaiting Analysis | 未確認 | CWE-125 | PostGIS address_standardizer through 3.7.0 fails to validate the Weight parameter from caller-supplied rules tables before using it as an array index. Attackers can craft malicious |
| CVE-2026-90776 | Awaiting Analysis | 未確認 | CWE-407 | Nodemailer versions 9.1.0 through 10.0.4 contain a quadratic time complexity vulnerability in the addressparser component when parsing email addresses with RFC 5322 comments. Attac |
| CVE-2026-90777 | Deferred | 未確認 | CWE-502 | ESPnet before 202609 deserializes pretrained model checkpoints using torch.load with weights_only=False, allowing arbitrary code execution from attacker-supplied files. Attackers c |
| CVE-2026-90778 | Deferred | 未確認 | CWE-120 | SIPp through 3.7.7 contains a buffer overflow vulnerability in get_peer_tag() function when processing SIP To headers with tag parameters of 2049 bytes or more. Unauthenticated rem |
| CVE-2026-90779 | Deferred | 未確認 | CWE-121 | SIPp through 3.7.7 contains a stack buffer overflow vulnerability in createAuthHeader() when processing SIP authentication challenges with oversized algorithm parameters. A malicio |
| CVE-2026-90780 | Deferred | 未確認 | CWE-120 | SIPp through 3.7.7 contains a buffer overflow vulnerability in the get_header() function in src/sip_parser.cpp when processing SIP messages with header content exceeding 20,490 byt |
| CVE-2026-90781 | Awaiting Analysis | 未確認 | CWE-193 | alsa-lib through 1.2.16.1 contains a stack buffer overflow in the __snd_ctl_ascii_elem_id_parse() function that writes one byte past a 64-byte buffer when parsing a name= field wit |
| CVE-2026-90782 | Deferred | 未確認 | CWE-476 | S2OPC through 1.7.3 contains a null pointer dereference in msg_subscription_publish_bs__alloc_notification_message_items() where a failed allocation for DataChangeNotification is o |
| CVE-2026-90783 | Deferred | 未確認 | CWE-680 | MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic. Attackers can craft |
| CVE-2026-90784 | Deferred | 未確認 | CWE-401, CWE-404 | A vulnerability has been found in Dvidelabs flatcc up to 0.6.3. The impacted element is the function fb_clear_parser of the file src/Compiler/semantics.c. The manipulation leads to |
| CVE-2026-90785 | Deferred | 未確認 | CWE-617 | A vulnerability was found in Dvidelabs flatcc up to 0.6.3. This affects the function analyze_struct of the file src/compiler/semantics.c of the component Struct Analysis. The manip |
| CVE-2026-90786 | Deferred | 未確認 | CWE-617 | A vulnerability was determined in Dvidelabs flatcc up to 0.6.3. This impacts the function align_order_members of the file src/compiler/semantics.c of the component Duplicate Symbol |
| CVE-2026-90787 | Deferred | 未確認 | CWE-266, CWE-269 | A vulnerability was identified in Soarkey StudentManagement up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. Affected is the function RegisterServlet.doPost of the file code/WebCont |
| CVE-2026-90788 | Deferred | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in magicblack MacCMS10 2026.1000.4055. Affected by this vulnerability is an unknown functionality of the file /admin1.php/admin/template/index/p |
| CVE-2026-90789 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in itsourcecode Leave Management System 1.0. Affected by this issue is some unknown functionality of the file /login.php. Executing a manipulation of |
| CVE-2026-90790 | Deferred | 未確認 | CWE-918 | A security vulnerability has been detected in a2aproject a2a-python up to 1.1.3. This affects the function _dispatch_notification of the file src/a2a/server/tasks/base_push_notific |
| CVE-2026-90791 | Deferred | 未確認 | CWE-119, CWE-416 | A vulnerability was detected in GPAC up to f1219cde. This vulnerability affects the function gf_node_unregister of the file scenegraph/base_scenegraph.c of the component MP4Box. Th |
| CVE-2026-90792 | Deferred | 未確認 | CWE-404, CWE-476 | A flaw has been found in GPAC up to f1219cde. This issue affects the function gf_node_list_get_child of the file scenegraph/base_scenegraph.c of the component MP4Box. This manipula |
| CVE-2026-90793 | Deferred | 未確認 | CWE-119, CWE-416 | A vulnerability has been found in GPAC up to f1219cde. Impacted is the function gf_node_get_name of the file scenegraph/base_scenegraph.c of the component MP4Box. Such manipulation |
| CVE-2026-90794 | Deferred | 未確認 | CWE-119, CWE-416 | A vulnerability was found in GPAC up to f1219cde. The affected element is the function gf_sg_script_load of the file scenegraph/vrml_tools.c of the component MP4Box. Performing a m |
| CVE-2026-90795 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in itsourcecode Loan Management System 1.0. The impacted element is an unknown function of the file navbar.php. Executing a manipulation of the argum |
| CVE-2026-90796 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/company/index.php. The manipulation of the argument |
| CVE-2026-90801 | Analyzed | 未確認 | CWE-119, CWE-120 | A security flaw has been discovered in GNU Binutils 2.47. This impacts the function cache_bwrite of the file bfd/cache.c of the component ld. The manipulation of the argument nbyte |
| CVE-2026-90802 | Analyzed | 未確認 | CWE-404, CWE-476 | A weakness has been identified in GNU Binutils 2.47. Affected is the function bfd_putl64 of the file bfd/libbfd.c of the component ld. This manipulation causes null pointer derefer |
| CVE-2026-90803 | Analyzed | 未確認 | CWE-119, CWE-120 | A security vulnerability has been detected in GNU Binutils 2.47. Affected by this vulnerability is the function elf_x86_64_relocate_section of the file bfd/elf64-x86-64.c of the co |
| CVE-2026-90804 | Analyzed | 未確認 | CWE-119, CWE-120 | A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the component Eh Frame S |
| CVE-2026-90805 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This affects an unknown part of the file doctorlogin.php. Exec |
| CVE-2026-90806 | Deferred | 未確認 | CWE-862, CWE-863 | A vulnerability has been found in DjangoCRM django-crm up to 1.2. This vulnerability affects the function BulkUpdateCasesView of the file backend/cases/bulk_views.py of the compone |
| CVE-2026-90807 | Deferred | 未確認 | CWE-59 | A vulnerability was found in nanocoai NanoClaw up to 2.1.17. This issue affects the function forwardAttachedFiles of the file src/modules/agent-to-agent/agent-route.ts of the compo |
| CVE-2026-90808 | Deferred | 未確認 | CWE-183, CWE-184 | A vulnerability was determined in HKUDS nanobot up to 0.2.1. Impacted is the function ExecTool._guard_command/ExecTool._spawn of the file nanobot/agent/tools/shell.py of the compon |
| CVE-2026-90809 | Deferred | 未確認 | CWE-74, CWE-88 | A vulnerability was identified in HKUDS nanobot up to 0.2.1. The affected element is the function ExecTool._guard_command/ExecTool._spawn of the file nanobot/agent/tools/shell.py o |
| CVE-2026-90810 | Deferred | 未確認 | CWE-266, CWE-285 | A security flaw has been discovered in cosmicstack-labs mercury-agent up to 1.1.13. The impacted element is the function PermissionManager.checkShellCommand of the file mercury-age |
| CVE-2026-90811 | Deferred | 未確認 | CWE-200, CWE-284 | A weakness has been identified in cosmicstack-labs mercury-agent up to 1.2.0. This affects the function PermissionManager.checkShellCommand of the file mercury-agent/src/capabiliti |
| CVE-2026-90812 | Deferred | 未確認 | CWE-266 | A security vulnerability has been detected in cosmicstack-labs mercury-agent up to 1.2.0. This impacts the function checkShellCommand of the file src/capabilities/permissions.ts of |
| CVE-2026-90813 | Deferred | 未確認 | CWE-179, CWE-180 | A vulnerability was detected in cosmicstack-labs mercury-agent up to 1.1.13. Affected is the function checkShellCommand of the file src/capabilities/permissions.ts of the component |
| CVE-2026-90814 | Deferred | 未確認 | CWE-918 | A flaw has been found in cosmicstack-labs mercury-agent up to 1.1.13. Affected by this vulnerability is the function githubRequest of the file src/utils/github.ts of the component |
| CVE-2026-90815 | Awaiting Analysis | 未確認 | CWE-119, CWE-125 | A vulnerability has been found in FFmpeg up to 4.4.6/5.1.8/6.1.4/7.1.3/8.0.1. Affected by this issue is the function setup_3x3 of the file libavfilter/vf_convolution.c of the compo |
| CVE-2026-90816 | Awaiting Analysis | 未確認 | CWE-404 | A vulnerability was found in FFmpeg 8.0.x. This affects the function parse_playlist of the file libavformat/hlsproto.c of the component Duration Parser. Performing a manipulation o |
| CVE-2026-90817 | Awaiting Analysis | 未確認 | CWE-73, CWE-94 | An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough routing and Data Import processing logic, in which a malicious user could potentially exp |
| CVE-2026-90818 | Deferred | 未確認 | CWE-918 | A security flaw has been discovered in netease-youdao LobsterAI 2026.6.15/2026.8.28/2026.9.3/2026.9.4. Impacted is the function OpenClawConfigSync.buildBrowserConfig of the file sr |
| CVE-2026-90819 | Deferred | 未確認 | CWE-113, CWE-93 | A weakness has been identified in a2aproject a2a-java 1.2.0. The affected element is the function BasePushNotificationSender.dispatchNotification of the file server-common/src/main |
| CVE-2026-90820 | Deferred | 未確認 | CWE-862, CWE-863 | A security vulnerability has been detected in a2aproject a2a-java 1.2.0. The impacted element is the function AuthorizationRequestHandlerDecorator.onListTasks of the file server-co |
| CVE-2026-90822 | Deferred | 未確認 | CWE-78 | FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain an OS command injection vulnerability in the xtremed daemon. An unauthentic |
| CVE-2026-90823 | Deferred | 未確認 | CWE-121 | FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain a stack-based buffer overflow in /usr/sbin/auth_user_pass. An unauthenticat |
| CVE-2026-90824 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability has been found in GPAC 26.07.0. Affected is the function gf_sg_dom_event_bubble of the file src/scenegraph/dom_events.c of the component MP4Box. The manipulation le |
| CVE-2026-90825 | Deferred | 未確認 | CWE-119, CWE-416 | A vulnerability was found in GPAC 26.07.0. Affected by this vulnerability is the function gf_node_unregister of the file scenegraph/base_scenegraph.c of the component MP4Box. The m |
| CVE-2026-90826 | Deferred | 未確認 | CWE-119, CWE-125 | A vulnerability was determined in GPAC 26.07.0. Affected by this issue is the function gf_node_del of the file scenegraph/base_scenegraph.c of the component MP4Box. This manipulati |
| CVE-2026-90827 | Deferred | 未確認 | CWE-119, CWE-416 | A vulnerability was identified in GPAC 26.07.0. This affects the function gf_node_deactivate_ex of the file scenegraph/base_scenegraph.c of the component MP4Box. Such manipulation |
| CVE-2026-90828 | Analyzed | 未確認 | CWE-404, CWE-476 | A security flaw has been discovered in GNU Binutils 2.47. This vulnerability affects the function elf_orphan_compatible of the file ld/ldelf.c of the component ELF Orphan Section H |
| CVE-2026-90829 | Analyzed | 未確認 | CWE-404, CWE-476 | A weakness has been identified in GNU Binutils 2.47. This issue affects the function bfd_elf_set_group_contents of the file bfd/elf.c of the component SHT_GROUP Section Handler. Ex |
| CVE-2026-90830 | Analyzed | 未確認 | CWE-404, CWE-476 | A security vulnerability has been detected in GNU Binutils 2.47. Impacted is the function _bfd_write_merged_section of the file bfd/merge.c of the component Section Merge. The mani |
| CVE-2026-90831 | Analyzed | 未確認 | CWE-119 | A vulnerability was detected in GNU Binutils 2.47. The affected element is the function _bfd_elf_strtab_delref of the file bfd/elf-strtab.c of the component ELF String Table. The m |
| CVE-2026-90835 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in michaelliao itranswarp up to 2.19. The impacted element is the function Markdown.toHtml of the file Markdown.java of the component Page Content Rendering. |
| CVE-2026-90839 | Rejected | 未確認 | Rejected reason: this is rejected | |
| CVE-2026-90840 | Deferred | 未確認 | CWE-287 | A vulnerability was identified in PHPGurukul Blood Donor Management System 1.0. Affected is the function __construct of the file /application/controllers/admin/Dashboard.php of the |
| CVE-2026-90841 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in PHPGurukul Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /application/controllers |
| CVE-2026-90842 | Deferred | 未確認 | CWE-312, CWE-313 | A weakness has been identified in PHPGurukul Blood Donor Management System 1.0. Affected by this issue is some unknown functionality of the file application/models/admin/Login_Mode |
| CVE-2026-90843 | Deferred | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in SabyasachiRana WebMap up to 8b95fe4dc301a3c09ddf145b895de0bf9f8d2a25. This affects the function nmap_newscan of the file functions_nma |
| CVE-2026-90844 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in PHPGurukul Daily Expense Tracker System 1.1. This vulnerability affects unknown code of the file /dets/index.php of the component Login. Performing |
| CVE-2026-90845 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php. Executing a manipulation of |
| CVE-2026-90846 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1. Impacted is an unknown function of the file /dets/forgot-password.php. The manipulation of the argume |
| CVE-2026-90847 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was determined in EFM ipTIME C200E 1.094. The impacted element is an unknown function of the file iux_set.cgi of the component System Setup. This manipulation cause |
| CVE-2026-90848 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in Governikus AusweisApp up to 2.5.4. Affected is an unknown function of the component StartPAOSResponse Handler. Executing a manipulation of the arg |
| CVE-2026-90849 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /Co |
| CVE-2026-90850 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in PHPGurukul Hostel Management System 3.0. Affected by this issue is some unknown functionality of the file /admin/manage-students.php. The manipulati |
| CVE-2026-90851 | Deferred | 未確認 | CWE-266, CWE-284 | A flaw has been found in PHPGurukul Hostel Management System 3.0. This affects an unknown part of the file /admin/includes/checklogin.php. This manipulation of the argument ID caus |
| CVE-2026-90852 | Deferred | 未確認 | CWE-119, CWE-416 | A vulnerability has been found in luben zstd-jni up to 1.5.7-13. This vulnerability affects the function ZstdCompressCtx.loadDict of the file ZstdCompressCtx.java of the component |
| CVE-2026-90854 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in SourceCodester/katojkalemba Online Food Ordering System 1.0. The impacted element is an unknown function of the file /web/category-foods.php. |
| CVE-2026-90855 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in SourceCodester/katojkalemba Online Food Ordering System 1.0. This affects an unknown function of the file /web/order.php. This manipulation of the |
| CVE-2026-90856 | Deferred | 未確認 | CWE-266, CWE-269 | A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. This impacts an unknown function of the file signup.php of the component R |
| CVE-2026-90857 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was detected in SourceCodester College Notes Gallery Management System 1.0. Affected is an unknown function of the file /dashboard/userprofile.php of the component |
| CVE-2026-90858 | Deferred | 未確認 | CWE-285, CWE-639 | A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. Affected by this vulnerability is the function session_start o |
| CVE-2026-90860 | Awaiting Analysis | 未確認 | CWE-212 | The Canva Mobile App for HarmonyOS before v1.15.1 did not restrict the headers returned to an external origin running in a privileged WebView. A threat actor with control of the We |
| CVE-2026-90876 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file /delete_requirement.php |
| CVE-2026-90877 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in SourceCodester Online Faculty Clearance System 1.0. Affected by this issue is some unknown functionality of the file /update_requirement_status.php. Th |
| CVE-2026-90878 | Deferred | 未確認 | CWE-400, CWE-404 | A vulnerability was determined in vllm-project vLLM up to 0.27.1. This affects an unknown part of the file /v1/chat/completions of the component Jinja Template Rendering. This mani |
| CVE-2026-90879 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in zyx0814 FilePress up to 3.0.1. This vulnerability affects unknown code of the file dzz/publish/search.php of the component Publish Module. Such ma |
| CVE-2026-90880 | Deferred | 未確認 | CWE-74, CWE-77 | A security flaw has been discovered in D-Link DSL-3782 2016-07-28. This issue affects the function system of the file /cgi-bin/New_GUI/Set/Diagnostics.asp of the component Diagnost |
| CVE-2026-90881 | Deferred | 未確認 | CWE-200, CWE-284 | A weakness has been identified in D-Link DIR-882 up to 20260814. Impacted is the function main of the file /HNAP1/dllog.cgi of the component CGI Binary. Executing a manipulation ca |
| CVE-2026-90882 | Awaiting Analysis | 未確認 | CWE-942 | The open-vsx.org deployment returned Access-Control-Allow-Origin reflecting the requesting origin together with Access-Control-Allow-Credentials: true on the authenticated /user/ e |
| CVE-2026-90884 | Deferred | 未確認 | CWE-79 | The WP Recipe Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'notes' parameter in all versions up to, and including, 10.8.1 due to insufficient inp |
| CVE-2026-90887 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WP Inventory Manager <= 2.5.4 versions. |
| CVE-2026-90890 | Deferred | 未確認 | CWE-822 | ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Untrusted Pointer Dereference vulnerability. Authenticated local attackers can send a specially crafted |
| CVE-2026-90891 | Deferred | 未確認 | CWE-1256 | ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Improper Access Control vulnerability. Authenticated local attackers can send a specially crafted IOCTL |
| CVE-2026-90893 | Deferred | 未確認 | CWE-352 | MISP contains a Cross-Site Request Forgery (CSRF) vulnerability in the UserSettingsController. The actions setTheme, setHomePage, and eventIndexColumnToggle were explicitly added t |
| CVE-2026-90894 | Awaiting Analysis | 未確認 | CWE-269, CWE-78, CWE-88 | Parallels Desktop runs prl_disp_service as root. Local clients reach it on the world-writable socket /var/run/prl_disp_service.socket. PrlSrv_LoginLocal accepts peer credentials. N |
| CVE-2026-90895 | Deferred | 未確認 | CWE-150, CWE-200, CWE-522, CWE-862 | Affected versions of MISP’s interactive CLI shell implement access control independently from the normal web application, causing several authorization inconsistencies. The patch |
| CVE-2026-90896 | Deferred | 未確認 | CWE-306 | Missing Authentication for Critical Function (CWE-306) in the checkout session lookup handler (src/app/api/stripe/checkout_sessions/route.ts), exposed at GET /api/stripe/checkout_s |
| CVE-2026-90898 | Awaiting Analysis | 未確認 | CWE-284, CWE-306 | Bifrost registers MCP clients through its management API. A stdio client is a command plus args. Bifrost starts that program in the gateway the moment the client is added. No MCP h |
| CVE-2026-90899 | Awaiting Analysis | 未確認 | CWE-200, CWE-639 | Joomla Extension - joomshaper.com - Unauthenticated PII Exposure via IDOR in Guest Checkout in Easy Store extension 1.0.0-3.0.0 - The checkout.searchGuestUser endpoint allowed quer |
| CVE-2026-90900 | Awaiting Analysis | 未確認 | CWE-352 | Joomla Extension - joomshaper.com - Missing CSRF Token Verification in Storefront Product Review Submission in Easy Store extension 1.0.0-3.0.0 - The product review submission endp |
| CVE-2026-90901 | Awaiting Analysis | 未確認 | CWE-89 | Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Media Image Deletion in Easy Store extension 1.0.0-3.0.0 - The media deletion endpoint (administrato |
| CVE-2026-90902 | Awaiting Analysis | 未確認 | CWE-89 | Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Coupon Bulk Update in Easy Store extension 1.0.0-3.0.0 - The coupon bulk update task (administrator/i |
| CVE-2026-90903 | Awaiting Analysis | 未確認 | CWE-352 | Joomla Extension - joomshaper.com - Missing CSRF Token Verification across Administrator AJAX API Endpoints in Easy Store extension 1.0.0-3.0.0 - The administrator ApiController on |
| CVE-2026-90904 | Awaiting Analysis | 未確認 | CWE-284 | Joomla Extension - joomshaper.com - Broken Access Control (ACL Bypass) in ApiController Record Editing in Easy Store extension 1.0.0-3.0.0 - The allowEdit() method in ApiController |
| CVE-2026-90905 | Awaiting Analysis | 未確認 | CWE-284, CWE-352 | Joomla Extension - joomshaper.com - Missing CSRF and Access Control on Site Configuration Update in Easy Store extension 1.0.0-3.0.0 - The endpoint administrator/index.php?option=c |
| CVE-2026-90906 | Analyzed | 未確認 | CWE-79 | Joomla! Core - [20260901] - XSS in HTMLHelper::link method in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3 - Lack of escaping leads to XSS vulnerabilities in the link method of the HTML Helper. |
| CVE-2026-90907 | Analyzed | 未確認 | CWE-639 | Joomla! Core - [20260902] - Core - Unauthorized user account creation via profile.save controller in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3 - The profile.save controller did not check the |
| CVE-2026-90913 | Analyzed | 未確認 | CWE-284 | Joomla! Core - [20260903] - Core - Improper ACL checks for access level webservice endpoints in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - An improper access check allows unauthorized users |
| CVE-2026-90914 | Analyzed | 未確認 | CWE-79 | Joomla! Core - [20260904] - Core - XSS in the generic media output layouts in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - Lack of escaping leads to an XSS vulnerability in the generic audio |
| CVE-2026-90915 | Analyzed | 未確認 | CWE-22 | Joomla! Core - [20260905] - Core - Arbitrary directory deletion via cache purge action in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 -An improper validation of the cache group name allowed pa |
| CVE-2026-90916 | Analyzed | 未確認 | CWE-284 | Joomla! Core - [20260906] - Core - Improper ACL checks in content history comparison view in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - An improper access check allows unauthorized users to |
| CVE-2026-90917 | Analyzed | 未確認 | CWE-284 | Joomla! Core - [20260907] - Core - Improper ACL checks in outputs for tagged items in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - An improper access check allows unauthorized users to view c |
| CVE-2026-90918 | Analyzed | 未確認 | CWE-79 | Joomla! Core - [20260908] - Core - XSS in HTML Mail Templates in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - The mail template feature lacks an escaping mechanism, causing XSS vectors in mul |
| CVE-2026-90919 | Deferred | 未確認 | CWE-502 | LightLLM through 1.2.0 contains a remote code execution vulnerability in the Config Server's unauthenticated /visual_register WebSocket endpoint that passes the first client frame |
| CVE-2026-90922 | Deferred | 未確認 | CWE-284 | The Paid Membership Subscriptions WordPress plugin before 3.0.9 does not verify that the amount and currency reported by the payment provider match the pending payment before comp |
| CVE-2026-90923 | Deferred | 未確認 | CWE-863 | The Autopay WordPress plugin before 5.0.1 does not enforce the signature on one of its payment callbacks, allowing unauthenticated users to disclose and delete the stored payment p |
| CVE-2026-90924 | Deferred | 未確認 | CWE-1392 | Use of default credentials vulnerability in Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign SIEM allows Try Common or Default Usernames and Passwords. |
| CVE-2026-90925 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign SIEM all |
| CVE-2026-90926 | Deferred | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign SIEM allows Code Injection. |
| CVE-2026-90927 | Awaiting Analysis | 未確認 | CWE-400 | filebrowser through 2.63.23 fails to limit WebSocket message size in the /api/command handler before checking permissions, allowing authenticated users to buffer arbitrarily large |
| CVE-2026-90928 | Awaiting Analysis | 未確認 | CWE-400 | File Browser through 2.63.23 contains a memory exhaustion vulnerability in the subtitle conversion endpoint that loads entire subtitle files into memory without size limits. Authen |
| CVE-2026-90929 | Awaiting Analysis | 未確認 | CWE-863 | File Browser versions >= 2.5.0 and <= 2.63.23 contain an incorrect authorization flaw in the direct-upload endpoint (resourcePostHandler in http/resource.go). Unlike the TUS upload |
| CVE-2026-90930 | Awaiting Analysis | 未確認 | CWE-59 | File Browser through 2.63.23 applies path rules to the requested lexical path but resolves symbolic links without reapplying rules to the target, allowing authenticated users to by |
| CVE-2026-90931 | Deferred | 未確認 | CWE-79 | LaraDashboard versions 0.9.0 through 1.2.2 fail to sanitize SVG file content during media upload, allowing authenticated users with only the media.create permission to upload malic |
| CVE-2026-90932 | Deferred | 未確認 | CWE-73 | LaraDashboard versions 0.9.2 through 1.2.2 contain a path traversal vulnerability in the core-upgrade backup handling. CoreUpgradeController and BackupService (e.g. BackupService:: |
| CVE-2026-90933 | Deferred | 未確認 | CWE-862 | laradashboard through 1.2.2 contains a missing authorization vulnerability in the Local License API endpoints that allows any authenticated user to read, overwrite, and delete prem |
| CVE-2026-90934 | Deferred | 未確認 | CWE-863 | EspoCRM before 10.0.4 contains a field-level security bypass vulnerability in the meeting and call attendees endpoints that allows authenticated users to read restricted email addr |
| CVE-2026-90935 | Deferred | 未確認 | CWE-285 | Froxlor before 2.3.7 fails to validate the mysql_server parameter against a customer's allowed_mysqlserver allowlist in the Mysqls.add API command. Attackers can supply a disallowe |
| CVE-2026-90936 | Deferred | 未確認 | CWE-200 | Froxlor before 2.3.7 fails to properly scope sender alias lookups to the current customer in customer_email.php. Authenticated attackers can enumerate global sender alias IDs and r |
| CVE-2026-90937 | Deferred | 未確認 | CWE-93 | froxlor versions before 2.2.5 fail to validate newline characters in subdomain redirect URLs, allowing authenticated customers to inject arbitrary nginx or Apache configuration dir |
| CVE-2026-90938 | Deferred | 未確認 | CWE-306 | LangBot's plugin runtime (pip package langbot_plugin) through 0.4.17 starts a debug WebSocket server on 0.0.0.0:5401 (/plugin/ws) whose authentication is gated on plugin_debug_key, |
| CVE-2026-90939 | Deferred | 未確認 | CWE-862 | novel-plus through 5.3.3 contains an information disclosure vulnerability in the /sys/user/list endpoint that lacks proper permission annotations. Authenticated attackers can retri |
| CVE-2026-90940 | Deferred | 未確認 | CWE-1392 | novel-plus through 5.3.3 contains an insecure default cache-management password in the CacheController.refreshCache endpoint that allows anonymous attackers to invalidate portal ca |
| CVE-2026-90941 | Deferred | 未確認 | CWE-862 | novel-plus through 5.3.3 contains an authorization bypass vulnerability in the BookController download endpoint that allows authenticated backend accounts to export complete book t |
| CVE-2026-90942 | Deferred | 未確認 | CWE-863 | Casdoor through 4.4.0 fails to properly mask the instance-wide built-in certificate private key in /api/get-certs and /api/get-cert endpoints, allowing organization administrators |
| CVE-2026-90943 | Deferred | 未確認 | CWE-79 | parallax filament-comments through 3.0.0 contains a stored cross-site scripting vulnerability in comment body rendering that allows authenticated panel users to inject malicious sc |
| CVE-2026-90944 | Deferred | 未確認 | CWE-306 | Krayin CRM through 2.2.6 exposes the POST /admin/mail/inbound-parse endpoint without authentication, allowing unauthenticated attackers to inject arbitrary emails into the CRM inbo |
| CVE-2026-90945 | Deferred | 未確認 | CWE-321 | Crawlab through 0.6.3 uses a hard-coded HMAC-SHA256 secret for JWT token signing that cannot be overridden via configuration or environment variables. Unauthenticated attackers can |
| CVE-2026-90946 | Deferred | 未確認 | CWE-73 | DeepWiki-Open through commit d92819a contains an arbitrary file read vulnerability in the unauthenticated /ws/chat WebSocket endpoint that accepts repo_url as a filesystem path wit |
| CVE-2026-90947 | Awaiting Analysis | 未確認 | CWE-787 | A flaw was found in GIMP. When processing a specially crafted lighting preset file, the Lighting Effects filter does not properly validate the number of light sources. This can lea |
| CVE-2026-90948 | Awaiting Analysis | 未確認 | CWE-787 | A flaw was found in GIMP's ICO file loader. When processing an ICO file containing an embedded PNG image, an integer overflow can occur during the calculation of the required buffe |
| CVE-2026-90949 | Awaiting Analysis | 未確認 | CWE-787 | A flaw was found in GIMP's PSP (Paint Shop Pro) file loader. When processing a compressed selection channel, a heap-based buffer overflow can occur due to a mismatch between the al |
| CVE-2026-90950 | Deferred | 未確認 | CWE-693 | The Paid Membership Subscriptions WordPress plugin before 3.1.0 does not verify the reCAPTCHA on its registration handler when a form field is absent from the request, allowing una |
| CVE-2026-90951 | Deferred | 未確認 | CWE-863 | The Paid Membership Subscriptions WordPress plugin before 3.1.0 does not bind one of its unauthenticated payment actions to the requesting user, allowing someone who holds another |
| CVE-2026-90953 | Deferred | 未確認 | CWE-200 | The Image Optimizer WordPress plugin before 1.7.7 does not enforce its intended capability check on several of its read REST routes, allowing any authenticated user to read attach |
| CVE-2026-90955 | Deferred | 未確認 | CWE-223, CWE-778 | Affected versions of MISP’s interactive CLI shell do not reliably preserve the identity of the impersonated MISP user across audit logging. The shell is designed to run actions a |
| CVE-2026-90957 | Deferred | 未確認 | CWE-693, CWE-79 | Affected versions of MISP serve uploaded SVG images inline without a restrictive browser sandbox. The commit explains that SVG files are XML documents rather than passive bitmap |
| CVE-2026-90959 | Awaiting Analysis | 未確認 | CWE-22 | A path traversal vulnerability was found in pulpcore. The content upload API accepts a 'file_url' parameter that allows users with file repository privileges to specify a local fil |
| CVE-2026-90961 | Deferred | 未確認 | CWE-20, CWE-287 | The LdapAuth and LinOTPAuth authentication plugins in MISP contain an authentication bypass vulnerability. Both LdapAuthenticate and LinOTPAuthenticate replace CakePHP's FormAuthen |
| CVE-2026-90969 | Awaiting Analysis | 未確認 | CWE-284 | Improper access control in the vault entry listing feature in Devolutions Server 2026.2.16 and earlier allows an authenticated user lacking the view-password permission to obtain c |
| CVE-2026-90971 | Awaiting Analysis | 未確認 | CWE-863 | Server-Side Request Forgery (SSRF) in the VMware synchronization feature in Devolutions Server 2026.2.16 and earlier allows a low-privileged authenticated user to obtain other user |
| CVE-2026-90976 | Deferred | 未確認 | CWE-284 | The Clean Login WordPress plugin before 1.19 does not check whether user registration is enabled before creating an account in its registration handler, allowing unauthenticated us |
| CVE-2026-90977 | Deferred | 未確認 | CWE-697 | The Clean Login WordPress plugin before 1.19 does not verify its registration CAPTCHA when the stored session value is empty, allowing unauthenticated users to bypass the anti-auto |
| CVE-2026-90978 | Deferred | 未確認 | CWE-284 | The Filter Gallery WordPress plugin before 1.1.5 does not verify the nonce on several of its AJAX handlers when the nonce field is omitted, and applies no capability check, allowin |
| CVE-2026-90979 | Analyzed | 未確認 | CWE-90 | LDAPCache and LDAPBackingEngine build LDAP search filters for user lookup and role lookup by textually substituting the placeholders %u, %dn, and %fqdn (drawn from the login name, |
| CVE-2026-90981 | Deferred | 未確認 | CWE-79 | The Newsletter – Send awesome emails from WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'nn' parameter in all versions up to, and including |
| CVE-2026-90982 | Awaiting Analysis | 未確認 | CWE-178, CWE-284 | @fastify/static is a Fastify plugin that serves static files from a configured root directory. In versions before 10.1.4, on a case-insensitive filesystem such as Windows or the de |
| CVE-2026-90984 | Deferred | 未確認 | CWE-918 | The Generate PDF using Contact Form 7 WordPress plugin before 4.2.2 does not restrict the destination of the image fetch its PDF renderer performs on submitted form content, allowi |
| CVE-2026-90985 | Deferred | 未確認 | CWE-200 | The WPC Smart Compare for WooCommerce WordPress plugin before 6.6.1 does not apply WordPress's post-password protection when returning product content through its comparison handle |
| CVE-2026-90986 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Visitor Traffic Real Time Statistics Pro <= 11.21 versions. |
| CVE-2026-90990 | Deferred | 未確認 | CWE-93 | Improper neutralization of newlines in filter values in the monitoring host and service list APIs in Checkmk <2.5.0p14 allows an authenticated user to inject additional Livestatus |
| CVE-2026-90994 | Awaiting Analysis | 未確認 | CWE-125 | A flaw was found in sssd, specifically within the PAM (Pluggable Authentication Modules) responder's protocol v1 parser, pam_parse_in_data(). A local client with access to the PAM |
| CVE-2026-90995 | Analyzed | 未確認 | CWE-476 | A flaw was found in SSSD (System Security Services Daemon). A local attacker with privileges to connect to the PAM (Pluggable Authentication Modules) responder socket can send a sp |
| CVE-2026-90996 | Analyzed | 未確認 | CWE-191 | A flaw was found in sssd. A local unprivileged user could send a specially crafted request with a zero-length body to the Network Security Services (NSS) responder. This could lead |
| CVE-2026-90997 | Awaiting Analysis | 未確認 | CWE-294 | A flaw was found in Keycloak. When deployed in stateless mode with MySQL or MariaDB, a mismatch in row-count semantics between the database driver and Keycloak's application logic |
| CVE-2026-90999 | Deferred | 未確認 | CWE-116, CWE-20, CWE-74, CWE-913, CWE-94 | Sentry Seer is vulnerable to a multi-stage trust-boundary violation that allows unauthenticated attacker-controlled telemetry to become code that is executed by an agent in a privi |
| CVE-2026-91001 | Deferred | 未確認 | CWE-119, CWE-121 | A security flaw has been discovered in D-Link DI-8400 16.07. This affects the function ddns_asp of the file /ddns.asp of the component DDNS Configuration. Performing a manipulation |
| CVE-2026-91002 | Deferred | 未確認 | CWE-287, CWE-306 | A weakness has been identified in stamparm maltrail up to 3.0.1. This vulnerability affects the function _blacklist of the file core/httpd.py of the component Blacklist Endpoint. E |
| CVE-2026-91003 | Deferred | 未確認 | CWE-119, CWE-121 | A flaw has been found in D-Link DI-8300 16.07. The affected element is the function rzgl_asp of the file /rzgl.asp of the component CGI Service. This manipulation of the argument r |
| CVE-2026-91004 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0. The impacted element is an unknown function of the file /delete_faculty1.php. Such manipulatio |
| CVE-2026-91005 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was found in SourceCodester Online Faculty Clearance System 1.0. This affects the function move_uploaded_file of the file production/edit_picture.php of the compone |
| CVE-2026-91006 | Analyzed | 未確認 | CWE-78 | Apache Karaf's instance-management service (InstanceServiceImpl) builds the command line used to launch a child Karaf JVM by string concatenation, then executes it through /bin/sh |
| CVE-2026-91008 | Deferred | 未確認 | CWE-639 | The Event Booking Manager for WooCommerce WordPress plugin before 5.3.8 does not perform an ownership or authorization check before rendering booking confirmation details, allowin |
| CVE-2026-91009 | Deferred | 未確認 | CWE-352, CWE-862 | The Active Woot Products Tables for WooCommerce. 100% FREE WordPress plugin before 2.1.3 does not have authorisation and CSRF checks in some of its AJAX actions, allowing any auth |
| CVE-2026-91010 | Deferred | 未確認 | CWE-862 | The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms WordPress plugin before 5.1.1 does not check the user's capabilities in its message deletion AJAX action, an |
| CVE-2026-91011 | Deferred | 未確認 | CWE-79 | The EWWW Image Optimizer WordPress plugin before 8.7.7 does not properly escape image attribute values when it rewrites page output, allowing authenticated users with author-level |
| CVE-2026-91012 | Analyzed | 未確認 | CWE-22 | org.apache.karaf.config.core.impl.ConfigRepositoryImpl#update(pid, properties), which backs the "config" MBean and the config:* shell commands, derives the file it writes a configu |
| CVE-2026-91014 | Deferred | 未確認 | CWE-79 | The Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin before 5.4.2 does not sanitise and escape some of its parameters before reflecting them back in the page, allowin |
| CVE-2026-91015 | Deferred | 未確認 | CWE-862 | The Master Addons for Elementor WordPress plugin before 3.1.9 does not perform an authorization check on the AJAX action that deactivates its Popup Builder popups, relying only on |
| CVE-2026-91016 | Deferred | 未確認 | CWE-639 | The Motors WordPress plugin before 1.4.121 does not verify that a request is authorized to view a user's non-published listings before returning them, allowing unauthenticated att |
| CVE-2026-91017 | Deferred | 未確認 | CWE-345 | The Robokassa payment gateway for Woocommerce WordPress plugin before 1.8.9 does not verify the authenticity of incoming payment notifications when its non-default deferred-payment |
| CVE-2026-91018 | Awaiting Analysis | 未確認 | CWE-415 | lwIP (Lightweight IP) has a double free vulnerability, which could crash the system, cause a DoS, memory corruption, or allow code execution on the victim system. |
| CVE-2026-91019 | Deferred | 未確認 | CWE-284 | The Event Booking Manager for WooCommerce WordPress plugin before 5.6.0 does not restrict who can view its stored payment gateway configuration, allowing users with Contributor-le |
| CVE-2026-91021 | Deferred | 未確認 | CWE-79 | Trilium Notes, version v0.103.0 and earlier, contains a stored cross-site scripting (XSS) vulnerability in the share renderer for webView notes due to improper HTML escaping of use |
| CVE-2026-91024 | Deferred | 未確認 | CWE-89 | The Booking Manager WordPress plugin before 2.1.21 does not sanitize and escape values taken from a fetched external iCalendar feed before using them in a SQL query, allowing auth |
| CVE-2026-91025 | Deferred | 未確認 | CWE-639 | The Booking Manager WordPress plugin before 2.1.21 does not verify that a request to modify a user's Booking Manager WordPress plugin before 2.1.21-specific settings targets the |
| CVE-2026-91039 | Deferred | 未確認 | CWE-290 | Authentication Bypass by Spoofing vulnerability in team-alembic ash_authentication allows an attacker who operates one identity-provider connection of a dynamic_oidc strategy to be |
| CVE-2026-91043 | Deferred | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint allows a malicious HTTP/2 server to exhaust memory on the client host and cause a denial of s |
| CVE-2026-91048 | Analyzed | 未確認 | CWE-862 | The jdbc shell command scope shipped no org.apache.karaf.command.acl.jdbc.cfg. Karaf's command guard (SecuredSessionFactoryImpl) treats a command with no matching ACL rule as allow |
| CVE-2026-91051 | Deferred | 未確認 | CWE-502 | The EWWW Image Optimizer WordPress plugin before 8.8.0 does not prevent authenticated users with author-level permissions from storing a serialized value in a post meta field that |
| CVE-2026-91072 | Deferred | 未確認 | CWE-73 | The EWWW Image Optimizer WordPress plugin before 8.8.0 does not confine a WebP-derivative file migration routine to the current site's own uploads directory, letting an attacker wi |
| CVE-2026-91073 | Deferred | 未確認 | CWE-79 | The Subscribe Forms WordPress plugin before 1.6.3 does not sanitise and escape one of its form settings before outputting it in a page, allowing authenticated users with the Autho |
| CVE-2026-91077 | Deferred | 未確認 | CWE-284 | The Event Booking Manager for WooCommerce WordPress plugin before 5.7.3 does not restrict its event listing query to events the requesting user is permitted to read, so users with |
| CVE-2026-91079 | Deferred | 未確認 | CWE-918 | Huly Platform through 0.7.426 contains a server-side request forgery vulnerability in the print service due to missing hostname allowlist validation. Authenticated workspace member |
| CVE-2026-91080 | Deferred | 未確認 | CWE-770 | webhook through 2.8.3 reads the entire request body into memory before evaluating trigger rules, allowing unauthenticated attackers to exhaust memory by sending oversized bodies. A |
| CVE-2026-91081 | Deferred | 未確認 | CWE-918 | Docs through 5.6.1 contains a server-side request forgery vulnerability in the cors-proxy endpoint that allows anonymous attackers to make outbound requests by providing a public d |
| CVE-2026-91085 | Analyzed | 未確認 | CWE-862 | Apache Karaf's shell/SSH command security is enforced by per-scope ACL configuration files (etc/org.apache.karaf.command.acl.<scope>.cfg). SecuredSessionFactoryImpl.checkSecurity() |
| CVE-2026-91086 | Deferred | 未確認 | CWE-119, CWE-122 | A security vulnerability has been detected in GPAC up to f1219cde. Affected by this issue is the function mpgviddmx_process of the file filters/reframe_mpgvid.c of the component MP |
| CVE-2026-91087 | Deferred | 未確認 | CWE-119, CWE-416 | A flaw has been found in GPAC up to f1219cde. This vulnerability affects the function gf_mo_get_od_id of the file compositor/media_object.c of the component Compositor. Executing a |
| CVE-2026-91088 | Deferred | 未確認 | CWE-119, CWE-122 | A vulnerability has been found in GPAC up to f1219cde. This issue affects the function gf_url_concatenate_ex of the file utils/url.c of the component URL Handler. The manipulation |
| CVE-2026-91089 | Deferred | 未確認 | CWE-119, CWE-416 | A vulnerability was found in GPAC up to f1219cde. Impacted is the function gf_node_get_name_and_id of the file scenegraph/base_scenegraph.c. The manipulation results in use after f |
| CVE-2026-91090 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was determined in GPAC up to f1219cde. The affected element is the function gf_node_activate_ex of the file scenegraph/base_scenegraph.c. This manipulation causes s |
| CVE-2026-91091 | Deferred | 未確認 | CWE-119 | A vulnerability was identified in GPAC up to f1219cde. The impacted element is the function gf_node_list_insert_child of the file scenegraph/base_scenegraph.c of the component Node |
| CVE-2026-91092 | Deferred | 未確認 | CWE-862 | The wpForo Forum plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.5. This is due to the plugin not properly verifying that a use |
| CVE-2026-91095 | Deferred | 未確認 | CWE-416 | In proxygen from v2024.10.28.00 until v2026.09.28.00, the HTTPTransaction::onWebTransportUniStream and HTTPTransaction::onWebTransportBidiStream APIs could return stream handles th |
| CVE-2026-91096 | Deferred | 未確認 | CWE-416 | In proxygen from v2024.10.28.00 until v2026.09.28.00, WebTransportImpl::terminateSessionStreams (WebTransportImpl::destroy in releases before v2025.08.18.00) failed to unregister r |
| CVE-2026-91097 | Analyzed | 未確認 | CWE-787 | HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote cod |
| CVE-2026-91098 | Analyzed | 未確認 | CWE-122 | HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote cod |
| CVE-2026-91099 | Analyzed | 未確認 | CWE-61 | HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote cod |
| CVE-2026-91100 | Analyzed | 未確認 | CWE-78 | HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote cod |
| CVE-2026-91101 | Analyzed | 未確認 | CWE-129 | HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote cod |
| CVE-2026-91102 | Analyzed | 未確認 | CWE-78 | HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote cod |
| CVE-2026-91103 | Analyzed | 未確認 | CWE-191 | HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote cod |
| CVE-2026-91104 | Analyzed | 未確認 | CWE-122 | HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote cod |
| CVE-2026-91105 | Analyzed | 未確認 | CWE-122 | HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote cod |
| CVE-2026-91106 | Analyzed | 未確認 | CWE-122 | HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote cod |
| CVE-2026-91119 | Deferred | 未確認 | CWE-79 | Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, the topic small-action and nested-activity-log components interpolated the fre |
| CVE-2026-91120 | Deferred | 未確認 | CWE-79 | Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, provider-controlled video titles in lazy video embeds could be reparsed as HTM |
| CVE-2026-91121 | Deferred | 未確認 | CWE-79 | Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, attacker-controlled upload filenames used in chat message excerpts were render |
| CVE-2026-91122 | Deferred | 未確認 | CWE-79 | Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, the video placeholder component allowed crafted HTML to cause an attribute bre |
| CVE-2026-91123 | Deferred | 未確認 | CWE-22 | Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, the iframe src traversal guard did not treat literal backslashes as path separ |
| CVE-2026-91127 | Deferred | 未確認 | CWE-79, CWE-83 | File Viewer is a browser-native viewer for Office, PDF, CAD, archive, and other files in private and internal web applications. Prior to @file-viewer/doc 2.3.1 and msdoc-viewer 0.2 |
| CVE-2026-91129 | Awaiting Analysis | 未確認 | CWE-918 | Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.2.3, the IPP integration automatically processed unauthenticated _ipp._tc |
| CVE-2026-91130 | Awaiting Analysis | 未確認 | CWE-80 | Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.7.0, the Statistics Graph card in src/components/chart/statistics-chart.t |
| CVE-2026-91132 | Deferred | 未確認 | CWE-346 | Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, sites using wildcard patterns in the allowed_iframes setting could accept a cr |
| CVE-2026-91133 | Deferred | 未確認 | CWE-943 | Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, authenticated users could supply unescaped SQL LIKE metacharacters to upload-r |
| CVE-2026-91134 | Deferred | 未確認 | CWE-20 | Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, the Discourse post sanitizer allowed a stored cross-origin iframe to bypass th |
| CVE-2026-91142 | Awaiting Analysis | 未確認 | CWE-190 | A flaw was found in Cockpit. An authenticated local user with a large user identifier (UID) can cause unauthorized modification and disclosure of login records. On 32-bit systems, |
| CVE-2026-91143 | Deferred | 未確認 | CWE-288 | goproxy through 15.3 fails to apply HTTP proxy basic authentication to CONNECT tunnel requests, allowing unauthenticated clients to bypass credential requirements. Attackers can is |
| CVE-2026-91144 | Deferred | 未確認 | CWE-639 | ZFile through 5.0.5 fails to validate requested file paths against a share link's allowed entries on the download endpoint. Attackers holding a share link can supply arbitrary file |
| CVE-2026-91145 | Awaiting Analysis | 未確認 | CWE-917 | Activiti through 7.1.0.M6 fails to validate hash-brace deferred expressions in process variables, allowing attackers to bypass expression filtering. Attackers can inject expression |
| CVE-2026-91146 | Deferred | 未確認 | CWE-79 | Takahe through 0.11.0 fails to restrict URL schemes in link hrefs within federated post content and profile summaries, allowing remote actors to inject javascript: links. Attackers |
| CVE-2026-91147 | Awaiting Analysis | 未確認 | CWE-617 | A flaw was found in `cockpit-ws`. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service (DoS) by sending a specially crafted request. When the ` |
| CVE-2026-91149 | Awaiting Analysis | 未確認 | CWE-770 | A flaw was found in Cockpit. An unauthenticated remote attacker can exploit this vulnerability by initiating and sustaining numerous simultaneous connections to the `cockpit-tls` s |
| CVE-2026-91154 | Awaiting Analysis | 未確認 | CWE-306 | Missing Authentication for Critical Function (CWE-306) in the product cache revalidation Server Action (src/app/actions.ts, revalidateProducts) in MarcosCamara01 Ecommerce Template |
| CVE-2026-91160 | Deferred | 未確認 | CWE-862 | OpenWA is a free, open source, self-hosted WhatsApp API gateway. Prior to 0.23.5, the /events WebSocket gateway delivers the session.qr event to a VIEWER API key that subscribes by |
| CVE-2026-91161 | Deferred | 未確認 | CWE-863 | OpenWA is a free, open source, self-hosted WhatsApp API gateway. Prior to 0.23.5, the GET /api/sessions/{sessionId}/groups/{groupId}/invite-code endpoint and the GroupGetInviteCode |
| CVE-2026-91164 | Deferred | 未確認 | CWE-284, CWE-863 | Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. From 0.23.0 until 0.27.3, HTTP API token authentication resolves ConfigProvider::validate_api_token into Req |
| CVE-2026-91165 | Deferred | 未確認 | CWE-79 | Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.27.6, the response_mode=form_post SSO return path in warpgate-protocol-http/src/api/sso_provider_ |
| CVE-2026-91166 | Deferred | 未確認 | CWE-297, CWE-923 | Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. From 0.25.0 until 0.27.6, the browser SSH path in warpgate-web-ssh/src/manager.rs handles RCEvent::HostKeyUn |
| CVE-2026-91167 | Deferred | 未確認 | CWE-862 | Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.28.4, PUT /@warpgate/admin/api/users/:id/roles/:role_id reaches api_update_user_role in warpgate- |
| CVE-2026-91181 | Analyzed | 未確認 | CWE-863 | Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 Fail to sanitize Team objects returned by the data retention teams endpoint which allo |
| CVE-2026-91187 | Deferred | 未確認 | CWE-347 | Improper Verification of Cryptographic Signature vulnerability in dashbit nimble_zta allows an unauthenticated remote attacker to authenticate as an arbitrary Cloudflare service to |
| CVE-2026-91191 | Awaiting Analysis | 未確認 | CWE-347 | The device's update mechanism includes conditions that allow unauthorized software packages to be accepted as authentic. During the boot process, the stock done function disables s |
| CVE-2026-91197 | Awaiting Analysis | 未確認 | CWE-611 | Flowable flowable-engine through 8.0.0 contains an XML external entity injection vulnerability in ProcessDiagramLayoutFactory.parseXml() that fails to disable external entity resol |
| CVE-2026-91198 | Deferred | 未確認 | CWE-201 | GrowthBook through 5.0.1 returns unredacted fact table definitions including raw warehouse SQL in payloads served by unauthenticated public report and experiment endpoints. Attacke |
| CVE-2026-91199 | Deferred | 未確認 | CWE-918 | Refly through 1.1.0 contains a server-side request forgery vulnerability in the POST /v1/misc/scrape endpoint that fetches caller-supplied URLs without validating the scheme, host, |
| CVE-2026-91200 | Deferred | 未確認 | CWE-22 | DevSpace through 6.3.21 fails to reject parent-directory segments in tar entry names from the in-pod sync stream. Attackers operating a malicious container can stream tar entries w |
| CVE-2026-91201 | Deferred | 未確認 | CWE-346 | DocsGPT through 0.20.0 posts OAuth connector session tokens to a wildcard target origin in the callback-status endpoint without validating sender origin. Attackers can obtain sessi |
| CVE-2026-91202 | Awaiting Analysis | 未確認 | CWE-61 | A flaw was found in cockpit-files. A low-privileged local user can exploit this vulnerability by crafting a directory containing a symbolic link (symlink) and then using the privil |
| CVE-2026-91203 | Awaiting Analysis | 未確認 | CWE-363 | A flaw was found in cockpit-files. This vulnerability allows a local attacker to exploit a timing issue, known as a symlink race condition, during privileged file operations such a |
| CVE-2026-91204 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows an anonymous remote attacker to store a comment containing a java |
| CVE-2026-91205 | Awaiting Analysis | 未確認 | CWE-363 | A flaw was found in cockpit-files. A local unprivileged attacker can exploit a race condition during directory creation with owner assignment. By controlling a writable parent dire |
| CVE-2026-91206 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows a remote attacker to perform reflected cross-site scripting throu |
| CVE-2026-9138 | Analyzed | 未確認 | CWE-22 | IBM Langflow OSS 1.0.0 through 1.11.2 Langflow could allow an authenticated attacker to write arbitrary files to the server due to improper input validation in the SaveToFileCompon |
| CVE-2026-9160 | Deferred | 未確認 | CWE-1336 | Improper neutralization of special elements used in a template engine vulnerability in Arma Digital Media Inc. Website Template allows Code Injection. This issue affects Website T |
| CVE-2026-9161 | Deferred | 未確認 | CWE-204 | Observable response discrepancy vulnerability in DernekPlus Website Template allows Account Footprinting. This issue affects Website Template: through 10092026. NOTE: The vendor w |
| CVE-2026-9163 | Deferred | 未確認 | CWE-89 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in GIS Informatics GisLab Laboratory Management System allows SQL Injection. Thi |
| CVE-2026-9166 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in GIS Informatics GisLab Laboratory Management System allows Path Traversal. This iss |
| CVE-2026-91707 | Deferred | 未確認 | CWE-862 | The The Divi theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.11.1. This is due to the software allowing users to execute |
| CVE-2026-91708 | Analyzed | 未確認 | CWE-367 | Race condition in Network in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML |
| CVE-2026-91709 | Analyzed | 未確認 | CWE-843 | Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium se |
| CVE-2026-91710 | Analyzed | 未確認 | CWE-416 | Use after free in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium |
| CVE-2026-91711 | Analyzed | 未確認 | CWE-787 | Out of bounds write in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromi |
| CVE-2026-91712 | Analyzed | 未確認 | CWE-367 | Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary c |
| CVE-2026-91713 | Analyzed | 未確認 | CWE-862 | Missing authorization in Browser in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML |
| CVE-2026-91714 | Analyzed | 未確認 | CWE-203 | Observable discrepancy in Fonts in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML pag |
| CVE-2026-91715 | Analyzed | 未確認 | CWE-843 | Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium se |
| CVE-2026-91716 | Analyzed | 未確認 | CWE-416 | Use after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-91717 | Analyzed | 未確認 | CWE-862 | Missing authorization in Android in Google Chrome on on Android prior to 153.0.8010.47 allowed a local attacker to obtain sensitive information via a co-installed app. (Chromium se |
| CVE-2026-91718 | Analyzed | 未確認 | CWE-416 | Use after free in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-91719 | Modified | 未確認 | CWE-94 | Code injection in XML in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low) |
| CVE-2026-91720 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-91721 | Analyzed | 未確認 | CWE-416 | Use after free in Internals in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Ch |
| CVE-2026-91722 | Analyzed | 未確認 | CWE-416 | Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromi |
| CVE-2026-91723 | Modified | 未確認 | CWE-362 | Race condition in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium |
| CVE-2026-91724 | Analyzed | 未確認 | CWE-416 | Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the |
| CVE-2026-91725 | Analyzed | 未確認 | CWE-203 | Observable discrepancy in CSS in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: |
| CVE-2026-91726 | Analyzed | 未確認 | CWE-125 | Out of bounds read in WebGL in Google Chrome on on Android prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium se |
| CVE-2026-91727 | Analyzed | 未確認 | CWE-706 | Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a local attacker who had compromised the renderer process to execute arbitrar |
| CVE-2026-91728 | Analyzed | 未確認 | CWE-190 | Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-91729 | Analyzed | 未確認 | CWE-416 | Use after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox v |
| CVE-2026-91730 | Analyzed | 未確認 | CWE-459 | Incomplete cleanup in GetUserMedia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to ob |
| CVE-2026-91731 | Analyzed | 未確認 | CWE-843 | Type confusion in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secu |
| CVE-2026-91732 | Modified | 未確認 | CWE-862 | Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to |
| CVE-2026-91733 | Analyzed | 未確認 | CWE-754 | Improper state validation in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via |
| CVE-2026-91734 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Core in Google Chrome on on Windows prior to 153.0.8010.47 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (C |
| CVE-2026-91735 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code ou |
| CVE-2026-91736 | Analyzed | 未確認 | CWE-416 | Use after free in DOM in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-91737 | Analyzed | 未確認 | CWE-416 | Use after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-91738 | Analyzed | 未確認 | CWE-20 | Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML pa |
| CVE-2026-91739 | Analyzed | 未確認 | CWE-862 | Missing authorization in Transactions Platform in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a |
| CVE-2026-91740 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: H |
| CVE-2026-91741 | Analyzed | 未確認 | CWE-843 | Type confusion in CacheStorage in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium sec |
| CVE-2026-91742 | Analyzed | 未確認 | CWE-441 | Confused deputy in PriceTracking in Google Chrome on on iOS prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions into |
| CVE-2026-91743 | Analyzed | 未確認 | CWE-367 | Race condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the |
| CVE-2026-91744 | Analyzed | 未確認 | CWE-367 | Race condition in PlatformIntegration in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engi |
| CVE-2026-91745 | Analyzed | 未確認 | CWE-416 | Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-91746 | Analyzed | 未確認 | CWE-190 | Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: |
| CVE-2026-91747 | Analyzed | 未確認 | CWE-416 | Use after free in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML pag |
| CVE-2026-91748 | Analyzed | 未確認 | CWE-367 | Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering t |
| CVE-2026-91749 | Analyzed | 未確認 | CWE-416 | Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chro |
| CVE-2026-91750 | Deferred | 未確認 | CWE-918 | WeKnora before 0.7.0 fails to re-validate HTTP redirect targets in the POST /api/v1/knowledge-bases/:id/knowledge/url endpoint when downloading documents from user-supplied URLs. A |
| CVE-2026-91751 | Deferred | 未確認 | CWE-22 | Flextype CMS through 1.0.0-alpha.3 fails to properly validate id and new_id parameters in the Entries REST API, allowing API token holders to read, create, or overwrite files outsi |
| CVE-2026-91752 | Awaiting Analysis | 未確認 | CWE-789 | GNU libextractor before 1.15 contains a stack-based buffer overflow vulnerability in the process_star_office function that sizes a variable-length stack array from attacker-control |
| CVE-2026-9176 | Analyzed | 未確認 | CWE-94 | IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a security bypass due to improper authentication controls. A local attacker could exploit this vulnerability to escal |
| CVE-2026-91765 | Analyzed | 未確認 | CWE-674 | cleanup_xml_node() in the SOAP XML parser recurses once per XML nesting level with no depth limit. An unauthenticated attacker can post a SOAP request containing tens of thousands |
| CVE-2026-91766 | Analyzed | 未確認 | CWE-200, CWE-522 | When the http:// stream wrapper follows a redirect it forwards the user-supplied Authorization, Cookie and Proxy-Authorization headers unchanged, even when the redirect target is a |
| CVE-2026-91767 | Awaiting Analysis | 未確認 | CWE-122 | php_openssl_matches_wildcard_name() in ext/openssl/xp_ssl.c underflows the length argument passed to memchr() when a TLS server certificate presents a wildcard name whose literal c |
| CVE-2026-91768 | Awaiting Analysis | 未確認 | CWE-1023 | The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowed_clients matches on a /96 prefix instead of the exac |
| CVE-2026-91769 | Analyzed | 未確認 | CWE-297 | PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, whenever no entry matches, falls back to the Common Name. RFC 6125 requires the CN |
| CVE-2026-91770 | Deferred | 未確認 | CWE-639 | IceHRM before 36.0.0 fails to validate employee ownership on seven REST sub-resource endpoints, allowing authenticated employees to read any colleague's HR records. Attackers can s |
| CVE-2026-91771 | Awaiting Analysis | 未確認 | CWE-22 | Weights & Biases wandb before 0.29.0 fails to validate the file name from server responses in the File.download function, allowing path traversal attacks. Attackers controlling the |
| CVE-2026-91772 | Deferred | 未確認 | CWE-601 | Halo through 2.26.1 contains an open redirect vulnerability in the anonymous thumbnail endpoint that fails to validate the uri query parameter. Attackers can craft malicious links |
| CVE-2026-91773 | Deferred | 未確認 | CWE-639 | Soft Serve versions 0.7.1 through 0.11.6 fail to scope Git LFS lock queries by repository, allowing authenticated users to read lock metadata from repositories they cannot access. |
| CVE-2026-91774 | Deferred | 未確認 | CWE-862 | Yao through v1.0.0-rc22 authenticates but fails to authorize the GET /user/teams/:id endpoint, allowing any logged-in user to read full team records. Attackers can supply a known t |
| CVE-2026-91775 | Deferred | 未確認 | CWE-79 | LimeSurvey Community Edition 7.0.14 fails to safely encode attacker-controlled content from a crafted .lss survey file when displaying import warnings, resulting in XSS in the admi |
| CVE-2026-91776 | Deferred | 未確認 | CWE-400 | TypeDeserializerBase._findDeserializer() in FasterXML jackson-databind caches the resolved deserializer under the raw, attacker-supplied type ID. When name-based polymorphism is co |
| CVE-2026-91777 | Deferred | 未確認 | CWE-400 | Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID. The a |
| CVE-2026-91778 | Awaiting Analysis | 未確認 | CWE-863 | In affected versions of Octopus Server, users with certain scoped permission sets could execute arbitrary scripts on a worker (including the Octopus Server built-in worker). Incorr |
| CVE-2026-91779 | Analyzed | 未確認 | CWE-404, CWE-476 | A security flaw has been discovered in GNU Binutils 2.47. This affects the function _bfd_elf_eh_frame_section_offset of the file bfd/elf-eh-frame.c of the component Eh Frame Handle |
| CVE-2026-91780 | Analyzed | 未確認 | CWE-404, CWE-476 | A weakness has been identified in GNU Binutils 2.47. This impacts the function elf_link_add_object_symbols of the file bfd/elflink.c. Executing a manipulation can lead to null poin |
| CVE-2026-91781 | Analyzed | 未確認 | CWE-404, CWE-476 | A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elf_x86_64_common_section_index of the file bfd/elf64-x86-64.c of the component ELF Sectio |
| CVE-2026-91782 | Analyzed | 未確認 | CWE-404, CWE-476 | A vulnerability was detected in GNU Binutils 2.47. Affected by this vulnerability is the function elf_x86_allocate_dynrelocs of the file bfd/elfxx-x86.c of the component Dynamic Re |
| CVE-2026-91786 | Awaiting Analysis | 未確認 | CWE-125 | A flaw was found in GNOME Shell. When processing icons from a remote search provider via D-Bus, the system fails to validate the icon's declared dimensions against the actual data |
| CVE-2026-91788 | Undergoing Analysis | 未確認 | CWE-668 | When implementing the JavaScript interface, Foxit PDF Editor/Reader did not perform the attribute authorization checks required by the specification. As a result, a trusted malicio |
| CVE-2026-91789 | Analyzed | 未確認 | CWE-787 | Foxit PDF Editor/Reader’s U3D/GIF texture decoding path contained insufficient validation of image dimensions and related size information. Under certain conditions, this could lea |
| CVE-2026-91790 | Analyzed | 未確認 | CWE-416 | When rendering the page image, Foxit PDF Editor/Reader fails to perform validation on image objects whose optional content attributes are malformed. As a result, the program may ac |
| CVE-2026-91791 | Analyzed | 未確認 | CWE-416 | When processing a specially crafted PDF file, Foxit PDF Editor/Reader may encounter a reentrant execution condition involving JavaScript triggered by page-visibility events. This c |
| CVE-2026-91792 | Analyzed | 未確認 | CWE-416 | When processing a specially crafted PDF, Foxit PDF Editor/Reader may perform reentrant zoom and layout operations through page- and annotation-related JavaScript actions. This can |
| CVE-2026-91793 | Analyzed | 未確認 | CWE-416 | When opening a specially crafted PDF, Foxit PDF Editor/Reader executes scripts that modify annotation rich-text attributes containing malformed font data. During subsequent annotat |
| CVE-2026-91794 | Undergoing Analysis | 未確認 | CWE-787 | An out-of-bounds write vulnerability exists in the PDF rendering process of Foxit PDF Editor/Reader due to insufficient consistency and boundary validation when processing malforme |
| CVE-2026-91795 | Analyzed | 未確認 | CWE-822 | Foxit PDF Editor/Reader's FileOpen plugin did not adequately validate certain encryption metadata in specially crafted PDF files. This could leave an internal pointer in an invalid |
| CVE-2026-91796 | Analyzed | 未確認 | CWE-693 | The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger external SMB authentication witho |
| CVE-2026-91797 | Analyzed | 未確認 | CWE-73 | Foxit PDF Editor/Reader failed to validate the directory traversal path in the attachment file name, resulting in malicious attachments being able to be written to directories outs |
| CVE-2026-91798 | Undergoing Analysis | 未確認 | CWE-732 | A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader due to an insecure permission configuration that allows the configuration file to |
| CVE-2026-91799 | Analyzed | 未確認 | CWE-416 | A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of JavaScript array objects. A specially crafted PDF may cause the application to access a released obje |
| CVE-2026-91800 | Analyzed | 未確認 | CWE-732 | A local privilege escalation vulnerability exists in the installer of Foxit PDF Editor for macOS due to insufficient validation of a user-modifiable configuration value during high |
| CVE-2026-91801 | Analyzed | 未確認 | CWE-22 | A path traversal vulnerability exists in Foxit PDF Editor/Reader's handling of embedded PDF resources. Insufficient validation of resource file paths may allow files to be written |
| CVE-2026-91802 | Analyzed | 未確認 | CWE-787 | A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s WebP image decoding due to improper handling of bitmap stride and target buffer formats. Successf |
| CVE-2026-91803 | Analyzed | 未確認 | CWE-427 | A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe loading of dynamic-link libraries from a user-writable directory during hi |
| CVE-2026-91804 | Analyzed | 未確認 | CWE-787 | A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s rendering of Circle annotations with malformed Cloudy appearance streams in specially crafted PDF |
| CVE-2026-91805 | Analyzed | 未確認 | CWE-416 | A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s PDF page-tree handling. A specially crafted PDF can trigger page-structure changes during rendering, causing the |
| CVE-2026-91806 | Analyzed | 未確認 | CWE-416 | A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF form fields. Embedded JavaScript may access form-field references after the corresponding fields |
| CVE-2026-91807 | Undergoing Analysis | 未確認 | CWE-125 | A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed image soft-mask data. Insufficient validation of the soft-mask data attribut |
| CVE-2026-91808 | Analyzed | 未確認 | CWE-125 | A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor Reader’s handling of PDF image objects with inconsistent compression metadata. Insufficient validation duri |
| CVE-2026-91809 | Analyzed | 未確認 | CWE-416 | A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF form fields. Improper validation during field-name traversal may cause the application |
| CVE-2026-91810 | Analyzed | 未確認 | CWE-125 | A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF image masks. Inconsistent image metadata may cause incorrect alpha-chann |
| CVE-2026-91811 | Undergoing Analysis | 未確認 | CWE-787 | A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s PRC parser due to insufficient validation of vertex indices in triangular fan texture meshes. Suc |
| CVE-2026-91812 | Analyzed | 未確認 | CWE-295 | A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows man-in-the-middle attackers to bypass certificate validation and package integrity checks, potentially enabling |
| CVE-2026-91813 | Analyzed | 未確認 | CWE-367 | A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows an update package to be replaced between download and high-privilege extraction due to insufficient file lockin |
| CVE-2026-91814 | Undergoing Analysis | 未確認 | CWE-347 | A signature validation vulnerability exists in Foxit PDF Editor/Reader’s handling of incrementally updated PDF documents. Changes to visible document content may not invalidate the |
| CVE-2026-91815 | Analyzed | 未確認 | CWE-787 | Foxit PDF Editor/Reader does not perform sufficient verification of the JPEG2000 image metadata in the PDF file, which leads to out-of-bounds write in the heap buffer during decodi |
| CVE-2026-91816 | Analyzed | 未確認 | CWE-416 | A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF annotations. Reentrant annotation deletion triggered by embedded JavaScript can cause the applica |
| CVE-2026-91817 | Analyzed | 未確認 | CWE-125 | A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of wide strings in embedded PDF JavaScript. Insufficient validation of string-deletion ra |
| CVE-2026-91818 | Analyzed | 未確認 | CWE-416 | A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s JavaScript handling of PDF annotations. Reentrant page-event processing during annotation enumeration may release |
| CVE-2026-91819 | Deferred | 未確認 | CWE-20, CWE-352 | Affected versions of MISP rely on CakePHP request-method override processing in a way that can disable CSRF and form-security validation. CakePHP honors a _method field or X-HTTP- |
| CVE-2026-91825 | Deferred | 未確認 | CWE-862 | Affected versions of MISP fail to authorize a submitted sharing group in a specific event-edit path. The vulnerable logic checked whether the acting user could use a sharing_grou |
| CVE-2026-91826 | Deferred | 未確認 | CWE-121 | Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to memory corruption when rendering crafted vector animations. |
| CVE-2026-91827 | Deferred | 未確認 | CWE-502 | The Ninja Forms WordPress plugin 3.15.3 does not prevent user-submitted form field values from being deserialised when an administrator later exports form submissions to CSV, allow |
| CVE-2026-91832 | Deferred | 未確認 | CWE-79 | The WP Mobile Menu WordPress plugin before 2.9 does not correctly verify the nonce on its settings import, so an attacker can import arbitrary WP Mobile Menu WordPress plugin bef |
| CVE-2026-91835 | Deferred | 未確認 | CWE-436 | A vulnerability was detected in OpenClaw ClawScan up to 0.1.6. The impacted element is the function IsBinaryFile of the file internal/runner/static_scanner.go of the component File |
| CVE-2026-91836 | Deferred | 未確認 | CWE-1023 | A flaw has been found in OpenClaw ClawScan up to 0.1.6. This affects an unknown function of the file internal/runner/static_scanner.go of the component Static Scanner. This manipul |
| CVE-2026-91837 | Deferred | 未確認 | CWE-78 | A flaw was found in NetworkManager-iodine, the iodine VPN plugin for NetworkManager. A local unprivileged user can exploit a vulnerability in how the 'nameserver' setting is proces |
| CVE-2026-91838 | Deferred | 未確認 | CWE-78 | A flaw was found in NetworkManager-sstp, the SSTP VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by embedding special characters, known as |
| CVE-2026-91839 | Deferred | 未確認 | CWE-93 | A flaw was found in NetworkManager-fortisslvpn, the FortiSSLVPN plugin for NetworkManager. The nm-fortisslvpn-service improperly handles carriage-return/line-feed (CR/LF) character |
| CVE-2026-91840 | Deferred | 未確認 | CWE-93 | A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username |
| CVE-2026-91841 | Deferred | 未確認 | CWE-93 | A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline character into the CA-File |
| CVE-2026-91842 | Deferred | 未確認 | CWE-20, CWE-502 | A vulnerability has been found in OpenBankProject OBP-API up to 1.10.1. This impacts the function KryoInjection.invert of the file obp-api/src/main/scala/code/api/cache/Redis.scala |
| CVE-2026-91843 | Awaiting Analysis | 未確認 | CWE-121 | A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges. |
| CVE-2026-91846 | Deferred | 未確認 | CWE-639, CWE-862 | Affected versions of MISP allow a collection element to be created from a bare UUID without consistently checking whether the acting user is allowed to access the referenced object |
| CVE-2026-91847 | Deferred | 未確認 | CWE-639 | The Online Scheduling and Appointment Booking System WordPress plugin before 28.2 does not verify that the requester owns the AI booking-assistant conversation named in its unauth |
| CVE-2026-91848 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in WuzhiCMS up to 4.1.0. Affected by this issue is the function article::getDataOfJson of the file /index.php?m=content&f=article&v=getDataOfJson. Th |
| CVE-2026-91849 | Deferred | 未確認 | CWE-284, CWE-434 | A security flaw has been discovered in WuzhiCMS up to 4.1.0. This affects the function member::setAvatar of the file /index.php?m=member&f=user&v=setAvatar of the component Avatar |
| CVE-2026-91851 | Deferred | 未確認 | CWE-697, CWE-863 | Affected versions of MISP incorrectly filter dashboard templates that are restricted to a specific permission flag. DashboardsController::listTemplates() allowed a template when |
| CVE-2026-91852 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling XSS. This issue affects Apache Sling XSS: before 2.4.12. Us |
| CVE-2026-91853 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability has been found in TOTOLINK X5000R 9.1.0cu.2089_B20211224. The impacted element is the function exportOvpn of the file /cgi-bin/cstecgi.cgi?action=exportOvpn&type=us |
| CVE-2026-91854 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in code-projects Record Management System 1.0. Affected is an unknown function of the file main/reg.php. Such manipulation of the argument desc leads |
| CVE-2026-91855 | Deferred | 未確認 | CWE-404 | A security flaw has been discovered in Open5GS up to 2.7.7. Affected by this vulnerability is an unknown functionality of the file lib/pfcp/handler.c of the component PFCP Message |
| CVE-2026-91857 | Deferred | 未確認 | CWE-352 | Affected versions of MISP expose several state-changing controller actions without restricting them to POST. The affected actions are: - EventReportsController::purgeUnusedPi |
| CVE-2026-91859 | Deferred | 未確認 | CWE-223, CWE-778 | Affected versions of MISP can record incorrect access-log data for requests that terminate in an exception. Because CakeErrorController extends AppController, exception rendering |
| CVE-2026-9186 | Analyzed | 未確認 | CWE-284 | IBM Langflow OSS 1.0.0 through 1.11.2 allows remote authenticated attackers to bypass localhost-only MCP configuration installation by spoofing X-Forwarded-For: 127.0.0.1 header, e |
| CVE-2026-91860 | Awaiting Analysis | 未確認 | CWE-1321 | A prototype pollution vulnerability exists in the deep merge helpers of Vaadin Charts and Vaadin Component Base. Merging an object the application does not control into a chart con |
| CVE-2026-91863 | Analyzed | 未確認 | CWE-674 | A specially crafted WS-Policy document with deeply nested policy elements can bypass Neethi's nesting-depth limit and exhaust the thread stack, crashing the parser (denial of servi |
| CVE-2026-91864 | Analyzed | 未確認 | CWE-770 | A specially crafted WS-Policy document can pack unlimited content inside a policy assertion, which Neethi copies into memory without counting it against its size limits, exhausting |
| CVE-2026-91865 | Analyzed | 未確認 | CWE-770 | A small WS-Policy document using repeated policy references can force Neethi to re-expand the same references exponentially during normalization, consuming huge amounts of CPU and |
| CVE-2026-91866 | Analyzed | 未確認 | CWE-770 | A specially crafted pair of WS-Policy documents can force Neethi's policy-intersection to do exponential amounts of work, pinning the CPU for a long time (denial of service). Users |
| CVE-2026-91867 | Analyzed | 未確認 | CWE-400 | When Neethi fetches a remote policy reference, it only limits the time per read, not the whole transfer, so a server that trickles bytes slowly can keep the fetch alive indefinitel |
| CVE-2026-91921 | Deferred | 未確認 | CWE-79 | Cross-Site Scripting (XSS) vulnerability due to inadequate input sanitisation in the client-side rendering engine of the 1millionbot AI Chat Platform. An unauthenticated remote use |
| CVE-2026-91922 | Deferred | 未確認 | CWE-79 | Steedos Platform through 3.0.15-beta.47 contains a reflected cross-site scripting vulnerability in the anonymous /api/page/render endpoint that fails to properly escape query param |
| CVE-2026-91923 | Deferred | 未確認 | CWE-918 | KubeSphere through 4.1.3 contains a server-side request forgery vulnerability in the git credential verification endpoint that accepts unvalidated caller-supplied URLs without allo |
| CVE-2026-91924 | Deferred | 未確認 | CWE-862 | pgweb through 0.17.0 leaves the POST /api/connect endpoint unguarded when connect-backend authorization is configured, allowing attackers to supply arbitrary database connection st |
| CVE-2026-91925 | Deferred | 未確認 | CWE-1336 | Polyaxon through 2.16.4 renders operation specification fields with an unsandboxed Jinja2 environment during server-side run preparation, allowing authenticated users to execute ar |
| CVE-2026-91926 | Awaiting Analysis | 未確認 | CWE-401 | A flaw was found in gss-ntlmssp. A memory leak occurs in the NTLM target-info parser when a crafted NTLM CHALLENGE message contains duplicated string-valued AV_PAIR entries. The pa |
| CVE-2026-91928 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling XSS. This issue affects Apache Sling XSS: before 2.4.12. Us |
| CVE-2026-91929 | Deferred | 未確認 | CWE-862 | Flowise versions before 3.1.4 contain cross-tenant authorization gaps in Enterprise endpoints that fail to verify resource ownership before operations. Attackers with Enterprise ac |
| CVE-2026-91930 | Deferred | 未確認 | CWE-266 | Flowise before 3.1.4 fails to scope enterprise organization and workspace membership APIs to the caller's tenant, allowing authenticated users to supply arbitrary organization IDs. |
| CVE-2026-91931 | Deferred | 未確認 | CWE-78 | Flowise before 3.1.4 contains a remote code execution vulnerability in the Custom MCP node that allows authenticated attackers to execute arbitrary code by supplying npx package na |
| CVE-2026-91932 | Awaiting Analysis | 未確認 | CWE-20 | Flowise before 3.1.4 contains a validation bypass vulnerability in MCP server configuration allowing authenticated attackers remote code execution through an unvalidated cwd parame |
| CVE-2026-91933 | Awaiting Analysis | 未確認 | CWE-639 | Flowise before 3.1.4 fails to enforce workspace-level authorization checks in openai-realtime endpoints, allowing authenticated users to access tools from ChatFlows in other worksp |
| CVE-2026-91934 | Awaiting Analysis | 未確認 | CWE-22 | Flowise versions before 3.1.4 fail to validate file paths in the SQL Database Chain node when connecting to SQLite databases, allowing authenticated attackers to write arbitrary fi |
| CVE-2026-91935 | Awaiting Analysis | 未確認 | CWE-918 | Flowise before 3.1.4 fails to validate baseURL parameters in chat-model nodes, allowing authenticated users to redirect requests to arbitrary hosts. Attackers with chatflows:create |
| CVE-2026-91936 | Awaiting Analysis | 未確認 | CWE-78 | Flowise versions before 3.1.4 contain a script injection vulnerability in Docker image build workflows where workflow_dispatch inputs are directly interpolated into shell run block |
| CVE-2026-91937 | Deferred | 未確認 | CWE-943 | Flowise before 3.1.4 fails to sanitize the overrideConfig.sessionId parameter before using it in MongoDB queries within the MongoDBMemory node. Unauthenticated attackers can submit |
| CVE-2026-91938 | Awaiting Analysis | 未確認 | CWE-918 | Flowise versions before 3.1.4 contain a server-side request forgery vulnerability in Cheerio, Playwright, and Puppeteer document loader nodes that bypass SSRF protection. Attackers |
| CVE-2026-91939 | Deferred | 未確認 | CWE-502 | Cotonti 1.0.0 Comments plugin passes the ci GET parameter to unserialize() without allowed_classes restriction, allowing unauthenticated attackers to instantiate arbitrary PHP clas |
| CVE-2026-91940 | Awaiting Analysis | 未確認 | CWE-22 | crawl4ai before 0.9.3 contains an arbitrary file write vulnerability in PDFContentScrapingStrategy where the _filter_untrusted_fields function fails to validate untrusted configura |
| CVE-2026-91941 | Awaiting Analysis | 未確認 | CWE-400 | Crawl4AI before 0.9.3 contains an uncontrolled resource consumption vulnerability in PDFContentScrapingStrategy that allows untrusted clients to cause denial of service. Attackers |
| CVE-2026-91942 | Awaiting Analysis | 未確認 | CWE-79 | crawl4ai before 0.9.3 contains a DOM-based cross-site scripting vulnerability in the Docker Playground UI that assigns untrusted crawl results to element.innerHTML. Attackers can c |
| CVE-2026-91943 | Awaiting Analysis | 未確認 | CWE-918 | Crawl4AI before 0.9.3 contains a server-side request forgery vulnerability in PDFContentScrapingStrategy where _get_pdf_path() re-downloads targets with Python requests without egr |
| CVE-2026-91944 | Awaiting Analysis | 未確認 | CWE-79 | crawl4ai versions before 0.9.3 contain a DOM-based cross-site scripting vulnerability in the Playground UI where the forceHighlightElement() function assigns textContent back to in |
| CVE-2026-91945 | Analyzed | 未確認 | CWE-125 | FreeRDP versions before 3.31.0 contain an out-of-bounds read vulnerability in smartcard response decoders that fail to validate ATR length fields against fixed inline arrays. Authe |
| CVE-2026-91946 | Analyzed | 未確認 | CWE-908 | FreeRDP versions before 3.31.0 contain an information disclosure vulnerability in the RDPGFX server's ResetGraphics PDU serializer that fails to initialize padding bytes in the fix |
| CVE-2026-91947 | Undergoing Analysis | 未確認 | CWE-362 | FreeRDP server versions before 3.31.0 contain a use-after-free vulnerability in the DRDYNVC parser that dereferences a channel pointer after releasing the synchronization lock. Aut |
| CVE-2026-91948 | Deferred | 未確認 | CWE-191 | FreeRDP versions before 3.31.0 contain an out-of-bounds write vulnerability in server-side static virtual channel handling when CHANNEL_OPTION_SHOW_PROTOCOL is enabled. Authenticat |
| CVE-2026-91949 | Analyzed | 未確認 | CWE-693 | FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass vulnerability that allows unauthenticated attackers to establish RDSTLS connections despite server polic |
| CVE-2026-91950 | Analyzed | 未確認 | CWE-125 | FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in the rdpdr_dump_packet function due to 32-bit unsigned integer wraparound in buffer bounds validation. A malici |
| CVE-2026-91951 | Analyzed | 未確認 | CWE-617 | FreeRDP versions before 3.31.0 contain an out-of-bounds write vulnerability in the urbdrc client channel's urb_send_current_frame_number_result() function. A malicious RDP server c |
| CVE-2026-91952 | Analyzed | 未確認 | CWE-835 | FreeRDP versions before 3.31.0 contain an infinite-loop denial of service in the pool_decode_rect function when decoding AVC444 metablocks with more region rectangles than prealloc |
| CVE-2026-91953 | Analyzed | 未確認 | CWE-120 | FreeRDP versions before 3.31.0 contain a heap buffer overflow vulnerability in nego_send_negotiation_request() that fails to validate the LB_LOAD_BALANCE_INFO field length before w |
| CVE-2026-91954 | Analyzed | 未確認 | CWE-476 | FreeRDP before 3.31.0 contains a null pointer dereference vulnerability in gdi_surface_bits when processing Surface Bits commands with NSCodec codec ID. A malicious RDP server can |
| CVE-2026-91955 | Analyzed | 未確認 | CWE-369 | FreeRDP before 3.31.0 fails to validate client-supplied DesktopWidth and DesktopHeight values during GCC negotiation, allowing remote attackers to crash the server. Attackers can s |
| CVE-2026-91956 | Analyzed | 未確認 | CWE-125 | FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in the URBDRC channel's func_get_ep_desc function that indexes interface arrays by position instead of protocol f |
| CVE-2026-91957 | Analyzed | 未確認 | CWE-416 | FreeRDP before 3.31.0 contains a use-after-free vulnerability in the smartcard RDPDR device handler when worker thread creation fails after device registration. Attackers can trigg |
| CVE-2026-91958 | Analyzed | 未確認 | CWE-125 | FreeRDP versions before 3.31.0 fail to validate MonitorIds array values when parsing RDP connection files, allowing unbounded array indexing in xf_detect_monitors. Attackers can cr |
| CVE-2026-91959 | Analyzed | 未確認 | CWE-125 | FreeRDP before 3.31.0 contains a buffer over-read vulnerability in the rts_read_result function within the RPC gateway transport parser. Attackers can send a malicious BIND_ACK PDU |
| CVE-2026-91960 | Analyzed | 未確認 | CWE-190 | FreeRDP versions before 3.31.0 contain an integer overflow in WinPR's Stream_EnsureRemainingCapacity function that allows remote attackers to cause denial of service. A malicious R |
| CVE-2026-91961 | Analyzed | 未確認 | CWE-617 | FreeRDP before 3.31.0 contains a denial-of-service vulnerability in the URBDRC control-transfer request path that fails to validate OutputBufferSize before forwarding to the libusb |
| CVE-2026-91962 | Analyzed | 未確認 | CWE-131 | FreeRDP before 3.31.0 contains an integer overflow in the audin Apple backends when processing FramesPerPacket values from MSG_SNDIN_OPEN messages. Attackers can supply crafted Fra |
| CVE-2026-91963 | Analyzed | 未確認 | CWE-457 | FreeRDP versions before 3.31.0 contain an uninitialized heap memory disclosure vulnerability in the urbdrc USB redirection channel. A malicious RDP server can induce failing USB tr |
| CVE-2026-91964 | Undergoing Analysis | 未確認 | CWE-122 | FreeRDP versions before 3.31.0 contain a heap-based buffer overflow in nego_send_negotiation_request when processing Server Redirection PDU messages with attacker-controlled LoadBa |
| CVE-2026-91965 | Deferred | 未確認 | CWE-200 | WWBN AVideo through 29.0 fails to enforce user-group restrictions in the plugin/Live/stats.json.php and plugin/Live/calendar.json.php endpoints. Unauthenticated attackers can retri |
| CVE-2026-91966 | Deferred | 未確認 | CWE-918 | AVideo through 29.0 contains an unauthenticated server-side request forgery vulnerability in the check_site_availability function that accepts attacker-controlled HTTP Host headers |
| CVE-2026-91967 | Deferred | 未確認 | CWE-918 | AVideo through 29.0 contains a blind server-side request forgery vulnerability in the getHeaderContentTypeFromURL function that issues get_headers() calls guarded only by format va |
| CVE-2026-91968 | Deferred | 未確認 | CWE-674 | vikunja versions before 2.6.0 contain a resource exhaustion vulnerability in the task-filter endpoint that accepts deeply nested filter expressions without recursion depth limits. |
| CVE-2026-91969 | Deferred | 未確認 | CWE-400 | vikunja versions before 2.6.0 contain a resource exhaustion vulnerability in the POST /api/v2/migration/csv/migrate endpoint that fails to limit parsed row cardinality. Authenticat |
| CVE-2026-91970 | Deferred | 未確認 | CWE-770 | Vikunja versions before 2.6.0 contain a resource exhaustion vulnerability in the Planka migrator that fails to enforce aggregate memory budgets during migration jobs. Authenticated |
| CVE-2026-91971 | Deferred | 未確認 | CWE-400 | Vikunja before 2.6.0 fails to apply pixel decode limits to avatar and project-background upload endpoints, allowing authenticated users to upload crafted images that decode to exce |
| CVE-2026-91972 | Deferred | 未確認 | CWE-307 | Vikunja versions before 2.6.0 fail to apply rate limiting to /api/v2 public authentication endpoints including login, register, password-reset, and OAuth token routes. Remote unaut |
| CVE-2026-91973 | Deferred | 未確認 | CWE-307 | Vikunja before 2.6.0 contains an authentication bypass vulnerability in CalDAV BasicAuth endpoints that lack rate limiting protection. Remote unauthenticated attackers can issue un |
| CVE-2026-91979 | Deferred | 未確認 | CWE-400 | Vikunja before 2.6.0 fails to limit archive expansion during data import, allowing authenticated users to cause denial of service. Attackers can upload highly compressed files that |
| CVE-2026-91980 | Deferred | 未確認 | CWE-200 | vikunja before 2.6.0 fails to validate team access when attaching teams to projects, allowing authenticated users to enumerate all teams and members. Attackers can attach arbitrary |
| CVE-2026-91981 | Deferred | 未確認 | CWE-200 | Vikunja versions before 2.6.0 fail to properly validate link-share tokens in the v2 API user search endpoints. Attackers with a read-only share link can enumerate project users via |
| CVE-2026-91982 | Deferred | 未確認 | CWE-522 | Vikunja before 2.6.0 continues to expose the raw TOTP shared secret after enrollment through the GET /api/v1/user/settings/totp and /api/v1/user/settings/totp/qrcode endpoints with |
| CVE-2026-91983 | Deferred | 未確認 | CWE-863 | Vikunja before 2.6.0 contains an API token scope bypass vulnerability in task read endpoints where authorization fails to inspect query string parameters. Attackers with limited to |
| CVE-2026-91984 | Deferred | 未確認 | CWE-639 | Vikunja before 2.6.0 fails to validate that user-supplied project_view_id in task-position requests belongs to the task's project. Authenticated attackers can insert task position |
| CVE-2026-91985 | Deferred | 未確認 | CWE-200 | Vikunja before 2.6.0 fails to properly restrict access to the link-share hash field in single-share read endpoints, allowing read-only members to obtain the share's secret credenti |
| CVE-2026-91986 | Deferred | 未確認 | CWE-74 | gitoxide gix-transport before 0.59.2 fails to filter control characters in git-daemon connect requests, allowing attackers to inject NUL/CR/LF bytes via crafted git URLs. Attackers |
| CVE-2026-91987 | Deferred | 未確認 | CWE-770 | atomic-agents-stack before 1.1.0 contains a cost-guardrail bypass in the _estimate_batch_cost function that returns zero cost for unknown models not in the pricing table. Attackers |
| CVE-2026-91988 | Deferred | 未確認 | CWE-319 | atomic-agents-stack before 1.1.0 accepts cleartext HTTP schemes in the HTTP MCP server-registry backend factory, allowing network man-in-the-middle attackers to rewrite catalog res |
| CVE-2026-91989 | Deferred | 未確認 | CWE-22 | atomic-agents-stack before 1.1.0 contains a path traversal vulnerability in the dashboard HTTP server that allows remote attackers to read arbitrary files by supplying directory tr |
| CVE-2026-91990 | Deferred | 未確認 | CWE-770 | Tornado before 6.5.8 contains a memory amplification vulnerability in parse_multipart_form_data that splits multipart data before validating the max_parts limit. Attackers can send |
| CVE-2026-91991 | Deferred | 未確認 | CWE-113 | Tornado before 6.5.8 contains an incomplete fix for cookie attribute injection that allows attackers to inject arbitrary cookie attributes by passing capitalized or legacy keyword |
| CVE-2026-91992 | Deferred | 未確認 | CWE-200 | Tornado before 6.5.7 contains a credential leak vulnerability in CurlAsyncHTTPClient where pycurl handles are reused across requests without proper state clearing. Attackers can ob |
| CVE-2026-91993 | Deferred | 未確認 | CWE-639 | Jpom through 2.11.12 fails to validate workspace ownership when resolving repositoryId on the /build/branch-list endpoint, allowing authenticated users to access repositories from |
| CVE-2026-91994 | Awaiting Analysis | 未確認 | CWE-862 | Semaphore UI through 2.19.12 exempts GET and HEAD requests from project resource permission checks in GetMustCanMiddleware. Attackers with guest or task_runner roles can read all p |
| CVE-2026-91995 | Deferred | 未確認 | CWE-620 | pig before 4.1.0 contains an authentication bypass vulnerability in the /register/password endpoint where password verification results are discarded, allowing any value as the cur |
| CVE-2026-91996 | Deferred | 未確認 | CWE-306 | lamp-cloud through 5.10.0 whitelists the path pattern /*/anno/** for anonymous access, allowing unauthenticated attackers to read the server's full JVM system property map. Attacke |
| CVE-2026-91997 | Deferred | 未確認 | CWE-697 | evolution-api through 2.3.7 contains an incorrect array comparison in the metricsIPWhitelist middleware that always evaluates to false, allowing unauthenticated access to the /metr |
| CVE-2026-91998 | Deferred | 未確認 | CWE-863 | Casdoor through 4.4.0 contains an authorization bypass vulnerability in the /api/mcp endpoint that allows attackers with any application's clientId and clientSecret to gain unrestr |
| CVE-2026-91999 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling XSS. This issue affects Apache Sling XSS: before 2.4.12. Us |
| CVE-2026-92000 | Deferred | 未確認 | CWE-409 | adm-zip versions 0.5.14 through 0.6.0 fail to apply zlib decompression output limits when ZIP entries declare zero uncompressed size. Attackers can craft malicious ZIP archives wit |
| CVE-2026-92001 | Analyzed | 未確認 | CWE-776 | Improper restriction of recursive entity references in DTDs ('XML entity expansion') vulnerability in Apache Sling XSS. This issue affects Apache Sling XSS: before 2.4.12. Us |
| CVE-2026-92002 | Deferred | 未確認 | CWE-778 | Affected versions of MISP use Redis to throttle repeated authentication-failure log entries. The intent is to avoid excessive duplicate logs while still recording failed authentica |
| CVE-2026-92003 | Deferred | 未確認 | CWE-400, CWE-770 | Affected versions of MISP do not consistently apply the existing authentication-failure logging throttle. Two API authentication failure branches wrote directly to the Log model: |
| CVE-2026-92005 | Analyzed | 未確認 | CWE-416 | Use-after-free in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, an |
| CVE-2026-92006 | Analyzed | 未確認 | CWE-120 | Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.1 |
| CVE-2026-92007 | Analyzed | 未確認 | CWE-120 | Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.1 |
| CVE-2026-92008 | Analyzed | 未確認 | CWE-120 | Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.1 |
| CVE-2026-92009 | Analyzed | 未確認 | CWE-120 | Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.1 |
| CVE-2026-92010 | Analyzed | 未確認 | CWE-120 | Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.1 |
| CVE-2026-92011 | Analyzed | 未確認 | CWE-120 | Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.1 |
| CVE-2026-92012 | Analyzed | 未確認 | CWE-120 | Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.1 |
| CVE-2026-92013 | Analyzed | 未確認 | CWE-120 | Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.1 |
| CVE-2026-92014 | Analyzed | 未確認 | CWE-120 | Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, and Thunderbird 140.16. |
| CVE-2026-92015 | Analyzed | 未確認 | CWE-269 | Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunde |
| CVE-2026-92016 | Analyzed | 未確認 | CWE-416 | Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and |
| CVE-2026-92017 | Analyzed | 未確認 | CWE-269 | Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, |
| CVE-2026-92018 | Analyzed | 未確認 | CWE-693 | Sandbox escape in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbi |
| CVE-2026-92019 | Analyzed | 未確認 | CWE-693 | Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, |
| CVE-2026-92020 | Analyzed | 未確認 | CWE-120 | Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, |
| CVE-2026-92021 | Analyzed | 未確認 | CWE-416 | Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 140.16 and Thunderbird 140.16. |
| CVE-2026-92022 | Analyzed | 未確認 | CWE-416 | Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbi |
| CVE-2026-92023 | Analyzed | 未確認 | CWE-416 | Use-after-free in the XML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, an |
| CVE-2026-92024 | Analyzed | 未確認 | CWE-416 | Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, an |
| CVE-2026-92025 | Analyzed | 未確認 | CWE-416 | Use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbir |
| CVE-2026-92026 | Analyzed | 未確認 | CWE-416 | Use-after-free in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird |
| CVE-2026-92027 | Analyzed | 未確認 | CWE-416 | Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 1 |
| CVE-2026-92028 | Analyzed | 未確認 | CWE-416 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbi |
| CVE-2026-92029 | Analyzed | 未確認 | CWE-416 | Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, an |
| CVE-2026-92030 | Analyzed | 未確認 | CWE-693 | Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbi |
| CVE-2026-92031 | Analyzed | 未確認 | CWE-200 | Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, |
| CVE-2026-92032 | Analyzed | 未確認 | CWE-119 | Sandbox escape due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 14 |
| CVE-2026-92033 | Analyzed | 未確認 | CWE-269 | Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 156. |
| CVE-2026-92034 | Analyzed | 未確認 | CWE-346 | Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 156. |
| CVE-2026-92035 | Analyzed | 未確認 | CWE-119 | Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Thunderbird 140.17, Firefox 156, Firefox ESR 153.3, Thunderbird 156, |
| CVE-2026-92036 | Analyzed | 未確認 | CWE-119 | Incorrect boundary conditions in the Networking: HTTP component. This vulnerability was fixed in Firefox 156 and Thunderbird 156. |
| CVE-2026-92037 | Analyzed | 未確認 | CWE-119 | Incorrect boundary conditions in the DOM: Animation component. This vulnerability was fixed in Firefox 156 and Thunderbird 156. |
| CVE-2026-92038 | Analyzed | 未確認 | CWE-693 | Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
| CVE-2026-92039 | Analyzed | 未確認 | CWE-693 | Mitigation bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
| CVE-2026-92040 | Analyzed | 未確認 | CWE-416 | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 156 and Thunderbird 156. |
| CVE-2026-92041 | Analyzed | 未確認 | CWE-693 | Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
| CVE-2026-92042 | Analyzed | 未確認 | CWE-362 | Race condition in the DOM: Content Processes component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
| CVE-2026-92043 | Analyzed | 未確認 | CWE-120 | Privilege escalation due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunder |
| CVE-2026-92044 | Analyzed | 未確認 | CWE-200 | Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
| CVE-2026-92045 | Analyzed | 未確認 | CWE-119 | Sandbox escape due to incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
| CVE-2026-92046 | Analyzed | 未確認 | CWE-416 | Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
| CVE-2026-92047 | Analyzed | 未確認 | CWE-269 | Privilege escalation in the Crash Reporting component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
| CVE-2026-92048 | Analyzed | 未確認 | CWE-119 | Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird |
| CVE-2026-92049 | Analyzed | 未確認 | CWE-416 | Use-after-free in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
| CVE-2026-92050 | Analyzed | 未確認 | CWE-362 | Sandbox escape due to race condition in the XPConnect component. This vulnerability was fixed in Firefox 156 and Thunderbird 156. |
| CVE-2026-92051 | Analyzed | 未確認 | CWE-476 | Spoofing issue due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 156. |
| CVE-2026-92052 | Analyzed | 未確認 | CWE-457 | Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunde |
| CVE-2026-92053 | Analyzed | 未確認 | CWE-269 | Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
| CVE-2026-92054 | Analyzed | 未確認 | CWE-119 | Privilege escalation in the Memory component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
| CVE-2026-92055 | Analyzed | 未確認 | CWE-269 | Privilege escalation in the DevTools component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
| CVE-2026-92056 | Analyzed | 未確認 | CWE-416 | Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
| CVE-2026-92057 | Analyzed | 未確認 | CWE-693 | Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
| CVE-2026-92058 | Analyzed | 未確認 | CWE-416 | Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
| CVE-2026-92059 | Analyzed | 未確認 | CWE-119 | Incorrect boundary conditions in the DOM: Editor component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
| CVE-2026-92060 | Analyzed | 未確認 | CWE-416 | Use-after-free in the Internationalization component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
| CVE-2026-92061 | Analyzed | 未確認 | CWE-119 | Incorrect boundary conditions in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 156 and Thunderbird 156. |
| CVE-2026-92062 | Analyzed | 未確認 | CWE-269 | Privilege escalation in the Session Restore component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
| CVE-2026-92063 | Analyzed | 未確認 | CWE-770 | Denial-of-service in the Audio/Video component. This vulnerability was fixed in Firefox 156 and Thunderbird 156. |
| CVE-2026-92064 | Analyzed | 未確認 | CWE-119 | Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird |
| CVE-2026-92065 | Analyzed | 未確認 | CWE-119 | Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird |
| CVE-2026-92066 | Analyzed | 未確認 | CWE-693 | Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 156 and Thunderbird 156. |
| CVE-2026-92067 | Analyzed | 未確認 | CWE-416 | Use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
| CVE-2026-92068 | Analyzed | 未確認 | CWE-346 | Site isolation issue in the Reader Mode component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
| CVE-2026-92069 | Analyzed | 未確認 | CWE-451 | Spoofing issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
| CVE-2026-92070 | Analyzed | 未確認 | CWE-200 | Information disclosure in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
| CVE-2026-92071 | Analyzed | 未確認 | CWE-119 | Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird |
| CVE-2026-92072 | Analyzed | 未確認 | CWE-119 | Incorrect boundary conditions in the Safe Browsing component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
| CVE-2026-92073 | Analyzed | 未確認 | CWE-269 | Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
| CVE-2026-92074 | Analyzed | 未確認 | CWE-693 | Mitigation bypass in the Popup Blocker component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
| CVE-2026-92075 | Analyzed | 未確認 | CWE-693 | Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
| CVE-2026-92076 | Analyzed | 未確認 | CWE-119 | Incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
| CVE-2026-92077 | Analyzed | 未確認 | CWE-770 | Denial-of-service in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
| CVE-2026-92078 | Analyzed | 未確認 | CWE-770 | Denial-of-service in the Security component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
| CVE-2026-92079 | Analyzed | 未確認 | CWE-693 | Mitigation bypass in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
| CVE-2026-92081 | Awaiting Analysis | 未確認 | CWE-248 | fastify is a fast and low-overhead web framework for Node.js. In versions before 5.12.5, when a route registers a response trailer via reply.trailer() and is served over HTTP/2, fa |
| CVE-2026-92082 | Deferred | 未確認 | CWE-307 | By default, Payara Server does not limit the number of failed login attempts, which can leave it vulnerable to brute force login attacks. To mitigate this, Payara Server includes b |
| CVE-2026-92087 | Awaiting Analysis | 未確認 | CWE-285, CWE-697 | @fastify/auth is a Fastify plugin that composes multiple authentication and authorization strategies into a single route guard. In versions 5.0.0 through 5.1.0, when strategies are |
| CVE-2026-92091 | Awaiting Analysis | 未確認 | CWE-407 | A flaw was found in jwcrypto. The JWK.import_key() function validates the key_ops JWK member for duplicate values using an algorithm with O(n^2) time complexity, and the length of |
| CVE-2026-92099 | Deferred | 未確認 | CWE-284 | The WPGraphQL Smart Cache WordPress plugin before 2.3.2 does not require authorisation or validate a caller-supplied query identifier before storing a persisted query from a reques |
| CVE-2026-92103 | Deferred | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint allows a malicious HTTP/2 server to make the client hold up to about 16 MiB per connection in |
| CVE-2026-92106 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dashbitco lazy_html allows mutation XSS via a parse and serialize round-trip o |
| CVE-2026-92114 | Deferred | 未確認 | CWE-1333, CWE-400 | A vulnerability was identified in a2ui-project a2ui up to 0.10.6. Affected is an unknown function of the file renderers/web_core/src/v0_9/basic_catalog/functions/safe_regex.ts of t |
| CVE-2026-92121 | Analyzed | 未確認 | CWE-693 | In the WSS4J streaming (StAX) code, a signature reference using the WS-Security STR-Transform leaves an internal "inside signed content" flag permanently set. The WS-SecurityPolicy |
| CVE-2026-92122 | Analyzed | 未確認 | CWE-693 | Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not check the method called through the proxy created when a sandboxed script coerces a value to an interface, |
| CVE-2026-92123 | Analyzed | 未確認 | CWE-693 | Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not intercept operations performed on a null receiver (method calls, property and attribute accesses, and arra |
| CVE-2026-92124 | Analyzed | 未確認 | CWE-693 | Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier checks the operations Groovy will perform with the elements it reads from a collection that a sandboxed script cast |
| CVE-2026-92125 | Analyzed | 未確認 | CWE-94 | Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not reject the @GroovyASTTransformationClass annotation, allowing attackers with permission to define and run |
| CVE-2026-92126 | Modified | 未確認 | CWE-470, CWE-94 | Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not reject @Builder annotations whose builderStrategy member names an arbitrary class, allowing attackers with |
| CVE-2026-92127 | Analyzed | 未確認 | CWE-94 | Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier automatically approves the classpath entries in an item configuration when a user with Overall/Administer permissio |
| CVE-2026-92128 | Analyzed | 未確認 | CWE-494 | Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier downloads a JAR file specified by URL twice, confirming the approval of the first download and loading the classpat |
| CVE-2026-92129 | Analyzed | 未確認 | CWE-693 | Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not check calls from sandboxed scripts to methods added dynamically to a class at runtime, allowing attackers |
| CVE-2026-92130 | Awaiting Analysis | 未確認 | CWE-863 | Jenkins Pipeline: Multibranch Plugin 841.vec5b_9e1806ec and earlier does not set the appropriate context for credentials lookup in the resolveScm Pipeline step, allowing attackers |
| CVE-2026-92131 | Awaiting Analysis | 未確認 | CWE-22 | Jenkins Pipeline: Groovy Libraries Plugin 805.va_fc79344957d and earlier does not restrict the library path provided to the library Pipeline step to a relative path inside the SCM |
| CVE-2026-92132 | Awaiting Analysis | 未確認 | CWE-74 | Jenkins Gradle Plugin 2.19.1252.v15196b_5a_6e10 and earlier requests build scan data from the build scan link detected in the build log, even when a Develocity server URL is config |
| CVE-2026-92133 | Awaiting Analysis | 未確認 | CWE-522 | Jenkins GitLab Plugin 1.2149.vcfc32c82b_f7f and earlier caches the GitLab API client built for alternative GitLab API token credentials under a cache key derived from the credentia |
| CVE-2026-92134 | Awaiting Analysis | 未確認 | CWE-79 | Jenkins Warnings Plugin 13.10258.va_17d49a_78c3b_ and earlier does not validate the analysis results ID when a job configuration is submitted through the REST API, allowing attacke |
| CVE-2026-92135 | Awaiting Analysis | 未確認 | CWE-79 | Jenkins Coverage Plugin 3.3358.v9487dde48783 and earlier does not validate the coverage results ID when a job configuration is submitted through the REST API, allowing attackers wi |
| CVE-2026-92136 | Awaiting Analysis | 未確認 | CWE-79 | Jenkins OWASP Dependency-Check Plugin 5.6.4 and earlier does not escape CWE values from Dependency-Check reports on the Jenkins UI, resulting in a stored cross-site scripting (XSS) |
| CVE-2026-92137 | Awaiting Analysis | 未確認 | CWE-22 | Jenkins Robot Framework Plugin 6.2.2 and earlier does not check that the archive directory configured for Robot Framework report files is contained within the build directory on th |
| CVE-2026-92138 | Awaiting Analysis | 未確認 | CWE-345 | The OAuth authorization endpoint in Jenkins Bitbucket Server Integration Plugin 6.0.1 and earlier reads the `oauth_callback` URL from the submitted form rather than from the server |
| CVE-2026-92139 | Awaiting Analysis | 未確認 | CWE-918 | Jenkins Bitbucket Push and Pull Request Plugin 4.0.1 and earlier trusts values provided in the webhook payload, including certain URLs, and uses configured Bitbucket credentials to |
| CVE-2026-92140 | Awaiting Analysis | 未確認 | CWE-79 | Jenkins Gitee Plugin 1301.v8957053c7902 and earlier does not escape the sender name from Gitee push webhook payloads in build causes, resulting in a stored cross-site scripting (XS |
| CVE-2026-92141 | Awaiting Analysis | 未確認 | CWE-601 | Jenkins Keycloak Authentication Plugin 2.4.1 and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks. |
| CVE-2026-92142 | Analyzed | 未確認 | CWE-862 | Apache Karaf exposes a JMX MBeanServer guarded by KarafMBeanServerGuard, which enforces role-based access control (RBAC) on MBean operations invoked over the remote JMX connector ( |
| CVE-2026-9215 | Analyzed | 未確認 | CWE-352 | A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper |
| CVE-2026-9216 | Analyzed | 未確認 | CWE-121 | An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi credentials) to crash |
| CVE-2026-92161 | Deferred | 未確認 | CWE-345 | FriendsOfFlarum OAuth allows users to log in to Flarum with GitHub, Twitter, Facebook, and other providers. Prior to 1.7.4 and 2.0.0-beta.4, the Discord OAuth provider does not che |
| CVE-2026-92164 | Awaiting Analysis | 未確認 | CWE-73 | Streamlink is a CLI utility which pipes video streams from various services into a video player. Prior to 8.6.0, HTTPSession mounts a FileAdapter for the file scheme and inherits r |
| CVE-2026-92172 | Awaiting Analysis | 未確認 | CWE-923 | Prior to v66.0.0.733.524 of Meta Horizon OS, OVRMediaService could be induced to send a privileged PendingIntent including a com.oculus.horizon CallerIdentity to an arbitrary appli |
| CVE-2026-92173 | Awaiting Analysis | 未確認 | CWE-923 | Prior to v74.0.0.878.1682 of Meta Horizon OS, MediaSyncJobReceiver could be induced to send a privileged PendingIntent including a com.oculus.vrshell CallerIdentity to an arbitrary |
| CVE-2026-92176 | Deferred | 未確認 | CWE-125 | pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installat |
| CVE-2026-92177 | Deferred | 未確認 | CWE-787 | pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected in |
| CVE-2026-92178 | Deferred | 未確認 | CWE-119 | pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected inst |
| CVE-2026-92179 | Deferred | 未確認 | CWE-787 | pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected in |
| CVE-2026-92180 | Deferred | 未確認 | CWE-427 | pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to esc |
| CVE-2026-92184 | Deferred | 未確認 | CWE-918 | A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. Affected is the function urllib.request.urlopen of the file integrations/aws-strands/python/src/ag_ui_strands/uti |
| CVE-2026-92212 | Deferred | 未確認 | CWE-79 | The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'jfb_xss' (URL Query Variable) Parameter via Calculated Fi |
| CVE-2026-92213 | Deferred | 未確認 | CWE-707, CWE-74 | A vulnerability was detected in a2ui-project a2ui up to 0.10.6. This impacts the function z.any of the file renderers/web_core/src/v0_9/schema/server-to-client.ts of the component |
| CVE-2026-92214 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in a2ui-project a2ui up to 0.10.7. Affected is an unknown function of the file samples/community/client/angular/projects/a2a-chat-canvas/src/lib/services/sani |
| CVE-2026-92215 | Deferred | 未確認 | CWE-918 | A vulnerability has been found in a2ui-project a2ui up to 0.10.7. Affected by this vulnerability is the function httpx.get of the file agent_sdks/python/a2ui_agent/src/a2ui/extensi |
| CVE-2026-92216 | Deferred | 未確認 | CWE-601 | A vulnerability was found in a2ui-project a2ui up to 0.10.7. Affected by this issue is the function openUrl of the file renderers/web_core/src/v0_9/rendering/generic-binder.ts of t |
| CVE-2026-92217 | Deferred | 未確認 | CWE-913, CWE-915 | A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This affects the function processMessages of the file renderers/web_core/src/v0_9/processing/message-processor.ts |
| CVE-2026-92220 | Deferred | 未確認 | CWE-400, CWE-404 | A vulnerability was found in vllm-project vLLM 0.26.0/0.27.0. Affected is the function MoRIIOConnectorScheduler.request_finished/MoRIIOConnectorWorker.get_finished/MoRIIOWrapper._h |
| CVE-2026-92221 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Affected by this vulnerability is the function generate_index_pasie |
| CVE-2026-92222 | Analyzed | 未確認 | CWE-918 | Joomla! Core - [20260909] - Core - SSRF vectors in various core extensions in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - URLs used for serverside requests were improperly validated, leading |
| CVE-2026-92223 | Analyzed | 未確認 | CWE-284 | Joomla! Core - [20260910] - Core - Improper ACL checks for workflow stage changes in Joomla 5.0.0-5.4.8, 6.0.0-6.1.3 - An improper access check allows unauthorized users to update |
| CVE-2026-92224 | Analyzed | 未確認 | CWE-79 | Joomla! Core - [20260911] - Core - XSS in link toolbar layout in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - The link toolbar layout did not properly escape inputs, leading to an XSS vector. |
| CVE-2026-92225 | Analyzed | 未確認 | CWE-79 | Joomla! Core - [20260912] - Core - XSS in module list in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - The module list layout did not properly escape user supplied values, leading to an XSS ve |
| CVE-2026-92226 | Analyzed | 未確認 | CWE-284 | Joomla! Core - [20260913] - Core - Improper ACL checks for varous webservice edit tasks in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - An improper access check allows unauthorized users to p |
| CVE-2026-92227 | Analyzed | 未確認 | CWE-287 | Joomla! Core - [20260914] - Core - MFA Authentication Bypass through rememberme cookies in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - The premature issuance of an rememberme cookie leads to |
| CVE-2026-92229 | Deferred | 未確認 | CWE-94 | The The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including |
| CVE-2026-92230 | Awaiting Analysis | 未確認 | CWE-401, CWE-772 | Apache Karaf's XmlUtils cached XML parser/transformer factories in static ThreadLocal fields on long-lived container threads. Because a ThreadLocal value outlives the OSGi bundle t |
| CVE-2026-92231 | Analyzed | 未確認 | CWE-79 | Joomla! Core - [20260915] - Core - XSS filter bypass in InputFilter via HTML5 entity decode mismatch in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3 - The checkAttribute method normalized an at |
| CVE-2026-92232 | Analyzed | 未確認 | CWE-79 | Joomla! Core - [20260916] - Core - XSS filter bypass in InputFilter via whitespace characters in HTML data URIs in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3 - The cleanAttribute method remov |
| CVE-2026-92234 | Deferred | 未確認 | CWE-79 | QloApps through 1.7.0 reflects unescaped child feature names into back-office validation error messages in the Hotel Reservation System feature management page. Authenticated back- |
| CVE-2026-92235 | Deferred | 未確認 | CWE-94 | The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.2. This is due to the software allowing use |
| CVE-2026-92237 | Awaiting Analysis | 未確認 | CWE-532 | Insertion of sensitive information into log file in the slow query logging feature in Devolutions PowerShell Universal 2026.2.5 and earlier allows an authenticated user with log re |
| CVE-2026-92238 | Analyzed | 未確認 | CWE-444 | A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations. This vulnerability was fixed in Thunderbird 156, Thu |
| CVE-2026-92239 | Analyzed | 未確認 | CWE-125 | A maliciously constructed IMAP line could cause an out-of-bounds buffer read. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3. |
| CVE-2026-92240 | Analyzed | 未確認 | CWE-125 | A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged '* ID' response, crashing Thunderbird. The affected pars |
| CVE-2026-92247 | Deferred | 未確認 | CWE-284, CWE-434 | A security vulnerability has been detected in synaptikcms synaptik-cms up to 1.3.4.4. This affects the function rename of the file admin/file-manager.php of the component Admin Fil |
| CVE-2026-92248 | Awaiting Analysis | 未確認 | CWE-190 | A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD (Photoshop Document) image file, an integer overflow occurs during |
| CVE-2026-92249 | Deferred | 未確認 | CWE-79 | The Qi Addons For Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 1.11 due to insufficien |
| CVE-2026-9225 | Analyzed | 未確認 | CWE-639 | IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an authenticated attacker to access sensitive files belonging to other users due to improper access control in the File/R |
| CVE-2026-92252 | Deferred | 未確認 | CWE-276 | Incorrect default permissions in the installation directory of WatchDog Anti-Virus on Windows allow local, low-privileged users to modify, replace, or delete antivirus binaries and |
| CVE-2026-92253 | Deferred | 未確認 | CWE-59 | Improper link resolution before file access in the quarantine restoration process of WatchDog Anti-Virus 1.8.640 on Windows allows local, low-privileged attackers to cause a quaran |
| CVE-2026-92254 | Deferred | 未確認 | CWE-20, CWE-306 | Missing Authorization in the IOCTL handlers of the wsdkd.sys kernel drivers in Watchdog WatchDog Antivirus 1.8.640 (driver versions 1.3.0.0 and earlier) on Microsoft Windows allows |
| CVE-2026-92255 | Deferred | 未確認 | CWE-125 | Netcore NR255-V version 1.5.130703 contains an out-of-bounds read vulnerability in filter_arp_put_file.cgi caused by improper use of a string handling API. Attackers can trigger an |
| CVE-2026-92256 | Deferred | 未確認 | CWE-522 | NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in l2tpd_config_show_cgi.c, ipsec_show_cgi.c, and mod_vpn_remote/plan.json read handlers. Attac |
| CVE-2026-92257 | Deferred | 未確認 | CWE-79 | Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in L7 content management pages that use eval() sinks, affecting the call board text and poli |
| CVE-2026-92259 | Deferred | 未確認 | CWE-190 | Integer overflow or wraparound vulnerability in Samsung Opensource Escargot allows attackers with write access to the bytecode-cache directory to cause a heap-based buffer overflow |
| CVE-2026-92284 | Deferred | 未確認 | CWE-770 | Caddy is an extensible server platform that uses TLS by default. In version 2.11.3 and earlier, in modules/caddyhttp/replacer.go, resolving http.request.body reads the complete req |
| CVE-2026-92288 | Deferred | 未確認 | CWE-1390 | Lemonldap::NG::Portal versions from 2.20.0 before 2.21.6, from 2.22.0 before 2.23.4 for Perl allow unauthenticated OAuth2 token introspection because checkEndPointAuthenticationCre |
| CVE-2026-92289 | Deferred | 未確認 | CWE-1390 | Lemonldap::NG::Portal versions from 2.23.0 before 2.23.4 for Perl allow a PKCE bypass for public Relying Parties in "PKCE or secret" mode because checkEndPointAuthenticationCredent |
| CVE-2026-92298 | Deferred | 未確認 | CWE-338 | EspoCRM through 10.0.8 uses PHP's rand() function to generate tokens for lead-capture opt-in, event invitation, and campaign URLs instead of a cryptographically secure generator. R |
| CVE-2026-92299 | Deferred | 未確認 | CWE-862 | @jitsi/electron-sdk before 10.0.5 exposes getDesktopSources() via contextBridge without requiring an active getDisplayMedia() picker, allowing any script in the meeting page to enu |
| CVE-2026-9231 | Deferred | 未確認 | CWE-98 | The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 6.8.0 via the w |
| CVE-2026-9232 | Deferred | 未確認 | CWE-862 | The Easy Appointments plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.12.27 via the handle_customers_ajax. This makes i |
| CVE-2026-92355 | Awaiting Analysis | 未確認 | CWE-22 | In affected versions of Octopus Server, a user with permission to modify non built-in external feeds could exploit a path traversal flaw to overwrite arbitrary files on the server, |
| CVE-2026-92356 | Deferred | 未確認 | CWE-400, CWE-404 | A vulnerability was determined in a2ui-project a2ui 0.9/0.9.1. This issue affects the function updateComponents of the file basic_functions.ts of the component Update Components. E |
| CVE-2026-92357 | Deferred | 未確認 | CWE-200, CWE-284 | A vulnerability was identified in a2ui-project a2ui 0.8/0.9/1.0. Impacted is an unknown function of the file model-processor.ts of the component Model Processor. The manipulation o |
| CVE-2026-92358 | Awaiting Analysis | 未確認 | CWE-613 | A flaw was found in the first broker login flow of Keycloak. When a user confirms an account-linking request from a different browser, a temporary proof is created to validate the |
| CVE-2026-92359 | Deferred | 未確認 | CWE-346, CWE-942 | A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. The affected element is the function create_strands_app of the file integrations/aws-strands/python/src/ag_ui_str |
| CVE-2026-92360 | Deferred | 未確認 | CWE-345, CWE-346 | A weakness has been identified in ag-ui-protocol ag-ui 1.0. The impacted element is the function prepareRunAgentInput of the file agent/agent.ts of the component Event Application |
| CVE-2026-92361 | Deferred | 未確認 | CWE-400, CWE-404 | A security vulnerability has been detected in ag-ui-protocol ag-ui 1.0. This affects an unknown function of the file sdks/community/go/pkg/client/sse/client.go of the component SSE |
| CVE-2026-92362 | Deferred | 未確認 | CWE-400, CWE-404 | A vulnerability was detected in ag-ui-protocol ag-ui 1.0. This impacts an unknown function of the file crates/ag-ui-client/src/sse.rs of the component SSE Frame Parser. Performing |
| CVE-2026-92363 | Deferred | 未確認 | CWE-400, CWE-404 | A flaw has been found in ag-ui-protocol ag-ui 1.0. Affected is an unknown function of the file src/stream/sse_parser.cpp of the component JSON Parser. Executing a manipulation can |
| CVE-2026-92364 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in itsourcecode Leave Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /module/employee/index.php. The m |
| CVE-2026-92365 | Deferred | 未確認 | CWE-404, CWE-407 | A vulnerability was found in vllm-project vllm up to 0.29.0. Affected by this issue is some unknown functionality of the file vllm/v1/sample/thinking_budget_state.py. The manipulat |
| CVE-2026-92366 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in code-projects Matrimonial System 1.0. This affects an unknown part of the file /search.php of the component Regular Search. This manipulation of t |
| CVE-2026-92368 | Deferred | 未確認 | CWE-122 | TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer overflow vulnerability in the processing of .tvs session recording files. A size |
| CVE-2026-92369 | Deferred | 未確認 | CWE-367 | TeamViewer Full Client and Host prior to version 15.82 on Windows contain a TOCTOU race condition in the installer rollback mechanism. A local low-privileged attacker can replace r |
| CVE-2026-92370 | Deferred | 未確認 | CWE-284 | An improper access control vulnerability in TeamViewer Full Client, Host, and related affected modules on Windows, Linux, and macOS allows an authenticated remote attacker to bypas |
| CVE-2026-92371 | Deferred | 未確認 | CWE-59 | TeamViewer Full Client and Host for Linux prior version 15.82 contains an improper path validation vulnerability in the Cloud Session Recording (CSR) functionality. By exploiting a |
| CVE-2026-92378 | Deferred | 未確認 | CWE-613 | A session management vulnerability exists in the Legacy UI Reduced Function Login feature of NT-ware uniFLOW Online. Under specific timing conditions during Service Offline Emergen |
| CVE-2026-92380 | Deferred | 未確認 | CWE-918 | A flaw has been found in WuzhiCMS up to 4.1.0. The impacted element is the function ckditor::saveRemote of the file coreframe/app/attachment/index.php of the component Remote Image |
| CVE-2026-92381 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in PbootCMS up to 3.2.22. This affects the function decode_string of the file apps/admin/controller/content/ContentController.php of the component Te |
| CVE-2026-92382 | Awaiting Analysis | 未確認 | CWE-787 | An out-of-bounds write flaw was found in usbredir. Starting an isochronous OUT stream with a transfer count of 1 leaves the stream's single transfer buffer permanently unsubmitted, |
| CVE-2026-92383 | Deferred | 未確認 | CWE-352, CWE-862 | A security vulnerability has been detected in PbootCMS up to 3.2.24. This vulnerability affects the function UserController::del/UserController::mod of the file apps/admin/controll |
| CVE-2026-92385 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown function of the file /admin/update_category.php of the componen |
| CVE-2026-92395 | Awaiting Analysis | 未確認 | CWE-290, CWE-348, CWE-697 | @fastify/proxy-addr is a Fastify plugin that determines a request's client address behind trusted reverse proxies, and it backs Fastify request.ip and request.ips. In versions 3.0. |
| CVE-2026-92397 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability has been found in Ruijie RG-EW3000GX EW_3.0(1)B11P380. Affected by this vulnerability is the function cc_set of the file unifyframe-sgi.elf of the component configC |
| CVE-2026-92398 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was found in Ruijie RG-EW3000GX EW_3.0(1)B11P380. Affected by this issue is some unknown functionality of the file /etc/rg_config/admin of the component user_list_n |
| CVE-2026-92399 | Deferred | 未確認 | CWE-119, CWE-122 | A vulnerability was determined in GPAC 26.07.0. This affects the function rmt_client_handle_ws_frame of the file src/utils/rmt_ws.c of the component WebSocket Handler. Executing a |
| CVE-2026-92400 | Deferred | 未確認 | CWE-345 | The Payment Gateway for PayPal on WooCommerce WordPress plugin before 9.2.1 does not verify that an incoming payment notification was confirmed in the store's configured payment en |
| CVE-2026-92401 | Deferred | 未確認 | CWE-287 | A vulnerability was identified in ChangeWeDer crm up to c07bd4c97141521af6475034bc58523beed51bbd. This vulnerability affects the function top.upstudy.crm.utils.LoginUserUtil.releas |
| CVE-2026-92402 | Deferred | 未確認 | CWE-862, CWE-863 | A security flaw has been discovered in ChangeWeDer crm up to c07bd4c97141521af6475034bc58523beed51bbd. This issue affects the function index of the file UserController.java of the |
| CVE-2026-92403 | Deferred | 未確認 | CWE-863 | The Secure Custom Fields WordPress plugin before 6.9.4 does not properly verify that a front-end form submission corresponds to the form that was rendered to the visitor, allowing |
| CVE-2026-92404 | Deferred | 未確認 | CWE-200 | The MgoSync WordPress plugin before 2.1.7 does not have authorization controls on one of its REST API endpoints, allowing unauthenticated users to retrieve the stored WooCommerce |
| CVE-2026-92405 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in SourceCodester Inventory and Monitoring System 1.0. The affected element is an unknown function of the file /index.php. Such manipulat |
| CVE-2026-92406 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in SourceCodester Inventory and Monitoring System 1.0. The impacted element is an unknown function of the file /admins/assessments/databank/btn_functio |
| CVE-2026-92410 | Deferred | 未確認 | CWE-352 | The Sign-up Sheets WordPress plugin before 2.4.0 does not properly validate the CSRF nonce that protects its sign-up deletion action, allowing attackers to delete sign-up records v |
| CVE-2026-92411 | Deferred | 未確認 | CWE-79 | The WP Delicious WordPress plugin before 1.10.8 does not validate or escape the HTML tag name taken from user-supplied recipe block data before rendering it on the front end, allo |
| CVE-2026-92413 | Awaiting Analysis | 未確認 | CWE-404, CWE-476 | A flaw has been found in Artifex MuPDF up to b6d17493700c621c0e70036980a6ebd06d2202c9. Affected by this vulnerability is the function pdf_open_filter of the file pdf-stream.c of th |
| CVE-2026-92416 | Deferred | 未確認 | CWE-617 | A vulnerability has been found in Open5GS up to 2.8.0. Affected by this issue is the function smf_n4_handle_session_report_request of the file src/smf/n4-handler.c of the component |
| CVE-2026-92417 | Deferred | 未確認 | CWE-404, CWE-476 | A vulnerability was found in Open5GS up to 2.8.0. This affects the function ogs_pfcp_parse_volume_measurement in the library lib/pfcp/types.c of the component PFCP Handler. The man |
| CVE-2026-92418 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in ChangeWeDer crm up to c07bd4c97141521af6475034bc58523beed51bbd. This vulnerability affects unknown code of the file src/main/resources/public/js/c |
| CVE-2026-92419 | Deferred | 未確認 | CWE-639 | WEBCON BPS is vulnerable to Insecure Direct Object Reference (IDOR) in the /api/vacations/{path} endpoint. The selectedPeople parameter in the Gantt vacation chart API does not val |
| CVE-2026-92420 | Deferred | 未確認 | CWE-639 | The Hydra Booking — Appointment Scheduling & Booking Calendar WordPress plugin before 1.2.2 does not verify that a booking belongs to the requesting user before modifying or deleti |
| CVE-2026-92421 | Deferred | 未確認 | CWE-639 | The Hydra Booking — Appointment Scheduling & Booking Calendar WordPress plugin before 1.2.3 does not verify that the host record being modified belongs to the user making the reque |
| CVE-2026-92422 | Deferred | 未確認 | CWE-345 | The Meow Gallery WordPress plugin before 5.5.5 does not properly sanitize a user-supplied value before concatenating it into a shortcode string that it passes to the WordPress shor |
| CVE-2026-92423 | Deferred | 未確認 | CWE-200 | The Meow Gallery WordPress plugin before 5.5.5 does not perform a proper capability check or restrict results to the requesting user's own posts before returning post data, allowin |
| CVE-2026-92424 | Deferred | 未確認 | CWE-79 | The Content Egg WordPress plugin before 11.9.0 does not verify that a user running its bulk content-import feature is authorized for the import preset they select, and switches to |
| CVE-2026-92425 | Deferred | 未確認 | CWE-639 | The Hydra Booking — Appointment Scheduling & Booking Calendar WordPress plugin before 1.2.4 does not perform object-level authorisation checks on several of its host-management ope |
| CVE-2026-92430 | Deferred | 未確認 | CWE-862 | The Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit WordPress plugin before 5.4.7 does not verify the authenticity of its PIX payment webhook before updating an orde |
| CVE-2026-92435 | Deferred | 未確認 | CWE-862 | The Mailchimp for WooCommerce WordPress plugin before 6.1.1 does not verify that the requesting user holds the required capability in the permission callback for several of its RES |
| CVE-2026-92436 | Deferred | 未確認 | CWE-639 | The Mailchimp for WooCommerce WordPress plugin before 6.3 does not require authentication or verify ownership before loading a saved cart from a request-supplied identifier that is |
| CVE-2026-92438 | Deferred | 未確認 | CWE-79 | The Ninja Forms WordPress plugin 3.15.3 does not escape submitted form field values before outputting them on the submission edit screen in the admin area, which could allow unauth |
| CVE-2026-92455 | Deferred | 未確認 | CWE-862 | yshop-crm through 2.1.3 fails to enforce authorization on the sendSms and sendMail endpoints in CrmCustomerController, allowing any authenticated back-office user to send SMS and e |
| CVE-2026-92456 | Deferred | 未確認 | CWE-862 | yshop-crm through 2.1.3 fails to enforce authorization on the saveRedisSet and getRedisSet endpoints in CrmCustomerController, allowing any authenticated back-office user to read a |
| CVE-2026-92457 | Deferred | 未確認 | CWE-862 | yshop-crm through 2.1.3 contains a missing authorization vulnerability in the CrmInvoiceController issueInvoice endpoint that allows authenticated back-office users to issue arbitr |
| CVE-2026-92458 | Deferred | 未確認 | CWE-862 | yshop-crm through 2.1.3 contains a missing authorization vulnerability in the StoreProductController onSale handler that allows authenticated back-office users to modify product sa |
| CVE-2026-92459 | Deferred | 未確認 | CWE-862 | yshop-crm through 2.1.3 contains a missing authorization vulnerability in the CrmCluesController receiveCustomer endpoint that allows authenticated back-office users to claim sales |
| CVE-2026-92460 | Deferred | 未確認 | CWE-862 | yshop-crm through 2.1.3 fails to enforce authorization on the GET /admin-api/crm/operatelog/page endpoint, allowing any authenticated back-office user to access the installation-wi |
| CVE-2026-92461 | Deferred | 未確認 | CWE-862 | yshop-crm through 2.1.3 contains a missing authorization vulnerability in the GET /admin-api/crm/flow/flow-users endpoint that allows any logged-in back-office user to access appro |
| CVE-2026-92462 | Deferred | 未確認 | CWE-862 | yshop-crm through 2.1.3 fails to enforce authorization checks on the CrmFlowController deleteFlowStep endpoint, allowing any authenticated back-office user to delete arbitrary appr |
| CVE-2026-92463 | Deferred | 未確認 | CWE-862 | yshop-crm through 2.1.3 contains an authorization failure in the GET /admin-api/system/user/page endpoint where the @PreAuthorize annotation is commented out, allowing authenticate |
| CVE-2026-92465 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum WP Mega Menu allows Blind SQL Injection. This issue affects WP Mega M |
| CVE-2026-92466 | Deferred | 未確認 | CWE-862 | zlt2000 microservices-platform through 6.0.0 contains a missing authorization vulnerability where the zlt.security.auth.urlPermission.enable flag defaults to false, disabling all p |
| CVE-2026-92467 | Deferred | 未確認 | CWE-620 | zlt2000 microservices-platform through 6.0.0 contains an unverified password change vulnerability in the PUT /users/password endpoint that allows authenticated users to change any |
| CVE-2026-92468 | Deferred | 未確認 | CWE-639 | zlt2000 microservices-platform through 6.0.0 contains an authorization bypass vulnerability in the search-center service that allows authenticated attackers to read any Elasticsear |
| CVE-2026-92469 | Deferred | 未確認 | CWE-639 | zlt2000 microservices-platform through 6.0.0 contains an authorization bypass vulnerability in the file-center module DELETE /files/{id} endpoint that performs no ownership validat |
| CVE-2026-92470 | Analyzed | 未確認 | CWE-862 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allo |
| CVE-2026-92472 | Deferred | 未確認 | CWE-119, CWE-416 | A vulnerability was determined in GPAC 26.08-DEV. The affected element is the function gf_node_deactivate_ex of the file src/scenegraph/base_scenegraph.c of the component MP4Box. E |
| CVE-2026-92473 | Deferred | 未確認 | CWE-119, CWE-416 | A vulnerability was identified in GPAC 26.08-DEV. The impacted element is the function gf_sg_command_del of the file src/scenegraph/commands.c of the component BIFS Handler. The ma |
| CVE-2026-92474 | Deferred | 未確認 | CWE-119, CWE-416 | A security flaw has been discovered in GPAC 26.08-DEV. This affects the function gf_inline_get_proto_lib of the file src/compositor/mpeg4_inline.c of the component Proto Link Handl |
| CVE-2026-92475 | Deferred | 未確認 | CWE-119, CWE-125 | A weakness has been identified in GPAC 26.08-DEV. This impacts the function wait_for_header_and_parse of the file src/utils/downloader.c. This manipulation of the argument Content- |
| CVE-2026-92476 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: keembay - Initialize completion before requesting IRQ kmb_ocs_aes_probe() requests the device IRQ befo | |
| CVE-2026-92477 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: debugfs: Reserve space for a string terminator ufs_saved_err_write() copies user input into a zero- | |
| CVE-2026-92478 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Validate connected lane counts The connected lane count is used by TX equalization code to in | |
| CVE-2026-92479 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: Avoid NULL CQE dereference when reporting invalid tags The single-doorbell completion path can call | |
| CVE-2026-92480 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Validate string descriptors The string descriptor length includes a two-byte header while the | |
| CVE-2026-92481 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: mediatek: free EINT resources on unbind mtk_eint_do_init() creates an IRQ domain, populates it with a | |
| CVE-2026-92482 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip The gpio_chip is allocated with device-managed m | |
| CVE-2026-92483 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: liveupdate: Remember FLB retrieve() status LUO keeps track of successful retrieve attempts on an FLB. It does | |
| CVE-2026-92484 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix use-after-free in find_pos_and_ways() error path The error path releases its reference to a sw | |
| CVE-2026-92485 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix WARNING in bpf_tracing_link_release The trampoline could be corrupted by the blindly 'tr->flags = BPF | |
| CVE-2026-92486 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix CFI mismatch in task work callback BPF subprograms use the bpf_callback_t ABI, but task work invokes | |
| CVE-2026-92487 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: exfat: fix valid_size extension over a shared writable mapping When a shared writable mapping has its valid_si | |
| CVE-2026-92488 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: complete object teardown when the destroy command fails erdma_destroy_qp(), erdma_destroy_cq(), er | |
| CVE-2026-92489 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix skb double-free in xfrm_dev_direct_output() A return value other than 1 from local_out() means that | |
| CVE-2026-92490 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Unrequest devices if driver registration fails scmi_driver_register() requests protocol de | |
| CVE-2026-92491 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Roll back partial protocol table registration scmi_protocol_table_register() can leave ear | |
| CVE-2026-92492 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cpufreq/amd-pstate: handle missing policy in dynamic EPP callbacks cpufreq_cpu_get() returns NULL when no cpuf | |
| CVE-2026-92493 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: amd-pstate-ut: Skip tests when amd-pstate driver is not active The crash issue may occur when modprob | |
| CVE-2026-92494 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix buffer_head leak in ext4_init_orphan_info ext4_init_orphan_info() reads orphan file blocks with ext4 | |
| CVE-2026-92495 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap bnxt_re_mmap() rejects VM_WRITE for the DBR_PAGE and T | |
| CVE-2026-92496 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Avoid buffer overread in ath11k_wmi_tlv_op_rx() Currently, in ath11k_wmi_tlv_op_rx(), the firmwa | |
| CVE-2026-92497 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Avoid buffer overread in ath12k_wmi_op_rx() Currently, in ath12k_wmi_op_rx(), the firmware buffe | |
| CVE-2026-92498 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: avoid buffer overreads in WMI event handlers The following WMI event handlers currently read fro | |
| CVE-2026-92499 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ext4: validate readdir offset before accessing dirent A corrupted directory can trigger the following KASAN re | |
| CVE-2026-92500 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ext4: use fsdata to track inline data write state and fix race Instead of checking the live inode state (ext4_ | |
| CVE-2026-92501 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ext4: drain in-flight DIO before buffered write fallback generic/746 started failing intermittently on ext3 (n | |
| CVE-2026-92502 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ext4: clear stale xarray tags on folios skipped during writeback In data=journal mode, the writeback thread ca | |
| CVE-2026-92503 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() Syzbot/stress-ng reported an ABBA deadlock in ext4 wh | |
| CVE-2026-92504 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: thermal: intel: int3400: clean up ODVP on probe failures evaluate_odvp() creates per-ODVP sysfs files before t | |
| CVE-2026-92505 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix undefined behavior in devid_write debugfs function When for_each_pci_segment() loop completes w | |
| CVE-2026-92506 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix requested device removal race scmi_protocol_device_unrequest() drops scmi_requested_de | |
| CVE-2026-92507 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in ib_dealloc_pd_user() When accessing a PD via the netlink path the o | |
| CVE-2026-92508 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in ib_free_cq() When accessing a CQ via the netlink path the only sync | |
| CVE-2026-92509 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in counter_release() When accessing a counter via the netlink path the | |
| CVE-2026-92510 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in ib_destroy_srq_user() When accessing a SRQ via the netlink path the | |
| CVE-2026-92511 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in ib_destroy_cq_user() When accessing a CQ via the netlink path the o | |
| CVE-2026-92512 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix use after free in ib_query_qp() When querying a QP via the netlink flow the only synchronizatio | |
| CVE-2026-92513 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mana_ib: drain QP references after partial table insertion mana_table_store_ud_qp() publishes a QP at its | |
| CVE-2026-92514 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Fix CEQ tasklet use-after-free on removal Each CEQ interrupt handler only schedules eqc->tasklet. | |
| CVE-2026-92515 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve unique-field state across nested structs btf_find_struct_field() initializes a fresh seen mask f | |
| CVE-2026-92516 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix offset warn check for bpf_res_spin_lock Sashiko pointed out correctly that the case statement for BPF | |
| CVE-2026-92517 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf, riscv: Fix extable handling for arena load_acquire emit_atomic_ld_st() returns 1 to have build_body() ski | |
| CVE-2026-92518 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Fix kernel stack corruption in tailcall with CFI When CONFIG_CFI_CLANG is enabled, prog->bpf_func | |
| CVE-2026-92519 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Fix memory leak in bpf_jit_free When bpf_int_jit_compile() is called for subprograms, it returns e | |
| CVE-2026-92520 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Zero queue and stack outputs on lock failure Queue and stack pop/peek helpers accept an uninitialized out | |
| CVE-2026-92521 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ACPI: PCI: Clear driver_data on all paths that free the acpi_pci_root acpi_pci_root_add() assigns the freshly | |
| CVE-2026-92522 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: validate MADT IOAPIC entry bounds The IOAPIC hotplug lookup parses both MADT and _MAT records | |
| CVE-2026-92523 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/nldev: validate dynamic counter attribute length RDMA_NLDEV_ATTR_STAT_HWCOUNTERS is a nested attribute wh | |
| CVE-2026-92524 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc() When its_irq_gic_domain_alloc() fails, the foll | |
| CVE-2026-92525 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] For a user QP, qp->sq.queue is a ring the ap | |
| CVE-2026-92526 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/leave/index.php. Executing a manipulation of the argument ID |
| CVE-2026-92527 | Deferred | 未確認 | CWE-918 | A vulnerability has been found in chatwoot up to 4.17.1. This impacts an unknown function of the file callbacks_controller.rb of the component Shopify OAuth. The manipulation leads |
| CVE-2026-92529 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allo |
| CVE-2026-92530 | Analyzed | 未確認 | CWE-348 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have a |
| CVE-2026-92540 | Deferred | 未確認 | CWE-269 | The Import and export users and customers WordPress plugin before 2.5.2 does not correctly enforce the promote_users capability when assigning roles during a CSV import, allowing u |
| CVE-2026-92541 | Deferred | 未確認 | CWE-269 | The Import and export users and customers WordPress plugin before 2.5.2 does not enforce the promote_users capability in its front-end import functionality, allowing users with onl |
| CVE-2026-92550 | Analyzed | 未確認 | CWE-789 | A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Broker-J |
| CVE-2026-92554 | Deferred | 未確認 | CWE-79 | The ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via Query-String Parameter Name in al |
| CVE-2026-92560 | Analyzed | 未確認 | CWE-770 | A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Broker-J |
| CVE-2026-92561 | Deferred | 未確認 | CWE-79 | The Booking Calendar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'options' parameter in all versions up to, and including, 11.8.2 due to insufficie |
| CVE-2026-92564 | Analyzed | 未確認 | CWE-674 | A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid Broker-J: through |
| CVE-2026-92565 | Deferred | 未確認 | CWE-359 | Rallly before 4.15.0 contains an information disclosure vulnerability in the polls.get tRPC procedure that returns scheduled-event invitee names and email addresses to unauthentica |
| CVE-2026-92566 | Deferred | 未確認 | CWE-918 | DataGear through 6.0.0 contains a server-side request forgery vulnerability in the /dataSet/preview/Http endpoint that allows unauthenticated attackers to execute arbitrary HTTP re |
| CVE-2026-92567 | Deferred | 未確認 | CWE-639 | TDuck survey form through version 5.0 contains an authorization bypass vulnerability in the POST /user/form/data/update endpoint that allows authenticated users to overwrite other |
| CVE-2026-92568 | Deferred | 未確認 | CWE-918 | MLRun through 1.11.0 contains a server-side request forgery vulnerability in the WebhookNotification handler that allows authenticated users to make the API server send arbitrary H |
| CVE-2026-92569 | Deferred | 未確認 | CWE-918 | Hippo4j through 1.5.0 contains a server-side request forgery vulnerability in four ThreadPoolController endpoints that fail to validate the clientAddress parameter. Authenticated a |
| CVE-2026-92570 | Deferred | 未確認 | CWE-862 | reNgine through 2.2.0 contains an authorization bypass vulnerability in the GetFileContents API endpoint that allows any authenticated user to read bundled recon tool configuration |
| CVE-2026-92571 | Rejected | 未確認 | Rejected reason: CVE ID reserved in error and not assigned to a vulnerability. The correct CVE ID is CVE-2026-92574. | |
| CVE-2026-92573 | Analyzed | 未確認 | CWE-409 | Improper handling of compressed data in the shared GZIP decompressor used for AMQP 0-8/0-9/0-9-1 and AMQP 0-10 message delivery, message conversion and HTTP management JSON renderi |
| CVE-2026-92574 | Awaiting Analysis | 未確認 | CWE-250 | A vulnerability in CRI-O checkpoint restore allows a user who can create a pod from a malicious checkpointed container to bypass the destination Kubernetes security context. The re |
| CVE-2026-92576 | Deferred | 未確認 | CWE-918 | HKUDS nanobot before 0.3.0 contains a server-side request forgery vulnerability in the WebFetchTool component where the _validate_url() function fails to block internal IP ranges a |
| CVE-2026-92577 | Deferred | 未確認 | CWE-639 | In AVideo through 29.0, the API get_api_video endpoint contains a broken access control vulnerability in the clean_title branch that returns user-group-restricted videos with owner |
| CVE-2026-92578 | Deferred | 未確認 | CWE-287 | WWBN AVideo through 29.0 contains an authentication bypass vulnerability where the stored password hash is accepted as a valid login credential through two independent code paths i |
| CVE-2026-92579 | Deferred | 未確認 | CWE-289 | In AVideo through 29.0, the autoCSRFGuard() function maintains a hardcoded allowlist of exempt basenames tested without directory context, allowing plugin files matching core filen |
| CVE-2026-92580 | Deferred | 未確認 | CWE-78 | In AVideo through 29.0, the CloneSite plugin is vulnerable to stored OS command injection. In plugin/CloneSite/cloneClient.json.php (line ~270) the stored SSH password is substitut |
| CVE-2026-92581 | Deferred | 未確認 | CWE-20 | In AVideo through 29.0, Like::__construct() performs counter arithmetic on raw request values before validation, allowing array-typed parameters to desynchronize stored votes from |
| CVE-2026-92582 | Deferred | 未確認 | CWE-352 | AVideo (WWBN/AVideo) through 29.0 (commit e01e41ecc) is vulnerable to cross-site request forgery. objects/videoAddNew.json.php disables AVideo's automatic CSRF guard ($global['skip |
| CVE-2026-92583 | Deferred | 未確認 | CWE-307 | AVideo through 29.0 contains a race condition in the enforceRateLimit() function that fails to atomically increment rate limit counters, allowing attackers to bypass all rate limit |
| CVE-2026-92584 | Deferred | 未確認 | CWE-79 | AVideo through 29.0 (current revision e01e41ecc) contains a stored cross-site scripting vulnerability. The unauthenticated view-counter endpoint objects/videoAddViewCount.json.php |
| CVE-2026-92585 | Deferred | 未確認 | CWE-862 | AVideo through 29.0 (commit c3edcc274c389816d434acadac07ee78eaf330c1) fails to validate video access permissions in the API like endpoint, allowing logged-in users to vote on passw |
| CVE-2026-92586 | Deferred | 未確認 | CWE-862 | AVideo through 29.0 (commit c3edcc274c389816d434acadac07ee78eaf330c1) fails to verify video access permissions in the set_api_comment function, allowing authenticated users to post |
| CVE-2026-92587 | Awaiting Analysis | 未確認 | CWE-426 | n8n is a workflow automation platform. In versions before 1.123.76, 2.37.7, and 2.38.2, the Git node validated a relative remote URL against the configured repositoryPath but then |
| CVE-2026-92588 | Awaiting Analysis | 未確認 | CWE-639 | n8n is a workflow automation platform. In n8n versions before 1.123.76, 2.37.7, and 2.38.2, the source control push endpoint derived the set of files to push from the file paths an |
| CVE-2026-92589 | Awaiting Analysis | 未確認 | CWE-862 | Craft CMS 5.0.0 through 5.10.12 (fixed in 5.10.13) contains a broken access control flaw in the nested-elements reorder endpoint. When an authenticated control panel user with view |
| CVE-2026-92590 | Awaiting Analysis | 未確認 | CWE-79 | Craft CMS versions from 5.7.0 before 5.10.13 contain a stored cross-site scripting vulnerability in the Generated Fields feature that disables Twig autoescaping and fails to encode |
| CVE-2026-92591 | Awaiting Analysis | 未確認 | CWE-636 | Craft CMS 5.0.0 through 5.10.12 treats a database connection failure as meaning that Craft is not installed, which makes anonymous installer actions — including install/validate-si |
| CVE-2026-92592 | Awaiting Analysis | 未確認 | CWE-1336 | Craft CMS 4.8.0 through 4.18.5 and 5.0.0 through 5.10.12 sign an authenticated user's attacker-controlled license-shun cookie with the same key and format used to validate signed r |
| CVE-2026-92593 | Awaiting Analysis | 未確認 | CWE-94 | Craft CMS versions 5.10.0 through 5.10.12 contain an incomplete fix for CVE-2026-55794: the Controller::getPostedRedirectUrl() -> View::renderObjectTemplate() sink remained unsandb |
| CVE-2026-92594 | Awaiting Analysis | 未確認 | CWE-200 | Craft CMS 5.0.0-RC1 through versions before 5.11.0 incorrectly authorize the GraphQL draftCreator and revisionCreator fields: instead of requiring the user-data scope enforced by G |
| CVE-2026-92595 | Awaiting Analysis | 未確認 | CWE-73 | Nodemailer (npm package `nodemailer`) versions 9.1.0 and earlier do not honor the `disableFileAccess` and `disableUrlAccess` sandbox options when message content is resolved throug |
| CVE-2026-92596 | Awaiting Analysis | 未確認 | CWE-400 | Nodemailer before 9.1.0 contains a quadratic time complexity vulnerability in the addressparser component that allows remote attackers to cause denial of service by supplying a cra |
| CVE-2026-92597 | Awaiting Analysis | 未確認 | CWE-436 | Nodemailer versions >= 6.9.16 and < 9.1.0 mis-parse RFC 5322 comments in email addresses: in lib/addressparser, a comment closed immediately before a non-break character causes the |
| CVE-2026-92598 | Awaiting Analysis | 未確認 | CWE-436 | Nodemailer before 9.1.0 fails to apply UTS-46 normalization when encoding international domain names, causing the domain resolver to compute a different Punycode A-label than stand |
| CVE-2026-92599 | Awaiting Analysis | 未確認 | CWE-1333 | joi (npm package `joi`, hapi.js) versions >=17.2.0 <17.13.7 and >=18.0.0 <18.2.6 are vulnerable to regular expression denial of service in the `Joi.string().isoDate()` validation r |
| CVE-2026-92600 | Deferred | 未確認 | CWE-862 | Guns through 8.3.5 contains an information disclosure vulnerability in SysUserController where /sysUser/detail and /sysUser/page endpoints omit requiredPermission configuration, ca |
| CVE-2026-92601 | Deferred | 未確認 | CWE-862 | Guns through 8.3.5 contains an improper access control vulnerability in SysNoticeController where requiredPermission defaults to false and is not overridden by any action methods. |
| CVE-2026-92602 | Deferred | 未確認 | CWE-918 | TDuck survey form through version 5.3 fails to validate webhook URLs or verify form ownership in the WebhookConfigController. Authenticated attackers can attach webhooks to other u |
| CVE-2026-92603 | Deferred | 未確認 | CWE-639 | ContiNew Admin through 4.1.0 contains an authorization bypass vulnerability in the personal message delete endpoint that allows authenticated users to delete other users' messages |
| CVE-2026-92604 | Deferred | 未確認 | CWE-22 | Scirius through 3.8.0 contains an arbitrary file write vulnerability in the PCAP filestore upload endpoint that allows default User role users to write attacker-controlled JSON con |
| CVE-2026-92605 | Deferred | 未確認 | CWE-639 | IRIS through 2.4.29 fails to properly validate case authorization in comment listing endpoints for notes, tasks, IOCs, assets, and evidence items. Attackers with access to any sing |
| CVE-2026-92608 | Analyzed | 未確認 | CWE-248 | Improper handling of property-encoding exceptions in AMQP 1.0-to-AMQP 0-10 message conversion allows authenticated message producers to disrupt delivery to AMQP 0-10 consumers via |
| CVE-2026-92609 | Analyzed | 未確認 | CWE-384 | Session fixation in HTTP management authentication allows remote attackers to gain unauthorized access to an authenticated management session via reuse of a session identifier reta |
| CVE-2026-92611 | Awaiting Analysis | 未確認 | CWE-1023, CWE-863 | In Eclipse Ankaios versions 0.6.0 to before 1.0.4, `LogRule::matches` in the agent control-interface authorizer stops at the first wildcard pattern in a single rule instead of eval |
| CVE-2026-92612 | Deferred | 未確認 | CWE-749 | In Eclipse iceoryx2 versions greater than v0.8.0, the StaticString exposes its contents as mutable bytes through safe APIs, while String::as_str() converts those bytes into a Rust |
| CVE-2026-92615 | Awaiting Analysis | 未確認 | CWE-413 | A flaw was found in flightctl. The configureRepoHTTPSClient() function in the device-render worker builds a per-repository tls.Config (which may include InsecureSkipVerify, a custo |
| CVE-2026-92616 | Deferred | 未確認 | CWE-613 | FileRise before version 3.28.0 contains a privilege escalation vulnerability that allows authenticated low-privilege attackers to gain unauthorized read and write access by exploit |
| CVE-2026-92619 | Deferred | 未確認 | CWE-269 | The Booking Calendar plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 11.8.2 via the `wpbc_ajax_option_save` AJAX action. The vulner |
| CVE-2026-92622 | Deferred | 未確認 | CWE-79 | The Strong Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'lightbox_class' Shortcode Attribute in all versions up to, and including, 3.3.8 due t |
| CVE-2026-92625 | Deferred | 未確認 | CWE-306 | Control iD iDSecure versions prior to 4.8.3.0 are affected by an unauthenticated Denial of Service. The /api/license/restartService endpoint is reachable without authentication a |
| CVE-2026-92626 | Deferred | 未確認 | CWE-476 | Control iD iDSecure versions prior to 4.8.3.0 are affected by an unauthenticated Denial of Service. The /api/dguardintegration/dguardVersion endpoint dereferences DGuard integrat |
| CVE-2026-92627 | Awaiting Analysis | 未確認 | CWE-416 | A heap-use-after-free vulnerability exists in H5T__conv_f_f() in src/H5Tconv.c in HDF5 before 1.14.2. When converting a compound datatype containing floating-point members during a |
| CVE-2026-92628 | Analyzed | 未確認 | CWE-362 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under a race condition, the MCP searc |
| CVE-2026-92680 | Awaiting Analysis | 未確認 | CWE-522 | Araxis Merge for Windows version 2011.4074 through 2026.0 stores user-configured credentials for remote servers in the Windows registry and does not apply sufficient cryptographic |
| CVE-2026-92692 | Deferred | 未確認 | CWE-89 | Sulu is an open-source PHP content management system based on the Symfony framework. Prior to 2.6.25 and 3.0.8, the affected Sulu 2.6 and 3.0 release lines have a Smart Content Que |
| CVE-2026-92700 | Deferred | 未確認 | CWE-178 | Caddy is an extensible server platform that uses TLS by default. In version 2.11.3 and earlier, in modules/caddyhttp/fileserver/staticfiles.go, fileHidden() uses case-sensitive fil |
| CVE-2026-92701 | Deferred | 未確認 | CWE-346, CWE-354 | Cocos AI is a confidential computing system for AI. In Cocos AI 0.8.2 and earlier, VerifTeeAttestation in the Intel TDX aTLS verifier receives an expected current-session value but |
| CVE-2026-92702 | Deferred | 未確認 | CWE-346 | Cocos AI is a confidential computing system for AI. In Cocos AI 0.8.2 and earlier, VerifyAttestationReportTLS in the AMD SEV-SNP verifier sets Policy.ReportData only when its calle |
| CVE-2026-92706 | Awaiting Analysis | 未確認 | CWE-200, CWE-346, CWE-668 | Dark Reader is an accessibility browser extension that makes web pages colors dark. Prior to 4.9.126, a website can cause the browser extension's image inversion pipeline to reques |
| CVE-2026-92708 | Awaiting Analysis | 未確認 | CWE-200, CWE-226 | Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job. In versions 5.1.0 through 5.9.2, stringify and uneval f |
| CVE-2026-92712 | Deferred | 未確認 | CWE-79 | The ReactPress – Create React App for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'permalink' parameter in all versions up to, and including |
| CVE-2026-92713 | Deferred | 未確認 | CWE-862 | The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the upload_image fun |
| CVE-2026-92714 | Deferred | 未確認 | CWE-639 | The Download Manager plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.3.68 via the duplicate() function hooked on admin_in |
| CVE-2026-92716 | Awaiting Analysis | 未確認 | CWE-639 | Shuffle through 2.2.1 contains a cross-tenant privilege escalation vulnerability in the HandleApiGeneration endpoint that allows administrators to reset and read API keys of non-ad |
| CVE-2026-92717 | Deferred | 未確認 | CWE-306 | Covenant through 0.6 registers the CovenantHub SignalR hub without an Authorize attribute, allowing unauthenticated callers to invoke CreateHttpListener and receive a signed JWT to |
| CVE-2026-92718 | Awaiting Analysis | 未確認 | CWE-347 | Nuclei versions before 3.11.1 cache template signature verification based only on file modification time without content checksums. Attackers can replace verified templates with un |
| CVE-2026-92719 | Awaiting Analysis | 未確認 | CWE-918 | Quickwit through 0.9.0 fails to validate the host and scheme of the queue_url parameter in SQS file sources, allowing attackers to make the node issue requests to arbitrary interna |
| CVE-2026-92720 | Deferred | 未確認 | CWE-306 | Kubero through 3.1.1 fails to apply authentication guards to the notifications API endpoints, allowing unauthenticated attackers to read webhook secrets and service URLs. Attackers |
| CVE-2026-92729 | Deferred | 未確認 | CWE-306, CWE-862 | SigNoz versions 0.88.0 through 0.141.0 fail to apply authorization wrappers to trace-funnel analytics endpoints in the HTTP handler. Unauthenticated attackers can submit arbitrary |
| CVE-2026-92730 | Deferred | 未確認 | CWE-79 | LimeSurvey Community Edition 7.0.14 contains a reflected cross-site scripting vulnerability on the administrative survey-participant CSV import result page. |
| CVE-2026-92745 | Awaiting Analysis | 未確認 | CWE-214 | A flaw was found in cockpit-machines. This vulnerability allows a local attacker with the ability to inspect process metadata to disclose a sensitive Red Hat Subscription Managemen |
| CVE-2026-92746 | Deferred | 未確認 | CWE-79 | The Gutenverse – WordPress Blocks, Page Builder & Site Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Comment Block 'suffixMain' Attribute in all |
| CVE-2026-92747 | Awaiting Analysis | 未確認 | CWE-214 | A flaw was found in `cockpit-machines`. This vulnerability allows a local attacker with the ability to inspect running processes to expose sensitive guest virtual machine (VM) cred |
| CVE-2026-92748 | Awaiting Analysis | 未確認 | CWE-22 | BC Security Empire before 6.7.1 fails to validate the multipart filename parameter in upload endpoints, allowing authenticated operators to write files to arbitrary paths on the C2 |
| CVE-2026-92749 | Deferred | 未確認 | CWE-338 | SafeLine through 9.4.1 derives the management console session-signing secret from a time-seeded math/rand generator, allowing attackers to reconstruct the key offline. Unauthentica |
| CVE-2026-92750 | Awaiting Analysis | 未確認 | CWE-862 | Harness through 3.3.0 omits access control validation in the infrastructure provider read endpoint, allowing authenticated users to retrieve provider configurations from spaces the |
| CVE-2026-92751 | Deferred | 未確認 | CWE-352 | CMAK through 3.0.0.6 fails to install a cross-site request forgery filter, allowing attackers to perform state-changing actions on behalf of authenticated operators. Attackers can |
| CVE-2026-92752 | Deferred | 未確認 | CWE-639 | metasfresh DocumentAttachmentsRestController and CommentsRestController endpoints check only that callers are logged in without enforcing record-level permissions. Attackers can en |
| CVE-2026-92753 | Deferred | 未確認 | CWE-862 | PatrowlManager through 1.8.4 contains an authorization bypass vulnerability in the events and alerts API endpoints that lack ownership filtering. Authenticated attackers can read p |
| CVE-2026-92754 | Deferred | 未確認 | CWE-862 | PatrowlManager through 1.8.4 contains an improper access control vulnerability in the user listing API endpoint where the authorization decorator is commented out. Authenticated at |
| CVE-2026-92756 | Analyzed | 未確認 | CWE-311 | Applications built on MongoDB Entity Framework Core Provider which combine independent encryption settings and this provider's encryption settings may silently lose TLS and schema- |
| CVE-2026-92757 | Analyzed | 未確認 | CWE-311 | Applications built on MongoDB Entity Framework Core Provider which place a database name in the connection string may inadvertently disable field level encryption. |
| CVE-2026-92758 | Analyzed | 未確認 | CWE-532 | If logging mode is set to DEBUG or a malformed MongoDB connection string is used, application logs may collect sensitive information (if in use) such as passwords and AWS secure ac |
| CVE-2026-92759 | Deferred | 未確認 | CWE-522 | SecObserve versions before 1.59.1 contain an information disclosure vulnerability in the ApiConfigurationSerializer that fails to strip the basic_auth_password field from API confi |
| CVE-2026-92760 | Deferred | 未確認 | CWE-863 | Shlink through 5.1.6 fails to enforce API key role restrictions when issuing Mercure subscription tokens, allowing restricted keys to subscribe to all topics. Attackers with author |
| CVE-2026-92761 | Deferred | 未確認 | CWE-862 | WebVirtCloud fails to properly validate permission flags in UserInstance grants, allowing view-only users to perform privileged actions. Attackers with read-only grants can power o |
| CVE-2026-92762 | Deferred | 未確認 | CWE-862 | Pelican Panel versions before 1.0.0-beta35 enforce startup write permissions only through disabled form controls rather than server-side authorization checks. Attackers with startu |
| CVE-2026-92763 | Awaiting Analysis | 未確認 | CWE-862 | Rundeck through 6.2.1 fails to properly authorize the importConfig and importNodesSources parameters in the project archive import endpoint. Attackers with only the import action c |
| CVE-2026-92764 | Deferred | 未確認 | CWE-863 | OpenCVE versions 2.4.0 before 3.1.0 fails to properly scope the organizations API endpoint to the token's organization, instead returning the token creator's memberships. Attackers |
| CVE-2026-92765 | Deferred | 未確認 | CWE-639 | ArcherySec through 2.0.6 fails to validate organization ownership in the WebScanVulnList endpoint, allowing authenticated users to read vulnerability findings from other organizati |
| CVE-2026-92768 | Awaiting Analysis | 未確認 | CWE-214 | A flaw was found in cockpit-machines. This vulnerability allows a local attacker to expose sensitive Virtual Machine (VM) credentials, including plaintext passwords, by inspecting |
| CVE-2026-92770 | Awaiting Analysis | 未確認 | CWE-200 | Harbor through 2.15.2 fails to properly restrict the q query parameter filtering on scanner registration access credentials. Project administrators can exploit fuzzy filtering on t |
| CVE-2026-92771 | Deferred | 未確認 | CWE-863 | Twenty before 2.35.0 fails to validate field and row permissions in the groupBy-with-records GraphQL resolver, allowing authenticated users to bypass permission checks. Attackers w |
| CVE-2026-92772 | Deferred | 未確認 | CWE-862 | Leantime before 3.9.6 contains an authorization bypass vulnerability in the HTMX plugin install endpoint that lacks permission validation. Authenticated users with limited roles ca |
| CVE-2026-92773 | Deferred | 未確認 | CWE-639 | Trigger.dev before 4.6.0 fails to verify that an authenticated user controls a GitHub App installation before binding it to their organization. Attackers can claim another user's G |
| CVE-2026-92774 | Awaiting Analysis | 未確認 | CWE-863 | Wiki.js through 2.5.314 omits page tags from authorization checks in multiple GraphQL resolvers, allowing tag-based access restrictions to be bypassed. Attackers can query the list |
| CVE-2026-92775 | Awaiting Analysis | 未確認 | CWE-918 | Wiki.js through 2.5.314 contains a server-side request forgery vulnerability in the Image Prefetch renderer that fetches arbitrary URLs without protocol, host, or address validatio |
| CVE-2026-92776 | Awaiting Analysis | 未確認 | CWE-863 | Wiki.js through 2.5.314 fails to require path separators when matching START and END page rules, allowing attackers to access pages sharing a prefix with authorized folders. Users |
| CVE-2026-92778 | Deferred | 未確認 | CWE-693 | CMAK through 3.0.0.6 fails to apply the scheduled leader election feature toggle to HTML form routes, allowing attackers to bypass the feature gate. Attackers can access the form e |
| CVE-2026-92779 | Deferred | 未確認 | CWE-1321 | Builder.io Gen2 SDKs through versions 5.2.11 and 0.25.13 contain a prototype pollution vulnerability in the deep-set helper function that processes content block bindings without v |
| CVE-2026-92780 | Deferred | 未確認 | CWE-862 | KnowStreaming through 3.4.1 fails to enforce role-based access control on REST API endpoints, allowing any authenticated user to access protected functionality. Attackers can call |
| CVE-2026-92781 | Deferred | 未確認 | CWE-1321 | Builder.io Gen2 SDKs through versions 5.2.11 and 0.25.13 contain a prototype pollution vulnerability in the unflatten helper that processes builder.userAttributes query parameters |
| CVE-2026-92782 | Awaiting Analysis | 未確認 | CWE-863 | Chroma through 1.5.9 fails to validate tenant and database segments when resolving collections, allowing authenticated attackers to access collections from other tenants by knowing |
| CVE-2026-92783 | Deferred | 未確認 | CWE-862 | Yeti through 2.11.0 fails to validate caller permissions in the DELETE /api/v2/rbac/{id} endpoint, allowing users with read access to delete access control relationships. Attackers |
| CVE-2026-92784 | Deferred | 未確認 | CWE-94 | @refinedev/inferencer through 7.0.0 fails to escape API field names when interpolating them into generated JSX source code. Attackers controlling the data provider can inject malic |
| CVE-2026-92785 | Deferred | 未確認 | CWE-502 | Angel through 3.3.0 deserializes untrusted setAlgoMetrics payload using Kryo without class registration or allowlist validation. Unauthenticated network attackers can instantiate a |
| CVE-2026-92786 | Awaiting Analysis | 未確認 | CWE-787 | LightGBM through 4.7.0 fails to validate child and split array values when parsing text models, allowing attackers to write out-of-bounds memory during SHAP prediction. Attackers c |
| CVE-2026-92787 | Deferred | 未確認 | CWE-798 | Feast through 0.66.0 fails to verify JWT token signatures before establishing user identity, allowing attackers to bypass all role-based access control by presenting an unverified |
| CVE-2026-92788 | Deferred | 未確認 | CWE-863 | Coze Studio through 0.5.1 fails to validate that table names in workflow SQL customization nodes belong to the caller's workspace. Authenticated attackers can enumerate predictable |
| CVE-2026-92789 | Deferred | 未確認 | CWE-918 | Graylog through 7.1.4 validates outbound URLs against an allowlist before making requests but fails to re-validate after following HTTP redirects. Attackers with lookup table or ev |
| CVE-2026-92790 | Deferred | 未確認 | CWE-703 | Higress before 2.2.4 panics when processing a Cookie header segment without an equals sign, causing the plugin wrapper to recover and return a continue action that bypasses AI toke |
| CVE-2026-92791 | Deferred | 未確認 | CWE-22 | Uber Kraken through 0.1.29 fails to validate the tag parameter in the /tags/{tag} endpoint, allowing unauthenticated attackers to traverse outside the configured storage root. Atta |
| CVE-2026-92792 | Awaiting Analysis | 未確認 | CWE-287 | OpenNHP through 1.0.2 selects its trusted-execution attestation verifier based on attacker-supplied evidence containing a test_purpose key, causing the FallbackVerifier to execute |
| CVE-2026-92793 | Deferred | 未確認 | CWE-863 | GoAdmin through 1.2.26 fails to properly anchor the logout pattern when checking permissions, allowing authenticated users to bypass permission checks by appending a query paramete |
| CVE-2026-92794 | Deferred | 未確認 | CWE-862 | OpenSign through 2.41.3 fails to validate caller identity in the getDocument cloud function when one-time-password verification is disabled. Attackers can supply a document identif |
| CVE-2026-92795 | Deferred | 未確認 | CWE-918 | Coze Studio through 0.5.1 fails to restrict the server URL supplied when registering plugin tools, allowing authenticated users to make the backend fetch internal services. Attacke |
| CVE-2026-92796 | Deferred | 未確認 | CWE-863 | Manticore Search versions 27.0.0 before 28.4.4 fail to validate permissions for all statements in multi-statement SQL requests, allowing read-only users to execute unauthorized que |
| CVE-2026-92799 | Deferred | 未確認 | CWE-285 | The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Authorization Bypass via PHP Type Juggling in all versions up to, and including, |
| CVE-2026-92800 | Deferred | 未確認 | CWE-613 | Docs before 5.4.1 fails to properly revoke websocket collaboration connections when access is revoked at parent documents. Attackers with revoked access can retain real-time read a |
| CVE-2026-92801 | Deferred | 未確認 | CWE-863 | cc-connect through 1.5.0 fails to enforce per-user allowlist filtering in the onCardAction handler for Feishu interactive card callbacks. Attackers can dispatch agent commands by t |
| CVE-2026-92802 | Deferred | 未確認 | CWE-862 | kan through 0.6.0 fails to properly validate board creation permissions in the GitHub project import endpoint, allowing guests to create boards despite lacking board:create permiss |
| CVE-2026-92803 | Deferred | 未確認 | CWE-862 | LibreTranslate through 1.9.6 omits the access_check decorator from the download_file route, allowing unauthenticated access to translated files. Attackers can bypass API key requir |
| CVE-2026-92804 | Deferred | 未確認 | CWE-918 | Nango through 0.70.4 fails to validate caller-supplied connection configuration values interpolated into provider token and proxy URL templates. Authenticated attackers can supply |
| CVE-2026-92805 | Deferred | 未確認 | CWE-306 | UVdesk Community Skeleton through 1.1.8 fails to authenticate or validate installation state on wizard endpoints in ConfigureHelpdesk controller actions. Unauthenticated attackers |
| CVE-2026-92806 | Deferred | 未確認 | CWE-352 | phpList versions before 3.6.17 fail to validate cross-site request forgery tokens in the mass subscriber removal form handler. Attackers can induce logged-in administrators to visi |
| CVE-2026-92807 | Deferred | 未確認 | CWE-94 | The Save as PDF Plugin by PDFCrowd plugin for WordPress is vulnerable to Arbitrary Function Invocation in all versions up to, and including, 4.6.1 via the `pdf_created_callback` sh |
| CVE-2026-92808 | Awaiting Analysis | 未確認 | CWE-306, CWE-918 | A server-side request forgery (SSRF) vulnerability exists in the UnifiedLogin service of Altium Enterprise Server. An unauthenticated network attacker can cause the server to issue |
| CVE-2026-92809 | Deferred | 未確認 | CWE-639 | PrestaShop psgdpr versions through 1.4.3 fail to validate that GDPR consent log entries are attributed to the authenticated customer. Authenticated attackers can submit arbitrary c |
| CVE-2026-92810 | Deferred | 未確認 | CWE-639 | PrestaShop blockwishlist through 3.0.2 fails to validate wishlist ownership in the getUrlByIdWishListAction method, allowing authenticated customers to retrieve share tokens for an |
| CVE-2026-92811 | Deferred | 未確認 | CWE-200 | browserless versions 1.44.0 through 2.56.7 fail to enforce file protocol restrictions in Playwright websocket endpoints, allowing authenticated token holders to read arbitrary file |
| CVE-2026-92812 | Deferred | 未確認 | CWE-22 | Decap CMS before 3.11.0 contains a path traversal vulnerability in the local proxy containment guard that uses plain string prefix comparison without path separator validation. Att |
| CVE-2026-92813 | Awaiting Analysis | 未確認 | CWE-918 | Metabase through 0.63.18 fails to properly validate the unspecified address 0.0.0.0 in custom GeoJSON URLs, allowing unauthenticated attackers to reach loopback services. Attackers |
| CVE-2026-92814 | Deferred | 未確認 | CWE-79 | changedetection.io through 0.60.6 fails to escape the scraped page title in HTML notifications, allowing arbitrary markup injection. Attackers can place malicious markup in monitor |
| CVE-2026-92815 | Deferred | 未確認 | CWE-918 | changedetection.io through 0.60.6 fails to validate the Goto URL action in browser steps, allowing unauthenticated attackers to access internal addresses. Attackers can supply arbi |
| CVE-2026-92816 | Deferred | 未確認 | CWE-22 | ComfyUI before 0.30.0 fails to sanitize folder_name input in dataset save nodes, allowing attackers to write files to arbitrary paths outside the output directory. Attackers can lo |
| CVE-2026-92829 | Deferred | 未確認 | CWE-862 | The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 9.1.0. This is due to the plugi |
| CVE-2026-92838 | Deferred | 未確認 | CWE-427 | A DLL hijacking vulnerability exists in the GeoVision GV-Remote E-Map desktop application. The application loads one or more dynamic-link libraries (DLLs) from an unsafe search pat |
| CVE-2026-92839 | Deferred | 未確認 | CWE-174 | Canva Desktop before v1.125.0 performed double decoding in the deeplink handler. A threat actor could cause the application to load arbitrary same-origin content under the user’s s |
| CVE-2026-92842 | Awaiting Analysis | 未確認 | CWE-122, CWE-125 | The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is tracked separately fr |
| CVE-2026-92860 | Deferred | 未確認 | CWE-20 | A security flaw has been discovered in rcourtman Pulse up to 6.0.4/6.1.0-rc.4. Affected by this issue is the function fmt.Sprintf of the file /api/security/quick-setup of the compo |
| CVE-2026-92867 | Awaiting Analysis | 未確認 | CWE-787 | An out-of-bounds write vulnerability exists in Pgpool-II , which may allow an authenticated attacker to cause abnormal process termination or arbitrary code execution. |
| CVE-2026-92868 | Awaiting Analysis | 未確認 | CWE-295 | An improper certificate validation vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to bypass client certificate authentication. |
| CVE-2026-92869 | Awaiting Analysis | 未確認 | CWE-787 | An out-of-bounds write vulnerability exists in Pgpool-II, which may allow an authenticated attacker to cause abnormal process termination. |
| CVE-2026-92870 | Awaiting Analysis | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal process termination. |
| CVE-2026-92871 | Awaiting Analysis | 未確認 | CWE-476 | A NULL pointer dereference vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal termination of the watchdog process. |
| CVE-2026-92872 | Awaiting Analysis | 未確認 | CWE-532 | Pgpool-II inserts sensitive information into log file, which may allow an authenticated attacker to obtain the cluster information. |
| CVE-2026-92873 | Awaiting Analysis | 未確認 | CWE-303 | Pgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an unauthenticated attacker to promote an arbitrary watchdog node to the leader node. |
| CVE-2026-92874 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have a |
| CVE-2026-92879 | Deferred | 未確認 | CWE-400, CWE-404 | A security flaw has been discovered in vgmstream up to r2117. This issue affects the function parse_mus of the file src/meta/mus_acm.c. The manipulation results in resource consump |
| CVE-2026-92880 | Deferred | 未確認 | CWE-119, CWE-787 | A weakness has been identified in vgmstream up to r2117. Impacted is the function vadpcm_read_coefs_be of the file src/coding/vadpcm_decoder.c of the component EA SCHl parser. This |
| CVE-2026-92881 | Deferred | 未確認 | CWE-369, CWE-404 | A security vulnerability has been detected in vgmstream. The affected element is the function init_vgmstream_awb_memory of the file src/meta/awb.c of the component AWB parser. Such |
| CVE-2026-92882 | Deferred | 未確認 | CWE-522 | Insufficiently protected credentials in the host and folder configuration endpoints of the REST API in Checkmk <2.5.0p15, <2.4.0p38, <2.3.0p51 and 2.2.0 (EOL) allows an authenticat |
| CVE-2026-9289 | Deferred | 未確認 | CWE-200 | The WordLift – AI powered SEO – Schema plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.54.10 via the JSON-LD REST API e |
| CVE-2026-92893 | Awaiting Analysis | 未確認 | CWE-863 | A flaw was found in the foreman_ansible plugin's Ansible inventory API. The controller builds its host query using an unscoped Host.where call that does not enforce the search filt |
| CVE-2026-92894 | Awaiting Analysis | 未確認 | CWE-863 | A flaw was found in the foreman_ansible plugin's Ansible override values API. The destroy action resolves the target LookupValue record by ID without verifying it belongs to an Ans |
| CVE-2026-92899 | Analyzed | 未確認 | CWE-290 | Apache WSS4J remembers the Nonce of each UsernameToken it accepts, so a captured token cannot be reused. It stored the Nonce as raw base64 text, but authentication decodes that tex |
| CVE-2026-92903 | Awaiting Analysis | 未確認 | CWE-89 | Improper input validation in Snowflake CLI versions prior to 3.27.0 allowed unsanitized user-controlled values to be interpolated into SQL strings that are executed as multi-statem |
| CVE-2026-92904 | Awaiting Analysis | 未確認 | CWE-863 | A flaw was found in the foreman_remote_execution plugin's template invocations controller. The show_template_invocation_by_host action resolves the job invocation by ID without eva |
| CVE-2026-92905 | Awaiting Analysis | 未確認 | CWE-248 | ZohoCorp ManageEngine EventLog Analyzer and Log360 before build 13071 were vulnerable to a DoS vulnerability that allowed attackers to crash the log collector using malformed syslo |
| CVE-2026-92912 | Deferred | 未確認 | CWE-330 | AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 uses cryptographically weak uniqid() values for RTMP publish keys in LiveTransmition, reducing key entropy to approximately |
| CVE-2026-92913 | Deferred | 未確認 | CWE-330 | AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 uses a cryptographically weak pseudo-random number generator when creating account activation / login pairing codes. |
| CVE-2026-92914 | Deferred | 未確認 | CWE-287 | AVideo LoginControl contains an authentication bypass vulnerability in the PGP second factor verification that compares challenge responses using loose equality against an uninitia |
| CVE-2026-92915 | Deferred | 未確認 | CWE-770 | WWBN AVideo through commit e01e41ecc (no patched version available) contains a broken access control flaw in objects/userVerifyEmail.php. The script disables the login requirement |
| CVE-2026-92916 | Deferred | 未確認 | CWE-200 | Grav is a flat-file CMS. In Grav 1.7.0 through 1.7.53.2 and 2.0.0 through 2.0.21, when the debugger is enabled (system.debugger.enabled: true, which is not the default), the Clockw |
| CVE-2026-92917 | Deferred | 未確認 | CWE-200 | Grav is a flat-file CMS. In versions 2.0.0-rc.1 through 2.0.21, the Twig content sandbox fails to restrict the dump and serialize filters (print_r, vardump, json_encode, yaml_encod |
| CVE-2026-92918 | Deferred | 未確認 | CWE-532 | admin3 through 3.0.0 persists user session tokens in the audit log event body when publishing UserLoggedIn domain events. Attackers with log:view permission can read the JSON respo |
| CVE-2026-92919 | Deferred | 未確認 | CWE-22 | admin3 through 3.0.0 fails to sanitize client-supplied filenames in the upload handler, allowing authenticated users to write files outside the storage root on Windows deployments. |
| CVE-2026-92920 | Deferred | 未確認 | CWE-613 | admin3 through 3.0.0 fails to invalidate existing sessions when disabling a user account, allowing attackers to retain authenticated access with original permissions. Attackers can |
| CVE-2026-92921 | Deferred | 未確認 | CWE-916 | admin3 through 3.0.0 stores account passwords using single-round MD5 with only the username as salt and no key derivation function. Attackers with database access can recover plain |
| CVE-2026-92925 | Awaiting Analysis | 未確認 | CWE-125 | A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for |
| CVE-2026-92926 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in code-projects Matrimonial System 1.0. This vulnerability affects the function writepartnerprefs of the file /partner_preference.php. Such manipula |
| CVE-2026-92927 | Deferred | 未確認 | CWE-200, CWE-284 | A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /db/drug_recommendor.sql. Performing a manipulati |
| CVE-2026-92928 | Deferred | 未確認 | CWE-798 | OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains a hardcoded, undocumented recovery account with a shared credential that cannot be changed, disabled, or rotat |
| CVE-2026-92929 | Deferred | 未確認 | CWE-290 | OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 trusts an X-Forwarded-For header supplied by an arbitrary client when determining the request source address. An unauth |
| CVE-2026-92930 | Deferred | 未確認 | CWE-330 | OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 uses an administrator password-reset unlock-code design that lacks a per-device secret or other server-side cryptograph |
| CVE-2026-92932 | Deferred | 未確認 | CWE-670, CWE-918 | In the MISP sachertortephp library, the Xml::build() static method in lib/Cake/Utility/Xml.php contains a logic error in the conditional that gates network-based XML fetching. The |
| CVE-2026-92933 | Deferred | 未確認 | CWE-200 | vm2 is a sandbox for running untrusted Node.js code. In versions <= 3.11.7, NodeVM exposes the host `util` module to the sandbox as an unfiltered shallow copy (`Object.assign({}, u |
| CVE-2026-92934 | Deferred | 未確認 | CWE-693 | vm2 before 3.11.8 contains an incomplete fix for Error.cause sanitization that allows sandbox escape when revisited host-wrapped AggregateError objects are caught within a single e |
| CVE-2026-92935 | Deferred | 未確認 | CWE-913 | vm2 is a sandbox for running untrusted Node.js code. In versions >= 3.11.4 and <= 3.11.6, the NodeVM constructor computes `hasRealRequireConfig` with `typeof requireOpts === 'objec |
| CVE-2026-92936 | Deferred | 未確認 | CWE-209 | vm2 versions 3.11.0 through 3.11.6 leak absolute host filesystem paths to sandboxed code through error stack formatting. Attacker-supplied code can force the host-realm source tran |
| CVE-2026-92937 | Deferred | 未確認 | CWE-94 | vm2 3.11.6 is vulnerable to a sandbox escape leading to remote code execution in the host Node.js process. The fix for GHSA-m283-3h24-438v is incomplete: the bridge gate at lib/bri |
| CVE-2026-92938 | Deferred | 未確認 | CWE-693 | vm2 versions 3.11.3 through 3.11.6 expose Node.js's host node:sqlite module to code running in NodeVM when that builtin is permitted, either explicitly or through builtin: ['*']. T |
| CVE-2026-92939 | Deferred | 未確認 | CWE-114 | vm2 3.11.3 through 3.11.6 exposes the host Node.js crypto module to a NodeVM sandbox when the crypto builtin is allowed. The module is presented via a recursive read-only proxy, bu |
| CVE-2026-92940 | Deferred | 未確認 | CWE-668 | vm2 versions 3.11.3 through 3.11.6 expose the host process's real https.globalAgent to sandboxed code when a NodeVM is explicitly configured to allow require('https'). The builtin |
| CVE-2026-92941 | Deferred | 未確認 | CWE-732 | vm2 versions from 3.11.3 before 3.11.7 expose the host tls module to NodeVM sandbox code, allowing attackers to call tls.setDefaultCACertificates() and replace process-wide certifi |
| CVE-2026-92942 | Deferred | 未確認 | CWE-400 | vm2 before 3.11.7 (affected versions <= 3.11.6) does not enforce the VM({ timeout }) option on code executed outside the synchronous VM#run() call. The timeout only wraps the singl |
| CVE-2026-92943 | Awaiting Analysis | 未確認 | CWE-297 | Improper validation of certificate with host mismatch in the MQTT client TLS connection layer in AWS IoT Device SDK for Python 1.5.3 through 1.6.0 on Python 3.7 and later might all |
| CVE-2026-92944 | Deferred | 未確認 | CWE-693 | vm2 versions 3.10.2 through 3.11.6 contain a sandbox escape vulnerability on Node.js 26 where Promise.prototype.finally() bypasses vm2's wrapper protections due to a stale PromiseT |
| CVE-2026-92945 | Deferred | 未確認 | CWE-22 | vm2 before 3.11.7 contains a module allowlist bypass vulnerability in isPathAllowedForModule that uses raw string prefix matching instead of boundary-anchored comparison. Attackers |
| CVE-2026-92946 | Deferred | 未確認 | CWE-913 | vm2 before 3.11.7 contains a remote code execution vulnerability when require.external is enabled without an explicit require.root that excludes node_modules. Sandboxed code can re |
| CVE-2026-92947 | Deferred | 未確認 | CWE-200 | vm2 before 3.11.7 exposes Node's shared Buffer pool to sandboxed code, allowing disclosure of host memory used by Buffer.from, Buffer.concat, and related allocations. Sandboxed cod |
| CVE-2026-92948 | Deferred | 未確認 | CWE-693 | vm2 versions >= 3.9.6 and <= 3.11.6 are affected by a NodeVM builtin allowlist bypass that permits a sandbox escape on Node.js 24 and newer when the embedder explicitly allows the |
| CVE-2026-92949 | Deferred | 未確認 | CWE-471 | vm2 versions from 3.9.6 before 3.11.7 fail to properly restrict access to accessor properties on frozen objects, allowing sandboxed scripts to bypass vm.freeze() and vm.readonly() |
| CVE-2026-92950 | Deferred | 未確認 | CWE-453 | vm2 before 3.11.7 contains a sandbox escape vulnerability in the CLI tool that allows attackers to execute arbitrary code in the host Node.js process. Attackers can supply a malici |
| CVE-2026-92951 | Deferred | 未確認 | CWE-706 | vm2 before 3.11.7 contains an incorrect authorization vulnerability in the external package allowlist check that uses non-exact substring matching instead of full package-name boun |
| CVE-2026-92952 | Deferred | 未確認 | CWE-669 | vm2 versions 3.11.4 through 3.11.6 incompletely filter Node.js registered internal symbols across the sandbox boundary. The extraction filters in lib/setup-sandbox.js and the cross |
| CVE-2026-92953 | Deferred | 未確認 | CWE-913 | vm2 versions from 3.11.0 before 3.11.8 fail to protect host TypedArray and ArrayBuffer prototypes from sandbox mutation. Attackers can use prototype-walking primitives to reach and |
| CVE-2026-92954 | Deferred | 未確認 | CWE-248 | vm2 is a sandbox library for running untrusted JavaScript in Node.js. In versions >= 3.10.0 and <= 3.11.7, Promises returned from the host realm into the sandbox are not marked as |
| CVE-2026-92955 | Deferred | 未確認 | CWE-913 | vm2 before 3.11.8 contains a sandbox escape vulnerability in NodeVM that allows attackers to access the host __proto__ getter/setter through console._stdout and console._stderr. At |
| CVE-2026-92956 | Deferred | 未確認 | CWE-693 | vm2 versions 3.10.1 through 3.11.6 contain a sandbox escape reachable from a default `new VM()` sandbox when running on Node.js 26. WebAssembly.compileStreaming and WebAssembly.ins |
| CVE-2026-92957 | Deferred | 未確認 | CWE-269 | vm2 through 3.11.6 does not normalize `node:`-prefixed builtin specifiers when evaluating user-supplied negative (deny) entries in a NodeVM wildcard require policy. Although NodeVM |
| CVE-2026-92958 | Deferred | 未確認 | CWE-269 | vm2 through 3.11.6 contains a builtin-module denylist bypass in NodeVM. When the embedder uses the builtin wildcard together with negative entries (e.g. require: { builtin: ['*', ' |
| CVE-2026-92959 | Deferred | 未確認 | CWE-693 | vm2 before 3.11.8 does not fully enforce the allowAsync: false option in VM and NodeVM. While localPromise.prototype.then is replaced with a handler that throws 'Async not availabl |
| CVE-2026-92960 | Deferred | 未確認 | CWE-200 | vm2 before 3.11.6 fails to restrict access to os and dns builtins under the builtin: ['*'] configuration, allowing sandbox code to read host process identity and network topology. |
| CVE-2026-92961 | Deferred | 未確認 | CWE-770 | vm2 before 3.11.6 fails to enforce bufferAllocLimit on ArrayBuffer, SharedArrayBuffer, and TypedArray constructors, allowing attackers to allocate arbitrary host memory. Attackers |
| CVE-2026-92962 | Deferred | 未確認 | CWE-693 | vm2 is a sandbox for running untrusted JavaScript. In vm2 versions up to and including 3.11.3, the defaultSandboxPrepareStackTrace function in lib/setup-sandbox.js builds its outpu |
| CVE-2026-92963 | Deferred | 未確認 | CWE-227 | vm2 versions before 3.11.2 fail to properly restrict access to the VM2_INTERNAL_STATE_DO_NOT_USE_OR_PROGRAM_WILL_FAIL global variable. Attackers can access this internal state obje |
| CVE-2026-92965 | Deferred | 未確認 | CWE-862 | The TikTok WordPress plugin before 1.4.2 does not check that a request is authorised before acting on a sign-in code supplied in the URL, so any visitor can make the site redeem a |
| CVE-2026-92967 | Deferred | 未確認 | CWE-79 | The Pochipp plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'keyword' parameter in versions up to, and including, 1.20.2. This is due to insufficient o |
| CVE-2026-92969 | Deferred | 未確認 | CWE-98 | The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.4.4 via the 'shortcode' |
| CVE-2026-92970 | Deferred | 未確認 | CWE-22 | HUBzero CMS through 2.2.32 contains a path traversal vulnerability in project file upload handlers that allows authenticated project members to write arbitrary files outside the pr |
| CVE-2026-92971 | Deferred | 未確認 | CWE-617 | InternLM LMDeploy through 0.17.0 contains a reachable assertion vulnerability in the DistServe decode migration loop that allows unauthenticated attackers to terminate the inferenc |
| CVE-2026-92972 | Deferred | 未確認 | CWE-306 | SGLang through 0.5.19 in prefill/decode disaggregation mode contains an unauthenticated PUT /route endpoint on the prefill bootstrap service that allows attackers to poison the KV |
| CVE-2026-92973 | Deferred | 未確認 | CWE-79 | ansi2html versions 1.7.0a0 through 1.9.3 contain a cross-site scripting vulnerability in OSC 8 hyperlink handling that fails to validate or escape URL targets. Attackers controllin |
| CVE-2026-92976 | Deferred | 未確認 | CWE-613 | A stored Cross-Site Scripting (XSS) vulnerability in the profile management functionality of T-Systems’ TAO 2.0 suite. An authenticated user could inject malicious HTML or JavaScri |
| CVE-2026-92980 | Deferred | 未確認 | CWE-434 | HortusFox-Web prior to version 6.1 contains a remote code execution vulnerability that allows authenticated administrators to execute arbitrary OS commands as the web server user b |
| CVE-2026-92983 | Deferred | 未確認 | CWE-772 | InternLM LMDeploy through 0.17.0 in DistServe prefill/decode disaggregation mode fails to release scheduler sessions because the proxy uses user-facing session IDs instead of inter |
| CVE-2026-92984 | Deferred | 未確認 | CWE-384 | HUBzero CMS through 2.2.32 accepts session identifiers from query strings and request variables instead of cookies alone, allowing unauthenticated attackers to fixate victim sessio |
| CVE-2026-92985 | Deferred | 未確認 | CWE-79 | SiYuan versions before 3.8.4 fail to escape bookmark labels imported from notebook files when rendering them in the dock tree. Attackers can craft malicious .sy notebook files with |
| CVE-2026-92986 | Deferred | 未確認 | CWE-79 | SiYuan before 3.8.4 renders document titles as HTML in the backlink dock tree without escaping markup characters. Attackers can set malicious titles through the rename API or craft |
| CVE-2026-92987 | Deferred | 未確認 | CWE-407 | roxmltree through 0.21.1 performs quadratic-time attribute and namespace validation during XML parsing without limits on attribute count. Attackers can craft XML documents with ten |
| CVE-2026-92991 | Deferred | 未確認 | CWE-79 | The Biggop Library is vulnerable to Cross-Site Scripting via the ‘display_id’ parameter from the Sigmative API in various versions due to insufficient output escaping. This makes i |
| CVE-2026-92992 | Deferred | 未確認 | CWE-862, CWE-863 | A security vulnerability has been detected in Dromara mayfly-go up to 1.11.5. The affected element is an unknown function of the file server/internal/ai/api/ai.go of the component |
| CVE-2026-92993 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was detected in Dromara mayfly-go up to 1.11.5. The impacted element is the function RunMachineScript of the file server/internal/machine/api/machine_script.go of t |
| CVE-2026-92994 | Deferred | 未確認 | CWE-79 | The Verge3D Publishing and E-Commerce WordPress plugin before 4.13.1 does not validate the contents of files uploaded through its file storage feature and serves them back with an |
| CVE-2026-92995 | Deferred | 未確認 | CWE-200 | The Verge3D Publishing and E-Commerce WordPress plugin through 4.13.0 does not restrict access to a file-download handler, allowing unauthenticated users to download the digital-go |
| CVE-2026-92996 | Deferred | 未確認 | CWE-345 | The Verge3D WordPress plugin from 4.1.0 through 4.13.0 does not verify with the payment provider that a payment was actually made, and does not check order ownership, allowing unau |
| CVE-2026-93000 | Deferred | 未確認 | CWE-89 | The SPS-Suite WordPress plugin through 1.4.0 does not sanitise the search query before using it in a SQL query when its static-page search feature is enabled, allowing unauthentica |
| CVE-2026-93012 | Deferred | 未確認 | CWE-78 | Email::Sender::Transport::Sendmail versions before 2.602 for Perl allow arbitrary command execution on Windows sending a message whose envelope address reaches the shell in _sendma |
| CVE-2026-93013 | Deferred | 未確認 | CWE-22 | RAGFlow through 0.27.2 contains a path traversal vulnerability in the dev_insert_chunks_from_file and dev_insert_metadata_from_file endpoints that allows authenticated attackers to |
| CVE-2026-93014 | Deferred | 未確認 | CWE-22 | RosarioSIS versions before 12.9 fail to validate the filename request parameter in Users and Students modules, allowing authenticated users to unlink allow-listed files via path tr |
| CVE-2026-93015 | Deferred | 未確認 | CWE-1284, CWE-787 | BlueKitchen BTstack through 1.8.2 fails to validate the peer-reported endpoint count against table bounds in A2DP stream endpoint discovery. A bonded peer can send an AVDTP DISCOVE |
| CVE-2026-93018 | Deferred | 未確認 | CWE-193, CWE-908 | Imager versions before 1.036 for Perl disclose uninitialised heap memory reading a paletted image with pixel indexes past its colour map in i_gpix_p and i_glin_p. The palette is a |
| CVE-2026-93019 | Deferred | 未確認 | CWE-196, CWE-789 | Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tga_palette_read. The reader unpacks the two-byte colour map leng |
| CVE-2026-93030 | Awaiting Analysis | 未確認 | CWE-611 | FTM 4.x ALL could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity injection flaw. |
| CVE-2026-93031 | Deferred | 未確認 | CWE-434 | The WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Box plugins for WordPress are vulnerable to Arbitrary File Upload in all versions from 2.0 up to, and |
| CVE-2026-93037 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Propagate sdma_txinit_ahg() errors set_txreq_header_ahg() ignores the return value of sdma_txinit_a | |
| CVE-2026-93038 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: dac: ad5686: missing NULL check on match data Verify that chip_info pointer is not NULL. If a user binds | |
| CVE-2026-93039 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: meson: Keep link pointers valid on realloc failure meson_card_reallocate_links() grows the DAI link and | |
| CVE-2026-93040 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: Serialize channel state checks pause() and resume() read and update channel state without | |
| CVE-2026-93041 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: Serialize abort state updates dw_edma_abort_interrupt() drops vc.lock before changing requ | |
| CVE-2026-93042 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: Terminate all descriptors without callbacks The DMA Engine client documentation says in th | |
| CVE-2026-93043 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow interpreter fallback for gotox insn The interpreter does not recognize the BPF_JMP|BPF_JA|BPF_X | |
| CVE-2026-93044 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow interpreter fallback for arena-related insns Since the interpreter does not support the arena-re | |
| CVE-2026-93045 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject arena frees below the arena base bpf_arena_free_pages() accepts scalar arena addresses. The runtim | |
| CVE-2026-93046 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: software node: Fix software_node_get_reference_args() with index -1 The bounds check for the index passed to s | |
| CVE-2026-93047 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Associate BOs with every job that accesses them A submission can expand into a chain of jobs (e.g. bi | |
| CVE-2026-93048 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition() mtd_add_partition() does not reject the special of | |
| CVE-2026-93049 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mtd: mtdswap: Avoid freeing registered blktrans device twice In mtdswap_add_mtd(), debugfs setup failure after | |
| CVE-2026-93050 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipack: ipoctal: fix UAF, null-ptr-deref, and use-after-free in cleanup on remove Three issues arise when the d | |
| CVE-2026-93051 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: misc: ad525x_dpot: use driver core groups for sysfs files ad_dpot_probe() creates per-RDAC sysfs files manuall | |
| CVE-2026-93052 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: misc: bcm-vk: Use acquire/release for msgq_inited bcm_vk_sync_msgq() fills the message queue information and t | |
| CVE-2026-93053 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: speakup: keyhelp: guard letter_offsets possible out-of-range indexing help_init() builds letter_offsets[] by u | |
| CVE-2026-93054 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: uio: Fix stale info pointer in failed registration path After device_add(), the UIO device is visible to users | |
| CVE-2026-93055 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: UDF symlink pathComponent header OOB read udf_symlink_filler() can enter udf_pc_to_char() with a partial pathC | |
| CVE-2026-93056 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_uac1_legacy: remove broken string configfs attributes The UAC1_STR_ATTRIBUTE macro defines conf | |
| CVE-2026-93057 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Avoid possible memory reclaim deadlock in TX EQTR context TX EQTR may run while devfreq gear | |
| CVE-2026-93058 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: Only fini scheduler after successful init msm_ringbuffer_new() destroys a partially initialized ring | |
| CVE-2026-93059 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix task_struct reference leak in recover_worker get_pid_task() increments the task reference count, | |
| CVE-2026-93060 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: fix use after free on error path in a6xx_gpu_init() The a6xx_destroy() function frees "a6xx_gp | |
| CVE-2026-93061 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Avoid stack over-read in debug output helpers host1x_debug_output() and host1x_debug_cont() used | |
| CVE-2026-93062 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: guard against division by zero in iwl_dbg_tlv_alloc_fragments Make sure we don't end-up with a | |
| CVE-2026-93063 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mei: check SAP message length before reading it Verify the SAP message size is not larger than | |
| CVE-2026-93064 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix off-by-one in TXF key sanitiser iwl_mvm_frob_txf_key_iter() tracks the last matched by | |
| CVE-2026-93065 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fix counter type in iwl_fwrt_dump_error_logs The loop counter 'count' was declared as u8 while | |
| CVE-2026-93066 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Take cpa_lock around large-page collapse Loading and unloading modules concurrently on several CPU | |
| CVE-2026-93067 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/bridge: tc358767: clamp the reported AUX read size to the request tc_aux_transfer() clamps an AUX read to | |
| CVE-2026-93068 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix DM I2C teardown race DM I2C adapters can remain visible to userspace while DM teardown is | |
| CVE-2026-93069 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: OPP: Fix cleanup ordering Commit 173e02d67494 ("OPP: Initialize scope-based pointers inline") added initializa | |
| CVE-2026-93070 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: ipu6: Do not free aux device pdata after init ipu6_bus_initialize_device() stores the isys/psys pdata p | |
| CVE-2026-93071 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: bcm2835-unicam: Fix asc leaked in error/remove path v4l2_async_nf_add_fwnode_remote() allocates the asc | |
| CVE-2026-93072 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: irqchip/renesas-irqc: Fix generic interrupt chip leak on remove The driver allocates domain generic chips prob | |
| CVE-2026-93073 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dax: read holder_ops once in dax_holder_notify_failure() dax_holder_notify_failure() reads dax_dev->holder_ops | |
| CVE-2026-93074 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dax/fsdev: use __va(phys) for kaddr in direct_access Use __va(phys) instead of virt_addr + linear_offset for t | |
| CVE-2026-93075 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dax/fsdev: clear pgmap ops and owner on unbind fsdev_dax_probe() sets pgmap->ops = &fsdev_pagemap_ops and pgma | |
| CVE-2026-93076 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dax/fsdev: clear vmemmap_shift when binding static pgmap Clear pgmap->vmemmap_shift for static DAX devices. Wh | |
| CVE-2026-93077 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cxl/features: Clamp Get Feature output size to the remaining buffer cxl_get_feature() reads a feature in a loo | |
| CVE-2026-93078 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cxl/features: Reject Set Features output buffer smaller than the header cxlctl_set_feature() sizes its output | |
| CVE-2026-93079 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cxl/features: Reject Get Feature count larger than the output buffer cxlctl_get_feature() sizes its output buf | |
| CVE-2026-93080 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix transport device teardown lookup SCMI transport devices are deliberately excluded from | |
| CVE-2026-93081 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix SCMI device destroy lifetimes scmi_child_dev_find() drops the reference returned by de | |
| CVE-2026-93082 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Unwind P2A receiver mailbox setup failure mailbox_chan_setup() can request an additional P | |
| CVE-2026-93083 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Unwind TX receiver mailbox setup failure mailbox_chan_setup() can request an additional un | |
| CVE-2026-93084 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Drop handle on protocol bind failures The SCMI bus notifier acquires an SCMI handle when t | |
| CVE-2026-93085 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Reject out of range DT protocol IDs SCMI protocol IDs carried in message headers are limit | |
| CVE-2026-93086 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Avoid IDR updates while cleaning channels scmi_cleanup_channels() walks the TX/RX channel | |
| CVE-2026-93088 | Awaiting Analysis | 未確認 | CWE-502 | SGLang's multimodal generation runtime is vulnerable to unauthenticated arbitrary code execution because the disaggregated-diffusion orchestrator's DiffusionServer binds an unauthe |
| CVE-2026-93089 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Free transport channel on IDR failure If transport channel setup succeeds but the followin | |
| CVE-2026-93090 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Clean up channels on setup failure scmi_channels_setup() can fail after the common BASE ch | |
| CVE-2026-93091 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Quiesce notifications before teardown scmi_notification_exit() clears and releases the not | |
| CVE-2026-93092 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Unregister device notifier before IDR teardown The requested-devices notifier looks up pro | |
| CVE-2026-93093 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Publish channel state before callbacks Transport setup can enable callbacks before the set | |
| CVE-2026-93094 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix dp_link_peer dangling references on AP vdev rollback ath12k_mac_vdev_create() for an AP vdev | |
| CVE-2026-93095 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hfsplus: validate thread record before delete key rebuild hfsplus_delete_cat() is called with str == NULL when | |
| CVE-2026-93096 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cxl/features: Serialize multi-part Get/Set Feature transfers A Get or Set Feature payload larger than the mail | |
| CVE-2026-93097 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cxl/mbox: Break poison list loop on an empty payload A device that returns count == 0 with CXL_POISON_FLAG_MOR | |
| CVE-2026-93098 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rpmsg: glink: fix deadlock in endpoint destroy during driver detach During driver detach, the device core hold | |
| CVE-2026-93099 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Fix UAF from worker threads when domains are removed The mbm_handle_overflow() and cqm_handle_limb | |
| CVE-2026-93100 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Prevent use-after-free in rdtgroup_kn_put() A struct rdtgroup is reference counted via rdtgroup::w | |
| CVE-2026-93101 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: v4l2-async: Unregister sub-device if asc_list is empty When my em28xx USB device that uses the i2c tvp5 | |
| CVE-2026-93102 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Free RX data on late probe failure hfi1_init_dd() allocates the shared AIP/VNIC RX support before r | |
| CVE-2026-93103 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Preserve unit 0 on allocation failure hfi1_free_devdata() assumes that the device was inserted into | |
| CVE-2026-93104 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rvt: Return NULL after port allocation failure rvt_alloc_device() deallocates the IB device when its port | |
| CVE-2026-93105 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: esp: do not unref managed frag pages in esp_ssg_unref() esp_ssg_unref() releases the page references held on t | |
| CVE-2026-93106 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crash_dump: release keyring reference at the correct time restore_dm_crypt_keys_to_thread_keyring() gets a ref | |
| CVE-2026-93107 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state When do_complete() finds t | |
| CVE-2026-93108 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/ipoib: Drain RCU callbacks during module teardown IPoIB reclamation completions can be signaled from insi | |
| CVE-2026-93109 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Drain RCU callbacks during module teardown devx_free_subscription() can remain queued after the las | |
| CVE-2026-93110 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Wait for RCU callbacks before unloading ib_core put_gid_ndev() is queued with call_rcu() and implem | |
| CVE-2026-93111 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Mark tracing_multi trampolines as ftrace managed Since tracing_multi link does not set ftrace_managed, it | |
| CVE-2026-93112 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Require a BPF cpumask for bpf_cpumask_populate() bpf_cpumask_populate() writes to its destination with bi | |
| CVE-2026-93113 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: clk: qcom: camcc-sc8280xp: unregister CAMCC_GDSC_CLK With the introduction of sync_state support in the clk an | |
| CVE-2026-93114 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/surface: acpi-notify: Check ACPI companion before use Since every platform driver can be forced to ma | |
| CVE-2026-93115 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/mellanox: mlxbf-pmc: Check ACPI_COMPANION() against NULL Every platform driver can be forced to match | |
| CVE-2026-93116 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: asus-wmi: fix resource leaks on probe failure During driver initialization in asus_wmi_add(), va | |
| CVE-2026-93117 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: fix UAF when probe runs concurrent to dyn ID removal Dynamic IDs are only guaranteed to be valid when usb | |
| CVE-2026-93118 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed_udc: check endpoint DMA allocation ast_udc_probe() allocates a coherent DMA buffer used as | |
| CVE-2026-93119 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: ljca: bound bank_num in ljca_enumerate_gpio() ljca_enumerate_gpio() reads desc->bank_num from the device | |
| CVE-2026-93120 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: configfs: fix out-of-bounds read of qw_sign os_desc_qw_sign_show() passes OS_STRING_QW_SIGN_LEN a | |
| CVE-2026-93121 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Fix fence cleanup in ffs_dmabuf_transfer() error paths The error paths for endpoint-disable | |
| CVE-2026-93122 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uac: validate rate list length before storing UAC1 and UAC2 configfs rate-list attributes parse a | |
| CVE-2026-93123 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: serial: qcom-geni: do not advance stale DMA completions The qcom GENI serial DMA TX completion path advances t | |
| CVE-2026-93124 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: asus-wireless: Fail probe when there is no ACPI match Every platform driver can be forced to mat | |
| CVE-2026-93125 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject rdonly/rdwr_buf_size kfunc arguments that exceed u32 max check_kfunc_args() detects a kfunc argume | |
| CVE-2026-93126 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom_q6v5_adsp: Fix reference leak for device node When calling of_parse_phandle_with_args(), the | |
| CVE-2026-93127 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Drop scalar id on sign-extending narrowing stack fills When a spilled scalar is filled back with a sign-e | |
| CVE-2026-93128 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: lg-laptop: Fix LED resource handling The event notification callback might access kbd_backlight | |
| CVE-2026-93129 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-base: Fix handling of ultra performance key The commit message of commit 5fbd827eb9c2 ( | |
| CVE-2026-9313 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-93130 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-base: Fix resource leak on module load failure We need to properly clean up the SMBIOS | |
| CVE-2026-93131 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-privacy: Fix race condition Accessing priv->features_present needs to happen with the list | |
| CVE-2026-93132 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ACPI: RISC-V: Fix riscv_acpi_add_prt_dep() loop handling The loop in riscv_acpi_add_prt_dep() includes error c | |
| CVE-2026-93133 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ACPI: RISC-V: Check acpi_get_handle() status in riscv_acpi_add_prt_dep() In riscv_acpi_add_prt_dep(), the acpi | |
| CVE-2026-93134 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: printk: Fix possible console use-after-free When emitting a record via legacy printing, it is possible that a | |
| CVE-2026-93135 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject programs with inlined helpers if JIT is not available When an architecture (such as LoongArch, ARM | |
| CVE-2026-93136 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Fix device refcount leak in the error path of MHI device creation mhi_ep_create_device() takes o | |
| CVE-2026-93137 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix use-after-free on mm_struct in bpf_find_vma() bpf_find_vma() reads task->mm and calls mmap_read_trylo | |
| CVE-2026-93138 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix vmlinux BTF prep race in bpf_get_btf_vmlinux bpf_get_btf_vmlinux() lazily parses the vmlinux BTF unde | |
| CVE-2026-93139 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/mes: Fix hung_queue_db_array loop limit for multi-XCC The loop iterated only AMDGPU_MAX_MES_PIPES t | |
| CVE-2026-9314 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-93140 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: udf: Mark LVID buffer as uptodate before marking it dirty When an I/O error occurs while writing the Logical V | |
| CVE-2026-93141 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: r8a66597: avoid double free of ep0_req in probe error path If usb_add_gadget_udc() fails, r8a6659 | |
| CVE-2026-93142 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/rcar: Fix error checking in probe() This code accidentally calls thermal_zone_device_enable() | |
| CVE-2026-93143 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: staging: media: ipu7: fix pm_runtime refcount leak in ipu7_resume() ipu7_resume() calls pm_runtime_get_sync() | |
| CVE-2026-93144 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject writes through untrusted BTF pointers check_ptr_to_btf_access() lets program-type btf_struct_acces | |
| CVE-2026-93145 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gdsc: tear down per-domain genpds in gdsc_unregister() gdsc_unregister() removes the OF provider en | |
| CVE-2026-93146 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: time/namespace: Validate nanosecond field in proc_timens_set_offset() The function validates tv_sec to be with | |
| CVE-2026-93147 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/bpf: Replace ly instruction with llgf cpu_nr is a 32 bit value and BPF_REG_0 is a 64 bit register, when l | |
| CVE-2026-93148 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject MEM_ALLOC BTF accesses past object bounds BTF struct walks relax the struct-size check for accesse | |
| CVE-2026-93149 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: avoid NULL skb in stop queue drain mac80211_hwsim_stop() drops any frames left in data-> | |
| CVE-2026-93150 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Make nr_deadline_tasks an atomic_t The nr_deadline_tasks variable in the cpuset structure was i | |
| CVE-2026-93151 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: fix response resource leak on queue teardown When an nvme target with rdma transport is removed wh | |
| CVE-2026-93152 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvme-apple: Use acquire/release for queue enabled state apple_nvme_init_queue() initializes queue state and th | |
| CVE-2026-93153 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/bng_re: return a timeout when firmware responses stall __wait_for_resp() documents that it returns a non- | |
| CVE-2026-93154 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Add refcounting to user ring MRs Prevent userspace from deregistering the MRs that back QP/CQ/SRQ | |
| CVE-2026-93155 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: keembay - Fix AEAD unregister count in error path register_aes_algs() registers the AEAD algorithms be | |
| CVE-2026-93156 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: rk3288 - fail ahash requests on HASH idle timeout rk_hash_run() waits for RK_CRYPTO_HASH_STS to become | |
| CVE-2026-93157 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwrng: xilinx-trng - propagate timeout before any data is read xtrng_readblock32() polls for 16-byte chunks bu | |
| CVE-2026-93158 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: sa2ul - stop probe if context pool creation fails sa_ul_probe() calls sa_init_mem() to create the DMA | |
| CVE-2026-93159 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - fix heap info leak on I2C transfer failure The nonblocking RNG path allocates a work_d | |
| CVE-2026-93160 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-ecc - reject hardware ECDH without a public key The hardware ECDH path in atmel_ecdh_compute_sha | |
| CVE-2026-93161 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: qat - clear AES key schedule from stack qat_alg_xts_reverse_key() expands the forward XTS AES key on t | |
| CVE-2026-93162 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: qat - cancel work on re-enable SR-IOV timeout The QAT reset worker queues SR-IOV reenable work using a | |
| CVE-2026-93163 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwrng: core - fix rng list on registration error hwrng_register(rng) does the following: 1. Checks if rng has | |
| CVE-2026-93164 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: uprobes/x86: Move optimized uprobe from nop5 to nop10 Andrii reported an issue with optimized uprobes [1] that | |
| CVE-2026-93165 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/chrome: sensorhub: Fix memory overread in ring handler `max_response` and `sensor_num` are read from | |
| CVE-2026-93166 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: debug: fix off by on in rtw89_ppdu_str() This > comparison should be >= to avoid an out of bounds | |
| CVE-2026-93167 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: csky: Fix a4/a5 restoration in syscall trace path The syscall trace path reloads syscall arguments from pt_reg | |
| CVE-2026-93168 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: xilinx_dma: Fix CPU stall in xilinx_dma_poll_timeout Currently when calling xilinx_dma_poll_timeout | |
| CVE-2026-93169 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: zynqmp_dma: fix race between runtime PM and device removal In zynqmp_dma_remove(), runtime PM was d | |
| CVE-2026-9317 | Deferred | 未確認 | CWE-306 | Nango before 0.71.6 contains a missing authentication vulnerability in the runner tRPC server that allows unauthenticated attackers to execute arbitrary JavaScript code by invoking |
| CVE-2026-93170 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: xilinx_dma: Fix channel idle state management in AXIDMA and MCDMA interrupt handlers Fix a race con | |
| CVE-2026-93171 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: leds: lp5860: Fix a potential double-unlock In lp5860_device_init(), if lp5860_init_dt() fails, an already unl | |
| CVE-2026-93172 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/mm_init: handle alloc_percpu failure in free_area_init_core_hotplug We miss a failed allocation check for p | |
| CVE-2026-93173 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf,lsm: Drop bpf_prog_free from sleepable_lsm_hooks __bpf_prog_put_rcu() is the call_rcu() callback for non-s | |
| CVE-2026-93174 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Copy per-CPU map value padding in copy_map_value_long() In kernel, per-CPU map elements are stored with r | |
| CVE-2026-93175 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dangling pointer in CRTC reset function amdgpu_dm_crtc_reset_state() frees the old state | |
| CVE-2026-93176 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dangling pointer in plane reset function amdgpu_dm_plane_drm_plane_reset() frees the old | |
| CVE-2026-93177 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup vddInd, vddciInd and mvddInd from VBIOS-p | |
| CVE-2026-93178 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup vddInd and vddcInd fields from VBIOS-parsed | |
| CVE-2026-93179 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read Reject voltage objects whose usSize is | |
| CVE-2026-93180 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix NPD issue on partial unmap of an evicted BO This commit fixes the NULL pointer dereference is | |
| CVE-2026-93181 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix uncore_box ref/unref ordering In uncore_event_cpu_online(), uncore_box_ref() was ca | |
| CVE-2026-93182 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix overflow in update_tg_cfs_runnable() A divide-by-zero crash is observed when running hackbench | |
| CVE-2026-93183 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/lima: call drm_mm_init() with a valid allocation range lima_vm_create() is currently run before va_start a | |
| CVE-2026-93184 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl_audmix: rework runtime PM handling in probe After pm_runtime_enable() the AUDMIX block is powered of | |
| CVE-2026-93185 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: rt700-sdw: always drain jack work on remove rt700_sdw_remove() drains jack_detect_work and jack_btn_chec | |
| CVE-2026-93186 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cxl/mbox: Clamp mailbox output allocation to the payload size CXL_MEM_SEND_COMMAND bounds the user's in.size t | |
| CVE-2026-93187 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Return error for invalid number of formats When the number of input or output format | |
| CVE-2026-93188 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: roccat: bound device-supplied profile index kone_keep_values_up_to_date() and kone_profile_activated() us | |
| CVE-2026-93189 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: core: quiesce input in hid_hw_stop() to prevent use-after-free A driver's probe calls hid_device_io_start | |
| CVE-2026-93190 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/chrome: cros_ec_typec: Reject out-of-bounds PD cap count cros_typec_register_partner_pdos() copies th | |
| CVE-2026-93191 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smack: fix incorrect task context in smack_msg_queue_msgrcv The smack_msg_queue_msgrcv() function incorrectly | |
| CVE-2026-93192 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Clear queue->active_job when v3d_fence_create() fails The run_job() callbacks for BIN, RENDER, TFU an | |
| CVE-2026-93193 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: analogix_dp: Fix OF node reference leak via auto cleanup Sashiko reported a reference leak in ro | |
| CVE-2026-93194 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: dw_dp: Release core resources Core resources such as the DisplayPort AUX channel get initialized | |
| CVE-2026-93195 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/bridge: synopsys: dw-dp: Support unregistering the AUX channel The DisplayPort AUX channel gets initialize | |
| CVE-2026-93196 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvdimm: virtio_pmem: refcount requests for token lifetime KASAN reports slab-use-after-free in __wake_up_commo | |
| CVE-2026-93197 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: memcg: move LRU size accounting on reparenting instead of copying it When a memory cgroup is offlined its LRU | |
| CVE-2026-93198 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate the persisted dirty_tail chain at load The writeback worker follows the persisted dirty_ta | |
| CVE-2026-93199 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: i3c: master: Do not treat master device as a duplicate target i3c_master_search_i3c_dev_duplicate() searches t | |
| CVE-2026-93200 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix use-after-free of master->this sysfs attribute callbacks for the master controller device der | |
| CVE-2026-93201 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate seg_id fields from persistent memory cache_pos_decode(), cache_key_decode() and the last-k | |
| CVE-2026-93202 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix recursive locking during device registration i3c_master_register_new_i3c_devs() registers new | |
| CVE-2026-93203 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid CRC corruption due to parallel claim add batadv_bla_add_claim() is used to add claims a | |
| CVE-2026-93204 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: atomically update mac addresses When a MAC address is updated in batadv_dat_entry_add(), it i | |
| CVE-2026-93205 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3: Manage teardown with devm arm_smmu_device_remove() manually frees the IOPF queue, destroys | |
| CVE-2026-93206 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: PCI/proc: Use file_ns_capable() when checking config space read access proc_bus_pci_read() decides how much of | |
| CVE-2026-93207 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry svcauth_gss_decode_credbody() writes the | |
| CVE-2026-93208 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: kasan: fix cache shrink race with CPU hotplug kasan_quarantine_remove_cache() first invokes per_cpu_remove_cac | |
| CVE-2026-93209 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: use skb_get() instead of skb_clone() for req_skb BT enable fails intermittently with -ETI | |
| CVE-2026-93210 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: harden DFS cache against invalid target hints Currently, get_tgt_name() returns ERR_PTR(-ENOENT) | |
| CVE-2026-93211 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: initialize DRC hash table before registering shrinker shrinker_register() precedes the INIT_LIST_HEAD lo | |
| CVE-2026-93212 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose nfsd_file_net_dispose() is the consumer side of l->freeme | |
| CVE-2026-93213 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: of: fix out-of-bounds read in of_alias_scan() stem parser The stem parser tests isdigit(*(end - 1)) before che | |
| CVE-2026-93214 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_tcm: fix deadlock in usbg_make_tpg() usbg_make_tpg() held dep_lock while calling configfs_depen | |
| CVE-2026-93215 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cdx: Fix double free when sysfs file creation fails In cdx_create_res_attr(), if sysfs_create_bin_file() fails | |
| CVE-2026-93216 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/page_owner: use memcg_data snapshot to avoid TOCTOU in print_page_owner_memcg() print_page_owner_memcg() re | |
| CVE-2026-93217 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/madvise: skip device-private PMDs in cold and pageout walks madvise_cold_or_pageout_pte_range() takes pmd_t | |
| CVE-2026-93218 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: skip device-private PMDs in madvise_free_huge_pmd madvise_free_pte_range() checks pmd_trans_hu | |
| CVE-2026-93219 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/timer-sun4i: Advertise a real minimum delta sun4i_clkevt_next_event() compensates for the | |
| CVE-2026-93220 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Keep kick_sync waiting on the rq's own CPU kick_sync_wait_bal_cb() assumes it runs on the rq's CPU | |
| CVE-2026-93221 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: convert nfsd_net boolean flags to unsigned long flags word nfsd_net contains several boolean fields that | |
| CVE-2026-93222 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: signal: avoid shared siginfo namespace rewrites send_signal_locked() rewrites sender ids for the target namesp | |
| CVE-2026-93223 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: staging: media: tegra-video: fix of_node_put() on VIP parse errors tegra_vip_channel_of_parse() initializes np | |
| CVE-2026-93224 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: svcrdma: Fix unmatched rn_unregister on failed accept When svc_rdma_accept() takes the errout path before rpcr | |
| CVE-2026-93225 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: phy: fsl-imx8mq-usb: fix typec switch leak on probe error path If probe fails after imx95_usb_phy_get_tca() su | |
| CVE-2026-93226 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU iterator to dump route exceptions rt6_nh_dump_exceptions() uses hlist_for_each_entry() to iterat | |
| CVE-2026-93227 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/mm_init: deferred_grow_zone(): fix out-of-range first_deferred_pfn With CONFIG_DEFERRED_STRUCT_PAGE_INIT en | |
| CVE-2026-93228 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject Write/Reply chunks with segcount 0 A peer can send a Write or Reply chunk whose segcount field | |
| CVE-2026-93229 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: add missing read barrier to rpc_status_get dumpit seqcount retry The hand-rolled seqcount-like protocol | |
| CVE-2026-93230 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: initialize gigantic bootmem hugepage struct pages earlier Gigantic bootmem HugeTLB pages are curre | |
| CVE-2026-93231 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: lockd: fix swapped arguments in nlmsvc_match_ip() When releasing locks by server IP address via /proc/fs/nfsd/ | |
| CVE-2026-93232 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix boot panic with CONFIG_DEBUG_VM and HVO bootmem pages Patch series "mm: Refactor bootmem gigan | |
| CVE-2026-93233 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dmem: fix callocated underflow on large folio split nouveau_dmem_folio_free() drops chunk->calloca | |
| CVE-2026-93234 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/gud: validate TV mode names before creating enum property The GUD protocol returns TV mode names as fixed- | |
| CVE-2026-93235 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to zero post-EOF data when extending file size generic/794 4s ... - output mismatch (see /share/git | |
| CVE-2026-93236 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: meson: vdec: fix NULL pointer deref in vdec_try_fmt_common When VIDIOC_TRY_FMT is called with an unsupp | |
| CVE-2026-93237 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Add DIRECT_MAP_PHYSMEM_END definition get_free_mem_region() and mhp_get_pluggable_range() bound the | |
| CVE-2026-93238 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: fix potential use of uninitialized apm_filtered bitmap The DECLARE_BITMAP(apm_filtered, AP_DEVIC | |
| CVE-2026-93239 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: arm64: mm: Fix the lockless page-table walk in show_pte() show_pte() walks page tables locklessly and can run | |
| CVE-2026-93240 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: memcg: make the v1 soft limit knob inert The v1 soft limit has been deprecated since v6.12 and nobody has repo | |
| CVE-2026-93241 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: memcg: bypass the reclaim and oom killer for dying tasks once oom_reaper is done At Meta, we are seeing instan | |
| CVE-2026-93242 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb() qla24xx_process_response_queue() ad | |
| CVE-2026-93243 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: properly account locked pages secretmem accounts folios by treating memory as if it were mlock() | |
| CVE-2026-93244 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/sysfb: simpledrm: Improve stride validation Validate the computed stride against the maximum value INT_MAX | |
| CVE-2026-93245 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: apparmor: policy_int make sure list heads are initialized before fail path If profile create fails before poli | |
| CVE-2026-93246 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: fix out-of-bounds read setting MSI-X irq affinity rvu_register_interrupts() walks every MSI-X ve | |
| CVE-2026-93247 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix 'hdev->discovery.uuids' NULL dereference 'uuid_count' member of struct 'discovery_state' | |
| CVE-2026-93248 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: don't WARN on kernel job timeout when device already wedged igt@xe_wedged@wedged-at-any-timeout wedges | |
| CVE-2026-93249 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: spi: amlogic-spisg: Make sure clk_init_data is fully initialized The clk_init_data structure contains several | |
| CVE-2026-93250 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vxlan: mdb: Fix use-after-free in vxlan_mdb_flush() vxlan_mdb_flush() iterates over the MDB entries using hlis | |
| CVE-2026-93251 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ACPI: bus: Introduce acpi_bus_get_primary_device() The function used for obtaining the first "physical" device | |
| CVE-2026-93252 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix circular locking dependency in ocfs2_init_acl() A lockdep warning indicates a circular locking depe | |
| CVE-2026-93253 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sched/isolation: Defer freeing of cpumask memblock memory to initcall When testing a linux-next kernel with co | |
| CVE-2026-93254 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: arm64: entry: Avoid unnecessary local_irq_disable() on kernel exit Currently, when exiting to kernel mode, we | |
| CVE-2026-93255 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: make sure EXTENT_BUFFER_READING is cleared under refs_lock [FALSE ALERTS] There is a bug report that th | |
| CVE-2026-93256 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: arm64: hibernate: mask DAIF before restoring hibernated kernel The arm64 hibernate code manages the exception | |
| CVE-2026-93257 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: block: handle nogenerate/noverify properly in fs-integrity Check the BIP_CHECK flags before generating or veri | |
| CVE-2026-93258 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: do not use make_bad_inode() in ocfs2_read_inode_block_full() This reverts commit 58b6fcd2ab34 ("ocfs2: | |
| CVE-2026-93259 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: powerpc/irq: Fix missing r2 clobber in PCREL inline assembly In CONFIG_PPC_KERNEL_PCREL mode, r2 is no longer | |
| CVE-2026-93260 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: powerpc/xive: propagate IPI init errors to prevent use-after-free When xive_init_ipis() fails (e.g. irq_domain | |
| CVE-2026-93261 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: locking/lockdep: Fix NULL pointer dereference in __lock_set_class() register_lock_class() can return NULL when | |
| CVE-2026-93262 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: md/raid5-ppl: fix use-after-free in ppl_do_flush() The loop in ppl_do_flush() continues iterating after callin | |
| CVE-2026-93263 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: clk: eswin: Zero-initialize stack-allocated clk_init_data eswin_clk_register_pll() and eswin_register_clkdiv() | |
| CVE-2026-93264 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Fix PBL chunk length computation On register MR, when creating the PBL, if it's an indirect PBL we c | |
| CVE-2026-93265 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: PCI/pwrctrl: tc9563: Fix parsing the integrated Ethernet MAC Endpoint node DSP3 has an integrated Ethernet MAC | |
| CVE-2026-93266 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: arm64: RSI: fix field-spanning write warning in attestation token init The challenge is passed in registers a1 | |
| CVE-2026-93267 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in uverbs_free_dmah() When accessing a dmah via the netlink path the o | |
| CVE-2026-93268 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ext4: skip extra isize expansion during mount to prevent deadlock ext4_try_to_expand_extra_isize() is called f | |
| CVE-2026-93269 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix circular lock dependency in ext4_ext_migrate Move iput(tmp_inode) after ext4_writepages_up_write() t | |
| CVE-2026-9327 | Analyzed | 未確認 | CWE-269 | IBM WebSphere Application Server 9.0, and 8.5 could allow an authenticated user with a low-privilege administrative role to modify security configuration. This could result in info |
| CVE-2026-93270 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow interpreter fallback for BPF_ADDR_PERCPU insn The BPF_MOV64_PERCPU_REG insn requires JIT to emit | |
| CVE-2026-93271 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate ath11k can receive HT/VHT/HE frames whose | |
| CVE-2026-93272 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom_wcnss: Fix handling the lack of PD regulators in v3 The changes introduced to handle single p | |
| CVE-2026-93273 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: regulator: tps6594: Fix device node reference leaks in multiphase loop In tps6594_regulator_probe(), the multi | |
| CVE-2026-93274 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: bcm2835: Don't remove an unregistered GPIO chip If the devm_pinctrl_register() function fails, bcm283 | |
| CVE-2026-93275 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/pt: Fix stop/start with no update If pt_event_stop() is called without PERF_EF_UPDATE flag, the | |
| CVE-2026-93276 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: phy: renesas: phy-rcar-gen3-usb2: Fix devm action registration for disabled VBUS regulator devm_regulator_get_ | |
| CVE-2026-93277 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Validate udata before executing commands The destroy callbacks currently zero the udata output a | |
| CVE-2026-93278 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: staging: octeon: add missing napi_disable in cvm_oct_rx_shutdown cvm_oct_rx_shutdown calls free_irq and netif_ | |
| CVE-2026-93279 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown The TX cleanup tasklet can be scheduled by th | |
| CVE-2026-93280 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: greybus: audio: bound the topology section sizes against the fetched size gb_audio_gb_get_topology() fetches a | |
| CVE-2026-93281 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix HE extended capability length check rtw89_mac_check_he_obss_narrow_bw_ru_iter() reads extende | |
| CVE-2026-93282 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix maximum allowed access checks The DACL permission check looks for an ACE matching the current user | |
| CVE-2026-93283 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix device_register() error path When device_register() fails in i3c_master_register_new_i3c_devs | |
| CVE-2026-93284 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/pagemap: dma-unmap pages before handling migration errors drm_pagemap_migrate_unmap_pages() relies on the | |
| CVE-2026-93285 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: f2fs: embed f2fs_gc_kthread in f2fs_sb_info Instead of allocating f2fs_gc_kthread dynamically, embed it in f2f | |
| CVE-2026-93286 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: appletalk: fix NULL pointer dereference in aarp_send_ddp() aarp_send_ddp() calls atalk_find_dev_addr(dev) | |
| CVE-2026-93287 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: i2c: smbus: reject oversized block transfers in the common path The SMBus block transfer length data->block[0] | |
| CVE-2026-93288 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state sashiko reports: "nfnl_log_net | |
| CVE-2026-93289 | Deferred | 未確認 | CWE-78 | The affected products are vulnerable to command injection attack that could allow an unauthenticated attacker to execute system commands during the pairing process. |
| CVE-2026-93290 | Deferred | 未確認 | CWE-798 | Omni C20 uses hard-coded credentials that could allow an attacker to monitor log files to obtain credentials to access information like mapping data. |
| CVE-2026-93291 | Deferred | 未確認 | CWE-295 | Omni C20 lacks proper certificate validation which could allow an attacker to perform a man-in-the-middle attack which could allow them to execute arbitrary code. |
| CVE-2026-93292 | Awaiting Analysis | 未確認 | CWE-89 | SigNoz versions from 0.88.0 before 0.142.1 contain a SQL injection vulnerability in trace-funnel analytics endpoints that interpolate service_name and span_name fields into ClickHo |
| CVE-2026-93295 | Deferred | 未確認 | CWE-20, CWE-74 | MISP contains a vulnerability in its background job dispatch mechanism that allows remote code execution as the web user. Background job arguments are passed directly as the argv o |
| CVE-2026-93296 | Deferred | 未確認 | CWE-79 | MISP contains a stored cross-site scripting (XSS) vulnerability in the Overmind theme's statistics views. The event General card and the server/feed preview card constructed donut |
| CVE-2026-93302 | Analyzed | 未確認 | CWE-295 | MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that enable the macro WOLFSSL_TRUST_PEER_CERT and load CA ce |
| CVE-2026-93303 | Deferred | 未確認 | CWE-79 | The HT Contact Form – Drag & Drop Form Builder for WordPress plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via 'form_data' Rich Text Field via Draft S |
| CVE-2026-93304 | Analyzed | 未確認 | CWE-696 | A (D)TLS 1.2 client can accept a ChangeCipherSpec message before it has sent its ClientKeyExchange. No master secret has been derived at that point, so the client installs read key |
| CVE-2026-93306 | Analyzed | 未確認 | CWE-125 | IBM Server Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the ASMI |
| CVE-2026-93307 | Deferred | 未確認 | CWE-400, CWE-789 | A vulnerability has been found in O-RAN-SC SMO OAM 2025-06-10. Affected is an unknown function of the component VES Collector. Such manipulation of the argument additionalFields.pa |
| CVE-2026-93308 | Deferred | 未確認 | CWE-400, CWE-770 | A vulnerability was found in O-RAN-SC SMO OAM 2025-06-10. Affected by this vulnerability is an unknown functionality of the component VES Collector. Performing a manipulation resul |
| CVE-2026-93309 | Deferred | 未確認 | CWE-400, CWE-770 | A vulnerability was determined in O-RAN-SC SMO OAM 2025-06-10. Affected by this issue is some unknown functionality of the component VES Collector. Executing a manipulation can lea |
| CVE-2026-9331 | Deferred | 未確認 | CWE-862 | The EDD Product Catalog Feed by PixelYourSite plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capabili |
| CVE-2026-93310 | Deferred | 未確認 | CWE-400, CWE-770 | A vulnerability was identified in O-RAN-SC SMO OAM 2025-06-10. This affects an unknown part of the component VES Collector. The manipulation leads to allocation of resources. Remot |
| CVE-2026-93311 | Deferred | 未確認 | CWE-189, CWE-190 | A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function SampledFunction::SampledFunction of the file poppler/Function.cc of the component Sampl |
| CVE-2026-93312 | Deferred | 未確認 | CWE-404, CWE-476 | A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream::rewind of the file poppler/JBIG2Stream.cc. This manipulation causes null pointer derefer |
| CVE-2026-93313 | Deferred | 未確認 | CWE-189, CWE-190 | A vulnerability was found in Freedesktop Poppler 26.07.0. The impacted element is the function JBIG2Stream::readCodeTableSeg of the file poppler/JBIG2Stream.cc. Performing a manipu |
| CVE-2026-93314 | Deferred | 未確認 | CWE-189, CWE-190 | A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of the file fofi/FoFiTrueType.cc. Executing a manipulation of th |
| CVE-2026-93330 | Awaiting Analysis | 未確認 | CWE-696 | Improper rule enforcement in the PAM Active Directory provider in Devolutions Server 2026.3.5 allows a user with PAM edit permissions to bypass the Devolutions Gateway host ruleset |
| CVE-2026-93331 | Deferred | 未確認 | CWE-119, CWE-125 | A vulnerability was identified in GPAC 26.08-DEV. This vulnerability affects the function gf_rtp_parse_ttxt of the file src/ietf/rtp_depacketizer.c of the component RTP Depacketize |
| CVE-2026-93332 | Awaiting Analysis | 未確認 | CWE-862 | Improper access control in the partial connection API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileged user to read, create, modify, and delete S |
| CVE-2026-93337 | Awaiting Analysis | 未確認 | CWE-88 | NetworkManager-l2tp through 1.52.4, fixed in 1.52.6, contains an improper input validation vulnerability that allows local users with VPN connection creation permissions to inject |
| CVE-2026-93338 | Awaiting Analysis | 未確認 | CWE-1188 | Grandstream GWN7660ELR before firmware version 1.0.27.6 contains an information disclosure vulnerability that allows unauthenticated remote attackers to obtain sensitive system inf |
| CVE-2026-93339 | Deferred | 未確認 | CWE-79 | Metaphor Creations Ditty (ditty-news-ticker) before 3.1.70 contains a stored cross-site scripting vulnerability that allows authenticated users with Author-level privileges or high |
| CVE-2026-93340 | Deferred | 未確認 | CWE-640 | Gladys Assistant before 5.1.0 contains a password reset link poisoning vulnerability that allows unauthenticated remote attackers to obtain valid password reset tokens for any acco |
| CVE-2026-93341 | Deferred | 未確認 | CWE-862 | MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking_send_refund AJAX action that allows authenticated attackers with subs |
| CVE-2026-93342 | Deferred | 未確認 | CWE-862 | MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking_duplicate_product AJAX action that allows authenticated attackers wit |
| CVE-2026-93343 | Deferred | 未確認 | CWE-862 | MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking_admin_vendors_ajax AJAX action that allows authenticated attackers wi |
| CVE-2026-93344 | Deferred | 未確認 | CWE-862 | MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking_get_page_content AJAX action that allows authenticated attackers with |
| CVE-2026-93345 | Awaiting Analysis | 未確認 | CWE-1284 | MikroTik RouterOS before 7.25beta4 contains an improper input validation vulnerability in the labelled-VPN NLRI iterators of the routing service that allows an unauthenticated on-p |
| CVE-2026-93348 | Deferred | 未確認 | CWE-94 | Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path wher |
| CVE-2026-93349 | Awaiting Analysis | 未確認 | CWE-78 | Frictionless before 5.19.1 contains an OS command injection vulnerability in the explore console command that allows an attacker who supplies a crafted Data Package descriptor to e |
| CVE-2026-93352 | Deferred | 未確認 | CWE-434 | Laravel-Mediable 7.0.0 before 7.0.2 contains an incomplete patch for CVE-2026-49972 in which the .pht extension is absent from the forbidden_extensions blocklist in config/mediable |
| CVE-2026-93353 | Deferred | 未確認 | CWE-424, CWE-59 | copyparty contains a volume restriction bypass vulnerability in its SFTP front end that allows authenticated SFTP users to create, remove, and truncate arbitrary paths outside perm |
| CVE-2026-93354 | Deferred | 未確認 | CWE-1188 | Taskview Community before 1.56.0 contains a missing authentication vulnerability that allows unauthenticated attackers to register arbitrary OAuth clients and take over user accoun |
| CVE-2026-93355 | Awaiting Analysis | 未確認 | CWE-1390 | LiteLLM contains a weak authentication vulnerability that allows an attacker holding a valid JWT from the configured identity provider to authenticate as any existing user by explo |
| CVE-2026-9336 | Analyzed | 未確認 | CWE-306 | IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafted HTTP request to an administrative endpoint. A remote attac |
| CVE-2026-93363 | Awaiting Analysis | 未確認 | CWE-862 | The @payloadcms/storage-vercel-blob storage adapter for Payload contains an improper access control vulnerability that allows authenticated users to bypass collection-level permiss |
| CVE-2026-93364 | Deferred | 未確認 | CWE-915 | Bludit CMS through 3.22.0 contains a mass assignment vulnerability that allows authenticated users with the Author role to modify privileged page fields reserved for administrators |
| CVE-2026-93365 | Deferred | 未確認 | CWE-862 | Bludit CMS through 3.22.0 contains a missing authorization vulnerability that allows authenticated users holding the Author or Editor role to read the full content of private draft |
| CVE-2026-93366 | Deferred | 未確認 | CWE-639 | Bludit CMS through 3.22.0 contains an authorization bypass vulnerability that allows authenticated users with the Author role to enumerate and delete media files belonging to pages |
| CVE-2026-93368 | Deferred | 未確認 | CWE-89 | The Rename wp-login.php to anything you want plugin for WordPress is vulnerable to time-based SQL Injection via 'log' (Username) Parameter in all versions up to, and including, 2.0 |
| CVE-2026-93371 | Deferred | 未確認 | CWE-74, CWE-77 | A security vulnerability has been detected in marcopiovanello yt-dlp-web-ui up to v4. This issue affects the function NewGenericDownload of the file server/internal/downloaders/gen |
| CVE-2026-93372 | Analyzed | 未確認 | CWE-121 | Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chr |
| CVE-2026-93373 | Analyzed | 未確認 | CWE-416 | Use after free in Extensions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromi |
| CVE-2026-93374 | Analyzed | 未確認 | CWE-416 | Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML |
| CVE-2026-93375 | Analyzed | 未確認 | CWE-706 | Incorrect reference resolution in Tracing in Google Chrome on on Windows prior to 153.0.8010.52 allowed a local attacker to potentially execute arbitrary code outside the sandbox v |
| CVE-2026-93376 | Analyzed | 未確認 | CWE-125 | Out of bounds read in DataTransfer in Google Chrome prior to 153.0.8010.52 allowed a local attacker leveraging social engineering to read memory outside the sandbox via a local pro |
| CVE-2026-93377 | Analyzed | 未確認 | CWE-843 | Type confusion in V8 in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML |
| CVE-2026-93378 | Analyzed | 未確認 | CWE-862 | Missing authorization in Storage in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted P |
| CVE-2026-93379 | Modified | 未確認 | CWE-863 | Incorrect authorization in ORB in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Low) |
| CVE-2026-9338 | Analyzed | 未確認 | CWE-400 | IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerabilit |
| CVE-2026-93380 | Analyzed | 未確認 | CWE-367 | Race condition in FileSystem in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass s |
| CVE-2026-93381 | Analyzed | 未確認 | CWE-122 | Buffer overflow in PDFium in Google Chrome on on Windows prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside |
| CVE-2026-93382 | Analyzed | 未確認 | CWE-416 | Use after free in PDFium in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-93383 | Analyzed | 未確認 | CWE-200 | Information leak in Permissions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Me |
| CVE-2026-93384 | Analyzed | 未確認 | CWE-918 | Server-side request forgery in Omnibox in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to bypass system access restric |
| CVE-2026-93385 | Analyzed | 未確認 | CWE-200 | Information leak in Paint in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Me |
| CVE-2026-93386 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in WebAppInstalls in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. |
| CVE-2026-93387 | Analyzed | 未確認 | CWE-754 | Improper state validation in Skia in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity |
| CVE-2026-93393 | Analyzed | 未確認 | CWE-787 | A heap-based buffer overflow exists in the TLS transport layer of the MongoDB C Driver when built with the Windows platform TLS backend. A remote endpoint that the client connects |
| CVE-2026-93394 | Analyzed | 未確認 | CWE-303 | A flaw in libmongoc's SCRAM authentication implementation caused the client to continue the authentication handshake and transmit the client proof even when a nonce mismatch was de |
| CVE-2026-93395 | Analyzed | 未確認 | CWE-191 | A missing lower-bound validation in the bson_new_from_buffer() function of libbson allows an integer underflow when processing BSON data with a zero-length prefix. The function rea |
| CVE-2026-93399 | Deferred | 未確認 | CWE-639 | The Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 28.2 via the 'bookly_get_form_id', 'bookly_render_complete', 'bo |
| CVE-2026-93405 | Deferred | 未確認 | CWE-79 | Mailspring is a fast, cross-platform, open-source email client. Prior to 1.17.0, attachment quick preview converts Markdown, DOCX, and XLSX attachments with Snarkdown, Mammoth, and |
| CVE-2026-93421 | Deferred | 未確認 | CWE-117, CWE-150 | Mesop is a Python-based UI framework that allows users to build web applications. Prior to 1.3.4, the unauthenticated /__csp__ endpoint passes attacker-controlled document-uri, blo |
| CVE-2026-93425 | Deferred | 未確認 | CWE-78 | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the patch.readRepoDirectories tRPC procedure passes the user-controlled repoPath value from apps/do |
| CVE-2026-93426 | Awaiting Analysis | 未確認 | CWE-89 | SigNoz versions 0.87.0 before 0.142.0 fail to escape user-supplied telemetry field-key names in the v5 query_range API, allowing authenticated users to inject SQL. Attackers with V |
| CVE-2026-93432 | Awaiting Analysis | 未確認 | CWE-79 | A flaw was found in the Quarkus Qute template engine. When the {#eval} section helper processes a sub-template, it fails to pass the parent template's content type information. Thi |
| CVE-2026-93433 | Awaiting Analysis | 未確認 | CWE-121 | A flaw was found in libstoragemgmt. An attacker with control over a local or virtual storage device could provide specially crafted SCSI (Small Computer System Interface) Vital Pro |
| CVE-2026-93435 | Awaiting Analysis | 未確認 | CWE-674 | redis-parser through 3.0.0 contains a denial of service vulnerability in the RESP protocol parser that allows malicious Redis endpoints to crash the client process through unbounde |
| CVE-2026-93436 | Analyzed | 未確認 | CWE-401 | vLLM through 0.29.0 fails to properly clean up decode-side metadata for rejected inference requests in prefill/decode disaggregated deployments. Remote attackers can submit request |
| CVE-2026-93450 | Awaiting Analysis | 未確認 | CWE-674 | go-openapi/swag jsonutils before 0.27.1 contains a stack overflow vulnerability in ordered JSON parsing and serialization due to unbounded recursion with no depth limit. Remote una |
| CVE-2026-93451 | Awaiting Analysis | 未確認 | CWE-787 | snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in typed Snappy.uncompress*Array methods that allocate output arrays by dividing uncompressed length by elemen |
| CVE-2026-93452 | Undergoing Analysis | 未確認 | CWE-787 | snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in Snappy.compress(ByteBuffer, ByteBuffer) that writes past the end of the destination buffer. Attackers can s |
| CVE-2026-93453 | Deferred | 未確認 | CWE-640 | SOGo before 5.12.11 constructs password-reset links using the client-supplied Origin header as the authority, allowing unauthenticated attackers to redirect recovery tokens to atta |
| CVE-2026-93454 | Deferred | 未確認 | CWE-79 | Aureus ERP through 1.6.0 stores the Payment Term note field unsanitized and renders it as raw HTML in the Accounting plugin. Authenticated users with payment-term create permission |
| CVE-2026-93455 | Deferred | 未確認 | CWE-862 | django-page-cms through 2.0.13 fails to properly validate page permissions in admin helper views, allowing any staff account to read arbitrary page content and stored media paths. |
| CVE-2026-93456 | Deferred | 未確認 | CWE-352 | django-page-cms through 2.0.13 exempts five admin mutation views from CSRF protection in pages/admin/views.py, allowing attackers to forge requests that modify page content. Signed |
| CVE-2026-93460 | Deferred | 未確認 | CWE-79 | A stored cross-site scripting vulnerability via appended strings in email form fields exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in |
| CVE-2026-93462 | Deferred | 未確認 | CWE-306 | A missing authentication for critical function vulnerability exists in baserCMS. If this vulnerability is exploited, a remote attacker may obtain sensitive information. |
| CVE-2026-93463 | Deferred | 未確認 | CWE-79 | A cross-site scripting vulnerability via script validation bypass exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web brow |
| CVE-2026-93464 | Deferred | 未確認 | CWE-79 | A stored cross-site scripting vulnerability via custom content descriptions exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user' |
| CVE-2026-93467 | Deferred | 未確認 | CWE-502 | The OAKlouds developed by HGiga has a Insecure Deserialization vulnerability. Unauthenticated remote attackers can execute arbitrary code on the server by sending maliciously craft |
| CVE-2026-93468 | Deferred | 未確認 | CWE-23 | The OAKlouds developed by HGiga has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit Relative Path Traversal to read arbitrary system files. |
| CVE-2026-93477 | Deferred | 未確認 | CWE-915 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in ash-project ash allows a user to set the value of a private action argument on the b |
| CVE-2026-93485 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic WordPress wordpress allows DOM-Based XSS.This issue affects WordPre |
| CVE-2026-93488 | Awaiting Analysis | 未確認 | CWE-770 | A flaw was found in Netty. SpdySessionHandler accepts an unlimited number of concurrent remote-initiated streams because localConcurrentStreams defaults to Integer.MAX_VALUE and th |
| CVE-2026-93491 | Awaiting Analysis | 未確認 | CWE-770 | A flaw was found in Netty's HttpServerCodec. A remote, unauthenticated attacker can exploit this vulnerability by pipelining HTTP/1.1 requests on a single connection and withholdin |
| CVE-2026-93492 | Awaiting Analysis | 未確認 | CWE-1035 | A flaw was found in Netty's HTTP/2 HpackEncoder. A remote attacker can exploit this by sending HTTP/2 SETTINGS frames with a very large MAX_HEADER_TABLE_SIZE. This causes the Hpack |
| CVE-2026-93493 | Awaiting Analysis | 未確認 | CWE-299 | A flaw was found in Netty's `netty-handler-ssl-ocsp` component. A remote attacker can exploit this vulnerability by providing an Online Certificate Status Protocol (OCSP) response |
| CVE-2026-93494 | Awaiting Analysis | 未確認 | CWE-1035 | A flaw was found in Netty's StompSubframeDecoder component. A remote attacker can exploit this vulnerability by sending a specially crafted STOMP frame body without its terminating |
| CVE-2026-93504 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability has been found in SveltyCMS 0.0.6. This affects an unknown part of the file src/routes/api/[...path]/+server.ts of the component User Attribute Update Endpoint. Suc |
| CVE-2026-93505 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in SveltyCMS 0.0.6. This vulnerability affects unknown code of the file src/utils/media/media-service.server.ts of the component SVG Media Upload. Perform |
| CVE-2026-93506 | Deferred | 未確認 | CWE-918 | A vulnerability was determined in SveltyCMS 0.0.6. This issue affects some unknown processing of the file /mediagallery/upload-media of the component File Upload Endpoint. Executin |
| CVE-2026-93507 | Deferred | 未確認 | CWE-862 | The WC Fields Factory WordPress plugin before 4.1.11 does not properly restrict access to, or verify a nonce for, a post-cloning action, allowing Contributor-level users and above |
| CVE-2026-93508 | Deferred | 未確認 | CWE-862 | The WC Fields Factory WordPress plugin before 4.1.11 does not properly restrict access to its field-management AJAX action, allowing authenticated users with Subscriber-level acces |
| CVE-2026-93510 | Deferred | 未確認 | CWE-862 | The Points and Rewards for WooCommerce WordPress plugin before 2.10.4 does not validate the claimed reward amount or restrict who can call its Win Wheel claim handler, allowing aut |
| CVE-2026-93511 | Deferred | 未確認 | CWE-290 | The Premium Packages WordPress plugin before 7.2.1 does not verify PayPal's webhook signature before processing payment and subscription notifications, allowing unauthenticated at |
| CVE-2026-93512 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in JW Player for WordPress <= 2.3.11 versions. |
| CVE-2026-93513 | Deferred | 未確認 | CWE-639 | Contributor Insecure Direct Object References (IDOR) in SiteSkite <= 2.1.7 versions. |
| CVE-2026-93514 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Notification for Telegram <= 3.5.2 versions. |
| CVE-2026-93526 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Event Tickets <= 5.29.4 versions. |
| CVE-2026-93527 | Deferred | 未確認 | CWE-89 | Contributor SQL Injection in Live Copy Paste for Elementor <= 1.5.10 versions. |
| CVE-2026-93528 | Deferred | 未確認 | CWE-200 | The NP Quote Request for WooCommerce WordPress plugin before 2.4.16 does not verify order ownership before rendering an order's details, allowing unauthenticated attackers to view |
| CVE-2026-93529 | Deferred | 未確認 | CWE-862 | Contributor Broken Access Control in WSP MCP – AI Agents Connector <= 2.7.0 versions. |
| CVE-2026-93531 | Deferred | 未確認 | CWE-352, CWE-862 | A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This vulnerability affects unknown code. This manipulation causes c |
| CVE-2026-93532 | Deferred | 未確認 | CWE-287 | A security vulnerability has been detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This issue affects the function application/modules/glo |
| CVE-2026-93533 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was determined in spatie Scotty up to 1.4.4. This impacts the function DoctorCommand::checkSshConnectivity/DoctorCommand::checkRemoteTools of the file app/Commands/ |
| CVE-2026-93534 | Deferred | 未確認 | CWE-494 | A vulnerability was identified in spatie Scotty up to 1.4.2. Affected is the function SelfUpdater::update of the file app/Updater/SelfUpdater.php of the component Self Update Handl |
| CVE-2026-93537 | Analyzed | 未確認 | CWE-23 | A user who can supply bundle content to a repository referenced by a GitRepo resource, for example through Git push access, or through permission to create or modify a GitRepo, can |
| CVE-2026-93538 | Analyzed | 未確認 | CWE-290, CWE-639 | A cross-tenant authorization issue was discovered in SUSE Rancher Fleet. During agent-initiated cluster registration, cluster labels supplied by the registering agent, including la |
| CVE-2026-93539 | Analyzed | 未確認 | CWE-306 | A vulnerability was discovered in Fleet's Git webhook receiver (the gitjob webhook service). When a webhook secret is not configured, incoming webhook requests are accepted without |
| CVE-2026-93540 | Analyzed | 未確認 | CWE-266 | A privilege mismatch was found in Fleet. When a bundle requested namespace labels or annotations through the namespaceLabels and namespaceAnnotations options, the resulting namespa |
| CVE-2026-93541 | Awaiting Analysis | 未確認 | CWE-125 | An out-of-bounds read in libXi's XQueryDeviceState() in libXi before 1.8.4 could be used by a |
| CVE-2026-93542 | Awaiting Analysis | 未確認 | CWE-125 | An out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() in libXi before 1.8.4 could be used by malicous servers to crash the X client. |
| CVE-2026-93543 | Awaiting Analysis | 未確認 | CWE-125 | An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client. |
| CVE-2026-93544 | Awaiting Analysis | 未確認 | CWE-125 | An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached X client. |
| CVE-2026-93545 | Awaiting Analysis | 未確認 | CWE-125 | An out-of-bounds read in libXi's XListInputDevices() in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client. |
| CVE-2026-93547 | Awaiting Analysis | 未確認 | CWE-285 | A missing authorization check in the Vaadin Spreadsheet component allows an authenticated user of an application that renders a spreadsheet to add or replace cell comments on a she |
| CVE-2026-93556 | Deferred | 未確認 | CWE-639 | The ‘/password/guardarClau/recover’ endpoint accepts the ‘usuariId’ parameter, which specifies the account whose password is to be changed. The JWT token for the recovery process i |
| CVE-2026-93558 | Awaiting Analysis | 未確認 | CWE-1035 | A flaw was found in Netty's WebSocketServerExtensionHandler. A remote, unauthenticated attacker can exploit this vulnerability by using HTTP/1.1 pipelining to send requests faster |
| CVE-2026-93559 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was identified in Forget-C Jellyfish AI Short Drama Studio 0.1.0-alpha/0.2.0/0.3.0/0.3.1/0.3.2. This affects an unknown function of the file backend/app/dependencie |
| CVE-2026-93560 | Awaiting Analysis | 未確認 | CWE-1035 | A flaw was found in the Netty STOMP codec. A remote attacker could send a specially crafted STOMP frame with a content-length header exceeding the maximum integer value. This integ |
| CVE-2026-93561 | Awaiting Analysis | 未確認 | CWE-1035 | A flaw was found in io.netty/netty-codec-memcache. The Memcache binary protocol codec incorrectly reads `keyLength` and `extrasLength` as signed Java types instead of unsigned, as |
| CVE-2026-93562 | Awaiting Analysis | 未確認 | CWE-1035 | A flaw was found in Netty's HTTP/1 decoder. Incomplete validation of malformed Transfer-Encoding headers allows a remote attacker to perform HTTP request smuggling. By sending spec |
| CVE-2026-93563 | Awaiting Analysis | 未確認 | CWE-1035 | A flaw was found in Netty's `SmtpResponseDecoder` component. A remote attacker, acting as a malicious or man-in-the-middle (MITM) SMTP server, could exploit this by sending a speci |
| CVE-2026-93564 | Awaiting Analysis | 未確認 | CWE-1035 | A flaw was found in Netty. A reference-count leak in the HAProxy PROXY-v2 message decoder allows a remote, unauthenticated attacker to send specially crafted PROXY-protocol v2 head |
| CVE-2026-93565 | Awaiting Analysis | 未確認 | CWE-1035 | A flaw was found in Netty RtspDecoder. The `RtspMethods.valueOf()` function incorrectly strips trailing control bytes from method tokens in Real-Time Streaming Protocol (RTSP) requ |
| CVE-2026-93566 | Awaiting Analysis | 未確認 | CWE-1035 | A flaw was found in Netty. A remote attacker could exploit this by sending a specially crafted HTTP request that includes control characters within the chunk-size line. This bypass |
| CVE-2026-93567 | Awaiting Analysis | 未確認 | CWE-20 | A flaw was found in Netty's HTTP/2 codec. When converting HTTP/1 CONNECT requests to HTTP/2, the component incorrectly uses the Host header instead of the CONNECT authority-form re |
| CVE-2026-93568 | Awaiting Analysis | 未確認 | CWE-20 | A flaw was found in Netty. A remote attacker could exploit this vulnerability by sending specially crafted HTTP/2 or HTTP/3 Extended CONNECT requests. Netty's HTTP-object conversio |
| CVE-2026-93569 | Awaiting Analysis | 未確認 | CWE-444 | A flaw was found in Netty. A remote unauthenticated attacker can exploit a vulnerability in Netty's HTTP/1 to HTTP/2 conversion process. When an HTTP/1 request includes both an abs |
| CVE-2026-93572 | Awaiting Analysis | 未確認 | CWE-770 | A flaw was found in Netty's `RedisArrayAggregator` component. A remote attacker can exploit this vulnerability by sending specially crafted nested Redis (RESP) array headers. This |
| CVE-2026-93573 | Awaiting Analysis | 未確認 | CWE-444 | A flaw was found in Netty's HTTP/1.1 decoder. This vulnerability allows a remote attacker to bypass `Transfer-Encoding` header validation by splitting the `Transfer-Encoding` field |
| CVE-2026-93574 | Awaiting Analysis | 未確認 | CWE-444 | A flaw was found in Netty's `netty-codec-http` component. A remote attacker could exploit this vulnerability by sending a specially crafted HTTP/1.1 chunk-size token that includes |
| CVE-2026-93575 | Awaiting Analysis | 未確認 | CWE-1035 | A flaw was found in Netty's MqttDecoder. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted MQTT CONNECT packet. The decoder fails to |
| CVE-2026-93576 | Awaiting Analysis | 未確認 | CWE-93 | A flaw was found in Netty netty-codec-smtp. The component does not properly validate Carriage Return (CR) and Line Feed (LF) characters in the SMTP command-name field. A remote att |
| CVE-2026-93577 | Analyzed | 未確認 | CWE-190 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have a |
| CVE-2026-93578 | Awaiting Analysis | 未確認 | CWE-1035 | A flaw was found in Netty's Online Certificate Status Protocol (OCSP) Client. The client fails to verify the 'id-kp-OCSPSigning' Extended Key Usage (EKU) in OCSP responder certific |
| CVE-2026-93579 | Awaiting Analysis | 未確認 | CWE-1035 | A flaw was found in Netty's HTTP/2 stack. This vulnerability allows a remote attacker to inject prohibited characters, such as NUL, Line Feed, and Carriage Return, into HTTP/2 head |
| CVE-2026-93580 | Deferred | 未確認 | CWE-862 | The InPost PL WordPress plugin before 1.9.8 does not verify the authenticity of incoming shipment webhook requests, relying only on a non-secret identifier and an IP check that is |
| CVE-2026-93586 | Analyzed | 未確認 | CWE-416 | ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a use-after-free vulnerability in the ImagesToBlob method, caused by a pointer that is not updated correctly. Exploitation |
| CVE-2026-93587 | Analyzed | 未確認 | CWE-400 | ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a policy bypass in the PCD (and, per the upstream advisory, CUBE and HALD) coder: when a specific command line option is s |
| CVE-2026-93588 | Analyzed | 未確認 | CWE-476 | ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a NULL pointer dereference in the PNM coder. When the coder reaches a memory (resource) limit at a specific point during p |
| CVE-2026-93589 | Analyzed | 未確認 | CWE-369 | ImageMagick before 7.1.2-31 and 6.9.13-56 contains a division-by-zero flaw in the FLIF encoder. An incorrect value for ticks per second in the image being encoded causes a divide-b |
| CVE-2026-93590 | Analyzed | 未確認 | CWE-400 | ImageMagick before 7.1.2-31 contains a policy bypass vulnerability in the UHDR encoder that fails to perform policy checks during buffer allocation for image pixels. Attackers can |
| CVE-2026-93591 | Deferred | 未確認 | CWE-89 | SiYuan versions before 3.8.3 contain an SQL injection vulnerability in the graph.go query2Stmt function where tag values are concatenated raw into SQL string literals without escap |
| CVE-2026-93592 | Analyzed | 未確認 | CWE-129 | vLLM versions before 0.28.0 fail to validate the lower bound of token IDs in the /v1/embeddings and /pooling endpoints, allowing unauthenticated attackers to crash the engine by su |
| CVE-2026-93593 | Deferred | 未確認 | CWE-863 | ArcadeDB before 26.9.1 fails to enforce security-group types ACL entries for TimeSeries types because the ACL resolver builds permissions from bucket IDs, but TimeSeries types do n |
| CVE-2026-93594 | Deferred | 未確認 | CWE-863 | ArcadeDB (Maven artifact com.arcadedb:arcadedb-engine) through 26.8.1 enforces its per-type/per-record access-control rules only in LocalBucket, keyed on file id. Query-execution p |
| CVE-2026-93595 | Deferred | 未確認 | CWE-862 | ArcadeDB before 26.9.1 contains an access control bypass vulnerability in the query_database tool exposed through the AI chat endpoints. The tool executes queries without binding t |
| CVE-2026-93596 | Deferred | 未確認 | CWE-862 | ArcadeDB before 26.9.1 (com.arcadedb:arcadedb-engine <= 26.8.1) fails to bind the authenticated principal onto the DatabaseAsyncTransaction async worker threads used by the paralle |
| CVE-2026-93597 | Deferred | 未確認 | CWE-918 | ArcadeDB versions before 26.9.1 fail to validate IPv6 transition addresses in the SSRF guard used by IMPORT DATABASE and server commands. Authenticated attackers can supply URLs re |
| CVE-2026-93598 | Deferred | 未確認 | CWE-184 | ArcadeDB (Maven artifact com.arcadedb:arcadedb-engine) through 26.8.1 contains an incomplete deny-list in the polyglot script sandbox: com.arcadedb.query.polyglot.HostClassLookupFi |
| CVE-2026-93599 | Awaiting Analysis | 未確認 | CWE-191 | rustls-webpki through 0.103.12 (and 0.104.0-alpha releases before 0.104.0-alpha.7) contains a reachable panic in bit_string_flags() in src/der.rs. The input guard fails to reject a |
| CVE-2026-93600 | Awaiting Analysis | 未確認 | CWE-295 | rustls-webpki (rustls/webpki) versions 0.101.0 through 0.103.11 and 0.104.0-alpha releases before 0.104.0-alpha.6 ignore X.509 name constraints that apply to URI names, causing suc |
| CVE-2026-93601 | Awaiting Analysis | 未確認 | CWE-295 | rustls-webpki (the Rust webpki fork used by rustls) versions >= 0.101.0 and prior to 0.103.12 and 0.104.0-alpha.6 incorrectly accepted permitted-subtree DNS name constraints for ce |
| CVE-2026-93602 | Awaiting Analysis | 未確認 | CWE-299 | rustls-webpki versions before 0.103.10 and 0.104.0-alpha.5 contain faulty CRL authority-matching logic that compares only the first distributionPoint against each CRL's IssuingDist |
| CVE-2026-93603 | Deferred | 未確認 | CWE-94 | vm2 through 3.12.0 (fixed in 3.12.1) does not correctly handle a nullish `this` receiver in the apply trap of its bridge (lib/bridge.js): when sandboxed code calls a host-provided |
| CVE-2026-93604 | Deferred | 未確認 | CWE-284 | vm2 through 3.12.0 exposes Node.js's crypto.setFips() function to untrusted guest code when an embedder explicitly allowlists the crypto builtin for a NodeVM (require.builtin: ['cr |
| CVE-2026-93605 | Deferred | 未確認 | CWE-693 | vm2 NodeVM versions before 3.12.1 contain a sandbox escape vulnerability where the DANGEROUS_BUILTINS denylist omits child_process despite blocking other host-spawning modules. Att |
| CVE-2026-93606 | Deferred | 未確認 | CWE-693 | vm2 (npm) versions 3.12.0 and earlier contain a sandbox escape in `VM` and `NodeVM`. When an embedder exposes a host API that returns a host-realm Promise, the bridge's rejection s |
| CVE-2026-93616 | Analyzed | 掲載 | CWE-22 | A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server. |
| CVE-2026-93618 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock. Jetimpex Inc. JetTricks allows Stored XSS. This issue affects Jet |
| CVE-2026-93620 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in PayPlus Payment Gateway <= 8.2.5 versions. |
| CVE-2026-93621 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in WP Data Access <= 5.5.84 versions. |
| CVE-2026-93622 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WPS Limit Login <= 1.5.9.3 versions. |
| CVE-2026-93623 | Deferred | 未確認 | CWE-639 | Unauthenticated Insecure Direct Object References (IDOR) in AI Engine <= 3.7.8 versions. |
| CVE-2026-93624 | Deferred | 未確認 | CWE-502 | Shop manager PHP Object Injection in Music Player for WooCommerce <= 1.9.1 versions. |
| CVE-2026-93641 | Awaiting Analysis | 未確認 | CWE-79 | An unauthenticated sender can forge a share notification that triggers stored XSS when a signed-in Zimbra Classic recipient clicks Accept Share, allowing the attacker to access mai |
| CVE-2026-93642 | Awaiting Analysis | 未確認 | CWE-79 | An unauthenticated sender can forge a share notification that triggers stored XSS when a signed-in Zimbra Modern recipient clicks Accept Share, allowing the attacker to access mail |
| CVE-2026-93643 | Awaiting Analysis | 未確認 | CWE-22, CWE-863 | When OnlyOffice/Document Editing is available, an unauthenticated remote attacker with access to an existing supported public Briefcase document can abuse unsigned save fields to p |
| CVE-2026-93647 | Awaiting Analysis | 未確認 | CWE-79 | An unauthenticated calendar sender can place active markup in a COUNTER message's RFC From address. Selecting the message in Zimbra Classic triggers stored XSS, allowing the attack |
| CVE-2026-93650 | Deferred | 未確認 | CWE-307, CWE-799 | A vulnerability was determined in Saleor up to 3.20.118/3.21.54/3.22.47/3.23.14. This vulnerability affects the function get_client_ip of the file saleor/account/throttling.py. Exe |
| CVE-2026-93651 | Deferred | 未確認 | CWE-502 | Author PHP Object Injection in Minimum and Maximum Quantity for WooCommerce <= 2.1.2 versions. |
| CVE-2026-93652 | Awaiting Analysis | 未確認 | CWE-190 | Integer overflow in µD3TN v0.15.0 TCPCLv3 handshake causes heap overflow, allowing remote attackers to reliably cause DoS |
| CVE-2026-93653 | Awaiting Analysis | 未確認 | CWE-606 | A denial of service flaw was found in Poppler's Splash backend. A crafted PDF with tiling-pattern geometry approaching the int32 boundary can cause SplashOutputDev::tilingPatternFi |
| CVE-2026-93654 | Deferred | 未確認 | CWE-79 | The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'cart_items[][product_name]' Parameter in all versions u |
| CVE-2026-93655 | Deferred | 未確認 | CWE-79 | The Booking Calendar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpbc_auto_fill' parameter in all versions up to, and including, 11.8.3 due to ins |
| CVE-2026-93656 | Deferred | 未確認 | CWE-79 | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Avatar Field in |
| CVE-2026-93657 | Deferred | 未確認 | CWE-347 | hickory-resolver versions before 0.26.2 fail to propagate bogus DNSSEC proof states through the Resolver::lookup() and Resolver::lookup_ip() APIs, allowing invalid records to be re |
| CVE-2026-93658 | Awaiting Analysis | 未確認 | CWE-281 | uutils coreutils versions before 0.10.0 apply setuid or setgid mode to install destinations before finalizing ownership changes, allowing privileged users to leave setuid executabl |
| CVE-2026-93659 | Awaiting Analysis | 未確認 | CWE-79 | Concrete CMS Community Store before 2.7.8 renders customer-supplied order fields without HTML escaping in checkout and admin views. Unauthenticated attackers can store script paylo |
| CVE-2026-93660 | Deferred | 未確認 | CWE-639 | SQLBot through 1.10.1 fails to verify dashboard ownership in update_resource and update_canvas endpoints, allowing authenticated workspace members to modify other users' private da |
| CVE-2026-93661 | Deferred | 未確認 | CWE-639 | The Events Manager WordPress plugin before 7.4.5 does not stop a ticket-update request from replacing the identifiers of the ticket it was authorized against, letting a user who c |
| CVE-2026-93662 | Deferred | 未確認 | CWE-200 | The Events Manager WordPress plugin before 7.4.5 does not force the scope of its logged-in event and location search when a caller supplies their own owner value, letting a low-pr |
| CVE-2026-93676 | Awaiting Analysis | 未確認 | CWE-284 | xdg-dbus-proxy incorrectly filters D-Bus broadcast messages, bypassing configured path, interface, and member restrictions. This allows a sandboxed Flatpak application to intercept |
| CVE-2026-93682 | Analyzed | 未確認 | CWE-125 | When the HTTP stream wrapper follows a redirect and the response carries a Location header with an empty value, the redirect code reads one byte past the end of the heap buffer hol |
| CVE-2026-93685 | Awaiting Analysis | 未確認 | CWE-200 | A flaw was found in the multicluster-observability-addon. A remote attacker can access a debug endpoint without authentication, due to a misconfiguration in the underlying addon-fr |
| CVE-2026-93687 | Awaiting Analysis | 未確認 | CWE-674 | braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the charac |
| CVE-2026-93688 | Deferred | 未確認 | CWE-770 | SGLang through 0.5.19 in prefill/decode disaggregation mode with Mooncake KV transfer backend fails to validate bootstrap_room values, allowing unbounded transfer state allocation. |
| CVE-2026-93689 | Awaiting Analysis | 未確認 | CWE-476 | WinFsp through 2.2.26215 contains a null pointer dereference vulnerability in the kernel driver's Fast I/O device control handler that fails to validate the volume context before u |
| CVE-2026-93690 | Awaiting Analysis | 未確認 | CWE-835 | uri-js through 4.4.1 contains a denial of service vulnerability in the removeDotSegments function that loops infinitely when a path segment begins with Unicode line or paragraph se |
| CVE-2026-93709 | Deferred | 未確認 | CWE-41 | Dancer2 versions before 2.2.0 for Perl serve a layout as a page when an equivalent spelling of its path misses the guard in the AutoPage handler. The handler compares the request |
| CVE-2026-93710 | Deferred | 未確認 | CWE-460 | Dancer2 versions from 2.0.0 before 2.2.0 for Perl dispatch a route that a dying hook refused when the exception handler halts the response in compile_hooks. A hook that dies fires |
| CVE-2026-93711 | Deferred | 未確認 | CWE-113 | Dancer2 versions before 2.2.0 for Perl do not strip CR and LF from response header names in headers_to_array. The routine removes CR and LF from each header value but not from the |
| CVE-2026-93712 | Deferred | 未確認 | CWE-22 | Dancer2 versions from 2.1.0 before 2.2.0 for Perl serve files from outside public_dir via relative path segments in the File route handler. The handler joins the request path onto |
| CVE-2026-93736 | Deferred | 未確認 | CWE-639 | Mealie before 3.21.0 fails to validate user ownership in the ratings and favorites endpoints, allowing authenticated attackers to read any user's recipe ratings and favorites by sp |
| CVE-2026-93737 | Awaiting Analysis | 未確認 | CWE-862 | Azkaban through 4.0.0 omits project permission checks in the ScheduleServlet fetchSchedule action, allowing authenticated users to read any project's schedule configuration. Attack |
| CVE-2026-93738 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was found in Totolink A3002MU Hh-B20211125.1046. This affects the function formSchedule of the file /boafrm/formSchedule. Performing a manipulation of the argument |
| CVE-2026-93739 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was determined in Totolink A3002MU Hh-B20211125.1046. This impacts the function formWlAc of the file /boafrm/formWlAc. Executing a manipulation of the argument subm |
| CVE-2026-93740 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was identified in Totolink A3002MU Hh-B20211125.1046. Affected is the function formWlEncrypt of the file /boafrm/formWlEncrypt. The manipulation of the argument sub |
| CVE-2026-93741 | Deferred | 未確認 | CWE-119, CWE-120 | A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this vulnerability is the function formWlWds of the file /boafrm/formWlWds. The manipulation |
| CVE-2026-93742 | Deferred | 未確認 | CWE-74, CWE-77 | A weakness has been identified in Totolink A3002MU Hh-B20211125.1046. Affected by this issue is the function formWsc of the file /boafrm/formWsc. This manipulation of the argument |
| CVE-2026-93747 | Deferred | 未確認 | CWE-79 | The wpForo Forum plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'telegram' profile field in versions up to, and including, 3.1.6. This is due to insuffic |
| CVE-2026-93748 | Deferred | 未確認 | CWE-524 | http-cache-semantics through 4.2.0 fails to properly validate security-zeroed cache entries when processing client max-stale directives, allowing unauthenticated attackers to retri |
| CVE-2026-93749 | Awaiting Analysis | 未確認 | CWE-1284 | source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply |
| CVE-2026-93750 | Deferred | 未確認 | CWE-436 | http-cache-semantics through 4.2.0 contains a cache validation vulnerability in the _varyMatches() function that fails to properly validate Vary header wildcards due to byte-for-by |
| CVE-2026-93751 | Awaiting Analysis | 未確認 | CWE-176 | uri-js through 4.4.1 contains an improper UTF-8 decoding vulnerability in pctDecChars() that decodes invalid and overlong percent-encoded sequences into ASCII metacharacters. Attac |
| CVE-2026-93752 | Awaiting Analysis | 未確認 | CWE-915 | CSSOM through 0.5.0 contains a denial of service vulnerability in CSSStyleDeclaration.setProperty() that fails to validate reserved property names. Attackers can supply a styleshee |
| CVE-2026-93753 | Deferred | 未確認 | CWE-1321 | deepmerge through 4.3.1 contains a prototype poisoning vulnerability in the mergeObject() function that fails to properly validate keys being written to target objects. Attackers c |
| CVE-2026-93758 | Analyzed | 未確認 | CWE-639 | An insecure direct object reference in the nested attributes handling of the Mongoid object-document mapper may allow a user with basic application privileges to reference a record |
| CVE-2026-93759 | Analyzed | 未確認 | CWE-94 | Mongoid does not neutralize a string-typed query criterion supplied to its query builder, and instead passes it to the database as a server-side JavaScript expression. An unauthent |
| CVE-2026-93760 | Analyzed | 未確認 | CWE-943 | Mongoid does not restrict which query operators may come from caller-supplied filter data when an application hands that data to its query-building methods. In an application that |
| CVE-2026-93761 | Analyzed | 未確認 | CWE-1333 | An inefficient regular expression complexity issue in the in-memory query evaluation component of the Mongoid library may allow an unauthenticated party to cause excessive processi |
| CVE-2026-93762 | Analyzed | 未確認 | CWE-470 | Mongoid contains an unsafe reflection weakness in the query path used for embedded documents. An application that passes an externally supplied field name to certain in-memory quer |
| CVE-2026-93763 | Analyzed | 未確認 | CWE-312 | A protection mechanism failure in the object-document mapper's encryption configuration generation can cause fields that an application declared for client-side field-level encrypt |
| CVE-2026-93764 | Analyzed | 未確認 | CWE-312 | Mongoid may omit encryption rules for fields declared on embedded models when generating the client-side field-level encryption schema. Applications that enable this feature can th |
| CVE-2026-93765 | Analyzed | 未確認 | CWE-470 | Mongoid contains an unsafe reflection weakness in the document persistence layer of its object-document mapping code. Input whose keys are passed through from an unauthenticated pa |
| CVE-2026-93769 | Deferred | 未確認 | CWE-79 | HumHub 1.18.5 is affected by a stored cross-site scripting (XSS) vulnerability that allows any user holding the delegated, non-system-administrator Manage Users permission (admin_m |
| CVE-2026-93770 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WP Statistics <= 14.16.13 versions. |
| CVE-2026-93771 | Deferred | 未確認 | CWE-502 | Shop manager PHP Object Injection in Cost of Goods for WooCommerce <= 3.5.2 versions. |
| CVE-2026-93772 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in wpForo Forum <= 3.1.5 versions. |
| CVE-2026-93773 | Deferred | 未確認 | CWE-89 | Contributor SQL Injection in Mollie Forms <= 2.11.0 versions. |
| CVE-2026-93774 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.3.02.002 versions. |
| CVE-2026-93778 | Deferred | 未確認 | CWE-79 | The WP Yelp Review Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Yelp Review Text (imported via wpyelp_download_source) in all versions up to, and in |
| CVE-2026-93781 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: core: Do not block on tag allocation in scsi_eh_lock_door() scsi_eh_lock_door() is called from scsi_rest | |
| CVE-2026-93782 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: flush backend after device ioctls vhost-scsi translates guest response descriptors into userspace | |
| CVE-2026-93783 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame rfcomm_recv_frame() casts skb->data to struct rfco | |
| CVE-2026-93784 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() The KASAN allocation trace shows that a malformed IE | |
| CVE-2026-93785 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cifs: validate idmap key payload length The cifs.idmap key type stores its payload length in key->datalen, whi | |
| CVE-2026-93786 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: preserve VFS inherited POSIX ACL mask The VFS initializes a child's POSIX ACL from the parent's default | |
| CVE-2026-93787 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: bound dirent name against end of SMB response in cifs_filldir cifs_filldir() copies the entry nam | |
| CVE-2026-93788 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: acpi: validate WGDS table revision index Check tbl_rev bounds before BIT(tbl_rev) to avoid unde | |
| CVE-2026-93789 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: bound aligned TLV advance in FW parser Validate ALIGN(tlv_len, 4) against remaining parser leng | |
| CVE-2026-93790 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif mvmsta->tid_data was indexed by the TFD loop | |
| CVE-2026-93791 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: add a check on the tid coming from the firmware ba_notif->tid is a firmware-controlled u8 | |
| CVE-2026-93792 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix a possible underflow We shouldn't trust the firmware about the length of the wowlan pa | |
| CVE-2026-93793 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: validate TX_CMD response layout TX_CMD parsing uses frame_count to walk status entries and | |
| CVE-2026-93794 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb/client: flush dirty data before punching a hole Punching a hole after a large buffered write may leave the | |
| CVE-2026-93795 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix leaks and online flag on radix_tree_insert failure When radix_tree_insert() fails in blkg_crea | |
| CVE-2026-93796 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: null RX pointers after free When iwl_pcie_tx_init() fails after RX init, nic init unwinds | |
| CVE-2026-93797 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix an off-by-1 boundary check Before looking at the 11th byte, check the length is big en | |
| CVE-2026-93798 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix reloc root cleanup in merge_reloc_roots() If the root we got has zero root refs in its root item, w | |
| CVE-2026-93799 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: validate sta_id in BA window status notif BA_WINDOW_STATUS_NOTIFICATION_ID extracts a 5-bi | |
| CVE-2026-93800 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() If during relocation we fail in i | |
| CVE-2026-93801 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb/client: zero-initialize stack-allocated cifs_open_info_data Stack-allocated cifs_open_info_data may contai | |
| CVE-2026-93802 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: validate beacon length before fixed buffer copy rsi_prepare_beacon() copies the mac80211 beacon fra | |
| CVE-2026-93803 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: fix key index receive bound checks libipw_rx() reads skb->data[hdrlen + 3] to extract the WEP ke | |
| CVE-2026-93804 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: ibss: wait for in-flight TX on disconnect While leaving an IBSS in ieee80211_ibss_disconnect() | |
| CVE-2026-93805 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate rx/tx MLME callback frame lengths before access cfg80211_rx_mlme_mgmt() and cfg80211_ | |
| CVE-2026-93806 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate assoc response length before status and IE access cfg80211_rx_assoc_resp() initialise | |
| CVE-2026-93807 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers rsi_hal_load_key() copies tx_mic_key and rx_mic_ke | |
| CVE-2026-93808 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: caiaq: validate EP1 reply lengths usb_ep1_command_reply_dispatch() uses buf[0] as a command b | |
| CVE-2026-93809 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: flush pending RCU callbacks on module unload Call rcu_barrier() in module exit to wait for outstan | |
| CVE-2026-93810 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix double fput Fix a double fput() in error handling in cachefiles_create_tmpfile(). | |
| CVE-2026-93811 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix acl.sd_buf memory leak and invalid sd_size error handling 1. When ndr_decode_v4_ntacl() fails, the | |
| CVE-2026-93812 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set_sd_xattr ndr_encode_v4_ntacl() allocates sd_ndr.data via k | |
| CVE-2026-93813 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: tree-checker: validate INODE_REF's namelen [BUG] A crafted btrfs image can trigger the following crash: | |
| CVE-2026-93814 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: spi: core: Abort active target transfer on controller suspend When an SPI controller operating in target mode | |
| CVE-2026-93815 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: au1000: move free_irq out of the close-time spinlocked section au1000_close() calls free_irq() while aup- | |
| CVE-2026-93816 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: f2fs: validate inline dentry name lengths before conversion Inline dentry conversion copies names out of the i | |
| CVE-2026-93817 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: perf: Fix addr_filter_ranges lifetime Lee Jia Jie reported that since event::addr_filter_ranges is used under | |
| CVE-2026-93818 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: PCI: plda: Protect root bus removal with rescan lock Hold the pci_rescan_remove_lock lock while stopping and r | |
| CVE-2026-93819 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek: Protect root bus removal with rescan lock Hold the pci_rescan_remove_lock lock while stopping a | |
| CVE-2026-93820 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: PCI: rockchip: Protect root bus removal with rescan lock Hold the pci_rescan_remove_lock lock while stopping a | |
| CVE-2026-93821 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: PCI: altera: Protect root bus removal with rescan lock Hold the pci_rescan_remove_lock lock while stopping and | |
| CVE-2026-93822 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: PCI: iproc: Protect root bus removal with rescan lock Hold the pci_rescan_remove_lock lock while stopping and | |
| CVE-2026-93823 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl amdkfd driver needs allocate buf | |
| CVE-2026-93824 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tls: reject the combination of TLS and sockmap TLS and sockmap (BPF psock) integration hides a lot of latent b | |
| CVE-2026-93825 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() Prevent NULL pointer dereference wh | |
| CVE-2026-93826 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: hidpp: fix potential UAF in hidpp_connect_event() If input_register_device() fails, we call input_free_de | |
| CVE-2026-93827 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: virtio-fs: avoid double-free on failed queue setup virtio_fs_setup_vqs() allocates fs->vqs and fs->mq_map befo | |
| CVE-2026-93828 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: exfat: fix handling of damaged volume in exfat_create_upcase_table() When the size of the upcase table is set | |
| CVE-2026-93829 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix races in cifsd thread creation The cifsd demultiplex thread can run and access tcp_ses before | |
| CVE-2026-93830 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: xgmac2: disable RBUE in default RX interrupt mask Enabling the RX Buffer Unavailable (RBUE) inter | |
| CVE-2026-93834 | Awaiting Analysis | 未確認 | CWE-416 | A use-after-free vulnerability was found in QEMU's 9pfs subsystem. A race condition between the main thread and a worker thread when processing concurrent Tlcreate and Twalk reques |
| CVE-2026-93836 | Deferred | 未確認 | CWE-79 | The WPC Product Bundles for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'qty' parameter in all versions up to, and including, 8.6.6 due to |
| CVE-2026-93838 | Deferred | 未確認 | CWE-770 | SGLang versions through 0.5.20 contain an unbounded memory allocation vulnerability in handle_staging_req() that fails to validate chunk_idx from ZMQ STAGING_REQ frames in prefill/ |
| CVE-2026-93839 | Awaiting Analysis | 未確認 | CWE-306 | LightLLM through 1.2.0 contains an authentication bypass vulnerability in the /pd_register WebSocket endpoint that allows unauthenticated attackers to register arbitrary nodes by s |
| CVE-2026-93840 | Analyzed | 未確認 | CWE-129 | vLLM before 0.29.0 validates allowed_token_ids against tokenizer length instead of model output logits width in SamplingParams._validate_allowed_token_ids(). Attackers can supply t |
| CVE-2026-93841 | Analyzed | 未確認 | CWE-129 | vLLM through 0.29.0 contains a memory corruption vulnerability in the Triton _bincount_kernel where prompt token IDs index the penalty prompt-presence bitset without bounds checkin |
| CVE-2026-93852 | Awaiting Analysis | 未確認 | CWE-862 | In OpenStack Blazar before 17.0.1, the V2 lease listing operation (GET /v2/leases) returns leases for every project without enforcing project scoping or an administrator-only polic |
| CVE-2026-93853 | Deferred | 未確認 | CWE-283 | Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot bac |
| CVE-2026-93854 | Awaiting Analysis | 未確認 | CWE-1025 | In OpenStack Blazar before 17.0.1, the V2 lease API does not enforce object-level authorization on its update and delete operations (PUT /v2/leases/{lease_id} and DELETE /v2/leases |
| CVE-2026-93868 | Deferred | 未確認 | CWE-338 | Cotonti through 1.0.0 derives password recovery validation tokens from md5(microtime()) in users.passrecover.php, creating a predictable token space of approximately one million va |
| CVE-2026-93869 | Deferred | 未確認 | CWE-601 | Cotonti through 1.0.0 contains an open redirect vulnerability in the cot_url_check() function that validates redirect destinations using a regular expression lacking an end-of-stri |
| CVE-2026-93870 | Deferred | 未確認 | CWE-352 | Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the ratings plugin AJAX handler, allowing attackers to forge ratings on behalf of authenticated users. Attackers can cra |
| CVE-2026-93871 | Deferred | 未確認 | CWE-601 | Cotonti through 1.0.0 fails to validate redirect destinations in page bodies prefixed with redir:, allowing authenticated users with page creation or edit permissions to store redi |
| CVE-2026-93872 | Deferred | 未確認 | CWE-502 | Cotonti 1.0.0 passes the base64-decoded cb parameter to unserialize() without allowed_classes restriction in the comments plugin EditAction. Registered users with comment write per |
| CVE-2026-93873 | Deferred | 未確認 | CWE-352 | Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the contact plugin submission handler, allowing attackers to forge messages. Attackers can auto-submit contact forms fro |
| CVE-2026-93884 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-93894 | Deferred | 未確認 | CWE-787 | In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper() and .lower() string type methods of VCL. This can be used as a remote denial of servi |
| CVE-2026-93897 | Deferred | 未確認 | CWE-79 | The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Text-type Custom Field (e.g. |
| CVE-2026-93899 | Deferred | 未確認 | CWE-89 | The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to generic SQL Injection via 'group_id' Message Meta Parameter in a |
| CVE-2026-93901 | Deferred | 未確認 | CWE-269 | The Optima Express IDX plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 8.7.5. This is due to the `provisionBlogCredentials()` funct |
| CVE-2026-93903 | Awaiting Analysis | 未確認 | CWE-174 | LiteSpeed Web Server (LSWS) before 6.3.7 build 1 mishandles internal redirect URL validation in a certain "corner case." |
| CVE-2026-93908 | Deferred | 未確認 | CWE-79 | The Real Estate Manager – Property Listing and Agent Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'before_price_text' parameter in all versi |
| CVE-2026-93921 | Deferred | 未確認 | CWE-862 | SiYuan versions through 3.8.4 fail to enforce publish access control in the getDynamicIcon endpoint, allowing read-only token holders to access document metadata. Attackers can cal |
| CVE-2026-93922 | Deferred | 未確認 | CWE-79 | SiYuan through 3.8.4 renders notebook names as raw HTML in the Daily Note picker dialog without escaping, allowing stored cross-site scripting in the Electron renderer. Attackers c |
| CVE-2026-93923 | Deferred | 未確認 | CWE-79 | SiYuan through 3.8.4 fails to escape heading style attributes when rendering outline and bookmark dock HTML, allowing stored cross-site scripting. Attackers can supply crafted note |
| CVE-2026-93928 | Deferred | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Authentication Bypass. This issue affects Tax |
| CVE-2026-93952 | Analyzed | 掲載 | CWE-20 | VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successf |
| CVE-2026-93954 | Deferred | 未確認 | CWE-285, CWE-863 | A security vulnerability has been detected in grimmory-tools grimmory up to 3.3.3/3.4.1. Affected is the function AppSettingController.getAppSettings of the file backend/src/main/j |
| CVE-2026-93955 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was detected in grimmory-tools grimmory up to 3.3.3/3.4.1. Affected by this vulnerability is the function streamFileToResponse of the file backend/src/main/java/org |
| CVE-2026-93956 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in olivier-ls PHP-FTS up to 1.1.2. Affected by this issue is the function SearchEngine::buildHighlights of the file src/SearchEngine.php of the component Sear |
| CVE-2026-93957 | Deferred | 未確認 | CWE-697 | A vulnerability has been found in olivier-ls PHP-FTS up to 1.1.3. This affects the function SearchEngine::matchesSingleFilter of the file src/SearchEngine.php of the component Filt |
| CVE-2026-93958 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was found in D-Link R95 BE9500_1.00.16. This vulnerability affects the function system of the file /bin/ssi of the component DHMAPI. The manipulation of the argumen |
| CVE-2026-93959 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown processing of the file /reviewer_0/admins/assessments/course |
| CVE-2026-93960 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was identified in Pixelfed up to 0.12.11. Impacted is the function instancePeers of the file app/Http/Controllers/Api/ApiV1Controller.php of the component OAuth Sco |
| CVE-2026-93961 | Deferred | 未確認 | CWE-266, CWE-285 | A security flaw has been discovered in Dromara UJCMS up to 12.3.1. The affected element is the function usernameExist of the file ujcms-cms/src/main/java/com/ujcms/cms/core/web/api |
| CVE-2026-93962 | Deferred | 未確認 | CWE-119, CWE-122 | A weakness has been identified in Kamailio up to 5.8.8/6.0.7/6.1.4/6.2.0-dev1. The impacted element is the function shm_malloc of the file src/modules/cdp/receiver.c of the compone |
| CVE-2026-93963 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/department/controller.php. The manipula |
| CVE-2026-93964 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was detected in NginxProxyManager nginx-proxy-manager up to 2.15.1. This impacts the function internalCertificate.validate of the file backend/internal/certificate. |
| CVE-2026-93965 | Deferred | 未確認 | CWE-74, CWE-77 | A flaw has been found in aiyiyi121 SxDevOps 1.0/1.1. Affected is the function subprocess.Popen of the file backend/aiops/services.py of the component MCP STDIO Server Management. T |
| CVE-2026-93966 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability has been found in aiyiyi121 SxDevOps 1.0/1.1. Affected by this vulnerability is the function paramiko.SSHClient.exec_command of the file backend/ops/host_tasks.py o |
| CVE-2026-93967 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was found in aiyiyi121 SxDevOps 1.0/1.1. Affected by this issue is the function generate_host_task of the file backend/aiops/services.py of the component Command Ha |
| CVE-2026-93968 | Deferred | 未確認 | CWE-266, CWE-269 | A vulnerability was determined in aiyiyi121 SxDevOps 1.0/1.1. This affects the function update of the file backend/rbac/serializers.py of the component UserSerializer. Executing a |
| CVE-2026-93969 | Deferred | 未確認 | CWE-259, CWE-798 | A vulnerability was identified in aiyiyi121 SxDevOps 1.0/1.1. This vulnerability affects the function ensure_default_superuser of the file rbac/services.py. The manipulation leads |
| CVE-2026-93970 | Deferred | 未確認 | CWE-259, CWE-798 | A security flaw has been discovered in aiyiyi121 SxDevOps 1.0/1.1. This issue affects some unknown processing of the file backend/sxdevops/settings.py of the component Settings Han |
| CVE-2026-93971 | Deferred | 未確認 | CWE-200, CWE-284 | A weakness has been identified in aiyiyi121 SxDevOps 1.0/1.1. Impacted is an unknown function of the file backend/sxdevops/settings.py. This manipulation causes information disclos |
| CVE-2026-93972 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer_0/admins/asses |
| CVE-2026-93973 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unknown function of the file /reviewer_0/admins/assessments/subject |
| CVE-2026-93974 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in SourceCodester Online Reviewer Management System 1.0. This affects an unknown function of the file /reviewer_0/admins/assessments/databank/btn_functions.ph |
| CVE-2026-93975 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in code-projects Assessment Management 1.0. This impacts an unknown function of the file admin/edit-user.php of the component User Editing. The manip |
| CVE-2026-93976 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in code-projects Assessment Management 1.0. Affected is an unknown function of the file admin/add-user.php. The manipulation of the argument level results |
| CVE-2026-93977 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this vulnerability is an unknown functionality of the file lecturer/add-single-mark.php. This |
| CVE-2026-93978 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in code-projects Internship Management System 1.0. Affected by this issue is some unknown functionality of the file /login.php. Such manipulation of |
| CVE-2026-93979 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in code-projects Internship Management System 1.0. This affects an unknown part of the file /employer/login.php. Performing a manipulation of th |
| CVE-2026-93980 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in code-projects Internship Management System 1.0. This vulnerability affects unknown code of the file /admin/login.php of the component Admin Login |
| CVE-2026-93981 | Deferred | 未確認 | CWE-79 | hono before 4.13.7 fails to HTML-escape plain strings rendered by hono/jsx as a child or fallback of Suspense, as a string child of ErrorBoundary alongside an asynchronous sibling, |
| CVE-2026-93982 | Deferred | 未確認 | CWE-532 | OpenPanel through 2.3.0 writes Model Context Protocol authentication tokens from URL query parameters to plaintext application logs without redaction. Attackers with access to appl |
| CVE-2026-93983 | Deferred | 未確認 | CWE-89 | OpenPanel through 2.3.0 fails to escape property keys in ClickHouse SQL queries, allowing authenticated users to inject boolean SQL terms. Attackers can supply crafted filter names |
| CVE-2026-93984 | Deferred | 未確認 | CWE-287 | OpenPanel tracking API through 2.3.0 fails to verify client secret cryptographic hash before authorizing revenue events and bot filtering. Attackers with only a public client ID ca |
| CVE-2026-93985 | Deferred | 未確認 | CWE-94 | OpenPanel js-runtime through 2.3.0 contains a sandbox escape vulnerability in the JavaScript webhook template validator that fails to block computed member access to constructor ch |
| CVE-2026-93986 | Awaiting Analysis | 未確認 | CWE-22 | rclone before 1.75.1 fails to confine names from server and third-party listing responses to the listed directory, allowing path traversal sequences in object names. Attackers can |
| CVE-2026-93987 | Awaiting Analysis | 未確認 | CWE-73 | rclone versions 1.56.0 through 1.75.0 contain a path traversal vulnerability in the `rclone serve docker` volume plugin. newVolume() in cmd/serve/docker/volume.go computes a volume |
| CVE-2026-93988 | Deferred | 未確認 | CWE-22 | QloApps through 1.7.0 contains a path traversal vulnerability in the getEmailHTML action of admin/ajax.php that allows authenticated back-office users to read arbitrary files. Atta |
| CVE-2026-93989 | Analyzed | 未確認 | CWE-129 | vLLM through 0.29.0 fails to properly validate bad_words token indices against the model's generation output width in SamplingParams.update_from_tokenizer(). Attackers can supply o |
| CVE-2026-93990 | Awaiting Analysis | 未確認 | CWE-176 | Expat before 2.8.5 fails to validate that a high surrogate in UTF-16 input is followed by a low surrogate, allowing malformed UTF-16 sequences to be accepted. Attackers can supply |
| CVE-2026-93991 | Awaiting Analysis | 未確認 | CWE-639 | Argo Workflows versions 4.1.0 through 4.1.3 contain an authorization bypass vulnerability in ListArchivedWorkflows that fails to apply cluster-scoped access review when the metadat |
| CVE-2026-93992 | Deferred | 未確認 | CWE-22 | Gopeed through 2.0.0-beta.3 contains a path traversal vulnerability in archive extraction that allows attackers to write arbitrary files outside the extraction directory. Attackers |
| CVE-2026-93993 | Deferred | 未確認 | CWE-829 | Mistral Vibe before 2.25.5 contains a remote code execution vulnerability in the worktree creation process that executes git hooks before trust validation. Attackers can supply a r |
| CVE-2026-93994 | Awaiting Analysis | 未確認 | CWE-304 | Apache MINA SSHD is a Java library for client-side and server-side SSH. SSH servers can be configured to require multi-authentication schemes, for instance two different public key |
| CVE-2026-93995 | Awaiting Analysis | 未確認 | CWE-20 | Improper input validation in sshd-git in Apache MINA SSHD, versions up to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. |
| CVE-2026-93996 | Awaiting Analysis | 未確認 | CWE-770 | Uncontrolled resource consumption in component ssd-scp in Apache MINA SSHD versions up to 2.19.0 or 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and ser |
| CVE-2026-93997 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected by this issue is some unknown functionality of the file /Admin/edit_symptom.php. This mani |
| CVE-2026-93999 | Awaiting Analysis | 未確認 | CWE-862 | A flaw was found in the OIDC protocol implementation of Keycloak, an open-source identity and access management solution. The issue occurs during the token refresh process when the |
| CVE-2026-94000 | Awaiting Analysis | 未確認 | CWE-862 | A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution. The issue occurs in the group-membership endpoints where the system fail |
| CVE-2026-94001 | Awaiting Analysis | 未確認 | CWE-862 | A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution. The endpoint used for deleting user credentials does not correctly check |
| CVE-2026-94002 | Awaiting Analysis | 未確認 | CWE-770 | Possible memory exhaustion in SFTP clients (DefaultSftpClient) in component sshd-sftp in Apache MINA SSHD versions 0.9.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD i |
| CVE-2026-94003 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability has been found in Comfast CF-N1-S 2.6.0.1. Impacted is the function get_css_path_from_uri of the file /cgi-bin/mbox-config of the component Web Management Interface |
| CVE-2026-94004 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability was found in DedeCMS up to 5.7.118. The affected element is an unknown function of the file plus/mytag_js.php. The manipulation of the argument aid results in code |
| CVE-2026-94015 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file /drug_recommender/Admin/edit_user.php. Such manipulati |
| CVE-2026-94016 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file /drug_recommender/Admin/add_symptom. Performing a |
| CVE-2026-94028 | Deferred | 未確認 | CWE-918 | A weakness has been identified in mealie-recipes Mealie up to 3.25.1. Affected is the function payload.model_dump of the file mealie/routes/households/controller_group_recipe_actio |
| CVE-2026-94029 | Awaiting Analysis | 未確認 | CWE-770 | Server-side memory exhaustion in Apache MINA SSHD 1.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5, component sshd-sftp, in the SFTP v6 check-file-name/check-file-handle extension. Apache |
| CVE-2026-94030 | Deferred | 未確認 | CWE-189, CWE-190 | A security vulnerability has been detected in SerenityOS up to 3d83e4509fd20d7438e1ae8470ffe668c136229c. Affected by this vulnerability is the function decode_bmp_pixel_data of the |
| CVE-2026-94031 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was detected in 0-Gaurav-0 nexus-mcp aed0026e7ac1f23dc940e46e9fd3a2da6904f914. Affected by this issue is the function child_process.exec of the file src/auth/browse |
| CVE-2026-94032 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in itsourcecode Leave Management System 1.0. This affects an unknown part of the file /module/department/index.php. This manipulation of the argument ID cause |
| CVE-2026-94033 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in SourceCodester Drug Recommendation System 1.0. This vulnerability affects unknown code of the file /drug_recommender/Admin/add_user of the compone |
| CVE-2026-94034 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /drug_recommender/Admin/change_password of the co |
| CVE-2026-94035 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /drug_recommender/index.php. Executing a manipulation o |
| CVE-2026-94036 | Deferred | 未確認 | CWE-266, CWE-284 | A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus of the component rou |
| CVE-2026-94037 | Deferred | 未確認 | CWE-22 | A weakness has been identified in 00Kisumi00 mcp-file-analyzer up to 84740852f0cf0cf5db4781b1ca6d7c6a6d210405. This affects the function ControlFlowNode of the file main.py of the |
| CVE-2026-94038 | Deferred | 未確認 | CWE-918 | A security vulnerability has been detected in NonceGeek dim-sum-app. This impacts the function textSearchV2Handler of the file deno/main.tsx of the component Deno Backend. Such man |
| CVE-2026-94039 | Deferred | 未確認 | CWE-918 | A vulnerability was detected in vas3k TaxHacker up to 0.8.5. Affected is the function generateInvoicePDF of the file /apps/invoices/actions.ts of the component Invoice PDF Renderer |
| CVE-2026-94040 | Deferred | 未確認 | CWE-918 | A flaw has been found in vas3k TaxHacker up to 0.8.5. Affected by this vulnerability is the function testLLMProviderAction of the file app/(app)/apps/settings/actions.ts. Executing |
| CVE-2026-94041 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Affected by this issue is some unknown functionality o |
| CVE-2026-94042 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in AdithyaYelloju Restaurant Management System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This affects the function mysqli_query of the file admin/ad |
| CVE-2026-94043 | Deferred | 未確認 | CWE-362 | A vulnerability was determined in Free5GC up to 4.2.3. This vulnerability affects unknown code of the file /corefuzzer_deps/free5gc/NFs/amf/internal/gmm/handler.go of the component |
| CVE-2026-94044 | Deferred | 未確認 | CWE-22 | A vulnerability was identified in 03-lovepreetSingh MCP up to f95d035c5317fad81af9828286631053ccb23546. This issue affects the function create_file of the file app/api/mcp/route.ts |
| CVE-2026-94045 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in newbee-ltd newbee-mall up to 1.0.0. Impacted is an unknown function of the file controller/common/UploadController.java of the component Good |
| CVE-2026-94046 | Deferred | 未確認 | CWE-22 | A weakness has been identified in 0215AndrewFeng ACE-MCP up to 4.10.8. The affected element is the function get_file_snippet of the file getFileSnippet.ts of the component MCP Tool |
| CVE-2026-94047 | Deferred | 未確認 | CWE-266, CWE-269 | A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32. The impacted element is the function importTemplate of the file src/services/templateService.ts of the |
| CVE-2026-94048 | Deferred | 未確認 | CWE-266, CWE-269 | A vulnerability was detected in CodeAstro QR Code Attendance Management System 1.0. This affects the function Save of the file app/Controllers/UserController.php. The manipulation |
| CVE-2026-94049 | Deferred | 未確認 | CWE-22 | A flaw has been found in 06ketan slideshot up to 4.4.0. This impacts the function render_slides of the file packages/cli/src/renderer.ts. This manipulation of the argument htmlPath |
| CVE-2026-94050 | Deferred | 未確認 | CWE-200, CWE-284 | A vulnerability has been found in D-Link DIR-X1860Z up to 1.0.2.220120.165402. Affected is the function routerd.wificfg_get/routerd.get_rand_key of the component ubus JSON-RPC inte |
| CVE-2026-94051 | Deferred | 未確認 | CWE-918 | A vulnerability was found in 0717376 cowork_bench up to d943e75bc0fc8e3b27141979300cd8cbcd1e890d. Affected by this vulnerability is the function ControlFlowNode of the file local_s |
| CVE-2026-94052 | Awaiting Analysis | 未確認 | CWE-304 | A missing check in LdapPasswordAuthenticator in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 or 3.0.0-M1 to 3.0.0-M5 bypassed authentication checks. Apache |
| CVE-2026-94053 | Awaiting Analysis | 未確認 | CWE-305, CWE-90 | Authentication bypass via LDAP injection in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for cl |
| CVE-2026-94054 | Analyzed | 未確認 | CWE-787 | Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write. |
| CVE-2026-94055 | Analyzed | 未確認 | CWE-416 | Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free. |
| CVE-2026-94056 | Analyzed | 未確認 | CWE-908 | Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory. |
| CVE-2026-94057 | Analyzed | 未確認 | CWE-93 | Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA proc |
| CVE-2026-94074 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Simply Schedule Appointments <= 1.6.12.29 versions. |
| CVE-2026-94076 | Deferred | 未確認 | CWE-502 | Contributor PHP Object Injection in SEO Plugin by Squirrly SEO <= 14.2.5 versions. |
| CVE-2026-94077 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Safe SVG <= 2.5.0 versions. |
| CVE-2026-94078 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Site Reviews <= 8.3.1 versions. |
| CVE-2026-94079 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in WP User Manager <= 2.9.19 versions. |
| CVE-2026-94080 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in MarketKing <= 2.1.70 versions. |
| CVE-2026-94081 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WordPress Persistent Login <= 3.1.3 versions. |
| CVE-2026-94082 | Deferred | 未確認 | CWE-89 | Author SQL Injection in Quiz Cat <= 3.1.1 versions. |
| CVE-2026-94083 | Analyzed | 未確認 | CWE-843 | Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state is executed even though the actual state is HTTP1 (when the |
| CVE-2026-94084 | Analyzed | 未確認 | CWE-416 | Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with and without a transform. |
| CVE-2026-94089 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was determined in D-Link DIR-868L 2.01b05. This issue affects the function strcpy of the file /webfa_authentication.cgi of the component Authentication Handler. Exe |
| CVE-2026-94090 | Deferred | 未確認 | CWE-189, CWE-191 | A security flaw has been discovered in JusticeRage Manalyze 1.0.0. The affected element is the function PE::_parse_debug of the file manape/pe.cpp of the component PE Parser. The m |
| CVE-2026-94091 | Deferred | 未確認 | CWE-20, CWE-502 | A weakness has been identified in piskvorky gensim up to 4.4.0. The impacted element is the function Load of the file gensim/utils.py of the component Model Loader. This manipulati |
| CVE-2026-94092 | Deferred | 未確認 | CWE-20, CWE-502 | A vulnerability was detected in dmlc dgl up to 2.1.0. This impacts the function load_info/_read_torch_data of the file utils.py. Performing a manipulation of the argument path resu |
| CVE-2026-94093 | Deferred | 未確認 | CWE-20, CWE-502 | A security vulnerability has been detected in DLR-RM stable-baselines3 up to 2.9.0. This affects the function PPO.load/load_replay_buffer/VecNormalize.load of the file save_util.py |
| CVE-2026-94094 | Deferred | 未確認 | CWE-404 | A flaw has been found in OpenClaw up to 2026.9.5. Affected is the function createCanvasHostHandler of the file extensions/canvas/src/host/server.ts of the component Canvas Host Rou |
| CVE-2026-94095 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability has been found in Netcore NBR200V2 1.3.241127.071246. Affected by this vulnerability is an unknown functionality of the file /usr/bin/network_tools of the component |
| CVE-2026-94096 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was found in Netcore NBR200V2 1.3.241127.071246. Affected by this issue is some unknown functionality of the file /usr/bin/network_tools of the component LAN IP Con |
| CVE-2026-94097 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was determined in Netcore NBR200V2 1.3.241127.071246. This affects an unknown part of the file /www/cgi-bin/network_tools of the component CGI Diagnostic Endpoint. |
| CVE-2026-94098 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This vulnerability affects unknown code of the file /www/cgi-bin/upgrade of the component Firmware Upgrade CGI |
| CVE-2026-94099 | Deferred | 未確認 | CWE-74, CWE-77 | A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. This issue affects some unknown processing of the file restore.cgi of the component Backup Restore. Perfo |
| CVE-2026-94100 | Deferred | 未確認 | CWE-119, CWE-120 | A weakness has been identified in Netcore NBR200V2 1.3.241127.071246. Impacted is the function wan_config_set_vlan of the file /usr/bin/routerd of the component WAN VLAN Reconfigur |
| CVE-2026-94101 | Deferred | 未確認 | CWE-119, CWE-120 | A security vulnerability has been detected in Netcore NBR200V2 1.3.241127.071246. The affected element is the function vlan_load_form_uci of the file /usr/bin/routerd. The manipula |
| CVE-2026-94102 | Deferred | 未確認 | CWE-601 | A flaw has been found in WuzhiCMS up to 4.1.0. This affects an unknown function of the file /index.php?m=member&v=Login of the component Login. This manipulation of the argument fo |
| CVE-2026-94103 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability has been found in RooCMS up to 1.2.2/1.3.4/1.4RC2. This impacts the function eval of the file roocms/site_pagePHP.php of the component Frontend Rendering. Such mani |
| CVE-2026-94104 | Deferred | 未確認 | CWE-434 | NivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi() endpoint that fails to validate file extensions for new filenames or when chunks |
| CVE-2026-94105 | Deferred | 未確認 | CWE-754 | NivoCart through 2.4.0 contains a destructive configuration write vulnerability in the admin password reset controller that allows unauthenticated attackers to disable password rec |
| CVE-2026-94106 | Awaiting Analysis | 未確認 | CWE-78 | getID3 before 1.9.26 contains an OS command injection vulnerability in shell-out handlers that fail to escape filenames in command strings. Attackers can craft malicious filenames |
| CVE-2026-94107 | Deferred | 未確認 | CWE-338 | NivoCart through 2.4.0 contains a predictable password reset token vulnerability in the forgotten.php endpoint that generates recovery codes using substr(md5(mt_rand()), 0, 10). At |
| CVE-2026-94108 | Awaiting Analysis | 未確認 | CWE-611 | getID3 through 1.9.26 contains an XML external entity injection vulnerability in the XML2array helper function that fails to properly disable entity loading on PHP before 8.0. Atta |
| CVE-2026-94109 | Awaiting Analysis | 未確認 | CWE-1336 | openEQUELLA before 2026.1.0 contains an authenticated stored server-side template injection vulnerability in FreemarkerPortletRenderer.renderHtml() that allows any authenticated no |
| CVE-2026-94110 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in QCMS up to 6.0.6. This issue affects the function self_Tmp in the library Lib/Config/Controllers.php of the component Content Detail P |
| CVE-2026-94111 | Deferred | 未確認 | CWE-346 | Tencent BrowserSkill through 0.3.0 contains an authentication bypass vulnerability in the local daemon WebSocket origin validation that accepts any chrome-extension origin with 32 |
| CVE-2026-94112 | Deferred | 未確認 | CWE-294 | mayswind ezBookkeeping before 2.0.0 fails to invalidate TOTP passcodes after use, allowing attackers to replay captured codes within the acceptance window. Attackers with stolen cr |
| CVE-2026-94113 | Deferred | 未確認 | CWE-862 | Frappe ERPNext versions before 15.121.0 and 16.x before 16.34.0 contain an information disclosure vulnerability in whitelisted timesheet endpoints that fail to enforce doctype perm |
| CVE-2026-94115 | Deferred | 未確認 | CWE-89 | Contributor SQL Injection in Easy Pricing Tables <= 4.1.2 versions. |
| CVE-2026-94117 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DevItems HashBar – WordPress Notification Bar allows Blind SQL Injection. Thi |
| CVE-2026-94118 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Premium Blocks – Gutenberg Blocks for WordPress <= 2.3.17 versions. |
| CVE-2026-94120 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in GravityExport Lite for Gravity Forms <= 2.7.2 versions. |
| CVE-2026-94121 | Deferred | 未確認 | CWE-502 | Contributor PHP Object Injection in 10Web Booster – Website speed optimization, Cache & Page Speed optimizer <= 2.33.6 versions. |
| CVE-2026-94122 | Deferred | 未確認 | CWE-502 | Editor PHP Object Injection in Responsive Slider Gallery <= 1.5.5 versions. |
| CVE-2026-94123 | Deferred | 未確認 | CWE-22 | Unauthenticated Arbitrary File Download in NextGEN Gallery <= 4.5.0 versions. |
| CVE-2026-94124 | Deferred | 未確認 | CWE-89 | Contributor SQL Injection in WP EasyCart <= 5.9.4 versions. |
| CVE-2026-94127 | Analyzed | 掲載 | CWE-122 | When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious traffic can lead to remote code execution (RCE). This vulnerability is o |
| CVE-2026-94128 | Deferred | 未確認 | CWE-119, CWE-123 | A security vulnerability has been detected in BioStar VIVID LED DJ 4.0.2411.1500. This affects the function sub_1105C of the file BS_LED64.sys of the component IOCTL Handler. The m |
| CVE-2026-94129 | Deferred | 未確認 | CWE-119, CWE-123 | A vulnerability was detected in BioStar VALKYRIE AURORA 2.10.2411.0800. This vulnerability affects the function sub_1105C of the file BS_RVSIO64.sys of the component IOCTL Handler. |
| CVE-2026-94130 | Analyzed | 未確認 | CWE-89 | Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < 5.7.3 - An SQL injection vulnerability in video search functionality and sorting al |
| CVE-2026-94131 | Analyzed | 未確認 | CWE-89 | Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing Enterprise extension < 11.1.0 - A subscriber could store a path in a file-type custom fiel |
| CVE-2026-94132 | Analyzed | 未確認 | CWE-434 | Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0 - MIME parts of incoming emails were s |
| CVE-2026-94137 | Deferred | 未確認 | CWE-404 | A vulnerability was identified in Hangzhou Shunwang Technology shzh 10.7.2.693. This affects the function sub_180004AC0 of the file shdrv_x64.sys of the component IRP_MJ_DEVICE_CON |
| CVE-2026-94138 | Deferred | 未確認 | CWE-74, CWE-77 | A security flaw has been discovered in Chengdu Feiyuxing Technology Feiyu Star Router B-MB5E202-210322-r11656. This impacts an unknown function of the file /send_order.cgi?paramete |
| CVE-2026-94139 | Deferred | 未確認 | CWE-74, CWE-77 | A weakness has been identified in Chengdu Feiyuxing Technology Feiyu Star Router B-MB5E202-210322-r11656. Affected is an unknown function of the file /send_order.cgi?parameter=logi |
| CVE-2026-94142 | Deferred | 未確認 | CWE-119, CWE-123 | A security vulnerability has been detected in BioStar Temperature Monitor Utility 1.2.1806.2200. Affected by this vulnerability is the function sub_1105C of the file BS_HWMIO64_W10 |
| CVE-2026-94143 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in drogonframework drogon up to 1.9.13. Affected by this issue is the function Mapper::orderBy in the library Mapper.h of the component ORM Mapper. Per |
| CVE-2026-94144 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in drogonframework drogon up to 1.9.13. This affects the function makeCriteria in the library orm_lib/src/Criteria.cc of the component ORM. Executing a manipu |
| CVE-2026-94145 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in xuxueli xxl-job up to 3.4.2/3.5.0. This vulnerability affects unknown code of the file xxl-job-admin/src/main/java/com/xxl/job/admin/business/cont |
| CVE-2026-94146 | Deferred | 未確認 | CWE-119, CWE-123 | A vulnerability was found in BioStar BIOS Update Utility 1.9.7.3. This issue affects the function sub_110BC of the file BSMEM64_W10.sys of the component IOCTL Handler. The manipula |
| CVE-2026-94148 | Deferred | 未確認 | CWE-200, CWE-284 | A vulnerability was determined in ScadaBR up to 1.1. Impacted is the function EmportDwr.createExportJSON of the file /ScadaBR/export_project.htm of the component Export Project End |
| CVE-2026-94149 | Deferred | 未確認 | CWE-99 | A vulnerability was identified in Omega Solution HRM OS up to 20260717. The affected element is an unknown function of the file /role-permission/permission of the component Role Pe |
| CVE-2026-94150 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in Omega Solution HRM OS up to 20260717. The impacted element is an unknown function of the file /media/view/ of the component SVG File Upload. |
| CVE-2026-94151 | Deferred | 未確認 | CWE-287, CWE-306 | A weakness has been identified in Omega Solution HRM OS up to 20260717. This affects an unknown function of the file /role-permission/permission of the component Role Permission AP |
| CVE-2026-94152 | Deferred | 未確認 | CWE-285, CWE-639 | A security vulnerability has been detected in Omega Solution FBP Fulfillment by People 2025. This impacts an unknown function of the file /user/ of the component User Profile API. |
| CVE-2026-94168 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Premium Addons for Elementor <= 4.11.105 versions. |
| CVE-2026-94171 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme CURCY woo-multi-currency allows DOM-Based XSS.This issue affects CU |
| CVE-2026-94173 | Deferred | 未確認 | CWE-639 | Contributor Insecure Direct Object References (IDOR) in Business Directory <= 6.4.27 versions. |
| CVE-2026-94174 | Deferred | 未確認 | CWE-89 | Administrator SQL Injection in Email Log <= 2.63 versions. |
| CVE-2026-94176 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.1 versions. |
| CVE-2026-94177 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ruben Garcia GamiPress gamipress allows Blind SQL Injection.This issue affects |
| CVE-2026-94178 | Deferred | 未確認 | CWE-266 | Subscriber Privilege Escalation in Import and export users and customers <= 2.5.2 versions. |
| CVE-2026-94179 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Razorpay Payment Button <= 2.4.9 versions. |
| CVE-2026-94181 | Awaiting Analysis | 未確認 | CWE-451 | An address bar spoofing issue in affected versions of Arc could allow an attacker to spoof the browser address bar via a <select> element that triggers requestFullscreen without di |
| CVE-2026-94183 | Awaiting Analysis | 未確認 | CWE-451 | Arc Search for Android before version 1.12.10 does not display a fullscreen notification when a page enters fullscreen mode while the app is running in the background. A remote att |
| CVE-2026-94184 | Awaiting Analysis | 未確認 | CWE-121 | A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Ty |
| CVE-2026-94185 | Awaiting Analysis | 未確認 | CWE-200, CWE-22 | nvm resolves a requested version or alias by treating it as a filename under $NVM_DIR/alias. Before 0.40.8, nvm_alias() concatenated the requested name onto that directory and read |
| CVE-2026-94194 | Deferred | 未確認 | CWE-444 | Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in elixir-mint mint allows a malicious HTTP/1 server to desynchronize an intermediary |
| CVE-2026-94204 | Awaiting Analysis | 未確認 | CWE-732 | The central cloud storage backend for the entire dashcam platform is misconfigured with public-read permissions, allowing unrestricted access to all stored objects. Because this bu |
| CVE-2026-94210 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in Hyve5 Leantime up to 3.9.8. Affected by this vulnerability is the function getAllGrouped of the file app/Domain/Tickets/Services/Tickets.php of the compone |
| CVE-2026-94211 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in Hyve5 Leantime up to 3.9.8. Affected by this issue is some unknown functionality of the file /app/Domain/Dashboard/Templates/show.blade.php of the |
| CVE-2026-94213 | Awaiting Analysis | 未確認 | CWE-862 | A flaw was found in the Authorization Services component of Keycloak, an open-source identity and access management solution. The issue occurs in the policy evaluation endpoint, wh |
| CVE-2026-94214 | Deferred | 未確認 | CWE-601 | A vulnerability was found in ST Engineering iDirect iDX and Evo iDX. This affects an unknown part of the component Location Header Handler. Performing a manipulation of the argumen |
| CVE-2026-94215 | Awaiting Analysis | 未確認 | CWE-862 | A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution. The issue occurs because the API uses a per-request in-memory cache to r |
| CVE-2026-94216 | Deferred | 未確認 | CWE-113, CWE-93 | A vulnerability was determined in ST Engineering iDirect iDX and Evo iDX. This vulnerability affects unknown code of the file /authorize of the component HTTP Request Handler. Exec |
| CVE-2026-94217 | Awaiting Analysis | 未確認 | CWE-862 | A flaw was found in the User-Managed Access (UMA) implementation of Keycloak. The issue occurs in the authorization token endpoint when processing permission tickets. If two differ |
| CVE-2026-94218 | Awaiting Analysis | 未確認 | CWE-862 | A flaw was found in the authentication session management of Keycloak, an identity and access management solution. The issue occurs when an administrator enforces a stronger authen |
| CVE-2026-94243 | Analyzed | 未確認 | CWE-346 | A vulnerability in Apache Sling Security Bundle: the ReferrerFilter accepts weaker-than-orgin evidence. This issue affects Apache Sling Security Bundle: before 1.3.2. Users a |
| CVE-2026-94251 | Analyzed | 未確認 | CWE-693 | A vulnerability in Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resource This issue affects Apache Sling Security Bundle: befo |
| CVE-2026-94274 | Deferred | 未確認 | CWE-200 | The YayReviews WordPress plugin before 1.4.1 does not restrict access to an API route that returns individual customer review records, including reviews still pending moderation, |
| CVE-2026-94277 | Deferred | 未確認 | CWE-79 | MISP's galaxy matrix statistics view (app/View/Users/statistics_galaxymatrix.ctp) renders the galaxy name directly into HTML output via sprintf() without any HTML encoding. An auth |
| CVE-2026-94281 | Awaiting Analysis | 未確認 | CWE-125 | An out-of-bounds read in libXi's XListInputDevices() class parsing in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client. |
| CVE-2026-94282 | Awaiting Analysis | 未確認 | CWE-125 | An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client. |
| CVE-2026-94283 | Awaiting Analysis | 未確認 | CWE-125 | An out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients. |
| CVE-2026-94284 | Awaiting Analysis | 未確認 | CWE-125 | An out-of-bounds read vulnerability in libX11's XIM trigger-key registration parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients. |
| CVE-2026-94285 | Awaiting Analysis | 未確認 | CWE-125 | An out-of-bounds read in libX11's byte-oriented codeset parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients. |
| CVE-2026-94286 | Awaiting Analysis | 未確認 | CWE-126 | An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients. |
| CVE-2026-94287 | Awaiting Analysis | 未確認 | CWE-1050 | A denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local attackers to cause unbounded CPU usage and memory exhaustion. |
| CVE-2026-94297 | Deferred | 未確認 | CWE-862 | The Media Library Organizer WordPress plugin before 2.1.4 does not verify that the requesting user holds the target taxonomy's management capability before creating a new term, al |
| CVE-2026-94301 | Awaiting Analysis | 未確認 | CWE-502 | The fix for CVE-2026-47065/ZDRES-232 ("resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via java.lang.reflect.Proxy"), released on 2026-06-02 and announced as "Fully |
| CVE-2026-94367 | Deferred | 未確認 | CWE-78 | OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains an OS command injection vulnerability in recbackup. An authenticated administrator can supply crafted backup-a |
| CVE-2026-94368 | Awaiting Analysis | 未確認 | CWE-347 | A flaw was found in the signature verification logic of noobaa-core, the core component of the NooBaa Multicloud Object Gateway. The issue occurs when the service processes S3 pres |
| CVE-2026-94372 | Deferred | 未確認 | CWE-79 | MISP contains a stored cross-site scripting (XSS) vulnerability in the default theme's Galaxies index page. When a MISP instance detects unknown custom or default galaxy clusters d |
| CVE-2026-94373 | Deferred | 未確認 | CWE-79 | MISP contains a DOM-based cross-site scripting (XSS) vulnerability in the contextual menu JavaScript component. The ContextualMenu class populates HTML <option> elements by assigni |
| CVE-2026-94374 | Deferred | 未確認 | CWE-472, CWE-639 | MISP contains an insecure direct object reference vulnerability in the processModuleResultsData method of the Event model. When processing module results, the code iterates over Ev |
| CVE-2026-94376 | Deferred | 未確認 | CWE-79 | The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via User Display Name in a |
| CVE-2026-94379 | Deferred | 未確認 | CWE-20, CWE-285 | The login() function in MISP's UsersController.php contained insufficient HTTP method validation for several security-critical code paths. The original code used an allowlist appro |
| CVE-2026-94381 | Deferred | 未確認 | CWE-269 | MISP has a security issue that can let a user gain more access than their API key is supposed to allow. A read-only API key should only let someone view information. However, afte |
| CVE-2026-94382 | Deferred | 未確認 | CWE-639 | Beszel before 0.19.0 contains an insecure direct object reference vulnerability in the POST and DELETE /api/beszel/user-alerts handlers that allows any authenticated user to create |
| CVE-2026-94383 | Deferred | 未確認 | CWE-20, CWE-434 | The MISP blocklist workflow module accepted a user-supplied blocklist filename parameter without validating the file extension. The only sanitization applied was basename() to stri |
| CVE-2026-94384 | Awaiting Analysis | 未確認 | CWE-862 | Missing authorization in Amazon amazon-connect-salesforce-lambda before 5.26 allows any IAM principal with lambda:InvokeFunction permission on the affected function to escalate pri |
| CVE-2026-94387 | Deferred | 未確認 | CWE-79 | Aureus ERP before 1.6.0 contains a stored cross-site scripting vulnerability in the Chatter field-change log where old_value and new_value entries are rendered without proper escap |
| CVE-2026-94389 | Deferred | 未確認 | CWE-94 | Unauthenticated Remote Code Execution (RCE) in AcyMailing SMTP Newsletter <= 11.0.5 versions. |
| CVE-2026-94391 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Ultimate FAQ <= 2.4.14 versions. |
| CVE-2026-94393 | Deferred | 未確認 | CWE-284, CWE-639 | When a user creates or edits a report inside an event, MISP can identify an existing report using its UUID without properly checking whether that report actually belongs to the sam |
| CVE-2026-94394 | Deferred | 未確認 | CWE-862 | When a regular user adds a reference between objects or attributes, MISP checks whether the user can access the overall event, but it does not always check whether the individual p |
| CVE-2026-94396 | Analyzed | 未確認 | CWE-400 | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130) |
| CVE-2026-94397 | Analyzed | 未確認 | CWE-400 | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130) |
| CVE-2026-94398 | Analyzed | 未確認 | CWE-400 | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130) |
| CVE-2026-94399 | Analyzed | 未確認 | CWE-400 | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130) |
| CVE-2026-94400 | Analyzed | 未確認 | CWE-400 | Uncontrolled Resource Consumption (CWE-400) in Kibana can lead denial of service via Excessive Allocation (CAPEC-130) |
| CVE-2026-94401 | Deferred | 未確認 | CWE-73, CWE-918 | MISP has a file-handling vulnerability that could let certain authenticated users make the server read files or access internal network services. When importing an XML file, MISP |
| CVE-2026-94403 | Deferred | 未確認 | CWE-822 | A weakness has been identified in ColorFul iGameCenter 1.0.3.4. This impacts the function sub_140001AF0 in the library ene.sys of the component IOCTL Handler. This manipulation cau |
| CVE-2026-94404 | Deferred | 未確認 | CWE-352 | MISP has a security issue that could let an attacker change threat-intelligence data through a logged-in user’s browser without that user knowingly approving the change. The affec |
| CVE-2026-94408 | Analyzed | 未確認 | CWE-400 | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130) |
| CVE-2026-94411 | Deferred | 未確認 | CWE-862 | jshERP 3.6 contains a privilege escalation vulnerability in the updateOneValueByKeyIdAndType endpoint that allows authenticated users to grant themselves arbitrary roles. Attackers |
| CVE-2026-94412 | Deferred | 未確認 | CWE-862 | jshERP through 3.6 contains an authorization bypass vulnerability in the POST /user/resetPwd endpoint that allows authenticated users to reset any other user's password. Attackers |
| CVE-2026-94413 | Deferred | 未確認 | CWE-200 | jshERP through 3.6 fails to redact password hashes in the /user/info endpoint, allowing authenticated users to retrieve unsalted MD5 password digests for any user. Attackers can re |
| CVE-2026-94414 | Deferred | 未確認 | CWE-862 | jshERP through 3.6 is missing an authorization check on the POST /userBusiness/updateBtnStr endpoint that allows authenticated users to modify role button-permission definitions. A |
| CVE-2026-94416 | Awaiting Analysis | 未確認 | CWE-290 | An authorization bypass was found in the Ansible Automation Platform (AAP) gateway. The gateway API allows an authenticated administrator to create a new service key for the Contro |
| CVE-2026-94417 | Analyzed | 未確認 | CWE-299 | When an application enables both OCSP and CRL revocation checking on one WOLFSSL_CTX or certificate manager, wolfSSL skips the CRL check for any peer certificate that carries no Au |
| CVE-2026-94418 | Analyzed | 未確認 | CWE-347 | Under WOLFSSL_SMALL_CERT_VERIFY, ProcessPeerCertParse() runs the certificate signature check separately from the parse to keep peak memory down, then merges the two results, but it |
| CVE-2026-94419 | Analyzed | 未確認 | CWE-287 | Without NO_SESSION_CACHE_REF, wolfSSL_get_session() does not return a session object but a ClientSession reference of the form {row, index, hash(sessionID)} into the process-global |
| CVE-2026-94424 | Deferred | 未確認 | CWE-119, CWE-122 | A vulnerability has been found in Moore Threads MTT S80 Driver Package up to 340.150. Impacted is the function sub_140001000 in the library mtdispkm64.sys of the component IOCTL Ha |
| CVE-2026-94425 | Deferred | 未確認 | CWE-266, CWE-269 | A vulnerability was found in Moore Threads MTT S80 Driver Package 340.150. The affected element is the function sub_140006F0C in the library mtdispkm64.sys of the component IOCTL H |
| CVE-2026-94426 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in xuxueli xxl-job up to 3.5.0. The impacted element is an unknown function of the file /jobgroup/insert. This manipulation of the argument Name caus |
| CVE-2026-94445 | Awaiting Analysis | 未確認 | CWE-20 | A malicious txtar could escape the intended execution context and force arbitrary writes to the playground host's trusted filesystem. Disjointly, one of the three possible paths |
| CVE-2026-94449 | Awaiting Analysis | 未確認 | CWE-400 | A flaw was found in the SmallRye Fault Tolerance library, which is used by Quarkus to provide strategies like retries and circuit breakers for microservices. The issue occurs when |
| CVE-2026-94450 | Awaiting Analysis | 未確認 | CWE-1284, CWE-617 | Improper validation of the Destination Connection ID length in s2n-quic 1.88.0 and earlier may allow an unauthenticated remote user to cause a denial of service by shutting down a |
| CVE-2026-94455 | Awaiting Analysis | 未確認 | CWE-1390, CWE-306, CWE-345, CWE-770 | An HTTP endpoint intended for provisioning enterprise and reseller organisations is reachable without any session. The authentication middleware is bound only to an explicit list o |
| CVE-2026-94456 | Awaiting Analysis | 未確認 | CWE-330, CWE-338, CWE-341 | Postiz generates security-sensitive credentials using `Math.random()` instead of a cryptographically secure source. The same helper is used for OAuth access tokens, authorization c |
| CVE-2026-94457 | Deferred | 未確認 | CWE-290 | Unauthenticated Bypass Vulnerability in Captcha Code <= 3.32 versions. |
| CVE-2026-94461 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Ditty <= 3.1.69 versions. |
| CVE-2026-94462 | Awaiting Analysis | 未確認 | CWE-639 | Spree is an open source e-commerce solution built with Ruby on Rails. From 5.4.0 until 5.4.4 and 5.5.4, PATCH /api/v3/store/carts/:id/associate in Spree::Api::V3::Store::CartsContr |
| CVE-2026-94487 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in PublishPress Capabilities <= 2.50.1 versions. |
| CVE-2026-94488 | Awaiting Analysis | 未確認 | CWE-79 | Telegram Desktop before 6.9.4 allows XSS in the HTML exporter. (The first fixed stable version is 7.0.1.) This occurs in button.text.toUtf8 in export_output_html.cpp. Exploitation |
| CVE-2026-94489 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a se | |
| CVE-2026-94490 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a se | |
| CVE-2026-94491 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in Yonyou KSOA 9.0. This affects an unknown part of the file /cardcase/search_list.jsp. Executing a manipulation of the argument address can lead to |
| CVE-2026-94492 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in Yonyou U8cloud 5.x. This vulnerability affects unknown code of the file /u8cloud/openapi/so.saleorder.sendaudit of the component OpenA |
| CVE-2026-94493 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was detected in Gigatech PDV5701 1.0.31_240305_112640. This issue affects some unknown processing of the file /index.html of the component WebSocket Service. The ma |
| CVE-2026-94494 | Deferred | 未確認 | CWE-639 | jshERP through 3.6 contains a tenant isolation bypass vulnerability that allows authenticated users to read other tenants' records via the GET /tenant/info endpoint. Attackers can |
| CVE-2026-94495 | Deferred | 未確認 | CWE-862 | jshERP through 3.6 fails to properly validate user privileges in SystemConfigService.updateSystemConfig, allowing authenticated users to modify tenant system configuration. Attacke |
| CVE-2026-94496 | Deferred | 未確認 | CWE-862 | jshERP through 3.6 fails to validate caller permissions in role management endpoints, allowing authenticated users to modify any role's data scope or delete roles. Attackers can ex |
| CVE-2026-94497 | Deferred | 未確認 | CWE-639 | jshERP through 3.6 fails to validate object ownership in by-id info, update, and delete endpoints across multiple resource types. Authenticated users can read, modify, and delete o |
| CVE-2026-94498 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in AppMySite <= 3.15.4 versions. |
| CVE-2026-94499 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in FormGent <= 1.12.2 versions. |
| CVE-2026-94500 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in ElementsKit Elementor addons Lite <= 4.0.5 versions. |
| CVE-2026-94501 | Deferred | 未確認 | CWE-862 | jshERP through 3.6 contains an authorization bypass vulnerability in the userBusiness CRUD endpoints that allows authenticated users to create, modify, or delete authorization-rela |
| CVE-2026-94504 | Deferred | 未確認 | CWE-79 | Ninja Forms 3.15.3 stores an anonymous non-RTE textarea value and renders it without safe HTML encoding in the legacy submission editor. An attacker can break out of the textarea w |
| CVE-2026-94532 | Deferred | 未確認 | CWE-639 | lamp-cloud through 5.10.0 contains an authorization bypass vulnerability in the getUserInfoById endpoint that allows authenticated users to read any other user's full profile. Atta |
| CVE-2026-94533 | Deferred | 未確認 | CWE-639 | lamp-cloud through 5.10.0 contains an authorization bypass vulnerability in FileAnyoneController that allows authenticated users to download arbitrary attachments. Attackers can re |
| CVE-2026-94534 | Deferred | 未確認 | CWE-639 | lamp-cloud through 5.10.0 fails to validate user identity in PUT /anyone/baseInfo and PUT /anyone/avatar endpoints, allowing authenticated attackers to modify arbitrary user profil |
| CVE-2026-94535 | Deferred | 未確認 | CWE-639 | lamp-cloud through 5.10.0 contains an authorization bypass vulnerability in the deleteMyNotice endpoint that allows authenticated users to delete other users' notifications. Attack |
| CVE-2026-94536 | Deferred | 未確認 | CWE-639 | lamp-cloud through 5.10.0 fails to validate the employeeId parameter in the /anyone/visible/resource endpoint, allowing authenticated users to read any employee's roles and permiss |
| CVE-2026-94540 | Deferred | 未確認 | CWE-306 | DesktopSMS 1.11.0 by MrPear contains an unauthorized access vulnerability that allows local attackers to transmit SMS, retrieve SMS-derived content, and persist an attacker-selecte |
| CVE-2026-94545 | Deferred | 未確認 | CWE-116 | Satori is a library to convert HTML and CSS to SVG. Starting in version 0.0.27 and prior to version 0.33.5, Satori does not properly escape certain values before including them in |
| CVE-2026-94570 | Awaiting Analysis | 未確認 | CWE-1287 | SGLang contains a DoS vulnerability caused by missing input validation for AUX_DATA ZeroMQ control messages in the Decode worker, which enables an unauthenticated remote attacker w |
| CVE-2026-94571 | Awaiting Analysis | 未確認 | CWE-94 | In OpenStack Octavia before 18.0.1, the Amphora provider driver did not reject control characters in the L7 policy redirect_url and redirect_prefix fields. The RFC 3986 URL validat |
| CVE-2026-94572 | Awaiting Analysis | 未確認 | CWE-94 | In OpenStack Octavia before 18.0.1, the Amphora provider driver did not validate the listener and pool tls_ciphers field for control characters. The value is written verbatim into |
| CVE-2026-94573 | Deferred | 未確認 | CWE-79 | The Repeater Fields for Elementor Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Repeater Field Value in all versions up to, and including, 2.2.7 due t |
| CVE-2026-94574 | Deferred | 未確認 | A local cross-user code execution vulnerability exists in GNU wget (Windows builds from eternallybored.org) due to a hardcoded configuration file path (C:\msys64) that is writable | |
| CVE-2026-94588 | Deferred | 未確認 | CWE-88 | In Proxmox pmg-api, an argument injection vulnerability exists in the package changelog retrieval functionality. This is caused by improper handling of user-supplied input passed t |
| CVE-2026-94604 | Rejected | 未確認 | Rejected reason: This CVE is a duplicate of another CVE. | |
| CVE-2026-94606 | Deferred | 未確認 | CWE-287, CWE-807 | authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, authentik email authenticator enrollment during an authentication or enrollment flow accep |
| CVE-2026-94609 | Deferred | 未確認 | CWE-269, CWE-863 | authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, an account with delegated permission to manage a group, group membership, or a user can gr |
| CVE-2026-94611 | Deferred | 未確認 | CWE-200, CWE-522 | authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, authentik API serializers return stored credentials when an account has view permission on |
| CVE-2026-94612 | Deferred | 未確認 | CWE-287, CWE-345 | authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, an authentik SAML Source verifies an assertion's signature and validity period but does no |
| CVE-2026-94613 | Deferred | 未確認 | CWE-770 | authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, an unauthenticated attacker can submit a malformed SAML message to an authentik deployment |
| CVE-2026-94622 | Analyzed | 未確認 | CWE-248 | vLLM versions through 0.29.0 contain a denial of service vulnerability in the NIXL connector's metadata handling for prefill/decode disaggregated deployments. Attackers can send re |
| CVE-2026-94623 | Analyzed | 未確認 | CWE-617 | vLLM through 0.29.0 contains a denial of service vulnerability in the NIXL connector's prefix caching implementation that fails to properly validate block counts across multi-promp |
| CVE-2026-94624 | Analyzed | 未確認 | CWE-770 | vLLM through 0.29.0 contains a denial of service vulnerability in P2P KV offloading when OffloadingConnector is configured with TieringOffloadingSpec and a peer-to-peer secondary t |
| CVE-2026-94625 | Analyzed | 未確認 | CWE-772 | vLLM through 0.29.0 contains a resource exhaustion vulnerability in MooncakeConnector where rejected prefill requests create ownerless transfer placeholders that are never reclaime |
| CVE-2026-94626 | Analyzed | 未確認 | CWE-789 | vLLM through 0.29.0 fails to validate the tp_size parameter in kv_transfer_params on OpenAI-compatible completion endpoints, allowing attackers to allocate unbounded memory. Attack |
| CVE-2026-94627 | Analyzed | 未確認 | CWE-401 | vLLM Mooncake connector through 0.29.0 fails to properly manage GPU KV cache block ownership when concurrent child requests share a single transfer ID in prefill/decode disaggregat |
| CVE-2026-94640 | Awaiting Analysis | 未確認 | CWE-400 | A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service (DoS) by sending a large number of unique requests. The rpcbi |
| CVE-2026-94671 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in The Post Grid <= 7.9.5 versions. |
| CVE-2026-94672 | Deferred | 未確認 | CWE-639 | Contributor Insecure Direct Object References (IDOR) in Safe SVG <= 2.5.0 versions. |
| CVE-2026-94673 | Deferred | 未確認 | CWE-639 | Unauthenticated Insecure Direct Object References (IDOR) in Simply Schedule Appointments <= 1.6.12.31 versions. |
| CVE-2026-94674 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Pixel Manager for WooCommerce <= 1.69.0 versions. |
| CVE-2026-94677 | Deferred | 未確認 | CWE-502 | Shop manager PHP Object Injection in Kadence WooCommerce Email Designer <= 1.5.19.1 versions. |
| CVE-2026-94678 | Deferred | 未確認 | CWE-502 | Contributor PHP Object Injection in Go Live Update Urls <= 7.0.8 versions. |
| CVE-2026-94679 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Fluent Support <= 2.3.2 versions. |
| CVE-2026-94680 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in The Post Grid <= 7.9.5 versions. |
| CVE-2026-94681 | Deferred | 未確認 | CWE-770 | Unauthenticated Denial of Service Attack in WP Store Locator < 3.0.0 versions. |
| CVE-2026-94682 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Podcast Importer SecondLine <= 1.5.6 versions. |
| CVE-2026-94683 | Deferred | 未確認 | CWE-502 | Contributor PHP Object Injection in DesignSetGo <= 2.8.0 versions. |
| CVE-2026-94684 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. False positive detection. | |
| CVE-2026-94952 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030. It is reachable through the route /boafrm/ |
| CVE-2026-94953 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030. It is reachable through the route /boafrm/ |
| CVE-2026-94954 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030. It is reachable through the route /boafrm/ |
| CVE-2026-95104 | Awaiting Analysis | 未確認 | CWE-121 | Stack-based buffer overflow vulnerability exists in BUFFALO Wi-Fi products. A non-authenticated crafted HTTP request may cause a denial-of-service (DoS) condition. |
| CVE-2026-95270 | Deferred | 未確認 | CWE-203, CWE-208 | A flaw has been found in dgtlmoon changedetection.io up to 0.60.7. The affected element is the function check_password of the file changedetectionio/flask_app.py of the component H |
| CVE-2026-95271 | Deferred | 未確認 | CWE-287 | A vulnerability has been found in dgtlmoon changedetection.io up to 0.60.7. The impacted element is the function check_authentication of the file changedetectionio/flask_app.py of |
| CVE-2026-95272 | Deferred | 未確認 | CWE-22 | A vulnerability was found in dgtlmoon changedetection.io up to 0.60.7. This affects the function static_content of the file changedetectionio/flask_app.py of the component Screensh |
| CVE-2026-95273 | Deferred | 未確認 | CWE-22 | A vulnerability was determined in dgtlmoon changedetection.io up to 0.60.7. This impacts the function static_content of the file changedetectionio/flask_app.py of the component vis |
| CVE-2026-95274 | Analyzed | 未確認 | CWE-116 | Improper output encoding in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary cod |
| CVE-2026-95275 | Analyzed | 未確認 | CWE-706 | Incorrect reference resolution in MediaStream in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTM |
| CVE-2026-95276 | Analyzed | 未確認 | CWE-20 | Improper input validation in Themes in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code |
| CVE-2026-95277 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromi |
| CVE-2026-95278 | Analyzed | 未確認 | CWE-862 | Missing authorization in WakeLock in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions vi |
| CVE-2026-95279 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security sev |
| CVE-2026-95280 | Analyzed | 未確認 | CWE-362 | Race condition in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-95281 | Analyzed | 未確認 | CWE-122 | Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chr |
| CVE-2026-95282 | Analyzed | 未確認 | CWE-416 | Use after free in Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securit |
| CVE-2026-95283 | Analyzed | 未確認 | CWE-122 | Buffer overflow in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML |
| CVE-2026-95284 | Analyzed | 未確認 | CWE-122 | Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chr |
| CVE-2026-95285 | Analyzed | 未確認 | CWE-862 | Missing authorization in WebView in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web origin polic |
| CVE-2026-95286 | Analyzed | 未確認 | CWE-843 | Type confusion in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securit |
| CVE-2026-95287 | Analyzed | 未確認 | CWE-862 | Missing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafte |
| CVE-2026-95288 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity |
| CVE-2026-95289 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Scroll in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted HTML pag |
| CVE-2026-95290 | Analyzed | 未確認 | CWE-862 | Missing authorization in NFC in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a c |
| CVE-2026-95291 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in SecurityIndicators in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium secur |
| CVE-2026-95292 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Safebrowsing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via crafted network traffic. (Chromiu |
| CVE-2026-95293 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security sever |
| CVE-2026-95294 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in Browser in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chrom |
| CVE-2026-95295 | Analyzed | 未確認 | CWE-200 | Information leak in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a local attacker to leak sensitive information via physical access. (Chromium security severity |
| CVE-2026-95296 | Analyzed | 未確認 | CWE-862 | Missing authorization in Core in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted HT |
| CVE-2026-95297 | Analyzed | 未確認 | CWE-862 | Missing authorization in Contextual Tasks in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security |
| CVE-2026-95298 | Analyzed | 未確認 | CWE-416 | Use after free in Browser in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside the sandbox via UI Interaction. (Chromium s |
| CVE-2026-95299 | Analyzed | 未確認 | CWE-416 | Use after free in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-95300 | Analyzed | 未確認 | CWE-862 | Missing authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted n |
| CVE-2026-95301 | Analyzed | 未確認 | CWE-862 | Missing authorization in Extensions in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafte |
| CVE-2026-95302 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in WebAPKs in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to obtain cross-origin data via a co-installed app. (Chromium secu |
| CVE-2026-95303 | Analyzed | 未確認 | CWE-459 | Incomplete cleanup in SmartCard in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted H |
| CVE-2026-95304 | Analyzed | 未確認 | CWE-787 | Out of bounds write in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-95305 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. |
| CVE-2026-95306 | Analyzed | 未確認 | CWE-843 | Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-95307 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in ExtensionsMenu in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. |
| CVE-2026-95308 | Analyzed | 未確認 | CWE-190 | Integer overflow in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially read memory outside the sandbo |
| CVE-2026-95309 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity |
| CVE-2026-95310 | Analyzed | 未確認 | CWE-416 | Use after free in AdFilter in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium securi |
| CVE-2026-95311 | Analyzed | 未確認 | CWE-590 | Free of non-heap memory in Fonts in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the s |
| CVE-2026-95312 | Analyzed | 未確認 | CWE-200 | Information leak in Passwords in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted H |
| CVE-2026-95313 | Analyzed | 未確認 | CWE-416 | Use after free in Fullscreen in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (C |
| CVE-2026-95314 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a |
| CVE-2026-95315 | Analyzed | 未確認 | CWE-416 | Use after free in Aura in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside the sandbox via UI Interaction. (Chromium secu |
| CVE-2026-95316 | Analyzed | 未確認 | CWE-252 | Unchecked return value in Performance in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially read memory via a local program. (Chromium security severity: |
| CVE-2026-95317 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in MediaCapture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted Ch |
| CVE-2026-95318 | Analyzed | 未確認 | CWE-122 | Buffer overflow in Video in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chrom |
| CVE-2026-95319 | Analyzed | 未確認 | CWE-416 | Use after free in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside |
| CVE-2026-95320 | Analyzed | 未確認 | CWE-862 | Missing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to spoof address bar via a crafted HT |
| CVE-2026-95321 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in Payments in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security se |
| CVE-2026-95322 | Analyzed | 未確認 | CWE-787 | Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outsid |
| CVE-2026-95323 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in Chromium in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted HTML p |
| CVE-2026-95324 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a cr |
| CVE-2026-95325 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromi |
| CVE-2026-95326 | Analyzed | 未確認 | CWE-459 | Incomplete cleanup in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted H |
| CVE-2026-95327 | Analyzed | 未確認 | CWE-200 | Information leak in Networking in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: |
| CVE-2026-95328 | Analyzed | 未確認 | CWE-441 | Confused deputy in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker leveraging social engineering to obtain sensitive information via a co-inst |
| CVE-2026-95329 | Analyzed | 未確認 | CWE-787 | Out of bounds write in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted |
| CVE-2026-95330 | Analyzed | 未確認 | CWE-754 | Improper state validation in Downloads in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium sec |
| CVE-2026-95331 | Analyzed | 未確認 | CWE-787 | Out of bounds write in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (C |
| CVE-2026-95332 | Analyzed | 未確認 | CWE-457 | Use of uninitialized variable in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (C |
| CVE-2026-95333 | Analyzed | 未確認 | CWE-416 | Use after free in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium sec |
| CVE-2026-95334 | Analyzed | 未確認 | CWE-706 | Incorrect reference resolution in WebProtect in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbit |
| CVE-2026-95335 | Analyzed | 未確認 | CWE-416 | Use after free in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the s |
| CVE-2026-95336 | Analyzed | 未確認 | CWE-200 | Information leak in Transactions Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain sensitive information via a craf |
| CVE-2026-95337 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in Messages in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially spoof UI elements via |
| CVE-2026-95338 | Analyzed | 未確認 | CWE-416 | Use after free in PDFium in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security s |
| CVE-2026-95339 | Analyzed | 未確認 | CWE-416 | Use after free in ServiceWorker in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium s |
| CVE-2026-95340 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in PictureInPicture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafte |
| CVE-2026-95341 | Analyzed | 未確認 | CWE-20 | Improper input validation in Desktop in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary cod |
| CVE-2026-95342 | Analyzed | 未確認 | CWE-862 | Missing authorization in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low) |
| CVE-2026-95343 | Analyzed | 未確認 | CWE-416 | Use after free in WebAudio in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securit |
| CVE-2026-95344 | Analyzed | 未確認 | CWE-367 | Race condition in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass site isolation via a crafted Chrome extension. |
| CVE-2026-95345 | Analyzed | 未確認 | CWE-416 | Use after free in Actor in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-95346 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via crafted network traffic. (Chromium security severity: |
| CVE-2026-95347 | Analyzed | 未確認 | CWE-416 | Use after free in Updater in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Ch |
| CVE-2026-95348 | Analyzed | 未確認 | CWE-416 | Use after free in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside |
| CVE-2026-95349 | Analyzed | 未確認 | CWE-122 | Buffer overflow in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTM |
| CVE-2026-95350 | Analyzed | 未確認 | CWE-122 | Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chr |
| CVE-2026-95351 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via |
| CVE-2026-95352 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome |
| CVE-2026-95353 | Analyzed | 未確認 | CWE-416 | Use after free in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securit |
| CVE-2026-95354 | Analyzed | 未確認 | CWE-416 | Use after free in Verifier in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside |
| CVE-2026-95355 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Navigation in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute ar |
| CVE-2026-95356 | Analyzed | 未確認 | CWE-416 | Use after free in WindowDialog in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the san |
| CVE-2026-95357 | Analyzed | 未確認 | CWE-787 | Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted H |
| CVE-2026-95358 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to bypass system access restrictions into a privileged page via a c |
| CVE-2026-95359 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to read memory outside the sa |
| CVE-2026-95360 | Analyzed | 未確認 | CWE-367 | Race condition in Editing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. ( |
| CVE-2026-95361 | Analyzed | 未確認 | CWE-441 | Confused deputy in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Ch |
| CVE-2026-95362 | Analyzed | 未確認 | CWE-352 | Cross-site request forgery in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTM |
| CVE-2026-95363 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in FileSystem in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Ch |
| CVE-2026-95364 | Analyzed | 未確認 | CWE-20 | Improper input validation in Passwords in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: |
| CVE-2026-95365 | Analyzed | 未確認 | CWE-843 | Type confusion in IndexedDB in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chr |
| CVE-2026-95366 | Analyzed | 未確認 | CWE-672 | Use of released resource in Core in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafte |
| CVE-2026-95367 | Analyzed | 未確認 | CWE-200 | Information leak in DataTransfer in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obta |
| CVE-2026-95368 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially obtain cross-origin data via a cr |
| CVE-2026-95369 | Analyzed | 未確認 | CWE-841 | Inappropriate implementation in XML in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML pa |
| CVE-2026-95370 | Analyzed | 未確認 | CWE-841 | Inappropriate implementation in NFC in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium securi |
| CVE-2026-95371 | Analyzed | 未確認 | CWE-862 | Missing authorization in Views in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process and leveraged social engineering |
| CVE-2026-95372 | Analyzed | 未確認 | CWE-416 | Use after free in Chromecast in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outsid |
| CVE-2026-95373 | Analyzed | 未確認 | CWE-416 | Use after free in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafte |
| CVE-2026-95374 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Network in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severit |
| CVE-2026-95375 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in BrowserTag in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a c |
| CVE-2026-95376 | Analyzed | 未確認 | CWE-610 | Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037.57 allowed an adjacent attacker leveraging social engineering to bypass system access restrictions |
| CVE-2026-95380 | Analyzed | 未確認 | CWE-843 | Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a |
| CVE-2026-95381 | Analyzed | 未確認 | CWE-20 | Improper input validation in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary co |
| CVE-2026-95382 | Analyzed | 未確認 | CWE-20 | Improper input validation in Auth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obt |
| CVE-2026-95384 | Analyzed | 未確認 | CWE-362 | Race condition in Transactions Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. (Chromi |
| CVE-2026-95385 | Analyzed | 未確認 | CWE-841 | Inappropriate implementation in PlatformIntegration in Google Chrome on on Windows prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system a |
| CVE-2026-95386 | Analyzed | 未確認 | CWE-835 | TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service |
| CVE-2026-95387 | Analyzed | 未確認 | CWE-122 | SPDY protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-95388 | Analyzed | 未確認 | CWE-122 | Sharkd utility crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-95389 | Analyzed | 未確認 | CWE-122 | SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-95390 | Analyzed | 未確認 | CWE-476 | PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service |
| CVE-2026-95391 | Analyzed | 未確認 | CWE-416 | ZigBee ZCL protocol dissector crash in 4.6.0 to 4.6.8 allows denial of service |
| CVE-2026-95392 | Analyzed | 未確認 | CWE-126 | MBIM protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-95393 | Analyzed | 未確認 | CWE-122 | CSN.1 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-95394 | Analyzed | 未確認 | CWE-606 | Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-95395 | Analyzed | 未確認 | CWE-401 | IEEE C37.118 Synchrophasor protocol dissector memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-95396 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. Affected is an unknown function of the file HospitalController.java of the com |
| CVE-2026-95499 | Deferred | 未確認 | CWE-284, CWE-434 | A flaw has been found in JosephChuks php-file-manager-with-code-editor up to 3.0. This issue affects the function move_uploaded_file of the file filemanager.php. Executing a manipu |
| CVE-2026-95500 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability has been found in JosephChuks php-file-manager-with-code-editor up to 3.0. Impacted is the function file_put_contents of the file codeEditor.php of the component Sa |
| CVE-2026-95501 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability was found in mtrano APENCMS up to 6546096d354153309693efabb9a0d824628ed4f5. The affected element is the function eval of the file cms/weasel.php of the component Te |
| CVE-2026-95503 | Awaiting Analysis | 未確認 | CWE-347 | A flaw was found in the Kerberos federation provider of Keycloak, an open-source identity and access management solution. When Kerberos password authentication is used without SPNE |
| CVE-2026-95508 | Awaiting Analysis | 未確認 | CWE-787 | A heap-based buffer overflow was found in the DHCPv6 and TFTP response builders of libslirp. When the host is configured with a small interface MTU, a guest-supplied DHCPv6 CLIENTI |
| CVE-2026-95509 | Deferred | 未確認 | CWE-125, CWE-131 | Strings optimized for Latin-1 displaying Latin-1 characters cause incorrect String.arg() formatting by an incorrect buffer size calculation, causing out-of-bounds reading. |
| CVE-2026-95511 | Rejected | 未確認 | Rejected reason: Not a vulnerability. Creating a serial queue that overwrites cups-files.conf requires membership in SystemGroups (lpadmin), which is an opt-in cupsd admin role gra | |
| CVE-2026-95513 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Online Booking & Scheduling Calendar for WordPress by vcita <= 4.6.0 versions. |
| CVE-2026-95514 | Deferred | 未確認 | CWE-289 | Unauthenticated Bypass Vulnerability in Netgsm <= 2.10.0 versions. |
| CVE-2026-95515 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Ninja Forms <= 3.15.3 versions. |
| CVE-2026-95519 | Awaiting Analysis | 未確認 | CWE-78 | A flaw was found in rpm. An attacker can supply a crafted manifest file that, when processed by a user or automation using `rpm -q -p` or similar manifest-processing flows, leads t |
| CVE-2026-95520 | Awaiting Analysis | 未確認 | CWE-787 | A heap-based buffer overflow flaw was found in rpm. Parsing a symlink entry in an untrusted RPM package whose declared RPMTAG_LONGFILESIZES value is 0xFFFFFFFFFFFFFFFF causes an in |
| CVE-2026-95521 | Awaiting Analysis | 未確認 | CWE-78 | A command injection flaw was found in rpm. Installing or rebuilding a source RPM whose source or spec file basenames contain a %() macro construct causes rpm to execute an attacker |
| CVE-2026-95522 | Deferred | 未確認 | CWE-89 | Shop manager SQL Injection in Easy Digital Downloads <= 3.7.0 versions. |
| CVE-2026-95523 | Deferred | 未確認 | CWE-290 | Subscriber Bypass Vulnerability in WP User Frontend <= 4.3.11 versions. |
| CVE-2026-95524 | Deferred | 未確認 | CWE-290 | Unauthenticated Bypass Vulnerability in WP User Frontend <= 4.3.11 versions. |
| CVE-2026-95525 | Deferred | 未確認 | CWE-22 | Subscriber Arbitrary File Deletion in WP User Frontend <= 4.3.11 versions. |
| CVE-2026-95527 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Conekta Payment Gateway <= 6.2.4 versions. |
| CVE-2026-95528 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Core Web Vitals & PageSpeed Booster <= 1.0.31 versions. |
| CVE-2026-95529 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Calculated Fields Form <= 5.5.1.1 versions. |
| CVE-2026-95530 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in PixelYourSite – Your smart PIXEL (TAG) Manager <= 11.4.1 versions. |
| CVE-2026-95531 | Deferred | 未確認 | CWE-502 | Subscriber PHP Object Injection in Conversational Forms for ChatBot <= 1.5.0 versions. |
| CVE-2026-95586 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Ultimate Addons for Contact Form 7 <= 3.5.50 versions. |
| CVE-2026-95587 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Hostinger Migrator <= 1.0 versions. |
| CVE-2026-95590 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in Tainacan <= 1.2.0 versions. |
| CVE-2026-95592 | Deferred | 未確認 | CWE-639 | Unauthenticated Insecure Direct Object References (IDOR) in Team <= 6.0.0 versions. |
| CVE-2026-95593 | Deferred | 未確認 | CWE-89 | Editor SQL Injection in Ultimeter <= 3.0.8 versions. |
| CVE-2026-95600 | Deferred | 未確認 | CWE-497 | Unauthenticated Sensitive Data Exposure in TrustedLogin Connector <= 2.0.3 versions. |
| CVE-2026-95601 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Product Filter by WBW <= 3.1.7 versions. |
| CVE-2026-95602 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in YITH YITH WooCommerce Request A Quote allows Exploiting Incorrectly Configured Access Control Security Levels. Th |
| CVE-2026-95603 | Deferred | 未確認 | CWE-502 | Shop manager PHP Object Injection in Reycob Product Import Export <= 2.3.0 versions. |
| CVE-2026-95604 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Loops & Logic <= 4.2.4 versions. |
| CVE-2026-95616 | Analyzed | 未確認 | CWE-190 | An integer overflow in WSS4J's DER bounds check lets an oversized allocation pass validation. An unauthenticated attacker can send a SOAP message carrying an X.509 certificate whos |
| CVE-2026-95619 | Awaiting Analysis | 未確認 | CWE-190 | A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an unders |
| CVE-2026-95623 | Deferred | 未確認 | CWE-918 | The Tauri HTTP plugin validates requested URLs against the application's configured scope allowlist only once, on the initial request. When the remote server responds with an HTTP |
| CVE-2026-95624 | Deferred | 未確認 | CWE-284 | The Tauri updater plugin's 'check' IPC command accepts an allowDowngrades boolean parameter directly from frontend JavaScript code. When set to true, it replaces the version compar |
| CVE-2026-95625 | Deferred | 未確認 | CWE-354 | The Tauri updater plugin verifies update binaries using minisign signatures, but the signature covers only the raw binary bytes. The update manifest -- which contains the version n |
| CVE-2026-95626 | Deferred | 未確認 | CWE-79 | Tauri's Content Security Policy hardening, which injects a random nonce to restrict script execution, provides zero protection when an application includes data: or blob: in its sc |
| CVE-2026-95627 | Deferred | 未確認 | CWE-732 | When a Tauri application uses the dialog plugin's file or folder picker, an attacker with JavaScript execution (XSS) can force the scope expansion to be recursive, granting read/wr |
| CVE-2026-95653 | Awaiting Analysis | 未確認 | CWE-340 | Concrete CMS Community Store before 2.7.8 derives digital product download tokens from order creation timestamps instead of random values, making tokens predictable. Unauthenticate |
| CVE-2026-95654 | Deferred | 未確認 | CWE-863 | Databasement before 1.7.14 validates invitation tokens only when the acceptance page loads, caching the authorization decision without re-checking token validity during acceptance. |
| CVE-2026-95655 | Deferred | 未確認 | CWE-639 | Aureus ERP before 1.5.0 fails to scope message lookups to the current record in ChatterPanel, allowing authenticated users to access arbitrary messages. Attackers can submit sequen |
| CVE-2026-95656 | Deferred | 未確認 | CWE-918 | A vulnerability was found in dgtlmoon changedetection.io up to 50389b07. This vulnerability affects the function add_watch_ui_snapshot of the file changedetectionio/blueprint/add_w |
| CVE-2026-95657 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in dgtlmoon Changedetection.io up to 0.55.8. This issue affects the function setCurrentSelectedText of the file changedetectionio/static/js/visual-se |
| CVE-2026-95658 | Deferred | 未確認 | CWE-352 | MISP's WorkflowsController exposed the moduleStatelessExecution action in the Security component's unlockedActions list. In CakePHP, listing an action in unlockedActions disables b |
| CVE-2026-95659 | Deferred | 未確認 | CWE-116, CWE-20, CWE-79 | MISP contains a reflected cross-site scripting (XSS) vulnerability in the AnalystDataController::viewForObject action. The method accepted a parent object type parameter from the U |
| CVE-2026-95660 | Deferred | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in Moonshot AI Kimi Code up to 0.31.0. The affected element is an unknown function of the file agent-core-v2/src/agent/mcp/config-loader.ts of t |
| CVE-2026-95661 | Deferred | 未確認 | CWE-79 | MISP contains a reflected cross-site scripting (XSS) vulnerability in the attribute histogram view. The $selectedTypes variable, which is derived from the URL path segment , was in |
| CVE-2026-95665 | Deferred | 未確認 | CWE-79 | MISP contains a reflected cross-site scripting (XSS) vulnerability in the event REST search export confirmation form. The view template app/View/Events/ajax/eventRestSearchExportCo |
| CVE-2026-95666 | Analyzed | 未確認 | CWE-770 | Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to limit the length of the post ID array accepted by the bulk reactions endpoint |
| CVE-2026-95667 | Deferred | 未確認 | CWE-22, CWE-732 | The MISP installer scripts (for Debian 12, Debian 13, Ubuntu 24.04, and RHEL 9.4) create a log file at /var/log/misp_install.log and a named pipe (FIFO) at /var/log/misp_install.lo |
| CVE-2026-95671 | Deferred | 未確認 | CWE-285, CWE-862 | In MISP, the CollectionsController add() method enforced the sharing-group usability authorization check and element capture only when the HTTP request method was POST. However, th |
| CVE-2026-95674 | Deferred | 未確認 | CWE-20 | In MISP, the queryEnrichment method in EventsController.php accepted a module name parameter and iterated over the list of enabled modules to find a match. If the specified module |
| CVE-2026-95675 | Awaiting Analysis | 未確認 | CWE-78 | D-Link DAP-1360 firmware version 6.14 and earlier contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary commands as root |
| CVE-2026-95676 | Analyzed | 未確認 | CWE-287, CWE-636 | A missing/improper authentication vulnerability in the WatchGuard AuthPoint Gateway's LDAP Sync first-factor authentication allows a remote attacker to bypass single-factor passwor |
| CVE-2026-95679 | Deferred | 未確認 | CWE-20, CWE-918 | MISP's RequestHandlerComponent automatically decodes XML request bodies on all write requests. The underlying Xml::build() library contains a logic error in its readFile guard cond |
| CVE-2026-95682 | Deferred | 未確認 | CWE-79 | MISP contains a stored cross-site scripting (XSS) vulnerability in the admin email composition screen. The MISP.org organization name setting was interpolated directly into a JavaS |
| CVE-2026-95683 | Deferred | 未確認 | CWE-639, CWE-862 | In MISP, the Overmind event view enriches an event with its most recent attached report for preview purposes. The enrichment logic fetched the report using only the event ID as the |
| CVE-2026-95685 | Deferred | 未確認 | CWE-862 | MISP contains an access control flaw in the EventReports functionality. The replaceSuggestionInReport action, which allows modification of suggestion content within an event report |
| CVE-2026-95693 | Deferred | 未確認 | CWE-200, CWE-22 | In MISP, the EventReport::uploadPicture method in processed a caller-supplied tmp_name field by invoking file_exists(), mime_content_type(), and exif_imagetype() on the supplied pa |
| CVE-2026-95697 | Deferred | 未確認 | CWE-862 | MISP contains an authorization flaw in the Organisation model's captureOrg method. When the $force parameter is set to true, the method unconditionally overwrites organization meta |
| CVE-2026-95698 | Deferred | 未確認 | CWE-22 | The findOrgImage method in MISP's OrgImgHelper constructs a filesystem path by concatenating a user-supplied organization identifier with a fixed image directory and a file extensi |
| CVE-2026-95699 | Deferred | 未確認 | CWE-653 | Prior to 9/18/2026, the iSteamX mobile application's AWS policy could grant authenticated users access to wildcard MQTT topics, which can expose other users' device data and allow |
| CVE-2026-95701 | Deferred | 未確認 | CWE-22 | In MISP, the __statisticsOrgs method in UsersController.php used the organization name directly as a file-system path component when checking for the existence of an organization l |
| CVE-2026-95703 | Deferred | 未確認 | CWE-20, CWE-200 | In MISP, the OrganisationsController::__uploadLogo method processed a caller-supplied tmp_name value with filesystem probes (file_exists, MIME type detection, EXIF reading) before |
| CVE-2026-95754 | Deferred | 未確認 | CWE-285 | In MISP's UsersController login() method, the pre-authentication database query used for the TOTP (two-factor authentication) verification branch did not include the User.disabled |
| CVE-2026-95805 | Deferred | 未確認 | CWE-285 | A typo in the MISP ACLComponent access control configuration caused the ACL rule for the previewEventAttributes action to reference the permission string 'theming_enabled*' (with a |
| CVE-2026-95806 | Deferred | 未確認 | CWE-502, CWE-74 | MISP ships with PHP's phar stream wrapper registered in both its web entry point and its console entry point. The phar stream wrapper causes PHP to treat a phar archive as a dire |
| CVE-2026-95811 | Deferred | 未確認 | CWE-180, CWE-863 | Lemonldap::NG::Handler versions from 2.0.0 before 2.16.10, from 2.17.0 before 2.21.6, from 2.22.0 before 2.23.4 for Perl allow an equivalent spelling of a path to bypass the locati |
| CVE-2026-95812 | Deferred | 未確認 | CWE-79 | ClipBucket v5 before 5.5.3-#182 contains a reflected cross-site scripting vulnerability in the sort_link() helper function that fails to sanitize cat, sort, and time query paramete |
| CVE-2026-95813 | Deferred | 未確認 | CWE-601 | e621ng versions before 26.09.16 pass untrusted request parameters directly to Rails url_for in PaginatorComponent and controller navigation links, allowing attackers to redirect pa |
| CVE-2026-95814 | Awaiting Analysis | 未確認 | CWE-863 | Vaultwarden through 1.37.3 omits organization membership status validation from three cipher access-restriction queries, allowing revoked and not-yet-confirmed members to retain re |
| CVE-2026-95815 | Deferred | 未確認 | CWE-532 | OpenClaw iOS before 2026.8.11 logs complete agent deep-link URLs including persistent bearer keys to unified logs as public diagnostic data. Attackers who obtain diagnostic archive |
| CVE-2026-95818 | Awaiting Analysis | 未確認 | CWE-121 | A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allows a local attacker to crash or corrupt the memory of setuid |
| CVE-2026-95819 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in anirbandutta9 College-Notes-Gallery up to 8c1cf3d98f30982d069c88ca172612c001eb39f6. Affected by this vulnerability is an unknown functionality of |
| CVE-2026-95820 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was found in anirbandutta9 College-Notes-Gallery up to 8c1cf3d98f30982d069c88ca172612c001eb39f6. Affected by this issue is some unknown functionality of the file /d |
| CVE-2026-95828 | Deferred | 未確認 | CWE-384 | A vulnerability was determined in Mstfakts College-Management-System. This affects the function session_start of the file Front-end/server.php of the component Authentication. Exec |
| CVE-2026-95829 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in TDuckCloud tduck-platform up to 5.3. This vulnerability affects the function PaginationInnerInterceptor.concatOrderBy of the file tduck-api/src/ma |
| CVE-2026-95830 | Deferred | 未確認 | CWE-284, CWE-434 | A security flaw has been discovered in theRealSain Pixtream up to 866afd4f0cea812b918780fb74b67dccf8c4d6a0. This issue affects some unknown processing of the file /post_upload.php. |
| CVE-2026-95831 | Deferred | 未確認 | CWE-506 | Crypt::SelfCertificate versions from 1.01 through 1.05 for Perl contains malware which executes Python code from an obfuscated URL. The generate_certificate runs a Python script s |
| CVE-2026-95832 | Awaiting Analysis | 未確認 | CWE-74 | Improper Neutralization of Special Elements in Output Used by a Downstream Component in the colour control escape code handler in kitty from 0.47.3 before 0.49.0 allows a program w |
| CVE-2026-95833 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in itsourcecode Leave Management System 1.0. Impacted is an unknown function of the file /module/leavetype/index.php. This manipulation of the argume |
| CVE-2026-95834 | Awaiting Analysis | 未確認 | CWE-416 | Use After Free in the drag source path of the drag and drop protocol in kitty from 0.47.0 before 0.49.0 allows a program writing to the terminal to cause the terminal to read from |
| CVE-2026-95835 | Awaiting Analysis | 未確認 | CWE-862 | Missing Authorization in the askpass escape code handler in kitty from 0.25.0 before 0.49.0 allows a local user other than the one running the terminal to obtain the text typed int |
| CVE-2026-95842 | Analyzed | 未確認 | CWE-248 | Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, SessionEventLoop.run catches only InterruptedException, and SessionEventLoopGroup does not restart a terminated loop. A |
| CVE-2026-95843 | Analyzed | 未確認 | CWE-20 | Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, PostOffice.subscribe parses a shared-subscription filter through SharedSubscriptionUtils.extractShareName before valida |
| CVE-2026-95844 | Modified | 未確認 | CWE-674 | Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, Moquette does not limit the depth of topic names and topic filters before processing them through recursive CTrie inser |
| CVE-2026-95845 | Analyzed | 未確認 | CWE-770 | Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, the broker does not enforce a maximum length for pending per-session message queues. When a fast publisher sends messag |
| CVE-2026-95846 | Analyzed | 未確認 | CWE-862 | Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, PostOffice.publishWill publishes a client's Last-Will message without applying the canWrite authorization and reserved- |
| CVE-2026-95847 | Analyzed | 未確認 | CWE-99 | Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, H2PersistentQueue derives a session's message-map name as queue_ plus the client ID and its metadata-map name as queue_ |
| CVE-2026-95848 | Analyzed | 未確認 | CWE-636 | Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, when a configured authenticator or authorizator class cannot be loaded, Server.initializeAuthenticator and Server.initi |
| CVE-2026-95861 | Deferred | 未確認 | CWE-674 | A malicious actor with access to the network could exploit an Uncontrolled Recursion vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attac |
| CVE-2026-95862 | Deferred | 未確認 | CWE-787 | A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack o |
| CVE-2026-95864 | Deferred | 未確認 | CWE-79 | The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'css[fonts]' Parameter in all versions up to, and including, 7.8.1 due to insufficient inp |
| CVE-2026-95866 | Deferred | 未確認 | CWE-79 | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Avatar Field in |
| CVE-2026-95868 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Affected by this issue is the function mysqli_query of |
| CVE-2026-95897 | Deferred | 未確認 | CWE-20, CWE-502 | A security vulnerability has been detected in Dask up to 2026.8.0. This affects the function from_npy_stack of the file dask/array/core.py of the component Loader. Such manipulatio |
| CVE-2026-95924 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer_0/admins/assessments/databank/btn_func |
| CVE-2026-95925 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer_0/admins/assessments/databank/b |
| CVE-2026-95926 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unknown function of the file /reviewer_0/admins/assessments/prete |
| CVE-2026-95927 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. This affects an unknown function of the file /reviewer_0/admins/assessments/pretest/exam-del |
| CVE-2026-95928 | Deferred | 未確認 | CWE-20, CWE-502 | A security flaw has been discovered in recommenders-team recommenders up to 1.2.1. This impacts the function pickle.load of the file recommenders/models/newsrec/io/mind_iterator.py |
| CVE-2026-95929 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in iFlytek astron-agent up to 1.0.7. Affected is an unknown function of the file console/backend/commons/src/main/resources/mapper/ChatBotMarketMappe |
| CVE-2026-95930 | Deferred | 未確認 | CWE-918 | A security vulnerability has been detected in iFlytek astron-agent up to 1.0.6. Affected by this vulnerability is the function UrlCheckTool.checkUrl of the component debugToolV2 AP |
| CVE-2026-95957 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This issue affects the function prepend of the file student_signup.php of the componen |
| CVE-2026-95958 | Deferred | 未確認 | CWE-189, CWE-191 | A security flaw has been discovered in JusticeRage Manalyze 1.0.0. Impacted is the function PE::_parse_relocations of the file manape/pe.cpp of the component PE Parser. Performing |
| CVE-2026-95985 | Awaiting Analysis | 未確認 | CWE-349, CWE-829 | The file write tool in Amazon Kiro IDE versions before 1.0.242 might allow remote unauthenticated actors to inject crafted instructions into the agent's context. When a user runs t |
| CVE-2026-96039 | Deferred | 未確認 | CWE-79 | The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via first_name Parameter in all versions up to, and including, 1.8.27 due to insufficient i |
| CVE-2026-9613 | Deferred | 未確認 | CWE-862 | The Datalogics Ecommerce Delivery – Datalogics plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.65. This is due to the plugin no |
| CVE-2026-9615 | Deferred | 未確認 | CWE-862 | The Flex Import plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.0. This is due to the license_activate_fleximp() and license_dea |
| CVE-2026-9621 | Awaiting Analysis | 未確認 | CWE-190 | A denial-of-service security issue exists within RSLinx® Classic. The security issue stems from improper handling of a malformed packet. A crafted CIP packet can cause the RSLinx® |
| CVE-2026-9622 | Awaiting Analysis | 未確認 | CWE-191 | A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet targeting the Forward Close service can cause the RSLinx® Classic service to crash, requiring |
| CVE-2026-9624 | Awaiting Analysis | 未確認 | CWE-191 | A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet can cause the RSLinx® Classic service to crash due to insufficient data length validation, re |
| CVE-2026-9625 | Awaiting Analysis | 未確認 | CWE-120 | A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet with an oversized embedded message request can cause the RSLinx® Classic service to crash, re |
| CVE-2026-96257 | Deferred | 未確認 | CWE-119, CWE-121 | A flaw has been found in Fast FAC1203R Gigabit Edition 2.0.4. Affected by this issue is the function copy_msg_element of the component Device Discovery Service. Executing a manipul |
| CVE-2026-96258 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in onSite internet GmbH Auktion NG Auktionssoftware up to 20260722. This affects an unknown part of the file /forgotpasswd.html of the component Publ |
| CVE-2026-96259 | Analyzed | 未確認 | CWE-918 | Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to apply the internal-connection filter to OAuth endpoint requests, which allows |
| CVE-2026-96260 | Analyzed | 未確認 | CWE-789 | Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to enforce a request body size limit during CSRF validation of plugin requests wh |
| CVE-2026-96269 | Awaiting Analysis | 未確認 | CWE-829 | GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. Thi |
| CVE-2026-96271 | Deferred | 未確認 | CWE-639 | Photoview through 2.4.0 contains an authorization bypass vulnerability in the shareAlbum GraphQL mutation that allows authenticated users to create share links for albums owned by |
| CVE-2026-96272 | Deferred | 未確認 | CWE-89 | ClipBucket v5 before 5.5.3-#182 contains a blind SQL injection vulnerability in the photo search endpoint where the query parameter is passed unsanitized into SQL WHERE and ORDER B |
| CVE-2026-96273 | Awaiting Analysis | 未確認 | CWE-460, CWE-667 | Ghidra before 12.1.4 fails to validate the TYPE_COL byte in OptionsDB.createUnregisteredOption(), causing an ArrayIndexOutOfBoundsException that leaves domain objects permanently l |
| CVE-2026-96274 | Awaiting Analysis | 未確認 | CWE-248 | In Baicells Nova 430H, an unauthenticated device within radio range can send a malformed uplink message during connection setup that contains an invalid NAS payload. Because the eN |
| CVE-2026-96275 | Awaiting Analysis | 未確認 | CWE-22 | A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary locations on the host filesystem via extract_extra_data(). On system installs, the |
| CVE-2026-96276 | Awaiting Analysis | 未確認 | CWE-22 | If a malicious SDK container declares an extension point with a crafted `directory` path, and a developer runs `flatpak build-init --writable-sdk --sdk-extension` with that SDK, at |
| CVE-2026-96279 | Awaiting Analysis | 未確認 | CWE-59 | A malicious OCI registry can hardlink arbitrary host files into the extraction directory when a user installs or updates a Flatpak application from an OCI remote, allowing disclosu |
| CVE-2026-96280 | Awaiting Analysis | 未確認 | CWE-197 | The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize (32 bits on 32-bit systems), causing undersized allocations w |
| CVE-2026-96281 | Awaiting Analysis | 未確認 | CWE-284 | On a multi-user system, a user with an active local login session could downgrade a system-wide Flatpak app to an older version by removing the app's remote ref via the unprivilege |
| CVE-2026-96282 | Awaiting Analysis | 未確認 | CWE-59 | A malicious Flatpak extension can probe the host filesystem to determine what files and directories exist at arbitrary paths, and host directory listings can be disclosed to sandbo |
| CVE-2026-96283 | Awaiting Analysis | 未確認 | CWE-862 | By calling org.freedesktop.Flatpak.SystemHelper.CancelPull on another user's pull, the pull is not actually cancelled but removed from internal tracking, making it impossible for t |
| CVE-2026-96284 | Awaiting Analysis | 未確認 | CWE-59 | A malicious user can get read-access to files in the flatpak-system-helper context if a system OCI repository is configured, because the OCI code paths in the system helper follow |
| CVE-2026-96326 | Deferred | 未確認 | CWE-79 | The HT Contact Form – Drag & Drop Form Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Rich Text Editor Field in all versions up to, |
| CVE-2026-9633 | Awaiting Analysis | 未確認 | CWE-276 | A security issue exists within the Redundancy Module Configuration Tool. The RM3ConfigTool.exe binary searches directories in the system path for a required DLL, and one or more of |
| CVE-2026-96338 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in Profile Builder <= 4.0.2 versions. |
| CVE-2026-9634 | Awaiting Analysis | 未確認 | CWE-276 | A security issue exists within the Redundancy Module Configuration Tool. The RMConfigTool.exe binary searches directories in the system path for a required DLL, and one or more of |
| CVE-2026-96342 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Amauri.IO WPMobile.App wpappninja allows Retrieve Embedded Sensitive Data.This issue affects WPMobile.App: from n/a through 11.83. |
| CVE-2026-96343 | Deferred | 未確認 | CWE-502 | Custom role PHP Object Injection in WP ERP <= 1.17.9 versions. |
| CVE-2026-96344 | Deferred | 未確認 | CWE-502 | Custom role PHP Object Injection in eCommerce Product Catalog <= 3.6.0 versions. |
| CVE-2026-96345 | Deferred | 未確認 | CWE-89 | Administrator SQL Injection in Estatik <= 4.3.5 versions. |
| CVE-2026-96346 | Deferred | 未確認 | CWE-89 | Author SQL Injection in WP ERP <= 1.17.9 versions. |
| CVE-2026-96347 | Deferred | 未確認 | CWE-639 | Subscriber Insecure Direct Object References (IDOR) in Bookly <= 28.2 versions. |
| CVE-2026-96348 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Bookly <= 28.2 versions. |
| CVE-2026-96349 | Deferred | 未確認 | CWE-94 | Unauthenticated Remote Code Execution (RCE) in SiteSkite <= 2.1.8 versions. |
| CVE-2026-96350 | Deferred | 未確認 | CWE-266 | Subscriber Privilege Escalation in Estatik <= 4.3.5 versions. |
| CVE-2026-96351 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 6.1.3 versions. |
| CVE-2026-96352 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in YITH WooCommerce Ajax Search <= 2.28.0 versions. |
| CVE-2026-9637 | Awaiting Analysis | 未確認 | CWE-119 | A denial-of-service security issue exists in the affected Logix platforms listed in the table above. The security issue stems from improper validation of input length during CIP me |
| CVE-2026-96415 | Analyzed | 未確認 | CWE-121 | Catapult DCT2000 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-96416 | Analyzed | 未確認 | CWE-122 | IEEE 802.11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-96417 | Analyzed | 未確認 | CWE-122 | RF4CE protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-96418 | Analyzed | 未確認 | CWE-835 | TIFF protocol dissector infinite loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-96419 | Analyzed | 未確認 | CWE-22 | Profile import crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service and possible code execution |
| CVE-2026-96420 | Analyzed | 未確認 | CWE-126 | Toshiba file parser crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-96421 | Analyzed | 未確認 | CWE-1325 | USB HID protocol dissector infinite loop and memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-96422 | Analyzed | 未確認 | CWE-617 | Frame protocol metadissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-96423 | Analyzed | 未確認 | CWE-122, CWE-125 | X11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-96428 | Deferred | 未確認 | CWE-89 | SQL Injection in the /WebAgenda/SMBAjaxAutoComplete.do API endpoint of Flowring Agentflow 4.0 version before 2025/08/08 allows remote attackers to execute arbitrary SQL commands vi |
| CVE-2026-96429 | Deferred | 未確認 | CWE-89 | SQL Injection in the /WebAgenda/SMBAjaxConfigProcess.do API endpoint of Flowring Agentflow 4.0 version before 2025/08/08 allows remote attackers to execute arbitrary SQL commands v |
| CVE-2026-96430 | Deferred | 未確認 | CWE-749 | Exposed Dangerous Method or Function in the /WebAgenda/SQLWin.do API endpoint of Flowring Agentflow 4.0 version Before 2026/08/28 allows remote authenticated users to execute arbit |
| CVE-2026-96431 | Deferred | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type in the /WebAgenda/download/uploadFile.jsp API endpoint of Flowring Agentflow 4.0 version before 2023/03/24 allows remote authenticat |
| CVE-2026-96440 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory（Path Traversal） in the /WebAgenda/download/uploadFile.jsp API endpoint of Flowring Agentflow 4.0 version before 2023/03/ |
| CVE-2026-96442 | Awaiting Analysis | 未確認 | CWE-94 | A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited fi |
| CVE-2026-96443 | Awaiting Analysis | 未確認 | CWE-829 | Insufficient validation of the JDBC driver URL in Apache Doris allows a privileged user to achieve remote code execution on the FE. |
| CVE-2026-96445 | Awaiting Analysis | 未確認 | CWE-287 | A flaw was found in the Conditional OTP authenticator of Keycloak, an identity and access management solution. The issue occurs when the system evaluates specific HTTP headers to d |
| CVE-2026-96446 | Awaiting Analysis | 未確認 | CWE-862 | A flaw was found in the Pushed Authorization Request PAR implementation of Keycloak. The issue occurs when the silent authentication path prompt=none is used, which allows the auth |
| CVE-2026-96448 | Awaiting Analysis | 未確認 | CWE-285 | A flaw was found in the Fine-Grained Admin Permissions (FGAP v2) feature of Keycloak, an identity and access management solution. The issue occurs when the system checks if a deleg |
| CVE-2026-96450 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in pixfort Core < 4.3.3 versions. |
| CVE-2026-96454 | Deferred | 未確認 | CWE-862, CWE-923 | Pake turns a website into a desktop application built on Tauri. Every application it generates inherits two settings from the upstream template, and together they hand native funct |
| CVE-2026-96455 | Deferred | 未確認 | CWE-306, CWE-494 | The Reachy Mini daemon exposes an HTTP API for managing the robot. Its app installation endpoint, POST /apps/install in src/reachy_mini/daemon/app/routers/apps.py, has no authentic |
| CVE-2026-96456 | Deferred | 未確認 | CWE-287, CWE-362 | The Reachy Mini Bluetooth service asks a connecting device for a PIN before it will accept commands. The check protects the session but not the caller, so an attacker in Bluetooth |
| CVE-2026-96512 | Awaiting Analysis | 未確認 | CWE-863 | A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evalua |
| CVE-2026-96513 | Deferred | 未確認 | CWE-284, CWE-434 | A security flaw has been discovered in Neethuharii CafeManagement. This issue affects some unknown processing of the file AddProductCode.php. The manipulation of the argument image |
| CVE-2026-96514 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in Neethuharii CafeManagement. Impacted is an unknown function of the file CafePortalLogin.php of the component Login Handler. This manipulation of t |
| CVE-2026-96515 | Deferred | 未確認 | CWE-434, CWE-862 | This vulnerability exists in the Netlink ICT HG323RW router due to insufficient authorization and input validation controls in the diagnostic script import functionality. An authen |
| CVE-2026-9652 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-96524 | Deferred | 未確認 | CWE-352 | The MCP Server for WordPress WordPress plugin before 1.8.2 does not correctly verify the WordPress REST API nonce for cookie-authenticated requests when a condition an attacker ca |
| CVE-2026-96525 | Deferred | 未確認 | CWE-862 | The MCP Server for WordPress WordPress plugin before 1.8.2 does not perform an ownership or sufficient capability check on its workflow create, update and delete REST routes, allo |
| CVE-2026-96526 | Deferred | 未確認 | CWE-200 | The MCP Server for WordPress WordPress plugin before 1.8.2 does not perform an object-level authorization check on one of its workflow REST routes, allowing users with the Contrib |
| CVE-2026-96531 | Deferred | 未確認 | CWE-79 | The Optimole WordPress plugin before 4.2.13 does not escape unrecognized attributes of its video-player block before rendering them onto the block's wrapper element, allowing user |
| CVE-2026-96532 | Deferred | 未確認 | CWE-862 | The Testimonials Widget WordPress plugin through 4.0.4 does not perform a capability or ownership check when handling its front-end testimonial submission form, allowing unauthenti |
| CVE-2026-96533 | Deferred | 未確認 | CWE-918 | The Testimonials Widget WordPress plugin through 4.0.4 does not validate a user-supplied URL before fetching it server-side and storing the response as a public file, allowing unau |
| CVE-2026-96538 | Deferred | 未確認 | CWE-862 | WarehousePG (WHPG) 7.x before 7.6.0-WHPG is affected by a missing authorization vulnerability (CWE-862) in the built-in server-side file functions pg_file_write(text,text,bool), pg |
| CVE-2026-96541 | Awaiting Analysis | 未確認 | CWE-400 | A denial-of-service flaw was found in gnome-remote-desktop. An unauthenticated remote attacker can open RDP connections without completing the handshake and retain the connection-t |
| CVE-2026-96545 | Awaiting Analysis | 未確認 | CWE-125 | An out-of-bounds heap read flaw was found in GIMP's TIM image loader. When a user opens a crafted 4bpp TIM image that causes promotion to an RGBA layer, the file-tim plug-in alloca |
| CVE-2026-96546 | Awaiting Analysis | 未確認 | CWE-125 | A one-byte out-of-bounds heap read flaw was found in GIMP's uncompressed DDS image loader. When a user opens an uncompressed DDS image, the file-dds plug-in performs an uncondition |
| CVE-2026-96548 | Deferred | 未確認 | CWE-259, CWE-798 | A flaw has been found in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. This affects an unknown part of the file ssm_pro/src/main/resources/jdbc.properties. Th |
| CVE-2026-96549 | Deferred | 未確認 | CWE-310, CWE-312 | A vulnerability has been found in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. This vulnerability affects unknown code of the file ssm_pro/src/main/java/cn/s |
| CVE-2026-9655 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-96550 | Deferred | 未確認 | CWE-310, CWE-319 | A vulnerability was found in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. This issue affects the function getProperties of the file ssm_pro/src/main/java/cn/ |
| CVE-2026-96551 | Deferred | 未確認 | CWE-352, CWE-862 | A vulnerability was determined in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. Impacted is an unknown function of the file ssm_pro/src/main/java/cn/sfturing/ |
| CVE-2026-96552 | Deferred | 未確認 | CWE-325, CWE-759 | A vulnerability was identified in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. The affected element is the function MD5.getMD5 of the file ssm_pro/src/main/j |
| CVE-2026-96556 | Deferred | 未確認 | CWE-266, CWE-285 | A flaw has been found in Neethuharii CafeManagement. Affected by this vulnerability is the function addcashier of the file AddCashierCode.php. Executing a manipulation of the argum |
| CVE-2026-96559 | Rejected | 未確認 | Rejected reason: This ID was for testing | |
| CVE-2026-96560 | Deferred | 未確認 | CWE-502 | LightLLM through 1.2.0 contains a remote code execution vulnerability in the KV-transfer worker when started with --pd_trans_mode nccl, which exposes an unauthenticated RPyC contro |
| CVE-2026-96568 | Deferred | 未確認 | CWE-79 | The Restaurant Menu and Food Ordering plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'phone_number' parameter in all versions up to, and including, 2.4.1 |
| CVE-2026-96587 | Awaiting Analysis | 未確認 | CWE-798 | The Viidure Android application embeds permanent, plaintext cloud storage credentials within its compiled code. These credentials provide full access to critical platform storage, |
| CVE-2026-96599 | Deferred | 未確認 | CWE-330 | Isotope eCommerce through 2.9.10 derives order identifiers from uniqid() instead of a cryptographically secure source, allowing unauthenticated attackers to guess identifiers. Gues |
| CVE-2026-96600 | Deferred | 未確認 | CWE-89 | Isotope eCommerce through 2.9.10 contains a blind SQL injection vulnerability in backend callbacks that interpolate request-controlled identifiers and administrator-supplied values |
| CVE-2026-96601 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of the component Admin Login Handler. The manipulation of the |
| CVE-2026-96602 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in Abdurrab5 online-makeup-store. This impacts an unknown function of the file customerSignin.php of the component Customer Login Handler. This manipulation o |
| CVE-2026-96603 | Deferred | 未確認 | CWE-862, CWE-863 | A vulnerability has been found in Abdurrab5 online-makeup-store. Affected is the function confirm_logged_in/confirm_user of the file functions.php of the component Admin Handler. S |
| CVE-2026-96604 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in SoftNews Media Group DataLife Engine 18.0. This affects the function strip_data of the file engine/modules/search.php of the component Search Modu |
| CVE-2026-96606 | Deferred | 未確認 | CWE-200, CWE-284 | A security flaw has been discovered in LB-Link BL-CPE600EU 5.8.13. This vulnerability affects unknown code of the file Mifi_config.bin of the component Configuration Backup Handler |
| CVE-2026-96609 | Deferred | 未確認 | CWE-770 | Robur Albatross 1.0.0 through 2.x before 2.7.2 does not limit use of the ring buffer, leading to an albatross-console loop with no recognized termination condition. This is only ex |
| CVE-2026-96611 | Analyzed | 未確認 | CWE-190 | FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In mov_read_ispe(), uint32_t width/height values from a crafted HEIF ispe box are stored into signed int field |
| CVE-2026-96649 | Deferred | 未確認 | CWE-79 | The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via post_content Parameter |
| CVE-2026-96651 | Analyzed | 未確認 | CWE-22 | Plex Media Server before 1.43.3.10861 builds a file path from the url parameter without checking it for ../ sequences, allowing path traversal via '/system/agents/media/get'. A rem |
| CVE-2026-96652 | Analyzed | 掲載 | CWE-918 | Plex Media Server before 1.43.3.10861 allows SSRF via '/player/timeline'. An attacker using any X-Plex-Token value can include a full URL in the 'protocol' parameter and force the |
| CVE-2026-96654 | Analyzed | 掲載 | CWE-84 | Plex Media Server before 1.43.3.10861 does not correctly neutralize URL values included in 'searchOne,' allowing an attacker to call other plugins' functions and supply their own p |
| CVE-2026-96655 | Analyzed | 掲載 | CWE-918 | Plex Media Server before 1.43.3.10861 allows an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path parameter. |
| CVE-2026-96656 | Analyzed | 掲載 | CWE-73 | Plex Media Server before 1.43.3.10861 allows an admin user to write arbitrary files that may be executed on load. The preference TranscoderH264Options is appended verbatim to x264' |
| CVE-2026-9667 | Analyzed | 未確認 | CWE-918 | IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to server-side request forgery (SSRF) that could allow a remote, unauthenticated attacker to cause the server to send ou |
| CVE-2026-96672 | Deferred | 未確認 | CWE-470 | Frappe ERPNext versions before 16.34.1 fail to validate that Financial Report Template calculation_formula values reference whitelisted methods before passing them to frappe.call() |
| CVE-2026-96673 | Deferred | 未確認 | CWE-89 | Photoview through 2.4.0 contains an SQL injection vulnerability in the album download route that allows unauthenticated attackers to inject SQL by manipulating the album_id path se |
| CVE-2026-96674 | Deferred | 未確認 | CWE-190 | alsa-lib through 1.2.16.1 computes combined topology element size using 32-bit arithmetic in src/topology/ctl.c, allowing integer overflow that defeats bounds checks. Attackers can |
| CVE-2026-96675 | Deferred | 未確認 | CWE-129 | alsa-lib through 1.2.16.1 contains a denial of service vulnerability in the multi PCM plugin that fails to validate sparse binding indices before array access. Attackers can supply |
| CVE-2026-96676 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was identified in Fast FAC1900R 20190827_2.0.2. The impacted element is the function get_alias_name of the component uhttpd. Such manipulation leads to stack-based |
| CVE-2026-96678 | Deferred | 未確認 | CWE-22 | A security vulnerability has been detected in weiqingwen spring-boot-forum up to 538eecc3c6b85fdf0768ab4e8354b48c0c17d94f. Affected is the function validate of the file src/main/ja |
| CVE-2026-96680 | Deferred | 未確認 | CWE-862, CWE-863 | A vulnerability was detected in ByteDance Coze Scraper Extension up to 2.0.2. Affected by this vulnerability is the function chrome.runtime.onMessageExternal.addListener of the fil |
| CVE-2026-96739 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in SEMCMS up to 4.2. Affected by this issue is some unknown functionality of the file /Edit/php/upload_json.php of the component KindEditor Upload Interface. |
| CVE-2026-96740 | Awaiting Analysis | 未確認 | CWE-470 | A flaw was found in the StreamsHub Console for Apache Kafka. Tenant-supplied Kafka client properties from the Console custom resource are copied into the console-api AdminClient co |
| CVE-2026-96744 | Undergoing Analysis | 未確認 | CWE-943 | Improper neutralization of special elements in data query logic in the cache lock implementation of the MongoDB integration for Laravel can cause a caller-supplied lock owner value |
| CVE-2026-96745 | Undergoing Analysis | 未確認 | CWE-502 | Deserialization of untrusted data in the command monitoring support of the MongoDB PHP Driver can cause class names embedded in document content to be honored when the driver build |
| CVE-2026-96746 | Undergoing Analysis | 未確認 | CWE-787 | An out-of-bounds write in the connection-monitoring logic of the MongoDB C Driver may allow an unauthenticated party who controls name resolution and the responses of the hosts nam |
| CVE-2026-96747 | Undergoing Analysis | 未確認 | CWE-918 | The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather th |
| CVE-2026-96748 | Awaiting Analysis | 未確認 | CWE-177 | PyMongo's connection string parsing decodes percent-encoded characters in the host portion before the host list is separated on its delimiters. When an application places a hostnam |
| CVE-2026-96749 | Undergoing Analysis | 未確認 | CWE-190 | An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may occur when a single document is built from an unusually larg |
| CVE-2026-96750 | Undergoing Analysis | 未確認 | CWE-94 | MongoDB Compass can interpolate a database name without escaping into the initial input of its embedded MongoDB shell when a user opens the shell from that database's view. A user |
| CVE-2026-96751 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in pmTicket Project-Management-Software up to 078fa56a782490c5059a0814f84df27984f4d7e2. This affects the function setSync of the file /ajax/add_proje |
| CVE-2026-96752 | Deferred | 未確認 | CWE-79 | The Zero Spam for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Nested POST Array Keys via Contact Form 7 Integration in all versions up to, and i |
| CVE-2026-96754 | Deferred | 未確認 | CWE-94 | orval versions before 8.29.0 contain a code injection vulnerability in the @orval/hono generator that fails to escape OpenAPI path values in single-quoted route literals. Attackers |
| CVE-2026-96755 | Deferred | 未確認 | CWE-94 | orval versions 8.14.0 through 8.28.1 contain a code injection vulnerability in the @orval/effect generator that converts OpenAPI schema defaults into template literals. Attackers c |
| CVE-2026-96756 | Deferred | 未確認 | CWE-94 | orval versions before 8.30.0 contain a code injection vulnerability in the @orval/core factory generator that fails to escape date default values in new Date() calls. Attackers can |
| CVE-2026-96757 | Deferred | 未確認 | CWE-94 | orval before 8.29.0 fails to escape OpenAPI media-type keys when emitting them into single-quoted Content-Type string literals in generated code. Attackers can inject JavaScript th |
| CVE-2026-96758 | Deferred | 未確認 | CWE-94 | orval @orval/core before 8.28.0 contains a code injection vulnerability in the form-data serializer that fails to escape multipart property names in generated template literals. At |
| CVE-2026-96759 | Deferred | 未確認 | CWE-94 | orval before 8.29.0 fails to escape the operationId parameter when emitting it into generated TanStack Query mutator options metadata objects. Attackers can inject arbitrary JavaSc |
| CVE-2026-96760 | Awaiting Analysis | 未確認 | CWE-20, CWE-347, CWE-358, CWE-670 | Authlib (v1.7.2 and below) contains a signature verification bypass vulnerability. The JsonWebSignature.deserialize_json() method accepts a JSON Serialization JWS object and return |
| CVE-2026-96762 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was determined in kvcache-ai mooncake up to 0.3.12/0.3.13.post1. This affects the function UnmountSegment of the component RPC Path Handler. This manipulation of th |
| CVE-2026-96763 | Deferred | 未確認 | CWE-266, CWE-284 | A security flaw has been discovered in kvcache-ai mooncake up to 0.3.12/0.3.13.post1/0.3.14-rc1. This issue affects the function ScopedSegmentAccess::MountSegment of the file segme |
| CVE-2026-96764 | Deferred | 未確認 | CWE-400, CWE-770 | A weakness has been identified in kvcache-ai mooncake up to 0.3.12/0.3.14-rc1. Impacted is the function MasterService::GetReplicaListByRegex of the component Regular Expression Han |
| CVE-2026-96766 | Deferred | 未確認 | CWE-79 | The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'business_hours' paramet |
| CVE-2026-96770 | Deferred | 未確認 | CWE-296 | All published s2s-proxy versions through 0.2.2 are affected. In versions 0.1.16 through 0.2.2, TLS server listeners use Go's RequireAnyClientCert mode when skipCAVerification is fa |
| CVE-2026-96772 | Deferred | 未確認 | CWE-200, CWE-284 | A security flaw has been discovered in Intelliants Subrion CMS up to 4.2.1. This affects an unknown part of the file /actions.json?action=assign-owner. The manipulation of the argu |
| CVE-2026-96773 | Deferred | 未確認 | CWE-601 | A weakness has been identified in Intelliants Subrion CMS up to 4.2.1. This vulnerability affects the function iaUsers::authorize of the file front/login.php of the component Login |
| CVE-2026-96774 | Deferred | 未確認 | CWE-200, CWE-284 | A vulnerability was found in SPON Communications IP Network Audio Device XC-9603 1.2.3_20181106 Build 107. This affects the function loadCfg of the file /ini/sys_cfg.txt of the com |
| CVE-2026-96775 | Deferred | 未確認 | CWE-502 | MLflow's dspy flavor, versions >= 2.0, applies the MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False security control only when the model_path ends in .pkl, which allows a remote attacker |
| CVE-2026-96777 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in Forma LMS up to 4.1.43. This impacts the function UserselectorAdmController::getDataTask of the file /appCore/ajax.adm_server.php?r=adm/userselect |
| CVE-2026-96795 | Deferred | 未確認 | CWE-94 | Horilla is an HR and CRM software. Prior to 2.0.0, HorillaListView.export_data in horilla_views/generic/cbv/views.py accepts an authenticated user's columns POST parameter, takes f |
| CVE-2026-96803 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in java110 MicroCommunity up to 2.0. Affected is the function QueryServiceSMOImpl.fallBack of the file BusinessApi.java of the component fallBack API |
| CVE-2026-96804 | Deferred | 未確認 | CWE-502 | MLflow's statsmodel flavor, versions 2.1.0 to 3.14.0, omits the MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False security control entirely in _load_model(), which allows a remote attacker |
| CVE-2026-96807 | Awaiting Analysis | 未確認 | CWE-61 | In Flatpak before 1.18.1, a malicious sandboxed app can replace ~/.var/app/$appid/.ld.so with a symlink, causing regenerate_ld_cache to write files at an arbitrary location. The fi |
| CVE-2026-96808 | Awaiting Analysis | 未確認 | CWE-61 | In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data from unprivileged callers, validated file paths by rejecting literal .. |
| CVE-2026-96810 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in huanzi-qch base-admin up to 52816b760cd53244989fd664bbb2b3d4edbfdbf1. This issue affects the function Save of the file base-admin-master\src\main\ |
| CVE-2026-96812 | Awaiting Analysis | 未確認 | CWE-269, CWE-668 | Improper Exposure of Resource to Wrong Sphere in the host file helper (gofer) in Google gVisor prior to commit 573a9e73cf844f on Linux platforms with CUSE enabled allows a local at |
| CVE-2026-96814 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WooCommerce Product Table Lite <= 5.6.7 versions. |
| CVE-2026-96815 | Deferred | 未確認 | CWE-266 | Custom role Privilege Escalation in Vitepos <= 3.5.0 versions. |
| CVE-2026-96816 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Trusted Shops Easy Integration for WooCommerce <= 2.0.6 versions. |
| CVE-2026-96817 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in MakeCommerce for WooCommerce <= 4.1.0 versions. |
| CVE-2026-96818 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in WP Express Checkout (Accept PayPal Payments) <= 2.4.9 versions. |
| CVE-2026-96819 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in oik <= 4.15.4 versions. |
| CVE-2026-96820 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in Awesome Support <= 6.3.9 versions. |
| CVE-2026-96821 | Deferred | 未確認 | CWE-266 | Subscriber Privilege Escalation in FluentBoards <= 2.0.12 versions. |
| CVE-2026-96822 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Books Gallery <= 4.8.3 versions. |
| CVE-2026-96823 | Deferred | 未確認 | CWE-862 | Unauthenticated Arbitrary Content Deletion in Customer Reviews for WooCommerce <= 5.120.0 versions. |
| CVE-2026-96824 | Deferred | 未確認 | CWE-22 | Editor Arbitrary File Deletion in Template Kit – Import <= 1.0.16 versions. |
| CVE-2026-96825 | Deferred | 未確認 | CWE-290 | Subscriber Bypass Vulnerability in All In One WP Security & Firewall <= 5.4.8 versions. |
| CVE-2026-96826 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shazzad Hossain Khan W4 Post List allows Blind SQL Injection. This issue affe |
| CVE-2026-96827 | Deferred | 未確認 | CWE-89 | Administrator SQL Injection in Admin Notices Manager <= 1.6.0 versions. |
| CVE-2026-96828 | Deferred | 未確認 | CWE-89 | Administrator SQL Injection in Category Discount Woocommerce <= 5.18 versions. |
| CVE-2026-96829 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in The Plus Addons for Elementor Page Builder Lite <= 6.5.1 versions. |
| CVE-2026-96830 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.9 versions. |
| CVE-2026-96831 | Deferred | 未確認 | CWE-502 | Contributor PHP Object Injection in Themify Builder <= 7.8.1 versions. |
| CVE-2026-96832 | Deferred | 未確認 | CWE-502 | Shop manager PHP Object Injection in Content Egg <= 6.3.1 versions. |
| CVE-2026-96833 | Deferred | 未確認 | CWE-502 | Editor PHP Object Injection in Ultimate Addons for Contact Form 7 <= 3.5.51 versions. |
| CVE-2026-96834 | Deferred | 未確認 | CWE-862 | Subscriber Sensitive Data Exposure in GiveWP <= 4.16.9 versions. |
| CVE-2026-96835 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in King Addons for Elementor <= 51.1.85 versions. |
| CVE-2026-96836 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Parsi Date <= 6.3 versions. |
| CVE-2026-96837 | Deferred | 未確認 | CWE-98 | Contributor Remote Code Execution (RCE) in CartFlows <= 3.2.0 versions. |
| CVE-2026-96838 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification <= 2.3.1 versions. |
| CVE-2026-96869 | Analyzed | 未確認 | CWE-200 | Information disclosure in the Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Fire |
| CVE-2026-96872 | Awaiting Analysis | 未確認 | CWE-280 | Improper handling of insufficient permissions or privileges vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension on Linux, MacOS, and Windows allows Accessing |
| CVE-2026-96873 | Awaiting Analysis | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Mediawiki - CirrusSearch extension allows Reflected XSS. This issue affects M |
| CVE-2026-96874 | Awaiting Analysis | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in the Mediawiki - Cargo extension allows Stored XSS. This issue affects Me |
| CVE-2026-96875 | Awaiting Analysis | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Mediawiki - Cargo extension allows Stored XSS. This issue affects Mediawiki |
| CVE-2026-96876 | Awaiting Analysis | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Mediawiki - Cargo extension allows Reflected XSS. This issue affects Mediawik |
| CVE-2026-96877 | Awaiting Analysis | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Mediawiki - Cargo extension allows Reflected XSS. This issue affects Mediawik |
| CVE-2026-96878 | Awaiting Analysis | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Mediawiki - Cargo extension allows Reflected XSS. This issue affects Mediawik |
| CVE-2026-96879 | Awaiting Analysis | 未確認 | CWE-212 | Improper removal of sensitive information before storage or transfer vulnerability in Wikimedia Foundation's Mediawiki - FlaggedRevs extension through 1.46.0. |
| CVE-2026-96880 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was found in TaleLin lin-cms-spring-boot up to 0.2.1. This impacts the function getBook of the file src/main/java/io/github/talelin/latticy/controller/v1/BookContro |
| CVE-2026-96881 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was determined in TaleLin lin-cms-spring-boot up to 0.2.1. Affected is the function getBooks of the file src/main/java/io/github/talelin/latticy/controller/v1/BookC |
| CVE-2026-96882 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was identified in TaleLin lin-cms-spring-boot up to 0.2.1. Affected by this vulnerability is the function searchBook of the file src/main/java/io/github/talelin/lat |
| CVE-2026-96883 | Awaiting Analysis | 未確認 | CWE-843 | pgcollection is an open source extension to PostgreSQL. A type confusion issue in AWS pgcollection 2.0.0 through 2.1.1 might allow an authenticated remote user to execute arbitrary |
| CVE-2026-96884 | Deferred | 未確認 | CWE-22 | A security flaw has been discovered in MantisZip up to 0.4.5. Affected by this issue is the function Path.Combine of the file MainWindow.UI.cs of the component Preview. The manipul |
| CVE-2026-96886 | Deferred | 未確認 | CWE-200 | The Course Booking System WordPress plugin before 7.0.9 does not restrict access to its booking export, allowing unauthenticated users to download the name, email address and billi |
| CVE-2026-96889 | Awaiting Analysis | 未確認 | CWE-416 | A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This |
| CVE-2026-96891 | Deferred | 未確認 | CWE-119, CWE-787 | A vulnerability was identified in D-Link DIR-825 3.00b32. Affected is the function tunnel_set_params of the file tunnel.c of the component rp-l2tp. The manipulation of the argument |
| CVE-2026-96892 | Deferred | 未確認 | CWE-601 | A flaw has been found in Edimax BR-6428nC 1.16. The impacted element is the function websRedirect of the component goform Handler. Executing a manipulation of the argument submit-u |
| CVE-2026-96895 | Deferred | 未確認 | CWE-79 | The WP YouTube Lyte WordPress plugin before 1.7.31 does not escape some attributes of YouTube embed blocks before outputting them in an HTML attribute when rendering the block, whi |
| CVE-2026-96896 | Deferred | 未確認 | CWE-862 | The Malcure Malware Shield — Removal, Repair, Monitor WordPress plugin before 19.9.7 does not perform an authorisation check on one of its AJAX actions, allowing users with a subsi |
| CVE-2026-96897 | Deferred | 未確認 | CWE-862 | The Optima Express IDX WordPress plugin before 8.7.6 does not perform any authorisation check on one of its AJAX actions that is available to logged-out users, allowing unauthentic |
| CVE-2026-96898 | Deferred | 未確認 | CWE-22 | A vulnerability was detected in yhx070424 ShopXO up to 2.2.7. Affected by this vulnerability is an unknown functionality of the file config/ueditor.php of the component Ueditor Upl |
| CVE-2026-96899 | Deferred | 未確認 | CWE-79 | The Optima Express IDX WordPress plugin before 8.7.6 does not properly neutralise a script value submitted through one of its REST endpoints before storing it and echoing it into t |
| CVE-2026-97023 | Awaiting Analysis | 未確認 | CWE-61 | A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a malicious Flatpak app to cause deletion of attacker-chosen files out |
| CVE-2026-97024 | Awaiting Analysis | 未確認 | CWE-61 | A path traversal vulnerability in Flatpak's handling of the files/etc directory during app deployment allows a malicious Flatpak app to cause certain host system files (such as pas |
| CVE-2026-97025 | Awaiting Analysis | 未確認 | CWE-378 | Flatpak writes the OCI repository authentication token with world-readable permissions (0644) in the system-helper's cache directory, allowing other local users on a multi-user sys |
| CVE-2026-97026 | Awaiting Analysis | 未確認 | CWE-378 | Flatpak creates temporary child repository directories under the user cache with world-writable permissions (0777). On multi-user systems with a permissive umask, other local users |
| CVE-2026-97027 | Awaiting Analysis | 未確認 | CWE-20 | Flatpak passes through arbitrary vendor-extension keys unmodified when exporting an application's Desktop Entry (.desktop) and D-Bus Service (.service) files, instead of validating |
| CVE-2026-97029 | Awaiting Analysis | 未確認 | CWE-653 | Flatpak's process ID namespace separation does not prevent a sandboxed app's kill(0, signal) or killpg(0, signal) calls from reaching processes outside the sandbox that share the s |
| CVE-2026-97055 | Deferred | 未確認 | CWE-1188 | SigNoz from v0.8.0 before v0.143.0 defaults the JWT tokenizer signing secret (tokenizer::jwt::secret, set via SIGNOZ_TOKENIZER_JWT_SECRET or the deprecated SIGNOZ_JWT_SECRET) to an |
| CVE-2026-97056 | Deferred | 未確認 | CWE-613 | SigNoz versions from v0.98.0 up to (but not including) v0.143.0, when configured to use the opaque session tokenizer (which was not the default before v0.143.0), do not revoke a us |
| CVE-2026-97057 | Deferred | 未確認 | CWE-1284 | redis-parser through 3.0.0 fails to validate the multi-bulk length value in RESP protocol parsing, allowing attackers to trigger an uncaught RangeError by supplying an excessively |
| CVE-2026-97058 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-97059 | Awaiting Analysis | 未確認 | CWE-125 | DCMTK through 3.7.0 contains a heap over-read vulnerability in ConcatenationLoader that copies pixel data frames without validating the PixelData buffer length against the declared |
| CVE-2026-97060 | Awaiting Analysis | 未確認 | CWE-639 | X-SpringBoot through 6.0 lacks object-level authorization in user management endpoints, allowing sub-administrators to modify or delete users without ownership verification. Attack |
| CVE-2026-97061 | Deferred | 未確認 | CWE-862 | Black Candy through 3.2.1 fails to scope playlist search queries to the authenticated session user, allowing any authenticated user to enumerate all playlists on the instance. Atta |
| CVE-2026-97062 | Deferred | 未確認 | CWE-79 | Aureus ERP through 1.6.0, fixed in commit 53ad76d, stores uploaded SVG files on its public disk and serves them from the application origin, allowing authenticated users to upload |
| CVE-2026-97063 | Awaiting Analysis | 未確認 | CWE-287 | X-SpringBoot through 6.0 returns login verification codes in HTTP responses from unauthenticated endpoints GET /sys/mobile/code and GET /sys/email/code without sending them to acco |
| CVE-2026-97064 | Awaiting Analysis | 未確認 | CWE-1392 | X-SpringBoot through 6.0 ships with a hardcoded static master login verification code 172839 enabled by default in the database seed. Unauthenticated attackers can authenticate as |
| CVE-2026-97065 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Happyforms <= 1.26.15 versions. |
| CVE-2026-97066 | Deferred | 未確認 | CWE-639 | Unauthenticated Insecure Direct Object References (IDOR) in GiveWP <= 4.16.9 versions. |
| CVE-2026-97067 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in EWWW Image Optimizer <= 8.7.7 versions. |
| CVE-2026-97074 | Deferred | 未確認 | CWE-639 | Subscriber Insecure Direct Object References (IDOR) in Newsletters, Email Marketing, SMS and Popups by Omnisend <= 1.9.0 versions. |
| CVE-2026-97077 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Ad Inserter <= 2.8.18 versions. |
| CVE-2026-97078 | Deferred | 未確認 | CWE-639 | Unauthenticated Insecure Direct Object References (IDOR) in Client Invoicing by Sprout Invoices <= 20.8.17 versions. |
| CVE-2026-97079 | Deferred | 未確認 | CWE-639 | Subscriber Insecure Direct Object References (IDOR) in Webba Booking <= 6.5.0 versions. |
| CVE-2026-97149 | Awaiting Analysis | 未確認 | CWE-184 | In OpenStack Swift before 2.38.2, the tempurl middleware does not reject the X-Copy-From header on PUT requests. A TempURL signature only covers the method, expiry, and path, and t |
| CVE-2026-97150 | Awaiting Analysis | 未確認 | CWE-829 | When converting baserCMS4-style addons to baserCMS5-style ones, BcAddonMigrator includes "config.php" from the addon, which means the PHP code in the file is executed. Arbitrary |
| CVE-2026-97151 | Awaiting Analysis | 未確認 | CWE-1321 | mammoth (aka mammoth.js) before 1.12.2 is vulnerable to prototype pollution when reading the styles defined in a document. Converting a crafted .docx file allows an attacker to add |
| CVE-2026-97152 | Awaiting Analysis | 未確認 | CWE-122 | Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploitable buffer overflow in the WebSocket transport, due to an unchecked copy of the Sec-WebSocket-Version head |
| CVE-2026-97155 | Deferred | 未確認 | CWE-346 | Fabasoft Folio Client before 2026, a locally installed component that communicates with the Fabasoft browser extension via web messaging, does not restrict which web origins may in |
| CVE-2026-97160 | Analyzed | 未確認 | CWE-94 | Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29 |
| CVE-2026-97161 | Analyzed | 未確認 | CWE-22, CWE-284 | Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29 |
| CVE-2026-97162 | Analyzed | 未確認 | CWE-89 | Joomla Extension - lomart.fr - Various SQL injection vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29 |
| CVE-2026-97163 | Analyzed | 未確認 | CWE-22, CWE-284 | Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29 |
| CVE-2026-97164 | Undergoing Analysis | 未確認 | CWE-22 | Joomla Extension - svenbluege.de - Authenticated arbitrary path deletion in `clear cache` task in Event Gallery extension < 6.5.0 - Using the `images` parameter of the `cache.proce |
| CVE-2026-97165 | Undergoing Analysis | 未確認 | CWE-601, CWE-79 | Joomla Extension - svenbluege.de - Reflected XSS and open redirect in Event Gallery extension < 6.5.0 - The “return” parameter is base64-decoded and written to the “Back” link with |
| CVE-2026-97168 | Rejected | 未確認 | Rejected reason: it is a suggestion | |
| CVE-2026-97176 | Awaiting Analysis | 未確認 | CWE-862 | A flaw was found in the Level of Authentication enforcement mechanism of Keycloak, an identity and access management solution. The issue occurs when a client specifically requires |
| CVE-2026-97177 | Awaiting Analysis | 未確認 | CWE-862 | A flaw was found in the user update mechanism of the Keycloak Admin REST API. When Fine-Grained Admin Permissions are enabled, the system fails to check for specific password reset |
| CVE-2026-97179 | Deferred | 未確認 | CWE-200, CWE-284 | A security vulnerability has been detected in O2OA up to 9.5.3/10.0.2. This vulnerability affects the function list of the file o2server/x_base_core_project/src/main/java/com/x/bas |
| CVE-2026-97181 | Deferred | 未確認 | CWE-497 | GPM LIGHT developed by ezGlobal has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can directly access system logs. |
| CVE-2026-97182 | Deferred | 未確認 | CWE-20, CWE-707 | A security vulnerability has been detected in halo-dev Halo up to 2.25.4/2.26.1. Affected is an unknown function of the file application/src/main/java/run/halo/app/content/comment/ |
| CVE-2026-97185 | Awaiting Analysis | 未確認 | CWE-787 | A flaw was found in GIMP. When processing a specially crafted GIMPressionist preset file, the plug-in does not properly validate vector indices before writing into fixed-size array |
| CVE-2026-97196 | Deferred | 未確認 | CWE-1289 | Improper Validation of Unsafe Equivalence in Input vulnerability in Liquid Web / StellarWP GiveWP allows Authentication Bypass. This issue affects GiveWP: from n/a through 4.16.9. |
| CVE-2026-97197 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in WordPress Backup & Migration <= 1.6.0 versions. |
| CVE-2026-97222 | Awaiting Analysis | 未確認 | CWE-416 | A heap use-after-free flaw was found in Gnumeric. When a user opens a crafted Gnumeric workbook containing a malformed SheetObjectComponent element, the XML parser can dereference |
| CVE-2026-97224 | Awaiting Analysis | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in Excalidraw up to 0.18.1. The impacted element is an unknown function of the file packages/excalidraw/data/restore.ts of the component Imported File |
| CVE-2026-97225 | Deferred | 未確認 | CWE-74, CWE-94 | A flaw has been found in DbGate up to 7.2.5-beta.5. This affects an unknown function of the file packages/api/src/controllers/runners.js of the component JSON Runner. Executing a m |
| CVE-2026-97226 | Deferred | 未確認 | CWE-22 | A vulnerability has been found in DbGate up to 7.2.5/7.3.1-premium-beta.1. This impacts the function fs.readFile of the file packages/api/src/controllers/files.js of the component |
| CVE-2026-97227 | Deferred | 未確認 | CWE-862 | The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.4.8 does not perform capability or ownership checks on several of its AJAX actions, relying on a nonce alone, |
| CVE-2026-97228 | Awaiting Analysis | 未確認 | CWE-943 | Rapid7 Bulk Export MCP versions 0.2.5 through 0.6.1 suffer from a GraphQL query injection issue in the export-status component (`get_export_status` in `src/export_manager.py`), whe |
| CVE-2026-97230 | Deferred | 未確認 | CWE-506 | IO::Socket::SSL::SelfCertificate versions 1.00 for Perl contains malware which executes Python code from an obfuscated URL. The generate_certificate runs a Python script saved as |
| CVE-2026-97231 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was found in volotat Anagnorisis up to 0.3.1/0.4.0. Affected is an unknown function of the file app.py of the component Socket.IO Connect Interface. The manipulatio |
| CVE-2026-97232 | Deferred | 未確認 | CWE-22 | A vulnerability was determined in volotat Anagnorisis up to 0.4.2. Affected by this vulnerability is the function get_file_content/save_file_content/move_files/start_streaming of t |
| CVE-2026-97233 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in volotat Anagnorisis up to 0.4.11. Affected by this issue is the function html of the file PlaylistManager.js of the component Media Filename Handl |
| CVE-2026-97235 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in ThemeREX Addons < 2.45.0 versions. |
| CVE-2026-97236 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in ThemeREX Addons < 2.45.0 versions. |
| CVE-2026-97237 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allows DOM-Based XSS.This issue affects JetEng |
| CVE-2026-97238 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions. |
| CVE-2026-97239 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in MCP Content Manager Lite <= 1.1.0 versions. |
| CVE-2026-97240 | Deferred | 未確認 | CWE-201 | Unauthenticated Sensitive Data Exposure in StifLi Backup Tools <= 2.2.7 versions. |
| CVE-2026-97241 | Deferred | 未確認 | CWE-201 | Unauthenticated Sensitive Data Exposure in BackupEase <= 2.2.2 versions. |
| CVE-2026-97242 | Deferred | 未確認 | CWE-22 | Author Arbitrary File Deletion in WEBO MCP <= 3.0.18 versions. |
| CVE-2026-97243 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in AllAble Connector <= 0.13.4 versions. |
| CVE-2026-97244 | Deferred | 未確認 | CWE-35 | Contributor Path Traversal in Creator LMS <= 1.2.19 versions. |
| CVE-2026-97245 | Deferred | 未確認 | CWE-266 | Shop Worker Privilege Escalation in SureCart <= 4.7.2 versions. |
| CVE-2026-97246 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ShortPixel ShortPixel Image Optimizer shortpixel-image-optimiser allows Object Injection.This issue affects ShortPixel Image Opti |
| CVE-2026-97247 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Blocksy Companion <= 2.1.55 versions. |
| CVE-2026-97248 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Booking Activities <= 1.18.7.1 versions. |
| CVE-2026-97249 | Deferred | 未確認 | CWE-290 | Unauthenticated Bypass Vulnerability in Paid Member Subscriptions <= 3.0.9 versions. |
| CVE-2026-97250 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Geo Mashup <= 1.13.21 versions. |
| CVE-2026-97253 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kreatura LayerSlider allows Reflected XSS. This issue affects LayerSlider: fr |
| CVE-2026-97256 | Deferred | 未確認 | CWE-502 | Editor PHP Object Injection in Page Builder by SiteOrigin <= 2.36.0 versions. |
| CVE-2026-97259 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in WP Hosting AS Pay with Vipps for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Leve |
| CVE-2026-97261 | Deferred | 未確認 | CWE-201 | Unauthenticated Sensitive Data Exposure in Notivo <= 1.4.2 versions. |
| CVE-2026-97262 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Visual Composer Website Builder <= 45.16.2 versions. |
| CVE-2026-97265 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock. Jetimpex Inc. JetEngine allows Stored XSS. This issue affects Jet |
| CVE-2026-97266 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Virtue/Ascend/Pinnacle Toolkit <= 4.9.12.1 versions. |
| CVE-2026-97267 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Prevent files / folders access <= 2.6.7 versions. |
| CVE-2026-97270 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in CMB2 <= 2.13.0 versions. |
| CVE-2026-97271 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3.13.1 versions. |
| CVE-2026-97272 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Premmerce Permalink Manager for WooCommerce <= 2.3.13 versions. |
| CVE-2026-97274 | Deferred | 未確認 | CWE-290 | Unauthenticated Bypass Vulnerability in OAuth Single Sign On – SSO (OAuth Client) <= 7.1.2 versions. |
| CVE-2026-97279 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Polylang <= 3.8.9 versions. |
| CVE-2026-97282 | Deferred | 未確認 | CWE-639 | Unauthenticated Insecure Direct Object References (IDOR) in Review Schema <= 3.1.0 versions. |
| CVE-2026-97285 | Deferred | 未確認 | CWE-862 | Contributor Broken Access Control in The Events Calendar <= 6.17.5 versions. |
| CVE-2026-97286 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue |
| CVE-2026-97287 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Blind SQL Injection. |
| CVE-2026-97288 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in OAuth Server <= 4.5.1 versions. |
| CVE-2026-97289 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows DOM-Based XSS.This |
| CVE-2026-97290 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Photonic Gallery & Lightbox for Flickr, SmugMug & Others <= 3.36 versions. |
| CVE-2026-97291 | Deferred | 未確認 | CWE-502 | Contributor PHP Object Injection in Schema & Structured Data for WP & AMP <= 1.66 versions. |
| CVE-2026-97292 | Deferred | 未確認 | CWE-79 | Author Cross Site Scripting (XSS) in YITH WooCommerce Tab Manager <= 2.15.0 versions. |
| CVE-2026-97293 | Deferred | 未確認 | CWE-89 | Contributor SQL Injection in Media LIbrary Assistant <= 3.41 versions. |
| CVE-2026-97298 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in King Addons for Elementor <= 51.1.86 versions. |
| CVE-2026-97299 | Deferred | 未確認 | CWE-352 | Unauthenticated Cross Site Request Forgery (CSRF) in Razorpay Payment Links for WooCommerce <= 2.1.5 versions. |
| CVE-2026-97301 | Deferred | 未確認 | CWE-79 | Contributor Cross Site Scripting (XSS) in Cool Formkit Lite <= 2.7.8 versions. |
| CVE-2026-97302 | Deferred | 未確認 | CWE-201 | Unauthenticated Sensitive Data Exposure in MPG <= 4.2.3 versions. |
| CVE-2026-97311 | Awaiting Analysis | 未確認 | CWE-862 | A flaw was found in the Admin REST API of Keycloak, an identity and access management solution. The endpoints used to retrieve groups associated with a specific role do not properl |
| CVE-2026-97316 | Deferred | 未確認 | CWE-918 | The Broken Link Notifier WordPress plugin before 2.0.0.1 does not re-validate the destination of redirects when checking links, allowing unauthenticated attackers to bypass its int |
| CVE-2026-97319 | Deferred | 未確認 | CWE-79 | The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.2 does not sanitize and escape a block attribute before outputting it in a page, which could allow users w |
| CVE-2026-97320 | Deferred | 未確認 | CWE-918 | A flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. The affected element is the function AiKnowledgeDocumentServiceImpl.readUrl of the file AiKnowledgeDocume |
| CVE-2026-97321 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. The impacted element is the function GoViewDataServiceImpl.getDataBySQL of the file yudao-module |
| CVE-2026-97322 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. This affects an unknown function of the file yudao-module-infra/src/main/java/cn/iocoder/yudao/module |
| CVE-2026-97323 | Deferred | 未確認 | CWE-22 | A vulnerability was determined in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. This impacts the function getOriginalFilename of the file yudao-module-mp/src/main/java/cn/iocod |
| CVE-2026-97324 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was identified in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. Affected is the function updateDemoOrderPaid of the file yudao-module-pay/src/main/java/cn/iocod |
| CVE-2026-97325 | Deferred | 未確認 | CWE-601 | A security flaw has been discovered in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. Affected by this vulnerability is the function validOAuthClientFromCache of the file yudao- |
| CVE-2026-97326 | Deferred | 未確認 | CWE-918 | A weakness has been identified in songxinjianqwe Chat up to ac63d25297079eed5e4ba7e88d3b7a032637150d. Affected by this issue is some unknown functionality of the file chat-server/s |
| CVE-2026-97335 | Deferred | 未確認 | CWE-863 | Incorrect authorization in the custom storage volume creation endpoint in Canonical LXD versions 5.0.0 and later (fixed in 5.0.10, 5.21.8 and 6.10) on Linux allows an authenticated |
| CVE-2026-97347 | Deferred | 未確認 | CWE-79 | The Post Views Stats Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via User-Agent Header in all versions up to, and including, 1.1.7 due to insufficient |
| CVE-2026-97359 | Deferred | 未確認 | CWE-1336 | HFS2 version 2.4.0 and earlier contains a template injection vulnerability in the multipart upload handler that allows unauthenticated attackers to achieve remote code execution by |
| CVE-2026-9736 | Analyzed | 未確認 | CWE-117 | IBM Netezza Software 11.3.0.3 through Interim Fix 002 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when writ |
| CVE-2026-97360 | Deferred | 未確認 | CWE-862 | HFS2 version 2.4.0 and earlier contains an unauthenticated arbitrary file access vulnerability that allows unauthenticated attackers to read, write, append, and delete files anywhe |
| CVE-2026-97362 | Deferred | 未確認 | CWE-835 | HFS2 version 2.4.0 and earlier contains a denial of service vulnerability that allows unauthenticated attackers to cause a complete and persistent loss of availability by sending a |
| CVE-2026-97365 | Deferred | 未確認 | CWE-22 | A vulnerability was determined in chonkie-inc littrs 0.6.1/0.6.2. Impacted is the function Sandbox::mount of the file crates/littrs/src/lib.rs. Executing a manipulation of the argu |
| CVE-2026-97366 | Deferred | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in jhen0409 react-native-debugger up to 0.14.0. The impacted element is the function openDevTools of the file electron/window.js of the componen |
| CVE-2026-97368 | Deferred | 未確認 | CWE-285, CWE-639 | A weakness has been identified in chillzhuang SpringBlade up to 5.0.2. This affects the function UserServiceImpl.userInfo of the file blade-service/blade-system/src/main/java/org/s |
| CVE-2026-97387 | Rejected | 未確認 | Rejected reason: This CVE is a duplicate of another CVE. | |
| CVE-2026-97395 | Deferred | 未確認 | CWE-862 | Apache Polaris allows an authenticated principal with permission to create or update Iceberg table properties to set FileIO client settings such as s3.endpoint in table metadata. |
| CVE-2026-97399 | Awaiting Analysis | 未確認 | CWE-126 | The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when tha |
| CVE-2026-97404 | Awaiting Analysis | 未確認 | CWE-348 | In OpenStack Zaqar before 22.0.2, WSGI transport mishandles the URL-Signature header. By sending a request with an empty URL-Signature header, an unauthenticated remote attacker wh |
| CVE-2026-97407 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt rockchip_pdm_set_fmt() calls pm_run | |
| CVE-2026-97408 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: validate connectionless PSM length Connectionless L2CAP frames carry a two-byte PSM at the s | |
| CVE-2026-97409 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvme-fc: Do not cancel requests in io target before it is initialized A new nvme-fc controller in CONNECTING s | |
| CVE-2026-97410 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netconsole: take target_cleanup_list_lock in drop_netconsole_target() drop_netconsole_target() unlinks the tar | |
| CVE-2026-97411 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: ibm: emac: mal: fix potential system hang in mal_remove() napi_disable() is not idempotent and calling it | |
| CVE-2026-97412 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: pds_core: quiesce DMA before freeing resources pdsc_teardown() frees DMA buffers but does not disable bus mast | |
| CVE-2026-97413 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Fix integer underflow in process_read and process_write usr_len is read from a network-supplied | |
| CVE-2026-97414 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365_afe_suspend() mt8365_afe_susp | |
| CVE-2026-97415 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF ROOT_REF and ROOT_BACKREF items contain a str | |
| CVE-2026-97416 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() [BUG] Running btrfs balance ca | |
| CVE-2026-97417 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() The timestamp-only fast path dereferences the | |
| CVE-2026-97418 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: es18xx: check control allocation before private data setup snd_es18xx_mixer() creates controls with snd_ | |
| CVE-2026-97419 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hsr: broadcast netlink notifications in the device's net namespace The HSR generic netlink family sets .netnso | |
| CVE-2026-97420 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: NUL-terminate replaced sysctl value When writing to sysctls, proc_sys_call_handler() guarantees that the | |
| CVE-2026-97421 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() Several corner cases, especially i | |
| CVE-2026-97422 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix SMI event cross-process information leak kfd_smi_ev_enabled() skips the suser privilege check | |
| CVE-2026-97423 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cxl/region: Validate partition index before array access construct_region() reads cxled->part and uses it to i | |
| CVE-2026-97424 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/ras: add ras_suspend callback and use it for cp_ecc_error_irq cp_ecc_error_irq is acquired in amdgp | |
| CVE-2026-97425 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix buffer overflow during vBIOS update Clamp the buffer postion to write by setting the bin attri | |
| CVE-2026-97426 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm: fix SmartShift bias sysfs store PM refcount on parse error Return the parse error before acquir | |
| CVE-2026-97427 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: bound pp_dpm_set_pp_table() memcpy The powerplay path allocates hardcode_pp_table once with kmemdu | |
| CVE-2026-97428 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: harden FRU PIA parsing with bounded helpers Replace the open-coded TLV walk with fru_pia_advance() | |
| CVE-2026-97429 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix UAF race in destroy_queue_cpsch wait_on_destroy_queue() drops locks to wait for queue resume, | |
| CVE-2026-97430 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xhci: Prevent queuing new commands if xhci is inaccessible Refuse to queue a new command on the command ring i | |
| CVE-2026-97431 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid DPMS-on for phantom stream [Why & How] Calling dc_update_planes_and_stream separately f | |
| CVE-2026-97432 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix P2P-Device binding handling Our binding handling for P2P-Device can run into the follo | |
| CVE-2026-97433 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvme: validate FDP configuration descriptor sizes Validate descriptor sizes while walking the FDP configuratio | |
| CVE-2026-97434 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: fix handling of NAPI on the remove path All the NAPI instances for a DPSW device are attached to | |
| CVE-2026-97435 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: flower: reject cross-chip redirect dsa_port_from_netdev() may return a valid port from a di | |
| CVE-2026-97436 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: rework FDB management on the bridge leave path On bridge leave, the dpaa2_switch_port_set_fdb() | |
| CVE-2026-97437 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix out-of-bounds read in ntfs_dir_emit() and hdr_find_e() The bounds check in ntfs_dir_emit() compares | |
| CVE-2026-97438 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate index entry key bounds [BUG] A malformed NTFS directory index entry can advertise a key_siz | |
| CVE-2026-97439 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: preserve non-DOS attribute bits in system.dos_attrib [BUG] A corrupted ntfs3 image can hit a NULL fu | |
| CVE-2026-9744 | Analyzed | 未確認 | CWE-297 | IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive inform |
| CVE-2026-97440 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix node refcount leak on ctrl packet alloc failure qrtr_send_resume_tx() calls qrtr_node_lookup() | |
| CVE-2026-97441 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ata: ahci: fail probe if BAR too small for claimed ports When an AHCI controller is disabled in BIOS, its HOST | |
| CVE-2026-97442 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi In certain cases, hardware might provide | |
| CVE-2026-97443 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: perf/ftrace: Fix WARNING in __unregister_ftrace_function perf_ftrace_function_unregister() unconditionally cal | |
| CVE-2026-97444 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: add boundary checks in two places Add boundary checks in acpi_ps_get_next_namestring() and acpi_ps_pee | |
| CVE-2026-97445 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() Enhance buffer validation in acpi_ut_walk_am | |
| CVE-2026-97446 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() acpi_ns_custom_package() unconditionally dere | |
| CVE-2026-97447 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() Enhance OEM ID and Table ID validati | |
| CVE-2026-97448 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: Add validation for node in acpi_ns_build_normalized_path() Add validation for node in acpi_ns_build_no | |
| CVE-2026-97449 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: Add package limit checks in parser functions Add package limit checks in parser functions to prevent o | |
| CVE-2026-9745 | Analyzed | 未確認 | CWE-283 | IBM Netezza Software 11.3.0.3 through Interim Fix 002 has operations that are performed without validating bucket ownership using the ExpectedBucketOwner parameter. This omission m |
| CVE-2026-97450 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: validate handler object type in two places ACPICA: validate handler object type in acpi_ev_has_default | |
| CVE-2026-97451 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) Add overflow check for Index + Length to pr | |
| CVE-2026-97452 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: Prevent adding invalid references Prevent adding references for local, argument, and debug objects in | |
| CVE-2026-97453 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: validate byte_count in acpi_ps_get_next_package_length() Validate package length reading in acpi_ps_ge | |
| CVE-2026-97454 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: add boundary checks in acpi_ps_get_next_field() Add boundary checks in acpi_ps_get_next_field() to pre | |
| CVE-2026-97455 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() Fix use-after-free issue in acpi_ds_terminate | |
| CVE-2026-97456 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix condition check in acpi_ps_parse_loop() Fix condition check for AML_ELSE_OP in acpi_ps_parse_loop( | |
| CVE-2026-97469 | Awaiting Analysis | 未確認 | CWE-328 | PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to repeatedly call the anon.hash() function and collects (seed, hash_output) pairs to perform a |
| CVE-2026-97472 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv6: addrconf: fix temp address generation after prefix deprecation When a router temporarily deprecates an I | |
| CVE-2026-97473 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked() When topology_physical_package_id()/top | |
| CVE-2026-97474 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: purge async notifications upon nic error This fixes a kernel panic in reconfig failure: 1 | |
| CVE-2026-97475 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/tegra/soctherma: Switch to devm cooling device registration Use devm_thermal_of_cooling_device | |
| CVE-2026-97476 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rds: filter RDS_INFO_* getsockopt by caller's netns The RDS_INFO_* family of getsockopt(2) options reads sever | |
| CVE-2026-97477 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() When __rdma_counter_bind_qp() fails | |
| CVE-2026-97478 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: virt: acrn: Fix irqfd use-after-free during eventfd shutdown acrn_irqfd_deassign() and the eventfd EPOLLHUP wa | |
| CVE-2026-97479 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: driver core: Avoid warning when removing a device while its supplier is unbinding During driver removal, the f | |
| CVE-2026-97480 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tty: serial: 8250: protect against NULL uart->port.dev in register serial8250_register_8250_port() conditional | |
| CVE-2026-97481 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: serial: 8250: fix possible ISR soft lockup There are rare cases in which the host gets stuck in the ISR becaus | |
| CVE-2026-97482 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log goku_irq() handles a number of bus | |
| CVE-2026-97483 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: core: hcd: fix possible deadlock in rh control transfers >From within the SCSI error handler memory alloc | |
| CVE-2026-97484 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usbip: vhci_hcd: fix NULL deref in status_show_vhci platform_get_drvdata() can return NULL if a VHCI host cont | |
| CVE-2026-97485 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: omfs: handle set_blocksize failures omfs uses buffer_heads, which don't handle block size > PAGE_SIZE well. Wi | |
| CVE-2026-97486 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hpfs: handle set_blocksize failures hpfs uses buffer_heads, which don't handle block size > PAGE_SIZE well. Wi | |
| CVE-2026-97487 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: jfs: handle set_blocksize failures jfs uses buffer_heads, which don't handle block size > PAGE_SIZE well. With | |
| CVE-2026-97488 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: qnx4: handle set_blocksize failures qnx4 uses buffer_heads, which don't handle block size > PAGE_SIZE well. Wi | |
| CVE-2026-97489 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bfs: handle set_blocksize failures bfs uses buffer_heads, which don't handle block size > PAGE_SIZE well. With | |
| CVE-2026-97490 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: affs: handle set_blocksize failures affs uses buffer_heads, which don't handle block size > PAGE_SIZE well. Wi | |
| CVE-2026-97491 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/rds: Don't sleep inside rds_ib_conn_path_shutdown New rds rdma self tests exposed a hang when tearing down | |
| CVE-2026-97492 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed In case reconfiguration of NAN fa | |
| CVE-2026-97493 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Bound GPIO I2C table entry count from VBIOS Reject undersized tables and cap the derived entry cou | |
| CVE-2026-97494 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw Change psp_copy_fw from void to int: retu | |
| CVE-2026-97495 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds on allocate_doorbell allocated_doorbell has an option to set the doorbell id to a spe | |
| CVE-2026-97496 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix OOB memory exposure in get_wave_state() The get_wave_state() function for v9 trusts cp_hqd_cnt | |
| CVE-2026-97497 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id allocate_sdma_queue has an option where the s | |
| CVE-2026-97498 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: pin mqd and fw object bo to avoid eviction mqd and fw objects are queue core objects which s | |
| CVE-2026-97499 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: coresight: perf: Retrieve path and source from event data ETM perf callbacks currently use the per-CPU csdev_s | |
| CVE-2026-97500 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: phy: check length before parsing PHY status IE Hardware might report PHY status IE with unexpecte | |
| CVE-2026-97501 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: mediatek: paris: bypass pinctrl GPIO layer in set GPIO direction pinctrl_gpio_direction_input() / pin | |
| CVE-2026-97502 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mmc: davinci: avoid NULL deref of host->data in IRQ handler mmc_davinci_irq() returns early only when both hos | |
| CVE-2026-97503 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: genirq/proc: Size interrupt directory names for 10-digit interrupt numbers /proc/irq/<n>/ directory names are | |
| CVE-2026-97504 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: watchdog: lenovo_se10_wdt: Fix use-after-free and resource leak risk Review by sashiko.dev highlighted potenti | |
| CVE-2026-97505 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() Currently, the __resource_resize_store() allow | |
| CVE-2026-97506 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: ixp4xx - fix buffer chain unwind on allocation failure chainup_buffers() builds a linked list of buffe | |
| CVE-2026-97507 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: dm1105: fix missing error check for dma_alloc_coherent The return value of dm1105_dma_map(), which hand | |
| CVE-2026-97508 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Set tb->root_switch to NULL when domain is stopped Similarly what we do with the firmware connect | |
| CVE-2026-97509 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Keep XDomain reference during the lifetime of a service This is needed because we release the ser | |
| CVE-2026-97510 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() If tb_cfg_request() fails se | |
| CVE-2026-97511 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: avoid out-of-bounds access in monitor In NAN, we don't know on what band the frame will be sen | |
| CVE-2026-97512 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM The runtime PM functions had incomplete error | |
| CVE-2026-97513 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Release m2m_ctx after Instance Removed from List Possible use after free if IRQ thr | |
| CVE-2026-97514 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix Reports from Kernel Lock Validator handle_dynamic_resolution change requires th | |
| CVE-2026-97515 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: i3c: master: svc: Prevent IRQ storm from false SLVSTART on NPCM845 On NPCM845, when a target on the I3C bus ge | |
| CVE-2026-97516 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result() It was recently reported that rtw | |
| CVE-2026-97517 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: reject beacons with bad HE operation The HE operation element not only needs to be longer than | |
| CVE-2026-97518 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: reject duplicate wiphy cipher suite entries Duplicate entries in wiphy->cipher_suites do not d | |
| CVE-2026-97519 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix null pointer dereference in devcoredump cleanup In xe_devcoredump_snapshot_free(), ss->gt may be N | |
| CVE-2026-97520 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: gfs2: move quota_init qc iterator increment Move qc++ from the loop body into the for-loop increment expressio | |
| CVE-2026-97521 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: gfs2: fix quota init duplicate scan gfs2_quota_init() checks for duplicate quota_change IDs while holding qd_l | |
| CVE-2026-97522 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix bad accounting in __mptcp_subflow_push_pending() If __subflow_push_pending() errors out we should a | |
| CVE-2026-97523 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mptcp: close race between scheduler and state change The mptcp scheduler may race with subflow sockets state c | |
| CVE-2026-97524 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mptcp: avoid unneeded actions on subflow reset Once in a blue moon, the mptcp receive path can recursively cal | |
| CVE-2026-97525 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Allocate split page tables as kernel page tables A PTE is allocated directly without going through | |
| CVE-2026-97526 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/pai: Support CPU hotplug for PMU PAI The command 'perf stat -e pai_crypto/CRYPTO_ALL/ -- <command>' crash | |
| CVE-2026-97527 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Serialize NVMe unsol ctx list with a per-fcport lock The fcport->unsol_ctx_head list is modifie | |
| CVE-2026-97528 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Unlink NVMe unsol ctx before freeing on LS reject error qla_nvme_xmt_ls_rsp() obtains uctx, whi | |
| CVE-2026-97529 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Validate BSG request_len before reading vendor_cmd[] The FC BSG transport allocates job->reques | |
| CVE-2026-97530 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix soft lockup polling continuation IOCB signature qla27xx_copy_multiple_pkt() and qla27xx_cop | |
| CVE-2026-97531 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Skip vport under deletion in report ID acquisition qla24xx_report_id_acquisition() format-1 han | |
| CVE-2026-97532 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Null out freed pointers in qla2x00_mem_alloc() error path When qla2x00_mem_alloc() fails, qla2x | |
| CVE-2026-97533 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Acquire init_mm read lock on attribute changes to avoid UAF A previous commit protected against ra | |
| CVE-2026-97534 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: f2fs: accurately adjust free_sections during free_segment_range In free_segment_range(), MAIN_SECS(sbi) is tem | |
| CVE-2026-97535 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Bound VP index against VP_CTRL IOCB bitmap size The VP control IOCB selects its target virtual | |
| CVE-2026-97536 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown The response queue MSI-X handler qla2xxx_msi | |
| CVE-2026-97537 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix queue teardown NULL dma_free and bitmap locking qla25xx_free_req_que() and qla25xx_free_rsp | |
| CVE-2026-97538 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (asus_rog_ryujin) Validate HID report lengths rog_ryujin_raw_event() parses response headers and payloa | |
| CVE-2026-97539 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: xusbatm: don't rely on id table pointer arithmetic The current code is broken when dynamic ID is involved | |
| CVE-2026-97540 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: usb: pegasus: don't rely on id table pointer arithmetic The current code is broken when dynamic ID is inv | |
| CVE-2026-97541 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k_htc: don't store usb_device_id usb_device_id is not guaranteed to live longer than probe due to pr | |
| CVE-2026-97542 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfs: bail out on bitmap errors in xrep_agfl_fill LOLLM also points out that the xagb_bitmap_set call in xrep_a | |
| CVE-2026-97543 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfs: destroy seen inode bitmap when we fail to add a dirpath LOLLM observes a memory leak in xchk_dirtree_crea | |
| CVE-2026-97544 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfs: don't leak dqacct if rhashtable insertion fails LOLLM observes that xqcheck_mod_live_ino_dqtrx doesn't fr | |
| CVE-2026-97545 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfs: don't leak new_bp if xfs_btree_bload_drop_buf fails LOLLM observes that in xfs_btree_bload_prep_block, xf | |
| CVE-2026-97546 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfs: don't spin forever on zero-length dirents when salvaging them LOLLM noticed that xrep_dir_recover_data ca | |
| CVE-2026-97547 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN When exchanging two full-file ranges, xm | |
| CVE-2026-97548 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfs: fix the rtrmap and rtrefcount _maxlevels_ondisk functions The _maxlevels_ondisk functions are used to com | |
| CVE-2026-97549 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfs: fix under-reservation of blocks when repairing sf directories Whilst running QA on XFS for-next as of 7.3 | |
| CVE-2026-97550 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfs: fix unit conversions in per_binval computation LOLLM noticed that we're doing the unit conversion in the | |
| CVE-2026-97551 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfs: initialise args->total for parent pointer updates xfs_parent_da_args_init() builds an xfs_da_args from a | |
| CVE-2026-97552 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfs: initialise error in xfs_defer_finish_one() xfs_defer_finish_one() declares error without an initialiser a | |
| CVE-2026-97553 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfs: lock the healthmon when inserting unmount event LOLLM complains that xfs_healthmon_unmount does an unlock | |
| CVE-2026-97554 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr() cifs_posix_to_fattr() ignores the return | |
| CVE-2026-97555 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix heap overflow in DACL owner/group rewrite When id_mode_to_cifs_acl rewrites an existing DACL, | |
| CVE-2026-97556 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: avoid leaking refcount when cifs_sb_tlink() fails cifs_oplock_break() takes over the reference th | |
| CVE-2026-97557 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: avoid leaking refcount in cifs_queue_oplock_break() cifs_queue_oplock_break() unconditionally tak | |
| CVE-2026-97558 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix cifsFileInfo reference leak in deferred close When cifs_close() defers a close, it hands the | |
| CVE-2026-97559 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fail DACL rewrite when the new DACL exceeds 64K replace_sids_and_copy_aces() and set_chmod_dacl() | |
| CVE-2026-97560 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix one-byte OOB read in smb2_parse_native_symlink() When parsing a share-root relative native sy | |
| CVE-2026-97561 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid When the administrator mounts with forceuid | |
| CVE-2026-97562 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: pin DFS superblock in iterator callback tcon_super_cb() stores a raw superblock pointer, but __ci | |
| CVE-2026-97563 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: reject out-of-bounds DataOffset in CIFSSMBRead() The SMB1 synchronous read helper CIFSSMBRead() v | |
| CVE-2026-97564 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.idmap descriptions cifs.idmap key descriptions carry authority-bearing fiel | |
| CVE-2026-97565 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: reject short READ responses in CIFSSMBRead() CIFSSMBRead() reads DataLengthHigh, DataLength and D | |
| CVE-2026-97566 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0 The in-kernel MPTCP path manager can leave a stale | |
| CVE-2026-97567 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mptcp: prevent race between disconnect() and rtx Sashiko noted that the two event can race, leading to inconsi | |
| CVE-2026-97568 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mptcp: syncookies: remember the request backup flag Instead of using an uninitialised bit when copying the inf | |
| CVE-2026-97569 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Prevent queue stop with deferred completions When the driver receives a burst of packets, it can mark | |
| CVE-2026-97570 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Bound SW TPA IDs to prevent crashes FW supports up to 1024 concurrent TPAs, so the FW TPA ID is in th | |
| CVE-2026-97571 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc() bnxt_alloc_one_tpa_info_data() ret | |
| CVE-2026-97572 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Propagate RX ring init failures in bnxt_init_nic() bnxt_init_rx_rings() returns an error when bnxt_al | |
| CVE-2026-97573 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset() bnxt_rx_ring_reset() frees the ring buffers | |
| CVE-2026-97574 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Don't free the live ring's TPA state on queue restart failure bnxt_queue_mem_alloc() shallow copies t | |
| CVE-2026-97575 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate AV1 tile counts The stateless AV1 decoders use tile_info.tile_cols and tile_rows a | |
| CVE-2026-97576 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC tile counts The stateless HEVC decoders read num_tile_columns_minus1 + 1 entr | |
| CVE-2026-97577 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity rockchip_vpu981_av1_dec_set_tile_i | |
| CVE-2026-97578 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer rockchip_vpu981_av1_dec_set_tile_info() | |
| CVE-2026-97579 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity vdec_av1_slice_setup_tile() copies ti | |
| CVE-2026-97580 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: rkvdec: bound HEVC tile loops and PPS id to the array capacity compute_tiles_uniform() and compute_tile | |
| CVE-2026-97581 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity prepare_tile_info_buffer() writes o | |
| CVE-2026-97582 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (gpio-fan) Fix use-after-free in alarm work fan_alarm_irq_handler() queues fan_data->alarm_work, but no | |
| CVE-2026-97583 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: afs: Clear stale peer app data after address list changes afs_fs_probe_fileserver() fetches the current endpoi | |
| CVE-2026-97584 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix incorrect free in candidate cleanup in afs_lookup_server() Fix afs_lookup_server() to not free an exi | |
| CVE-2026-97585 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix double-unmap of directory block Fix afs_edit_dir_remove() to use a cleanup function to unmap the bloc | |
| CVE-2026-97586 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix missing kunmap in afs_dir_search_bucket() Fix afs_dir_search_bucket() to kunmap the block it's using | |
| CVE-2026-97587 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: perf: RISC-V: store available counter mask as bitmap The available-counter mask was a single unsigned long, bu | |
| CVE-2026-97588 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Map EBUSY to EIO when key conversion fails repeatedly When hardware persistently returns -EBUSY a | |
| CVE-2026-97589 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix wrong return code to engine in asynch callbacks When crypto_finalize_hash_request() or crypto | |
| CVE-2026-97590 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix missing scrub of temp buffers with PAES algorithm In function ctr_paes_do_crypt() there is a | |
| CVE-2026-97591 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix handling of EBUSY in PHMAC when req is pushed to crypto engine When a request is transferred | |
| CVE-2026-97592 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm In function ctr_aes_crypt() ther | |
| CVE-2026-97593 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/s390: Fix NULL dereference in iova_to_phys() with ZPCI_TABLE_TYPE_RFX When using a 5-level translation t | |
| CVE-2026-97594 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: landlock: Fix use-after-free of the source's parent directory current_check_refer_path() reads old_dentry->d_p | |
| CVE-2026-97595 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mac802154: fix use-after-free of sdata via queued RX frames The RX softirq producer ieee802154_subif_frame() q | |
| CVE-2026-97596 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipvs: reject invalid states in connection template sync records IPVS sync receivers validate protocol states b | |
| CVE-2026-97597 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv6: flowlabel: cap duplicate leases per socket ipv6_flowlabel_get() allocates an ipv6_fl_socklist entry for | |
| CVE-2026-97598 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: bound automatic table ID allocation fib_empty_table() probes every table ID from 1 until it finds a | |
| CVE-2026-97599 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ieee802154: hwsim: serialize pib updates to fix double-free hwsim_update_pib() does an unserialized read-swap- | |
| CVE-2026-97600 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ieee802154: cc2520: fix FIFOP work use-after-free The FIFOP interrupt handler queues cc2520_fifop_irqwork. On | |
| CVE-2026-97601 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink TUNSETLINK allows a TUN device to change its link- | |
| CVE-2026-97602 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: inet: frags: invalidate queues before flushing them fqdir_pre_exit() flushes the skbs from incomplete queues w | |
| CVE-2026-97603 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: idpf: disable DIM work before freeing q_vectors idpf never drains the Tx/Rx DIM works before freeing the memor | |
| CVE-2026-97604 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fbdev: vfb: defer cleanup until the last reference FBIOGETCMAP takes a shallow snapshot of info->cmap and perf | |
| CVE-2026-97605 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: erofs: preserve LZMA decoders on resize failure The pool-resize path frees each stream's old decoder before al | |
| CVE-2026-97606 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs: autofs: fix memory leak in autofs_fill_super() In autofs_fill_super(), we create a new inode using autofs_ | |
| CVE-2026-97607 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vdpa: ifcvf: Put device on unsupported feature error Route unsupported provisioned features through the common | |
| CVE-2026-97608 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_log: unregister loggers before per-net teardown nf_log_syslog and nfnetlink_log unregister their | |
| CVE-2026-97609 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: cttimeout: prevent UAF during module unload nf_ct_set_timeout() protects the timeout hook dereferen | |
| CVE-2026-97610 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix uninitialized return value in netfs_unbuffered_write() If preparation of the first subrequest fails | |
| CVE-2026-97611 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix use-after-free of the flow table mask array tbl_mask_array_realloc() retires the old mas | |
| CVE-2026-97612 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: mpls: clear inner_protocol when the last label is popped skb_mpls_push() records the pre-encapsulation ne | |
| CVE-2026-97613 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: mana: Reserve extra CQ slot for the fence completion CQE The RX completion queue is sized to hold exactly | |
| CVE-2026-97614 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: tag_brcm: legacy FCS: request needed tailroom The legacy FCS tagger calculates the CRC over skb->len | |
| CVE-2026-97615 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: use option bits for CFM/MRP frame handlers CFM and MRP register a global br_frame_type whose hlis | |
| CVE-2026-97616 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: release all action references on NEWACTION failure When a batched RTM_NEWACTION request re | |
| CVE-2026-97617 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Check resize_disabled before publishing the new subbuf order ring_buffer_subbuf_order_set() store | |
| CVE-2026-97618 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: io_uring/net: don't overconsume buffers when using MSG_TRUNC When a recv/recvmsg is issued with MSG_TRUNC and | |
| CVE-2026-97619 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: io_uring/rw: end write accounting from ->ki_complete Commit b000145e9907 moved both the fsnotify calls and the | |
| CVE-2026-97620 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batches emit_render_cache_flush() sets PIPE_CONTROL0 | |
| CVE-2026-97621 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: analogix_dp: fix unchecked bound endpoint name length rockchip_dp_drm_encoder_enable() uses spri | |
| CVE-2026-97622 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-62062. Reason: This candidate is a reservation duplicate of CVE-2026-62062. Notes: All CVE user | |
| CVE-2026-97636 | Awaiting Analysis | 未確認 | CWE-639 | Apache Airflow HashiCorp provider: the HashiCorp Vault secrets backend's team-scope guard can be bypassed with a user-controlled key. In a multi-team deployment, a Dag author scope |
| CVE-2026-97646 | Deferred | 未確認 | CWE-285, CWE-639 | A weakness has been identified in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. This affects an unknown function of the file admin/fun/getStu |
| CVE-2026-97647 | Deferred | 未確認 | CWE-285, CWE-639 | A security vulnerability has been detected in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. This impacts an unknown function of the file user |
| CVE-2026-97648 | Deferred | 未確認 | CWE-352, CWE-862 | A vulnerability was detected in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected is an unknown function. Performing a manipulation resu |
| CVE-2026-97649 | Deferred | 未確認 | CWE-1392 | A flaw has been found in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this vulnerability is an unknown functionality of the file |
| CVE-2026-97650 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this issue is the function echo of the file admin |
| CVE-2026-9766 | Deferred | 未確認 | CWE-862 | The Empik for Woocommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.5.1. This is due to the plugin not properly verifying t |
| CVE-2026-9768 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-97685 | Deferred | 未確認 | CWE-639 | An authenticated LimeSurvey Community Edition 7.3.0 user allowed to create surveys can use their own survey as an authorized context while supplying question or answer identifiers |
| CVE-2026-97686 | Awaiting Analysis | 未確認 | CWE-772 | Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the IPNET subsystem failing to properly release allocated kernel memory and system file descriptor |
| CVE-2026-97687 | Analyzed | 未確認 | CWE-295, CWE-440 | urllib3 is an HTTP client library for Python. From 1.26.0 until 2.8.0, the proxy_ssl_context, proxy_assert_hostname, proxy_assert_fingerprint, ssl_context, cert_reqs, verify_mode, |
| CVE-2026-97688 | Analyzed | 未確認 | CWE-835 | urllib3 is an HTTP client library for Python. From 2.6.2 until 2.8.0, HTTPResponse.stream and HTTPResponse.read_chunked can enter an infinite loop because the Deflate decoder retai |
| CVE-2026-97689 | Analyzed | 未確認 | CWE-770 | urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, the HTTPResponse.read_chunked and HTTPResponse.stream methods can allocate unbounded memory because the strea |
| CVE-2026-97711 | Awaiting Analysis | 未確認 | CWE-79 | Serialize JavaScript serializes JavaScript values to a superset of JSON that includes regular expressions and functions. From 7.1.1 until 7.1.2, function values serialized by seria |
| CVE-2026-97721 | Deferred | 未確認 | CWE-285, CWE-639 | A weakness has been identified in Sanluan PublicCMS up to 6.202506.e. This vulnerability affects the function CmsContentAdminController of the file publiccms-parent/publiccms-core/ |
| CVE-2026-97723 | Deferred | 未確認 | CWE-79 | madpsy ka9q_ubersdr before 0.1.58 has a stored cross-site scripting (XSS) vulnerability in the chat message rendering functionality. User-controlled URLs in chat messages were insu |
| CVE-2026-97724 | Deferred | 未確認 | CWE-1321 | A prototype pollution vulnerability in Software Mansion React Native Worklets before 0.12.2 allows an attacker-controlled object containing a __proto__ property to modify the proto |
| CVE-2026-97730 | Awaiting Analysis | 未確認 | CWE-24 | In Netgate pfSense Plus before 26.07 and pfSense CE before 2.9.0, a Local File Inclusion (LFI) vulnerability in the Dashboard (index.php) widget sequence data handling allows an au |
| CVE-2026-97731 | Awaiting Analysis | 未確認 | CWE-347 | MinIO through 7aac2a2 does not verify that every x-amz-* header present on a request also appears in the client-supplied X-Amz-SignedHeaders list. extractSignedHeaders() in cmd/sig |
| CVE-2026-97732 | Deferred | 未確認 | CWE-347 | IRONMACE Ironshield 1.0.0.167 has a tvk.sys kernel-mode driver that authenticates client executables by checking for expected publisher and root-certificate strings in WIN_CERTIFIC |
| CVE-2026-97735 | Deferred | 未確認 | CWE-79 | ITFlow before 26.08 allows SVG attachments in the ticket email parser (cron/ticket_email_parser.php) for email messages that may arrive over SMTP from arbitrary senders. |
| CVE-2026-97736 | Deferred | 未確認 | CWE-777 | tinyauth before 5.1.3 allows rule bypass by appending an allowed route string. This is caused by an unanchored regular expression. |
| CVE-2026-97737 | Deferred | 未確認 | CWE-843 | In Wakapi before 2.17.6, the user caching service allows a lookup to be resolved in an unintended lookup context, leading to account takeover. |
| CVE-2026-97764 | Deferred | 未確認 | CWE-180 | django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics |
| CVE-2026-97818 | Deferred | 未確認 | CWE-863 | phpIPAM through 1.8.3 has incorrect authorization for id=="admins" and id=="all" in api/controllers/User.php. |
| CVE-2026-97846 | Awaiting Analysis | 未確認 | CWE-287 | Keycloak provides a feature called mTLS holder-of-key binding which ensures that a token can only be used by the client that originally requested it by binding it to their digital |
| CVE-2026-97863 | Deferred | 未確認 | CWE-78 | The cisco_firesight_manager_ACL_rule_export module in misp-modules generates a shell script (.sh) that authenticates to and calls the Cisco fireSIGHT Manager API. The module interp |
| CVE-2026-97864 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability has been found in GibbonEdu Gibbon up to 30.0.01. The affected element is the function makeBlock of the file modules/Planner/units_add_blockAjax.php of the componen |
| CVE-2026-97865 | Deferred | 未確認 | CWE-20, CWE-502 | A security flaw has been discovered in Open-Web-Analytics up to 1.8.1. Affected is the function Event::loadFromArray of the file queue.php of the component Remote Event Queue Endpo |
| CVE-2026-97866 | Deferred | 未確認 | CWE-300 | A weakness has been identified in Zhonglun CloudPOS 3.0. Affected by this vulnerability is an unknown functionality of the file Program.cs of the component Automatic Update. Execut |
| CVE-2026-97868 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in sheshbabu zen up to 1.5.0. Affected by this issue is the function dangerouslySetInnerHTML of the file features/notes/NotesEditor.jsx o |
| CVE-2026-97869 | Awaiting Analysis | 未確認 | CWE-20, CWE-502 | A flaw has been found in langchain4j up to 1.5.3-beta10/1.11.10-beta18/1.18.1-beta27. This vulnerability affects the function AgenticScopeSerializer.fromJson of the file AgenticSco |
| CVE-2026-97871 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability has been found in Zhonglun CloudPos up to 3.0.1.76. This issue affects the function OpenLocalBrowser of the file ZlPos/ZlPos/Bizlogic/JSBridge.cs of the component J |
| CVE-2026-97875 | Deferred | 未確認 | CWE-350 | Rojo's "rojo serve" HTTP API (default port 34872) has no Host/Origin header validation, making it vulnerable to DNS rebinding. A malicious webpage can read all project source, writ |
| CVE-2026-97877 | Deferred | 未確認 | CWE-255, CWE-259 | A vulnerability was determined in zhistaredu StarTraining up to 3.8.1. This issue affects the function UserLoginService.createToken of the file application.yml of the component JWT |
| CVE-2026-97878 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was identified in zhistaredu StarTraining up to 3.8.1. Impacted is the function anonymous of the file /druid/index.html of the component Druid Console. Such manipul |
| CVE-2026-97879 | Deferred | 未確認 | CWE-287, CWE-306 | A security flaw has been discovered in zhistaredu StarTraining up to 3.8.1. The affected element is an unknown function of the file SecurityConfig.java of the component api-docs En |
| CVE-2026-97882 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. The impacted element is an unknown function of the file lo |
| CVE-2026-97883 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This affects an unknown function of the file u |
| CVE-2026-97884 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file updatestudent.p |
| CVE-2026-97885 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected is an unknown function of the file updatefaculty.php. This |
| CVE-2026-97886 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected by this vulnerability is an unknown functionality |
| CVE-2026-97895 | Deferred | 未確認 | CWE-266, CWE-269 | A vulnerability was determined in krayin laravel-crm up to 2.2.5. This affects an unknown part of the file packages/Webkul/Admin/src/Http/Controllers/Settings/UserController.php of |
| CVE-2026-97896 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in krayin laravel-crm up to 2.2.5. This vulnerability affects the function ConfigurationForm::rules of the file packages/Webkul/Admin/src/Http/Reques |
| CVE-2026-97897 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in Krayin laravel-crm up to 2.2.5. This issue affects some unknown processing of the file Sanitizer.php of the component TinyMCE Media Upload. T |
| CVE-2026-97898 | Deferred | 未確認 | CWE-639, CWE-862 | Insecure Direct Object Reference / missing object-level authorization in the Akia keyless entry cloud service. The unlock action is relying on a client-supplied room/door identifie |
| CVE-2026-97899 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix memory leak in query_perf_config_list() When krealloc() fails, free the original oa_config_ids b | |
| CVE-2026-97900 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/drm_exec: fix up contended obj when num_objects is 0 drm_exec_prepare_array() silently returns success wit | |
| CVE-2026-97901 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: genetlink: pin family module during policy dump The generic netlink controller's policy dump keeps pointers to | |
| CVE-2026-97902 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs: don't return -EINVAL for successful nested thaw Commit 7366f8b6fc6a ("fs: handle freezing from multiple de | |
| CVE-2026-97903 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: exit: hold a reference to thread_pid across proc_flush_pid Commit 0a36bad01731 ("release_task: kill the no lon | |
| CVE-2026-97904 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: initialize policy rwsem before sysfs publication cpufreq_policy_alloc() initializes policy->rwsem aft | |
| CVE-2026-97905 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: zero-initialize policy cpumask before sysfs publication cpufreq_policy_alloc() allocates policy->cpus | |
| CVE-2026-97906 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bootconfig: Fix integer overflow in initrd size check Sashiko reported that in get_boot_config_from_initrd(), | |
| CVE-2026-97907 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 When key_id from chip is zero, rtlbt_ | |
| CVE-2026-97908 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_dev The command and ACL RPMsg endpoints store | |
| CVE-2026-97909 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: sti: initialize IRQ lock before requesting IRQ uni_reader_init() registers the shared IRQ before initial | |
| CVE-2026-97910 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: sprd: validate compress buffer sizes against fixed allocations sprd_platform_compr_open() allocates the | |
| CVE-2026-97911 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Ensure SRAM region size matches job It is possible for userspace to set the job SRAM size to 0, | |
| CVE-2026-97912 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Ensure SRAM size is 0 on mapping failure On a mapping failure of the SRAM, the SRAM size is lef | |
| CVE-2026-97913 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Ensure cmd stream ends with a stop op While the QSIZE register setting should prevent an out of | |
| CVE-2026-97914 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Fix ethosu_job_open() return value A WARN_ON() returns a 0 or 1, not the original negative errn | |
| CVE-2026-97915 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Limit firmware log name prints to field size The name in struct vpu_tracing_buffer_header is a fix | |
| CVE-2026-97916 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Validate firmware log buffer metadata The tracing log headers parsed by fw_log_print_buffer() resi | |
| CVE-2026-97917 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr Add a size parameter to ivpu_to_cpu_addr() and vali | |
| CVE-2026-97918 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracing: Undo the registration when enabling the histogram trigger fails Commit 6f86bdeab633 ("tracing: Fix ba | |
| CVE-2026-97919 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracing: Take the reference before publishing the named histogram trigger event_hist_trigger_named_init() puts | |
| CVE-2026-97920 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracing: Keep the entry count when the histogram stats allocation fails print_entries() uses n_entries both as | |
| CVE-2026-97921 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracing: Free histogram the field rejected for a bad modifier Writing a hist trigger whose value or variable c | |
| CVE-2026-97922 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracing: Free histogram var refs regardless of how often they are referenced Using the same variable three or | |
| CVE-2026-97923 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracing: Free histogram the var ref when its initialization fails create_var_ref() allocates a VAR_REF hist_fi | |
| CVE-2026-97924 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracing/user_events: Don't destroy fields when event removal fails destroy_user_event() destroys the event's f | |
| CVE-2026-97925 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tick/broadcast: Plug clockevents replacement race 朱恺乾 reported and decoded the following race condition when a | |
| CVE-2026-97926 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ufs: validate cylinder group metadata before caching it ufs_read_cylinder() copies the cylinder group index an | |
| CVE-2026-97927 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ufs: create the root dentry after loading cylinder metadata ufs_fill_super() installed sb->s_root before it lo | |
| CVE-2026-97928 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: skip the VMID 0 flush for VRAM Clear-on-release only runs on VRAM, which amdgpu_ttm_map_buffer() r | |
| CVE-2026-97929 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usbusx2y: validate URB actual_length in interrupt callback i_usx2y_in04_int() processes the interrupt UR | |
| CVE-2026-97930 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf The in04_last array in struct usx2ydev is decl | |
| CVE-2026-97931 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: us122l: Prevent write upgrades for read mappings The hwdep mmap callback rejects read-buffer mappings th | |
| CVE-2026-97932 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracing: Don't dereference trace_event_file in deferred trigger free The enable_event trigger defers trace_eve | |
| CVE-2026-97933 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracing: Take trace_array reference when opening a tracer options file When a tracer option file is opened, it | |
| CVE-2026-97934 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix memory corruption from a "STACKTRACE" histogram key "cpu", "CPU", "stacktrace" and "STACKTRACE" a | |
| CVE-2026-97935 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracing: Set the trace clock before registering the histogram trigger hist_register_trigger() puts the trigger | |
| CVE-2026-97936 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix memory corruption from the histogram stacktrace modifier parse_field() sets HIST_FIELD_FL_STACKTR | |
| CVE-2026-97937 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ftrace: fork: Initialize function graph state before copy_exec_state() dup_task_struct() copies the parent's t | |
| CVE-2026-97938 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: reboot: fix cad_pid use-after-free race cad_pid is a single kernel-wide struct pid pointer. proc_do_cad_pid() | |
| CVE-2026-97939 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipmr: account multicast table and route memory A netadmin in a user+net namespace can create many IPv4 and IPv | |
| CVE-2026-97940 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv6: fix fib6 walker UAF on seq stop ipv6_route_iter_active() treats a walker in FWS_U at the table root as a | |
| CVE-2026-97941 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/slab: take n->list_lock in __slab_try_return_freelist() to avoid race Commit ba7425312607 ("mm, slab: add a | |
| CVE-2026-97942 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: x86/alternatives: Exclude text poking against change_page_attr() From time to time, the following BUG can be o | |
| CVE-2026-97943 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Acquire init_mm write lock on collapse to avoid UAF x86 implements page attribute modification usi | |
| CVE-2026-97944 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: x86/cfi: Fix FineIBT hash offset in cfi_get_func_hash() The switch of the FineIBT preamble from "subl $hash, % | |
| CVE-2026-97945 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix user-space data loss with MADV_FREE and THP Some of users of Polars (a data analytics library) hav | |
| CVE-2026-97946 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: x86/amd_node: Fix PCI device reference counting in amd_smn_init() The local "root" pointer is a temporary vari | |
| CVE-2026-97947 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: x86/amd_node: Fix potential NULL pointer dereference amd_smn_read/write() are exported functions around __amd_ | |
| CVE-2026-97948 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: powerpc/eeh: Fix recursive locking on devices without EEH sensitive driver The commit 1010b4c012b0 ("powerpc/e | |
| CVE-2026-97949 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: configfs: unhash the dentry before dropping the item in rmdir configfs_get_config_item() treats a hashed dentr | |
| CVE-2026-97950 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: configfs: pin the symlink target's dirent instead of chasing ->ci_dentry create_link() reads the target's conf | |
| CVE-2026-97951 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix hang for aborted WRITE_PENDING commands When a LUN_RESET aborts a WRITE command that | |
| CVE-2026-97952 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sunvdc: unmap LDC cookies when the descriptor send fails __send_request() maps the request's pages into the LD | |
| CVE-2026-97953 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix TX descriptor availability check for TSO traffic stmmac_tso_xmit() estimates the number of fr | |
| CVE-2026-97954 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/rds: fix tcp stream corruption with large pages rds_message_map_pages() assigns PAGE_SIZE bytes to every s | |
| CVE-2026-97955 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: mana: restore the XDP program pointer when pre-allocation fails mana_xdp_set() publishes the new program | |
| CVE-2026-97956 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: net_failover: Fix the deadlock in net_failover_slave_name_change() This is a sibling fix of commit b84c56 | |
| CVE-2026-97957 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: hinic: fix mailbox segment buffer overflow check_mbox_seq_id_and_seg_len() validates that seq_id does not | |
| CVE-2026-97958 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: Don't replay RTM_GETCHAIN in tc_ctl_chain(). If a netlink socket sends RTM_GETCHAIN reques | |
| CVE-2026-97959 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_route: free emptied bucket on filter move route4_change can move an existing filter to a differ | |
| CVE-2026-97960 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Prevent drain_pebs() reentry The PEBS buffer is shared by all events on a CPU, so drain_pebs() | |
| CVE-2026-97961 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: perf/core: Allow list_del during perf_event_overflow() A PMU might use perf_sched_cb_inc() and perf_sched_cb_d | |
| CVE-2026-97962 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Move representor vnic reporter to eswitch devlink port The representor vnic devlink health reporter | |
| CVE-2026-97963 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: initialize ptp_lock at probe time priv->ptp_lock is only initialized in stmmac_ptp_register(), wh | |
| CVE-2026-97964 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ppp_synctty: ensure a writeable skb header ppp_sync_txmunge() checks headroom before prepending the address an | |
| CVE-2026-97965 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vxlan: initialize _md in vxlan_xmit_one() If a VXLAN device is configured with both VXLAN_F_COLLECT_METADATA a | |
| CVE-2026-97966 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: reset HTB scheduler topology before freeing queues HTB offload programs NIX_AF_TLxX_TOPOLOGY on | |
| CVE-2026-97967 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (corsair-cpro) Remove debugfs entries when probe fails ccp_debugfs_init() registers debugfs files whose | |
| CVE-2026-97968 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (corsair-cpro) Create debugfs entries after hwmon registration ccp_debugfs_init() registers debugfs fil | |
| CVE-2026-97969 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: watchdog: msc313e: Fix clock leak and spurious timer in settimeout() msc313e_wdt_settimeout() unconditionally | |
| CVE-2026-97970 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: watchdog: msc313e: Avoid division by zero clk_get_rate() could return 0. Avoid a division by zero panic. | |
| CVE-2026-97971 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nstree: check listing permission before taking a namespace reference legitimize_ns() takes a reference on the | |
| CVE-2026-97972 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: macb: put the "mdio" child node reference on success macb_mii_init() holds the reference returned by of_g | |
| CVE-2026-97973 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: macb: destroy the phylink instance on the probe error path macb_mii_init() creates a phylink instance on | |
| CVE-2026-97974 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv6: null-check fib6_node before accessing in __ip6_del_rt_siblings() syzbot reported a null-ptr-deref in __i | |
| CVE-2026-97975 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sysfs: Fix NULL pointer dereference in device_del() A NULL pointer dereference in klist_put() o | |
| CVE-2026-97976 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: validate packet_len before skb_put_data btintel_pcie_submit_rx_work() reads packet_le | |
| CVE-2026-97977 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: Fix UAF of btusb_data by rx_work btusb_close() and btusb_flush() cancel data->rx_work with t | |
| CVE-2026-97978 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: eth: ice: don't dereference pointers from TP_printk() After forwarding net-next during the v7.3 merge window w | |
| CVE-2026-97979 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ice: add missing xa_destroy for sched_node_ids Commit 16dfa49406bc ("ice: Introduce new parameters in ice_sche | |
| CVE-2026-97980 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/debug: Fix NULL pointer dereference in debug_set_level() Commit a2cec6863709 ("s390/debug: Add s390dbf ke | |
| CVE-2026-97981 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Count dropped frames as NAPI work The RX loop only consumes budget when it successfull | |
| CVE-2026-97982 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Fix budget accounting The gmac_rx() function returns the remaining NAPI budget, but it | |
| CVE-2026-97983 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vduse: return compat ioctl results directly The compat handler handles VDUSE_IOTLB_GET_FD and VDUSE_VQ_GET_INF | |
| CVE-2026-97984 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: ipv6: Fix UDP length overflow with PMTU discover and big MTU This commit bounds cork->base.fragsize to IP | |
| CVE-2026-97985 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Update last skb marker in manage_oob(). Fahad Alharbi reported that blocking recv(MSG_PEEK) could hog | |
| CVE-2026-97986 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: virtio_input: stop callbacks before unregistering input device virtinput_remove() unregisters the input device | |
| CVE-2026-97987 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: virtio_input: reset device if input_register_device() fails Probe marks the device DRIVER_OK with virtio_devic | |
| CVE-2026-97988 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vhost: invalidate vring access on IOTLB transitions When VIRTIO_F_ACCESS_PLATFORM changes, cached vring pointe | |
| CVE-2026-97989 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vduse: validate virtqueue alignment vduse_validate_config() only checks the upper bound of vq_align. Invalid v | |
| CVE-2026-97990 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vdpa_sim_net: check TX pull result before RX copy vringh_iov_pull_iotlb() returns a signed byte count. A fail | |
| CVE-2026-97991 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vdpa_sim_blk: reject out-of-range sector starts vdpasim_blk_check_range() logs an invalid start sector but con | |
| CVE-2026-97992 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: protect config_ctx from being freed under the config callback vhost_vdpa_config_cb() loads v->conf | |
| CVE-2026-97993 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: don't install the eventfd_ctx_fdget() error in config_ctx vhost_vdpa_set_config_call() swaps the e | |
| CVE-2026-97994 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vhost/vdpa: reject VRING_NUM larger than device max vhost_vring_set_num() accepts any non-zero power-of-two qu | |
| CVE-2026-97995 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: virtio_console: do not free control-out buffers on remove __send_control_msg() publishes &portdev->cpkt as the | |
| CVE-2026-97996 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: virtio: fix use-after-free in unregister_virtio_device() device_unregister() is device_del() plus put_device() | |
| CVE-2026-97997 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: virtio_ring: fix stale descriptor flags after a failed packed add In a packed ring the AVAIL and USED bits sit | |
| CVE-2026-97998 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: cope with concurrent instance destruction Instances are refcounted. However, only me | |
| CVE-2026-98000 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: Fix potential UAF in pec_store Sashiko reports: In pec_store(), a guard(mutex)(&hwdev->lock) is taken. | |
| CVE-2026-98001 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (ltc4282) Make sure clk_init_data is fully initialized The clk_init_data structure contains several mut | |
| CVE-2026-98002 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix ineffective error check in nested domain allocation amd_iommu_pdom_id_alloc() returns an int: a | |
| CVE-2026-98003 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Do not reallocate GA log buffers on resume Commit c5e1a1eb9279 ("iommu/amd: Simplify and Consolidat | |
| CVE-2026-98004 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iommu/riscv: Serialize command queue publishing Serialize command queue publishing so software producer state | |
| CVE-2026-98005 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: erofs: delimit inode_share cache key components Previously, inode_share keys were encoded as follows: finge | |
| CVE-2026-98006 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev The epq_in_urb object belonging to the caiaq device is coupled | |
| CVE-2026-98007 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject non-scalar bpf_loop iteration counts bpf_loop() declares its nr_loops argument as ARG_ANYTHING. Pr | |
| CVE-2026-98008 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: macb: fix NULL pointer dereference on unbind with fixed-link When the device tree describes a fixed-link | |
| CVE-2026-98009 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: clamp quantum in parse and fallback paths ets_qdisc_change() falls back to psched_mtu() with n | |
| CVE-2026-98010 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: drr: clamp quantum in change class drr_change_class() rejects explicit quantum==0 but falls back to | |
| CVE-2026-98011 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: hhf: clamp quantum in change and init paths hhf_change() accepts any quantum from userspace, includ | |
| CVE-2026-98012 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sfq: clamp quantum in change path sfq_change() accepts any non-negative quantum (only rejects (int) | |
| CVE-2026-98013 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: fq_pie: clamp quantum in change path fq_pie_change() accepts any quantum value from userspace, incl | |
| CVE-2026-98014 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch, prevent mc_list repopulation during vport disable In mlx5_esw_vport_disable(), move esw_ap | |
| CVE-2026-98015 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put In mlx5_eswitch_termtbl_put(), the zero-ref | |
| CVE-2026-98016 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free race in sample_restore_put() Concurrent teardown of TC sample rules sharing the | |
| CVE-2026-98017 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: defer qdisc freeing after failed creation An RTM_NEWQDISC request can make clsact bind a populated | |
| CVE-2026-98018 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: mctp: i3c: serialize probe with bus removal mctp_i3c_probe() drops busdevs_lock after finding the matchin | |
| CVE-2026-98019 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: mark a NULL call argument precise check_func_arg() allows bpf_register_is_null() for nullable arguments w | |
| CVE-2026-98020 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: pds_core: fix cmd_regs access racing BAR unmap on reset pdsc_reset_prepare() and pdsc_reset_done()'s pdsc_map_ | |
| CVE-2026-98021 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: reject oversized tx_queue_len at netlink parse time rtnl_create_link() assigns IFLA_TXQLEN directly to de | |
| CVE-2026-98022 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations Several subsystems allocate ring buffer | |
| CVE-2026-98023 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vxlan: reject dynamic fdb entries that reference a nexthop id The commit cited in the Fixes tag allowed VXLAN | |
| CVE-2026-98024 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/ism: folio_put() after error dmb->cpu_addr was allocated via folio_alloc(). Use folio_put() instead of kf | |
| CVE-2026-98025 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow The 0xffff | |
| CVE-2026-98026 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: properly convert mglist to rcu Sashiko reported a bug [1] that br_multicast_del_port_group | |
| CVE-2026-98027 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: bound the policy rule dump by the caller's buffer size mv88e6xxx_get_rxnfc() uses rxnfc-> | |
| CVE-2026-98028 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: eth: nfp: drop the replaced rule from the list when reprogramming fails nfp_net_fs_add() replaces an existing | |
| CVE-2026-98029 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: eth: nfp: bound the ntuple rule dump by the caller's buffer size nfp_net_get_fs_loc() dumps every entry of nn- | |
| CVE-2026-98030 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size bcm_sf2_cfp_rule_get_all() walks the wh | |
| CVE-2026-98031 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nexthop: Initialize extack in remove_nh_grp_entry() remove_nh_grp_entry() prints the extack message when a lis | |
| CVE-2026-98032 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix subbuf resize races with trace_pipe_raw readers Concurrent subbuffer resizes may crash trace_pipe | |
| CVE-2026-98033 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve inner map identity in callback frames Callback frame constructors initialize map-typed argument | |
| CVE-2026-98034 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Mark NULL kptr stores precise check_map_kptr_access() permits a scalar store into an untrusted kptr field | |
| CVE-2026-98035 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Cancel special fields when recycling rhtab elements rhtab_map_update_existing() and rhtab_delete_elem() c | |
| CVE-2026-98036 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve special fields in recycled rhtab elements rhtab_map_update_elem() initializes special fields aft | |
| CVE-2026-98037 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject untrusted allocated-object pointers When the final RCU read-side critical section ends, a local kp | |
| CVE-2026-98038 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Keep refcount_acquire nullable for borrowed RCU kptrs bpf_refcount_acquire() is fallible for a borrowed r | |
| CVE-2026-98039 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Require MEM_PERCPU for percpu kptr stores map_kptr_match_type() treats perm_flags as the set of register | |
| CVE-2026-98040 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Mark the zero register precise for a register-form NULL check check_cond_jmp_op() accepts "if rA <op> rB" | |
| CVE-2026-98041 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Don't predict JMP32 pointer vs zero comparisons Consider the following program: r1 = map_value; | |
| CVE-2026-98042 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Don't resurrect a scalar id dropped by collect_linked_regs() check_cond_jmp_op() copies the compared regi | |
| CVE-2026-98043 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Don't infer non-NULL from a pointer with an unbounded offset reg_not_null() decides that a register holds | |
| CVE-2026-98044 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject legacy packet loads from callbacks check_ld_abs() models a failed BPF_LD_ABS or BPF_LD_IND in a su | |
| CVE-2026-98045 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Mark faultable stack helpers as sleepable The faultable variants of bpf_get_stack() and bpf_get_task_stac | |
| CVE-2026-98046 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Mark bpf_btf_find_by_name_kind() as sleepable When bpf_btf_find_by_name_kind() finds a type in module BTF | |
| CVE-2026-98047 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Check ancestor frames for rbtree callbacks bpf_rbtree_add() invokes its comparator while the caller holds | |
| CVE-2026-98048 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: don't rewrite bpf_fastcall patterns entered by a jump mark_fastcall_pattern_for_call() must ensure that m | |
| CVE-2026-98049 | Modified | 未確認 | CWE-681 | In the Linux kernel, the following vulnerability has been resolved: bpf: zero extend the result of an arena 32-bit cmpxchg bpf_convert_ctx_accesses() rewrites an atomic on an are |
| CVE-2026-98050 | Analyzed | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_ptp: Fix napi_gro_receive() call from GC workqueue context Currently mlxsw_sp1_ptp_ht_gc_colle |
| CVE-2026-98051 | Analyzed | 未確認 | CWE-670 | In the Linux kernel, the following vulnerability has been resolved: net: bcmasp: fix tx_spb_ring_full() checking same slot cnt times The loop initialised next_index from intf->tx |
| CVE-2026-98052 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: bcmasp: clear txcb->last before writing each descriptor bcmasp_xmit() only wrote txcb->last = true for th | |
| CVE-2026-98053 | Modified | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Refactor and fix init_config access Existing code accesses enties found in ->init_configs ar |
| CVE-2026-98054 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix unbalanced module reference count strace_open() invokes try_module_get() which on succes | |
| CVE-2026-98055 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Clean up the bus when fetching ML caps fails snd_hdac_ext_bus_get_ml_capabilities() may fail | |
| CVE-2026-98056 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvme: remove stale namespaces by NSID range during scan nvme_scan_ns_list() drops the stale namespaces in each | |
| CVE-2026-98057 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Add checking nr_subbufs to persistent ring buffer validation Sashiko reported that the code was u | |
| CVE-2026-98058 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Mark syscall helpers as sleepable bpf_sys_bpf() executes the bpf(2) syscall body, which can take mutexes, | |
| CVE-2026-98059 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Mark sched_process_wait argument as nullable do_wait() passes wo->wo_pid to the sched_process_wait tracep | |
| CVE-2026-98060 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject resilient lock operations in rbtree callbacks __bpf_rbtree_add() keeps parent and link pointers li | |
| CVE-2026-98061 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject tail calls directly from callback frames A tail call from a non-zero frame is modeled as a return | |
| CVE-2026-98062 | Undergoing Analysis | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: bpf: Mark signal tracepoint siginfo arguments as scalar The signal_generate and signal_deliver tracepoints dec |
| CVE-2026-98063 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NULL-ptr-deref in btf_var_show() btf_var_show() calls btf_type_id_resolve() unconditionally, which de | |
| CVE-2026-98064 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NULL-ptr-deref when showing a void BTF type btf_modifier_show() resolves the modifier and then calls | |
| CVE-2026-98065 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject key-less BTF for hash maps map_check_btf() allows a key-less BTF (btf_key_type_id == 0) only for m | |
| CVE-2026-98066 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: Fix potential double-free at error path The fix for caiaq driver's resource management to handle | |
| CVE-2026-98067 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: erofs: disable LZ4 rolling decompression for now LZ4 rolling decompression [1] was introduced to reduce the me | |
| CVE-2026-98068 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/rds: don't let rds_conn_shutdown() consume a concurrent drop rds_conn_shutdown() finishes by moving the pa | |
| CVE-2026-98069 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/rds: acquire the fastpath locks in rds_conn_shutdown() rds_conn_shutdown() quiesces the transmit and recei | |
| CVE-2026-98070 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks() rds_tcp_reset_callbacks() quiesces the transmit path | |
| CVE-2026-98071 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/rds: clear cp_flags bits individually in rds_conn_path_reset() rds_conn_path_reset() wipes the whole flag | |
| CVE-2026-98072 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/rds: use wq_has_sleeper() in release_in_xmit() release_in_xmit() clears RDS_IN_XMIT with clear_bit_unlock( | |
| CVE-2026-98073 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: Remove conflicting altnames for dying netns in __dev_change_net_namespace(). syzbot reported the warning | |
| CVE-2026-98074 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bonding: do not clear curr_active_slave prematurely when releasing all slaves When releasing all slaves during | |
| CVE-2026-98075 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: reject BPF_PSEUDO_FUNC reference to the main program fixups.c:jit_subprogs() rewrites BPF_PSEUDO_FUNC loa | |
| CVE-2026-98076 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tracing/probes: Fix use-after-free on field name/type of events with multiple probes The fields of a probe-bas | |
| CVE-2026-98077 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() sip_skip_whitespace() returns dptr unchange | |
| CVE-2026-98078 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: ipvs: fix reversed sequence option serialization hton_seq() expects the host-order source first and the unalig |
| CVE-2026-98079 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: zstd: fix lost wakeup when waiting for a workspace A writer can sleep forever in zstd_get_workspace() e | |
| CVE-2026-98080 | Analyzed | 未確認 | CWE-672 | In the Linux kernel, the following vulnerability has been resolved: btrfs: do not force reloc root creation during qgroup_account_snapshot() [BUG] When running btrfs/252 with quo |
| CVE-2026-98081 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: finish active block group cleanup if call_zone_finish() fails do_zone_finish() clears BLOCK_GROU | |
| CVE-2026-98082 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix the possible bioc_list memory leak during error There are two possible ways to leak bioc memory on |
| CVE-2026-98083 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction use-after-free in raid stripe insertion If allocation of a RAID stripe extent fails, bt |
| CVE-2026-98084 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: backtracking shouldn't clear outer frame R1-R5 for callbacks When processing calls to bpf_loop() verifier | |
| CVE-2026-98085 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: backtrack_insn(): Handle ld_{abs,ind} subprog exit edge Nicholas Carlini reported a bug in precision back | |
| CVE-2026-98086 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: ump: do not touch legacy_rmidi before it exists snd_ump_parse_endpoint() sets ump->parsed on every exit, | |
| CVE-2026-98087 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate A migrate_disable()'d RT task cannot be | |
| CVE-2026-98088 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Avoid out-of-bounds cpumask_of_node() call in _base_assign_reply_queues() dev_to_node() can ret | |
| CVE-2026-98089 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bonding: alb: fix uninitialized transport header access in alb_determine_nd() alb_determine_nd() uses icmp6_hd | |
| CVE-2026-98090 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: btrfs: restore active device pointers after failed sprout btrfs_init_new_device() switches latest_dev and poss |
| CVE-2026-98091 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: btrfs: detach failed sprout device from transaction update list When creating the first metadata chunk for a s |
| CVE-2026-98092 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() acp6x_pdm_dma_close() does not free the runtime->priva |
| CVE-2026-98093 | Analyzed | 未確認 | CWE-404 | In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl_micfil: balance mclk enable/disable hw_params() enables mclk unconditionally and hw_free() disables |
| CVE-2026-98094 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: staging: fbtft: make dirty_lock IRQ-safe fbtft_mkdirty() can be reached from the fbcon rendering path while pr |
| CVE-2026-98095 | Analyzed | 未確認 | CWE-681 | In the Linux kernel, the following vulnerability has been resolved: af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header(). syzbot reported BUG() in sock_sendm |
| CVE-2026-98096 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: restore network header before routing and forwarding ipv6_srh_rcv() runs with skb->data at the Segme | |
| CVE-2026-98097 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tipc: Dont send random pad bytes in RESET/ACTIVATE messages The interface name is passed in a fixed length (TI | |
| CVE-2026-98098 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix NULL deref in tipc_named_node_up() on empty publication list User-space applications can bind a larg | |
| CVE-2026-98099 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: use rcu_assign_pointer() for __rcu list updates Several places in net/ipv6/mcast.c update RCU-pro | |
| CVE-2026-98101 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: use copy-on-write RCU updates in ip6_mc_source() pmc->sflist is read locklessly under rcu_read_lo | |
| CVE-2026-98102 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: fix RCU list diversion in ip6_mc_del1_src() When removing a source filter whose count reaches zer | |
| CVE-2026-98103 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: igmp: convert struct ip_sf_list to RCU Commit 23d2b94043ca ("igmp: Add ip_mc_list lock in ip_check_mc_rcu") ad | |
| CVE-2026-98104 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: fix duplicate handle when node ID pool is exhausted gen_new_kid() falls back to returning | |
| CVE-2026-98105 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: oa_tc6: Improve the error recovery When oversubscribed traffic causes lot of buffer overflow er | |
| CVE-2026-98106 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/pagemap: Prevent double migration of device pages A device-private folio migrated to system memory by a CP | |
| CVE-2026-98107 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix out-of-bounds write in l2cap_ecred_connect l2cap_chan_connect() tries to ensure there ar | |
| CVE-2026-98108 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan l2cap_new_connection() sets default value | |
| CVE-2026-98109 | Undergoing Analysis | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix race condition during device registration In hci_register_dev(), the power_on work it |
| CVE-2026-98110 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: bound firmware ID by TLV length The firmware ID is treated as a NUL-terminated string even | |
| CVE-2026-98111 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: validate version TLV value lengths btintel_parse_version_tlv() verifies that a complete TL | |
| CVE-2026-98112 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix listener task lifetime on netdev events The listener thread exits when its listening socket is shut | |
| CVE-2026-98113 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: rate limit unmapped SID errors A client can include many structurally valid but unmapped SIDs in a DACL | |
| CVE-2026-98114 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: propagate DACL parsing errors parse_dacl() silently accepts truncated ACEs and allocation failures, all | |
| CVE-2026-98115 | Undergoing Analysis | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 multichannel allows requests for one session to run on multipl |
| CVE-2026-98116 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF snd_pcm_hw_params() and snd_pcm_hw_free | |
| CVE-2026-98117 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix potential UAF/KASAN warning Currently, trace_cachefiles_coherency() is being passed a pointer | |
| CVE-2026-98118 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix readahead synchronisation issues by loading all folios upfront There are some synchronisation issue | |
| CVE-2026-98119 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfs: break unbuffered write when netfs_alloc_subrequest() fails syzbot reported a null-ptr-deref below [1] f | |
| CVE-2026-9812 | Analyzed | 未確認 | CWE-639 | Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 fail to validate that a property field belongs to the specified run before updating it |
| CVE-2026-98120 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix subreq ref leak Fix a subrequest ref leak in netfs_unbuffered_write() in the event that subreq->io_ | |
| CVE-2026-98121 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: watchdog: msc313e: Fix NULL pointer dereference in PM callbacks msc313e_wdt_probe() doesn't set the driver dat |
| CVE-2026-98122 | Analyzed | 未確認 | CWE-416 | In the Linux kernel, the following vulnerability has been resolved: vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del() vxlan_mdb_is_valid_source(), which validates MDBE |
| CVE-2026-98123 | Analyzed | 未確認 | CWE-667 | In the Linux kernel, the following vulnerability has been resolved: sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration sctp_verify_asconf() walks ASCONF-ACK param |
| CVE-2026-98124 | Analyzed | 未確認 | CWE-672 | In the Linux kernel, the following vulnerability has been resolved: smb/client: invalidate fscache for fallocate range operations smb3_zero_range(), smb3_punch_hole(), smb3_inser |
| CVE-2026-98125 | Analyzed | 未確認 | CWE-669 | In the Linux kernel, the following vulnerability has been resolved: smb/client: fix stale page cache in insert/collapse range smb3_insert_range() and smb3_collapse_range() use tr |
| CVE-2026-98126 | Analyzed | 未確認 | CWE-770 | In the Linux kernel, the following vulnerability has been resolved: smb/client: validate new EOF for zero range When FALLOC_FL_ZERO_RANGE is used without FALLOC_FL_KEEP_SIZE, smb |
| CVE-2026-98127 | Analyzed | 未確認 | CWE-190 | In the Linux kernel, the following vulnerability has been resolved: smb/client: validate new EOF for insert range smb3_insert_range() does not check if the new file size (i_size |
| CVE-2026-98128 | Analyzed | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix target device refcount leak in mpi3mr_sas_port_add() mpi3mr_get_tgtdev_by_addr() increments |
| CVE-2026-98129 | Analyzed | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix NULL pointer dereference in mpi3mr_sas_port_add() sas_port_alloc_num() can return NULL on me |
| CVE-2026-98130 | Analyzed | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START The SCTP_CMD_TIMER_START handler checks timer_pending() before |
| CVE-2026-98131 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix dma mapping leak in stmmac_tso_xmit() In stmmac_tso_xmit(), if the DMA mapping of an skb frag |
| CVE-2026-98132 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: don't downgrade half-dead scalar zero spills to STACK_ZERO states.c:__clean_func_state() can downgrade sc | |
| CVE-2026-98133 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: leave HasEA flag untouched on setxattr failure In ntfs_set_ea(), the exit path unconditionally updates t | |
| CVE-2026-98134 | Modified | 未確認 | CWE-476 | In the Linux kernel, the following vulnerability has been resolved: bpf: check_cond_jmp_op(): properly infer if register is null Nicholas Carlini reported a bug when verifier can |
| CVE-2026-98135 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: reject invalid sectors_per_cluster in the boot sector is_boot_sector_ntfs() checks the boot sector's sec | |
| CVE-2026-98136 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: ntfs: bound $AttrDef table walk to the loaded table size ntfs_attr_find_in_attrdef() walks the in-memory $Attr |
| CVE-2026-98137 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: treat any nonzero dio zero-range return as an error ntfs_dio_zero_range() returns either 0 or a negative | |
| CVE-2026-98138 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: do not mark the volume clean in sync_fs when errors were recorded ntfs_put_super() and the remount-read- | |
| CVE-2026-98139 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: only count successfully cleared runs when freeing clusters ntfs_cluster_free_from_rl_nolock() adds a run | |
| CVE-2026-98140 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: fix kmap_local leak in write_mft_record_nolock() error paths write_mft_record_nolock() maps the MFT reco | |
| CVE-2026-98141 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: propagate reparse index insertion failure update_reparse_data() ignores the return value of set_reparse_ | |
| CVE-2026-98142 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/cirrus-qemu: Validate BAR0 size during probe The `cirrus-qemu` driver relies on `CIRRUS_VRAM_SIZE` (4 MB) | |
| CVE-2026-98143 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Don't read the U65 rounding mode as a storage mode Bits 15:14 of NPU_SET_{IFM,OFM}_PRECISION se | |
| CVE-2026-98144 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: put the chained BO when its mapping fails amdxdna_cmd_set_error() looks up the first BO of a co | |
| CVE-2026-98145 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject a command chain that carries no commands A chain whose command_count is zero passes the | |
| CVE-2026-98146 | Analyzed | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Remove __counted_by from struct amdxdna_cmd_chain struct amdxdna_cmd_chain contains a flexible |
| CVE-2026-98147 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: printk: Don't WARN on kthread_run failure. Since __kthread_create_on_node() returns -EINTR upon SIGKILL, we sh | |
| CVE-2026-98148 | Undergoing Analysis | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/gud: validate GUD_ROTATION_0 is present in supported rotations The rotation argument to drm_plane_create_r | |
| CVE-2026-98149 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix percpu map update indexing with sparse CPU IDs Per-CPU array, hash, and cgroup storage map updates wi |
| CVE-2026-98150 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix BPF_F_CPU validation for sparse CPU IDs BPF_F_CPU stores the target CPU ID in the upper 32 bits of th | |
| CVE-2026-98151 | Analyzed | 未確認 | CWE-617 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix REG INVARIANTS VIOLATION on speculative pointer arithmetic Take the following unprivileged program as |
| CVE-2026-98152 | Undergoing Analysis | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: fix queue leak when connect backlog is exceeded When pending disconnecting queues exceed the backl |
| CVE-2026-98153 | Analyzed | 未確認 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: nvme: fix racy access to FDP placement id array nvme_query_fdp_info() is called per-path and therefore prone t |
| CVE-2026-98154 | Analyzed | 未確認 | CWE-415 | In the Linux kernel, the following vulnerability has been resolved: nvme-rdma: fix -EIO cleanup order in queue_rq On -EIO, the RDMA queue_rq path reports a host path error and th |
| CVE-2026-98155 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Address potential out-of-bounds read in resp_worker() Although 'commit 2feec5ae5df7 ("accel/qaic: |
| CVE-2026-98156 | Modified | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use the DMA API for resource backing on Xen On a Xen PV domain page addresses bear no relation to | |
| CVE-2026-98157 | Analyzed | 未確認 | In the Linux kernel, the following vulnerability has been resolved: EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation The poll_msec sysfs store file uses si | |
| CVE-2026-98158 | Analyzed | 未確認 | CWE-125 | In the Linux kernel, the following vulnerability has been resolved: ppp_async: drop the errored frame instead of resetting its headroom ppp_receive_nonmp_frame() prepends a two-b |
| CVE-2026-98159 | Analyzed | 未確認 | CWE-787 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: validate CLC firmware records The CLC region is supplied by firmware, but the loader trust |
| CVE-2026-98160 | Analyzed | 未確認 | CWE-763 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix mismatched free of HalData in rtw_sdio_if1_init() padapter->HalData is allocated via v |
| CVE-2026-98161 | Modified | 未確認 | CWE-754 | In the Linux kernel, the following vulnerability has been resolved: nvdimm: pmem: keep PREFLUSH before data writes pmem_submit_bio() records a REQ_PREFLUSH error, but continues t |
| CVE-2026-98162 | Modified | 未確認 | CWE-401 | In the Linux kernel, the following vulnerability has been resolved: smb/server: fix tree connection leak in smb2_tree_connect() See the procedure below: smb2_tree_connect |
| CVE-2026-98163 | Modified | 未確認 | CWE-362, CWE-416 | In the Linux kernel, the following vulnerability has been resolved: cgroup: Avoid iteration of dying tasks with zero refcount The commit 260fbcb92bbea ("cgroup: Move dying_tasks |
| CVE-2026-98164 | Modified | 未確認 | CWE-670 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Check write tracking in all address spaces kvm_gfn_is_write_tracked() checks only the supplied m |
| CVE-2026-9832 | Deferred | 未確認 | CWE-347 | The Payment Gateway of Stripe for WooCommerce plugin for WordPress is vulnerable to Improper Verification of Cryptographic Signature in all versions up to, and including, 5.0.8. Th |
| CVE-2026-9852 | Analyzed | 未確認 | CWE-1236 | A CSV injection vulnerability exists in SYS600. Injected malicious formulas can add or modify data to the spreadsheet, insert links, exfiltrate data, and in some cases, depending o |
| CVE-2026-9853 | Analyzed | 未確認 | CWE-303 | A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the application to read and modify application objects without be |
| CVE-2026-9854 | Analyzed | 未確認 | CWE-303 | A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their privileges to administrator level on the underlying Windows h |
| CVE-2026-9855 | Deferred | 未確認 | CWE-89 | The Custom Field Template plugin for WordPress is vulnerable to generic SQL Injection via the 'post_ID' parameter in all versions up to, and including, 2.7.8 due to insufficient es |
| CVE-2026-9858 | Deferred | 未確認 | CWE-862 | The Partial Shipment for Woocommerce plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 3.4 via the wxp_order_shipment, wxp_order_item_sh |